Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230342e302f32322d3332203d3e20323636323432.roa
File:                     3139322e3134352e3230342e302f32322d3332203d3e20323636323432.roa (raw, json)
Hash identifier:          dgmGUpSFt8fRBq2EUnEHQ0XPoUFISrmdJ0Kps3ZDAq0=
Subject key identifier:   7C:14:45:38:81:6F:9D:51:73:49:CF:DA:99:6B:C7:B7:77:2C:D0:7A
Certificate issuer:       /CN=7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6
Certificate serial:       0CFD03D72A1562947F675DC0080E9DA20862A333
Authority key identifier: 7F:11:1E:88:36:AE:E9:1D:04:63:AD:61:77:A8:8D:E2:F5:EC:6A:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230342e302f32322d3332203d3e20323636323432.roa
Signing time:             Thu 30 Oct 2025 13:09:52 +0000
ROA not before:           Thu 30 Oct 2025 13:04:52 +0000
ROA not after:            Thu 29 Oct 2026 13:09:52 +0000
asID:                     266242
IP address blocks:        192.145.204.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6.crl
                          rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 05:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fd:03:d7:2a:15:62:94:7f:67:5d:c0:08:0e:9d:a2:08:62:a3:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6
        Validity
            Not Before: Oct 30 13:04:52 2025 GMT
            Not After : Oct 29 13:09:52 2026 GMT
        Subject: CN=7C144538816F9D517349CFDA996BC7B7772CD07A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:65:f4:82:b3:b1:51:7c:ea:9a:43:37:3f:
                    53:2c:fc:83:ae:d4:a7:60:98:68:d5:aa:5b:cc:16:
                    ce:b5:75:d7:27:64:89:38:73:cb:b4:1f:05:5b:b8:
                    a7:58:07:6e:b2:09:dc:85:56:50:2e:c7:35:22:10:
                    68:f5:5c:93:65:5a:9c:f2:67:77:af:9b:5f:51:7f:
                    52:d7:83:c0:64:d7:2d:df:87:b3:7b:d2:86:ab:8a:
                    11:cb:9d:36:c5:5c:f5:08:e1:ed:ff:8d:75:a8:74:
                    a9:b9:f4:74:9b:2f:e4:b5:82:6a:7c:51:a4:76:b3:
                    2f:ff:f2:bb:14:67:5b:b1:6e:3d:27:2a:b7:71:1b:
                    b6:d7:98:45:72:39:c1:82:ce:a6:1d:57:d9:31:ca:
                    a4:65:78:97:6c:93:1c:a0:6e:ec:86:98:bf:63:f8:
                    0e:75:b4:79:97:99:f8:a1:46:e0:c0:cd:16:fa:ad:
                    c7:51:75:b9:bd:06:97:49:aa:31:a6:49:bd:9a:2c:
                    73:72:0f:05:8d:ff:8a:86:0f:c0:af:97:04:76:ef:
                    29:e2:04:9b:38:d0:4c:36:29:e4:ce:91:03:79:0d:
                    fc:00:84:b8:d0:3f:d0:88:1c:59:9f:08:28:b8:3f:
                    a8:5b:87:31:93:d9:c9:83:34:64:c4:ff:6b:5e:29:
                    ed:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:14:45:38:81:6F:9D:51:73:49:CF:DA:99:6B:C7:B7:77:2C:D0:7A
            X509v3 Authority Key Identifier:
                keyid:7F:11:1E:88:36:AE:E9:1D:04:63:AD:61:77:A8:8D:E2:F5:EC:6A:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230342e302f32322d3332203d3e20323636323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:52:ce:11:ee:fe:12:f3:85:ab:29:a7:ec:79:78:1c:41:ce:
         8b:dd:46:ab:07:eb:c2:3e:aa:3f:6a:a7:af:ba:b7:86:c4:1e:
         dd:fe:bc:9a:6a:2c:35:09:19:c6:e1:7e:27:5b:50:ee:95:64:
         18:c7:5f:51:65:58:03:87:57:37:0d:c0:af:2e:fb:e1:65:62:
         9c:48:48:ea:9c:14:79:41:a6:cd:10:1d:a8:ea:a6:66:3a:52:
         15:a4:08:f9:5e:47:49:92:60:ba:79:5e:0a:bd:a9:36:99:f3:
         f2:ef:9b:9b:41:a9:16:06:1f:45:38:a7:56:65:91:28:ef:a3:
         15:b6:a2:a1:c2:47:f5:88:fb:2d:4a:83:13:e5:cc:f9:1c:ae:
         d4:94:c4:25:2b:7a:8b:0f:32:f5:f7:b2:7b:fb:43:7c:c0:a3:
         2b:14:06:00:b4:3f:bc:a0:53:62:bc:85:a3:a8:33:ef:68:2e:
         41:3b:94:86:b4:c2:23:c1:98:fc:65:1d:aa:d8:9a:bf:b8:dc:
         22:0d:56:f4:58:f0:a0:6a:2c:89:b5:84:d1:d0:6a:cb:a6:b4:
         f9:d7:39:29:67:fb:ed:aa:ef:fa:8f:82:5a:89:1d:4a:8f:39:
         54:3a:b0:6b:bc:7a:e8:1c:56:70:db:9f:80:0c:5a:5d:b1:eb:
         3a:74:52:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:36:52 2025 by rpki-client