Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNpuKJauqXMV3Zz3kTKT4qMSxkM4ZNZQuGLv366LZvZe/0/3137392e3139312e3233302e302f32332d3233203d3e20323633343230.roa
File:                     3137392e3139312e3233302e302f32332d3233203d3e20323633343230.roa (raw, json)
Hash identifier:          1661TPVleQXzW65CRvJYtWXWf8FzFMb0c/FYOrljgm4=
Subject key identifier:   1A:20:0C:C3:AF:F8:BB:63:9C:BC:54:3C:BC:CD:40:D2:63:53:02:25
Certificate issuer:       /CN=6A309499916E462E705D24B28B7A2C318A21C349
Certificate serial:       78936F4C6826F97B963D44445C59AA6B427AEB71
Authority key identifier: 6A:30:94:99:91:6E:46:2E:70:5D:24:B2:8B:7A:2C:31:8A:21:C3:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A309499916E462E705D24B28B7A2C318A21C349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNpuKJauqXMV3Zz3kTKT4qMSxkM4ZNZQuGLv366LZvZe/0/3137392e3139312e3233302e302f32332d3233203d3e20323633343230.roa
Signing time:             Mon 01 Sep 2025 12:25:44 +0000
ROA not before:           Mon 01 Sep 2025 12:20:44 +0000
ROA not after:            Mon 31 Aug 2026 12:25:44 +0000
asID:                     263420
IP address blocks:        179.191.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNpuKJauqXMV3Zz3kTKT4qMSxkM4ZNZQuGLv366LZvZe/0/6A309499916E462E705D24B28B7A2C318A21C349.crl
                          rsync://rpki-repo.registro.br/repo/BNpuKJauqXMV3Zz3kTKT4qMSxkM4ZNZQuGLv366LZvZe/0/6A309499916E462E705D24B28B7A2C318A21C349.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A309499916E462E705D24B28B7A2C318A21C349.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:93:6f:4c:68:26:f9:7b:96:3d:44:44:5c:59:aa:6b:42:7a:eb:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A309499916E462E705D24B28B7A2C318A21C349
        Validity
            Not Before: Sep  1 12:20:44 2025 GMT
            Not After : Aug 31 12:25:44 2026 GMT
        Subject: CN=1A200CC3AFF8BB639CBC543CBCCD40D263530225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:df:0f:09:5f:b0:74:06:12:76:0c:2a:75:
                    d5:08:5e:70:d8:94:af:b5:19:db:27:5c:8f:c8:5a:
                    56:a6:26:c1:9e:1f:99:65:26:61:fc:69:f2:d9:4b:
                    59:62:2b:2d:ff:02:55:27:ec:35:a8:93:20:94:90:
                    c8:c4:16:11:cd:22:68:d3:af:d1:81:3f:aa:f1:ae:
                    bb:9f:29:90:d9:eb:5d:8b:0a:22:58:32:4d:73:44:
                    2b:02:ad:ec:29:1e:50:fc:13:51:9b:db:0d:a9:c8:
                    2b:1f:ca:05:de:ab:b1:a6:f1:dd:5f:31:d8:a9:b4:
                    ac:13:5c:2e:26:ae:79:68:85:79:ff:d6:dc:9c:ed:
                    1e:10:7e:1e:4e:2a:40:b2:a3:48:23:a0:f8:22:8b:
                    d3:ad:8a:55:16:59:44:9b:5d:68:5c:9c:57:80:91:
                    5f:3d:b7:33:28:48:8a:b3:6f:66:42:b6:90:02:12:
                    e9:89:c1:50:41:76:c4:4e:30:66:06:1a:cf:af:b2:
                    e0:c7:64:68:ee:14:17:3b:1f:ea:9b:5f:1b:5c:7a:
                    ae:95:aa:c1:e6:9d:f2:77:6a:44:9f:91:97:87:27:
                    24:0e:d9:64:52:2b:04:4e:fa:84:c9:db:33:1b:ea:
                    29:c0:ce:cc:b6:19:fd:74:7b:4c:fe:d4:90:da:3a:
                    7c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:20:0C:C3:AF:F8:BB:63:9C:BC:54:3C:BC:CD:40:D2:63:53:02:25
            X509v3 Authority Key Identifier:
                keyid:6A:30:94:99:91:6E:46:2E:70:5D:24:B2:8B:7A:2C:31:8A:21:C3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNpuKJauqXMV3Zz3kTKT4qMSxkM4ZNZQuGLv366LZvZe/0/6A309499916E462E705D24B28B7A2C318A21C349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A309499916E462E705D24B28B7A2C318A21C349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNpuKJauqXMV3Zz3kTKT4qMSxkM4ZNZQuGLv366LZvZe/0/3137392e3139312e3233302e302f32332d3233203d3e20323633343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:5c:02:34:a9:47:9f:da:b1:58:6d:e5:e5:95:cc:3c:9d:1a:
         1e:af:89:de:f0:e1:29:f9:d6:77:b7:1d:b7:c8:15:22:4e:9f:
         f9:d2:69:97:af:7f:8c:7c:4d:f4:9f:da:36:02:c9:28:07:b4:
         bc:a2:14:59:e8:30:58:3f:19:2b:e0:e0:87:d0:42:2e:3f:8f:
         e2:7a:ae:2a:55:db:16:06:64:2e:72:91:1b:ad:f9:6c:4c:81:
         7e:21:9b:e9:0f:72:c9:2b:bc:91:2f:75:f6:fe:53:af:1d:22:
         76:7b:2a:4d:d4:86:7e:94:86:ce:32:1f:81:87:a9:6a:d8:e7:
         ef:97:c6:e6:5d:da:71:34:42:dc:a2:3c:18:37:6c:31:0f:3d:
         2f:fc:77:3a:0b:a8:3d:a0:85:ef:63:66:b2:6c:47:1d:fd:9b:
         cd:5f:31:ef:c7:a6:32:0c:fd:94:ee:de:10:2d:da:37:db:b6:
         f4:7e:f0:fd:f5:60:7d:a3:ff:56:8d:1a:16:08:a4:e4:d0:ea:
         36:c3:2a:2a:e9:1f:a9:9c:ad:a0:39:2c:4f:b7:dd:99:20:08:
         5a:c4:e3:32:60:e3:41:e3:71:cf:c0:6c:5b:dd:1c:01:66:8b:
         a7:a0:b7:f3:d6:2f:1d:7d:0b:18:72:20:4e:11:ca:a9:c0:87:
         14:0e:4f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:31:21 2025 by rpki-client