Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNpuKJauqXMV3Zz3kTKT4qMSxkM4ZNZQuGLv366LZvZe/0/3137392e3139312e3233312e302f32342d3234203d3e20323633343230.roa
File:                     3137392e3139312e3233312e302f32342d3234203d3e20323633343230.roa (raw, json)
Hash identifier:          YMrXdy6xgKqVNkOp9FXTrCANsYik5J67isfb3USJgwQ=
Subject key identifier:   5C:AC:1F:50:72:0E:5B:27:90:01:BA:1D:59:89:E6:DA:35:A0:1F:E4
Certificate issuer:       /CN=6A309499916E462E705D24B28B7A2C318A21C349
Certificate serial:       3CCD96203A7A370CE4BC1B5F819466666C48B360
Authority key identifier: 6A:30:94:99:91:6E:46:2E:70:5D:24:B2:8B:7A:2C:31:8A:21:C3:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A309499916E462E705D24B28B7A2C318A21C349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNpuKJauqXMV3Zz3kTKT4qMSxkM4ZNZQuGLv366LZvZe/0/3137392e3139312e3233312e302f32342d3234203d3e20323633343230.roa
Signing time:             Mon 01 Sep 2025 12:25:56 +0000
ROA not before:           Mon 01 Sep 2025 12:20:56 +0000
ROA not after:            Mon 31 Aug 2026 12:25:56 +0000
asID:                     263420
IP address blocks:        179.191.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNpuKJauqXMV3Zz3kTKT4qMSxkM4ZNZQuGLv366LZvZe/0/6A309499916E462E705D24B28B7A2C318A21C349.crl
                          rsync://rpki-repo.registro.br/repo/BNpuKJauqXMV3Zz3kTKT4qMSxkM4ZNZQuGLv366LZvZe/0/6A309499916E462E705D24B28B7A2C318A21C349.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A309499916E462E705D24B28B7A2C318A21C349.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cd:96:20:3a:7a:37:0c:e4:bc:1b:5f:81:94:66:66:6c:48:b3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A309499916E462E705D24B28B7A2C318A21C349
        Validity
            Not Before: Sep  1 12:20:56 2025 GMT
            Not After : Aug 31 12:25:56 2026 GMT
        Subject: CN=5CAC1F50720E5B279001BA1D5989E6DA35A01FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:c8:86:4b:1a:ca:4c:0d:d9:2e:e3:e5:b2:
                    53:bb:87:8e:f3:f5:92:09:fb:52:f8:6d:b4:2c:58:
                    71:bf:6b:21:00:81:68:69:9e:1c:0f:fa:c5:e1:19:
                    32:21:eb:05:09:6b:e0:6d:60:c3:6f:37:09:24:b9:
                    a1:61:a2:45:7a:b7:f6:07:d1:92:13:28:9f:ec:a8:
                    c9:40:e3:67:3d:fd:e1:44:2d:e8:b6:05:c2:e5:c7:
                    c2:b4:e0:28:77:89:db:d7:6d:81:d1:14:e2:03:ba:
                    53:f5:6d:0e:a0:66:c7:8b:5f:d8:c0:62:27:73:ec:
                    7b:39:b2:17:80:60:e0:34:be:89:05:40:d9:0b:3a:
                    61:c9:1f:c5:75:ce:bc:6d:54:09:f9:e3:92:9e:b3:
                    01:ff:ec:c2:58:a4:83:5a:e0:b5:c6:1c:a4:d2:ae:
                    6e:79:76:36:6c:30:1f:b8:8e:40:14:c0:33:19:55:
                    0c:ba:37:10:bf:d8:5a:22:da:ed:e6:6b:c9:30:06:
                    9a:3e:45:6a:29:6b:b2:a3:3f:f7:ba:11:ee:4e:45:
                    86:ad:58:91:e9:19:c4:61:b7:b7:04:ca:92:a5:3a:
                    e9:ae:c5:fc:02:08:40:0f:57:41:ca:ea:27:7d:0e:
                    6b:78:8c:d7:fe:8b:f2:f6:7a:23:a5:01:30:a3:8f:
                    08:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AC:1F:50:72:0E:5B:27:90:01:BA:1D:59:89:E6:DA:35:A0:1F:E4
            X509v3 Authority Key Identifier:
                keyid:6A:30:94:99:91:6E:46:2E:70:5D:24:B2:8B:7A:2C:31:8A:21:C3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNpuKJauqXMV3Zz3kTKT4qMSxkM4ZNZQuGLv366LZvZe/0/6A309499916E462E705D24B28B7A2C318A21C349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A309499916E462E705D24B28B7A2C318A21C349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNpuKJauqXMV3Zz3kTKT4qMSxkM4ZNZQuGLv366LZvZe/0/3137392e3139312e3233312e302f32342d3234203d3e20323633343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:55:3e:cf:bb:12:2c:28:1e:74:a5:b6:90:f3:50:58:2b:b6:
         e7:1a:ee:3f:6c:97:07:b0:93:e3:e8:0a:84:c6:45:8a:d3:55:
         a6:75:69:01:00:18:1c:55:ab:73:b9:de:9d:a2:f4:95:11:a9:
         41:dc:c7:b6:7a:c2:29:89:3a:5d:01:e5:09:e0:e2:1c:f0:64:
         04:c7:0c:7a:c5:03:d0:24:a5:b9:de:6e:ae:d5:73:86:23:e3:
         c8:8f:4f:cf:15:0d:fb:cf:2a:62:40:82:1d:ea:18:fc:a6:a0:
         1b:03:dd:67:80:36:37:1b:8a:8b:c8:dd:a9:d4:1d:49:3a:53:
         b4:18:ae:02:24:d1:40:77:43:36:9b:7f:2e:3f:30:c5:1b:31:
         4f:fd:7d:df:4a:f0:b1:91:60:98:12:11:de:b9:73:1c:bb:d4:
         71:9a:27:bb:44:d9:25:fc:65:d5:ee:d8:0e:83:99:f9:df:38:
         4a:78:c2:2d:e5:44:aa:a3:4f:91:65:3a:2b:09:89:11:3c:7c:
         c0:5b:c1:5c:5c:09:3e:79:68:55:a7:1f:4f:c8:ca:79:ef:16:
         0a:64:12:d1:d8:58:0b:61:7f:0c:b2:c5:57:72:25:74:ab:fd:
         3e:87:fc:12:86:00:1b:dc:16:17:7a:57:a7:c3:cd:64:25:5f:
         a3:ef:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:44:31 2025 by rpki-client