Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3137302e38312e39332e302f32342d3234203d3e20323636333939.roa
File:                     3137302e38312e39332e302f32342d3234203d3e20323636333939.roa (raw, json)
Hash identifier:          AfhnJAiojPTuW2y20exNTJhYSm5mKvtmnWin9GQHKp4=
Subject key identifier:   82:0F:79:A0:B9:77:F7:6D:1A:E3:CD:C4:6E:2D:FA:AF:BD:8B:57:A4
Certificate issuer:       /CN=52C828C27EEBBFF1E4B815AD151841CD2C9E17CA
Certificate serial:       57103BEE34E0393B2AB4961DADA42A4DC50601B2
Authority key identifier: 52:C8:28:C2:7E:EB:BF:F1:E4:B8:15:AD:15:18:41:CD:2C:9E:17:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3137302e38312e39332e302f32342d3234203d3e20323636333939.roa
Signing time:             Thu 11 Sep 2025 20:42:29 +0000
ROA not before:           Thu 11 Sep 2025 20:37:29 +0000
ROA not after:            Thu 10 Sep 2026 20:42:29 +0000
asID:                     266399
IP address blocks:        170.81.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.crl
                          rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 09:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:10:3b:ee:34:e0:39:3b:2a:b4:96:1d:ad:a4:2a:4d:c5:06:01:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52C828C27EEBBFF1E4B815AD151841CD2C9E17CA
        Validity
            Not Before: Sep 11 20:37:29 2025 GMT
            Not After : Sep 10 20:42:29 2026 GMT
        Subject: CN=820F79A0B977F76D1AE3CDC46E2DFAAFBD8B57A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:71:9c:9f:87:bd:e8:00:c7:c9:8a:5b:95:cb:
                    03:0b:9b:eb:78:3b:a5:56:c2:1f:20:51:20:d1:a7:
                    15:4d:38:2e:d6:ce:b0:10:a8:77:0e:4a:0e:fc:39:
                    0a:69:27:23:3f:a7:31:89:c5:56:53:3e:91:66:7c:
                    d7:51:99:f8:7d:d6:83:00:75:f4:ce:67:0d:00:0f:
                    6b:39:07:e5:f8:85:36:a2:09:22:a0:5e:2e:38:10:
                    db:d7:e6:52:a3:5d:08:16:1a:e7:ff:48:9d:7c:a0:
                    e5:2b:ab:ae:9e:f2:df:70:87:01:3f:fa:c7:b1:c1:
                    45:72:a3:f1:9f:84:70:bb:d8:50:c2:20:24:c1:dc:
                    da:76:c3:5b:2c:0d:ef:29:2e:48:cb:cc:48:66:6d:
                    2d:e5:88:7b:a8:a2:0a:01:47:50:55:2f:ca:35:35:
                    5f:84:03:c0:54:2f:a5:d4:1f:a1:d0:56:89:39:bc:
                    49:d8:be:50:da:e1:38:d6:14:75:e0:98:d8:06:d1:
                    35:91:18:5e:cb:bb:83:6a:21:af:dd:d8:3d:44:91:
                    a9:ee:83:cd:2e:e8:a5:de:99:85:ad:08:d4:ca:aa:
                    4d:b2:c8:b2:e6:c9:b5:96:a2:4f:26:dd:d8:cc:d6:
                    7b:b4:b4:b9:ca:a4:d1:32:c0:11:a2:d1:ea:f0:9f:
                    a8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0F:79:A0:B9:77:F7:6D:1A:E3:CD:C4:6E:2D:FA:AF:BD:8B:57:A4
            X509v3 Authority Key Identifier:
                keyid:52:C8:28:C2:7E:EB:BF:F1:E4:B8:15:AD:15:18:41:CD:2C:9E:17:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3137302e38312e39332e302f32342d3234203d3e20323636333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:53:53:ad:cb:f4:5e:02:41:b6:07:9f:b1:27:7b:42:c1:4a:
         1a:68:09:e1:21:4d:bf:a8:4a:e5:19:b4:08:07:ef:c9:65:3f:
         1c:a1:c0:a7:d0:28:72:70:1a:af:51:a8:83:79:37:06:d2:6b:
         7d:1e:7f:23:39:be:4d:80:07:42:53:ae:d0:f4:c0:3f:d6:66:
         4c:7f:f6:19:16:9c:ba:df:b6:e2:b4:25:c9:f0:43:d1:f0:91:
         d0:64:2f:14:2a:4f:d1:4e:0b:d4:ba:02:a9:d6:03:99:f4:42:
         42:4d:40:e0:1c:66:e7:b5:7b:cd:3c:ac:92:f2:17:d0:a4:7d:
         d7:b4:45:ab:c0:29:b5:31:2f:c4:05:c0:8b:c1:9f:7d:e8:68:
         29:d1:15:6d:16:04:ef:66:b7:8d:d3:c8:8f:b0:87:0a:d8:16:
         f3:45:c3:3a:b7:d8:c2:27:2d:a5:d4:e8:02:99:b0:6a:ce:f5:
         52:cb:a4:44:a6:8f:be:53:12:e2:c9:11:75:26:9f:2c:c6:cc:
         ba:22:5e:f2:86:67:d3:e1:0d:07:f1:d2:56:b3:3b:2a:2c:ab:
         ac:4a:98:f9:72:0a:58:c6:09:64:8b:a2:21:66:7a:f5:c4:07:
         94:31:fd:60:b4:3d:08:8e:cf:d8:21:88:64:11:6f:7c:84:b4:
         05:b3:a4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:09:30 2025 by rpki-client