Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/3139312e3234332e37322e302f32312d3234203d3e20323633343939.roa
File:                     3139312e3234332e37322e302f32312d3234203d3e20323633343939.roa (raw, json)
Hash identifier:          UOq5ZXIFPhYvPqxopZVfs6OBBOMBKmqNfRfnPCxwqw0=
Subject key identifier:   45:F2:89:D6:BE:AB:46:0C:0C:6F:89:1F:62:DB:EE:35:7A:5C:06:65
Certificate issuer:       /CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
Certificate serial:       4141EACA87BA977D666958D56DBAB5AB2AFB395F
Authority key identifier: 78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/3139312e3234332e37322e302f32312d3234203d3e20323633343939.roa
Signing time:             Wed 16 Jul 2025 15:00:00 +0000
ROA not before:           Wed 16 Jul 2025 14:55:00 +0000
ROA not after:            Wed 15 Jul 2026 15:00:00 +0000
asID:                     263499
IP address blocks:        191.243.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl
                          rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 31 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:41:ea:ca:87:ba:97:7d:66:69:58:d5:6d:ba:b5:ab:2a:fb:39:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
        Validity
            Not Before: Jul 16 14:55:00 2025 GMT
            Not After : Jul 15 15:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:79:f4:81:51:50:23:4c:e3:94:04:b8:e1:
                    a4:b2:b5:55:a4:66:6c:a9:78:28:0a:d3:af:5a:58:
                    1c:77:95:6e:c9:17:91:eb:9f:d8:35:dd:9f:e5:02:
                    43:ae:17:55:8d:f1:13:21:04:34:af:1e:60:fd:b2:
                    7b:6e:a1:d0:00:6e:18:29:91:10:0b:23:d4:d3:f3:
                    3e:fa:33:da:17:cf:9e:14:e9:64:ef:a0:19:eb:31:
                    99:4b:12:5a:7a:9f:14:c1:ab:dd:c1:3a:8f:f7:59:
                    cb:de:3b:b4:d8:da:89:c5:3d:5b:c0:a0:56:37:f4:
                    e4:52:96:f7:d1:db:81:4b:2b:65:0a:d2:45:a8:c1:
                    65:df:82:d7:c1:1e:cf:52:39:6c:a4:3a:8b:1b:7e:
                    2f:12:06:35:a7:74:fb:8b:81:d8:50:af:7e:d6:4c:
                    0a:1f:0c:b3:04:1e:3a:27:22:79:ad:49:13:df:79:
                    31:dd:02:ef:e3:57:f5:50:ce:86:5f:32:d3:9d:9e:
                    b6:81:f0:99:18:1d:db:7e:03:e0:6b:2d:06:c3:34:
                    e6:51:76:6b:e8:65:37:ce:ce:14:5f:46:b1:9d:2e:
                    1c:19:34:dc:10:3d:3a:9d:7c:f5:aa:02:f3:13:6c:
                    67:45:d5:9f:82:00:0b:1e:c6:61:cf:02:e6:56:ba:
                    02:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F2:89:D6:BE:AB:46:0C:0C:6F:89:1F:62:DB:EE:35:7A:5C:06:65
            X509v3 Authority Key Identifier:
                keyid:78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/3139312e3234332e37322e302f32312d3234203d3e20323633343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:b0:f2:d6:b8:88:f3:69:72:70:95:21:c4:67:dd:2f:e9:63:
         a5:a1:6b:90:10:69:a9:1d:c7:bf:54:c0:92:17:28:e9:e5:80:
         68:ef:1f:4b:84:a1:9a:5e:36:ce:dc:c5:f9:c2:2f:1d:dd:ad:
         bf:b5:1f:bf:e8:99:cf:73:a9:45:23:eb:59:c6:c6:d2:17:00:
         c3:28:d7:1f:89:74:4a:e0:2c:43:87:f2:40:6e:01:28:34:35:
         75:ae:43:42:72:c6:ec:d4:a8:7a:b3:ca:12:9b:72:1c:b0:ed:
         ca:fa:dc:5f:bd:4d:d6:fc:c7:49:9d:18:b7:41:3d:cc:a6:dd:
         64:1f:fb:37:5c:da:28:17:df:47:4b:85:2a:92:92:2d:83:7c:
         94:20:c5:bb:d4:24:91:ab:0f:d4:95:08:22:de:ea:01:8c:95:
         c1:bb:be:0c:8f:4e:4e:e5:2c:78:aa:90:11:57:a7:44:83:5b:
         12:c2:e4:ff:02:2f:15:08:22:94:43:fb:24:7f:91:d9:3d:81:
         23:38:73:ca:71:50:e1:05:b7:ab:64:90:5d:16:f2:cd:dc:1a:
         79:18:42:37:67:1c:7d:80:39:35:33:89:9f:b7:38:d0:7d:8b:
         25:90:f1:3b:64:dd:ae:e8:2f:13:5d:42:b3:bc:df:70:2e:2d:
         06:08:39:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 22:12:57 2025 by rpki-client