Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32322d3332203d3e20323634343530.roa
File:                     3133312e3235352e33362e302f32322d3332203d3e20323634343530.roa (raw, json)
Hash identifier:          cMQ3yglT4ZC+pgtHO/DR45s0VAE+u1pADF7o1szZVZI=
Subject key identifier:   38:8E:83:EE:19:12:1A:05:97:3C:A4:41:83:59:5E:F8:A3:A4:93:31
Certificate issuer:       /CN=92F182EE769EA26EA9085CED7B4CB6663E944BE9
Certificate serial:       041350F6538D2C83CD9F9109ADDDDE0BCE4C7B07
Authority key identifier: 92:F1:82:EE:76:9E:A2:6E:A9:08:5C:ED:7B:4C:B6:66:3E:94:4B:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92F182EE769EA26EA9085CED7B4CB6663E944BE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32322d3332203d3e20323634343530.roa
Signing time:             Thu 23 Oct 2025 19:05:45 +0000
ROA not before:           Thu 23 Oct 2025 19:00:45 +0000
ROA not after:            Thu 22 Oct 2026 19:05:45 +0000
asID:                     264450
IP address blocks:        131.255.36.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/92F182EE769EA26EA9085CED7B4CB6663E944BE9.crl
                          rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/92F182EE769EA26EA9085CED7B4CB6663E944BE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92F182EE769EA26EA9085CED7B4CB6663E944BE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:13:50:f6:53:8d:2c:83:cd:9f:91:09:ad:dd:de:0b:ce:4c:7b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92F182EE769EA26EA9085CED7B4CB6663E944BE9
        Validity
            Not Before: Oct 23 19:00:45 2025 GMT
            Not After : Oct 22 19:05:45 2026 GMT
        Subject: CN=388E83EE19121A05973CA44183595EF8A3A49331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:7c:bc:12:43:c6:2a:2d:9c:a3:23:80:fa:
                    7d:1a:fc:45:6b:dc:18:60:9c:c7:2a:fb:35:09:73:
                    9f:c4:cd:5d:01:cc:02:d3:50:b0:ff:29:4f:88:1c:
                    d1:ae:b4:eb:ae:fe:89:62:67:b1:45:73:53:a4:c7:
                    4a:55:a1:01:64:fd:8d:67:50:29:08:52:d1:90:9e:
                    ee:10:d0:eb:6f:e5:72:b3:ed:5c:e3:b7:13:fb:21:
                    68:5d:98:57:99:e8:ca:d0:d2:1d:84:3e:3b:fc:65:
                    20:25:7f:b8:2a:b2:c8:df:84:f0:59:5e:aa:d3:c5:
                    82:21:75:a0:8c:4e:15:08:97:97:ff:b9:8a:4d:86:
                    22:70:db:68:7e:ce:48:19:32:13:82:ea:86:c2:ac:
                    8f:74:80:de:49:22:34:7d:13:6b:83:1b:4a:82:e0:
                    01:44:26:fe:44:8f:ea:bd:b1:9b:7d:d1:aa:52:6c:
                    10:e0:80:2c:b8:d9:af:12:e0:20:64:67:38:41:98:
                    ca:6e:94:de:4a:b0:80:cb:31:d4:22:6a:fc:d1:64:
                    99:5b:47:ea:51:dd:3e:2a:3b:bd:ad:b2:3c:0f:ab:
                    90:aa:95:2e:5c:d7:1e:da:52:49:91:15:9d:7d:18:
                    a5:a2:5b:87:2c:74:d1:29:e0:36:be:6c:03:44:56:
                    21:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8E:83:EE:19:12:1A:05:97:3C:A4:41:83:59:5E:F8:A3:A4:93:31
            X509v3 Authority Key Identifier:
                keyid:92:F1:82:EE:76:9E:A2:6E:A9:08:5C:ED:7B:4C:B6:66:3E:94:4B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/92F182EE769EA26EA9085CED7B4CB6663E944BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92F182EE769EA26EA9085CED7B4CB6663E944BE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32322d3332203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:c5:85:cb:c5:53:2f:c5:37:7f:85:29:1b:14:d1:2d:45:66:
         3f:6e:71:21:14:97:d3:f7:ae:df:15:06:0a:e6:34:1e:c2:47:
         50:39:b3:a3:76:d9:e5:81:53:d1:a3:e3:0e:54:f9:b5:93:bb:
         04:6f:4c:3a:77:d6:eb:28:cb:45:a7:12:86:bf:5e:b1:8f:a9:
         aa:7a:04:c8:b3:61:7d:6c:76:92:47:3b:51:00:a2:2f:15:df:
         13:8d:77:70:a5:62:32:90:64:ec:d0:dd:ad:df:8e:47:c4:8a:
         71:cf:29:52:ff:1b:61:99:ee:98:7c:e3:d5:75:ad:10:b5:91:
         01:e2:7f:25:07:88:c5:24:20:b0:0b:fe:33:85:d2:03:a5:28:
         4e:18:e8:af:96:7c:d8:f6:c6:e5:57:51:98:ba:f4:f9:fc:f8:
         28:32:9d:48:6e:b8:ff:b3:ad:99:05:04:a8:9e:0d:a0:ae:99:
         0b:6b:36:42:a9:e7:cc:60:a7:ea:ce:0f:d9:c6:4e:c6:b9:ca:
         5a:78:a1:28:e5:5f:2b:c7:e7:35:30:f7:ed:ff:c7:e0:b1:3a:
         8b:b8:91:7f:67:af:9e:53:1f:3b:e4:7c:11:3c:c9:96:5e:05:
         93:fa:09:b7:69:38:d3:cb:c9:84:4b:5a:09:0d:af:92:3d:23:
         b0:c8:18:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:23:05 2025 by rpki-client