Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EoVk95HP229CMB9tgW8iCV3qwP7gKFg7DmLEWXNKyxUy/0/3231362e3234352e3133332e302f32342d3234203d3e20323635303538.roa
File:                     3231362e3234352e3133332e302f32342d3234203d3e20323635303538.roa (raw, json)
Hash identifier:          leI9RiAPI9z3X56Ytyzzx1H9UQHxXstqWtet/QWvjIM=
Subject key identifier:   14:01:95:94:BE:C4:29:ED:49:15:A5:F5:89:47:AC:90:AE:DA:6A:47
Certificate issuer:       /CN=08DCDB7348E7743E8AACA6C10E1DA610BDC6A362
Certificate serial:       656A66EDE10781574B2CCFA7B99EE0946892ACBF
Authority key identifier: 08:DC:DB:73:48:E7:74:3E:8A:AC:A6:C1:0E:1D:A6:10:BD:C6:A3:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08DCDB7348E7743E8AACA6C10E1DA610BDC6A362.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EoVk95HP229CMB9tgW8iCV3qwP7gKFg7DmLEWXNKyxUy/0/3231362e3234352e3133332e302f32342d3234203d3e20323635303538.roa
Signing time:             Thu 14 Aug 2025 14:32:19 +0000
ROA not before:           Thu 14 Aug 2025 14:27:19 +0000
ROA not after:            Thu 13 Aug 2026 14:32:19 +0000
asID:                     265058
IP address blocks:        216.245.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EoVk95HP229CMB9tgW8iCV3qwP7gKFg7DmLEWXNKyxUy/0/08DCDB7348E7743E8AACA6C10E1DA610BDC6A362.crl
                          rsync://rpki-repo.registro.br/repo/EoVk95HP229CMB9tgW8iCV3qwP7gKFg7DmLEWXNKyxUy/0/08DCDB7348E7743E8AACA6C10E1DA610BDC6A362.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08DCDB7348E7743E8AACA6C10E1DA610BDC6A362.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 16:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6a:66:ed:e1:07:81:57:4b:2c:cf:a7:b9:9e:e0:94:68:92:ac:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08DCDB7348E7743E8AACA6C10E1DA610BDC6A362
        Validity
            Not Before: Aug 14 14:27:19 2025 GMT
            Not After : Aug 13 14:32:19 2026 GMT
        Subject: CN=14019594BEC429ED4915A5F58947AC90AEDA6A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:5b:bd:f4:fc:0b:37:df:18:b1:f7:e3:ce:
                    e3:ef:1c:5a:e4:aa:dc:28:48:55:f9:a1:0f:e6:37:
                    64:4c:2d:67:08:e0:7d:68:5e:a7:94:ca:ec:00:d8:
                    2b:e9:b7:34:1a:25:e0:9e:91:82:0a:96:58:f1:69:
                    a3:a3:ce:c8:a9:6b:85:4c:d5:33:b3:99:8f:7f:5d:
                    82:e5:74:6e:97:1e:80:3b:f6:f6:94:57:90:d0:d4:
                    05:aa:44:33:ce:d1:71:4d:c2:48:a6:b6:26:8b:53:
                    38:c7:47:42:c0:18:08:1e:e1:2d:ae:1c:7e:ff:cc:
                    1c:cf:0d:04:64:42:58:a4:3c:b3:ea:ba:06:5b:f4:
                    8c:ba:48:13:ac:7b:e2:40:ef:2c:c2:e0:84:0a:eb:
                    49:ff:8c:11:5d:06:dc:05:6f:47:f0:a1:4c:8b:07:
                    cf:18:e0:55:a6:bd:61:7e:ee:3a:86:aa:73:9a:0b:
                    69:7d:09:b8:78:e8:79:94:da:24:18:ee:1a:ea:c1:
                    09:db:32:95:6f:2b:94:de:5e:88:c2:61:69:f3:d4:
                    51:32:be:29:de:ee:1b:ab:6a:8d:8b:06:6e:49:4d:
                    8b:6e:34:79:f6:4c:85:6c:95:a9:8c:34:02:bc:0d:
                    16:45:be:5d:de:4c:10:8b:c6:a6:6f:0b:86:38:e9:
                    65:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:01:95:94:BE:C4:29:ED:49:15:A5:F5:89:47:AC:90:AE:DA:6A:47
            X509v3 Authority Key Identifier:
                keyid:08:DC:DB:73:48:E7:74:3E:8A:AC:A6:C1:0E:1D:A6:10:BD:C6:A3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EoVk95HP229CMB9tgW8iCV3qwP7gKFg7DmLEWXNKyxUy/0/08DCDB7348E7743E8AACA6C10E1DA610BDC6A362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08DCDB7348E7743E8AACA6C10E1DA610BDC6A362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EoVk95HP229CMB9tgW8iCV3qwP7gKFg7DmLEWXNKyxUy/0/3231362e3234352e3133332e302f32342d3234203d3e20323635303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.245.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:9f:2a:e5:84:c7:91:2e:20:ca:98:4f:14:01:05:40:01:b8:
         1a:fe:5c:ca:1f:10:67:ce:4c:6f:28:53:3c:7f:f7:ca:de:b4:
         51:85:42:7a:3f:95:b6:75:ae:81:95:a5:e6:13:f9:f4:0b:fe:
         e0:26:72:bf:84:ff:f0:23:cb:56:a4:a6:8d:87:b4:d7:75:60:
         b8:96:1b:6d:00:75:8a:55:91:06:88:f5:91:60:c3:45:5f:cd:
         1c:d1:79:80:d0:4d:2f:34:f8:fd:44:18:e3:61:df:5c:f6:10:
         16:bb:52:5d:d5:66:c7:61:2c:27:37:af:59:d9:66:38:90:db:
         33:95:69:9e:55:ab:7b:e9:93:4e:e5:90:e5:73:e5:de:79:a5:
         54:19:1b:22:be:11:5d:bf:f9:26:e5:54:10:86:e9:e2:63:4b:
         ed:40:cd:1f:64:ea:1f:41:ed:2e:00:8a:f1:89:9b:22:6a:2f:
         4d:d9:bc:29:6e:11:2f:69:2e:6c:d9:c6:83:2e:2a:f8:06:b3:
         ec:d7:ff:46:eb:d7:0d:b2:91:55:5a:9e:08:fe:24:3c:47:fb:
         9c:bf:ac:16:53:43:63:7c:af:b8:f3:39:fa:71:ff:20:c2:4d:
         0c:b6:5c:66:12:f9:a9:26:92:a7:88:c3:53:ed:73:04:e2:67:
         37:34:94:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:49:00 2025 by rpki-client