Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3137372e36372e3136342e302f32322d3234203d3e20323731373030.roa
File:                     3137372e36372e3136342e302f32322d3234203d3e20323731373030.roa (raw, json)
Hash identifier:          oexgiQPhddOnWluygKIco9xlyEwc773/RB6TMvdzb4w=
Subject key identifier:   31:29:3B:D0:FA:AB:0F:EC:9B:FC:0D:D2:62:11:AE:8C:04:DC:D8:14
Certificate issuer:       /CN=9AF6029EF76F1AD94520E558CCE3B70BDEE40E73
Certificate serial:       3AA54C37E7DFA950D3B847F3C64274A62474E5BA
Authority key identifier: 9A:F6:02:9E:F7:6F:1A:D9:45:20:E5:58:CC:E3:B7:0B:DE:E4:0E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3137372e36372e3136342e302f32322d3234203d3e20323731373030.roa
Signing time:             Wed 29 Oct 2025 20:41:26 +0000
ROA not before:           Wed 29 Oct 2025 20:36:26 +0000
ROA not after:            Wed 28 Oct 2026 20:41:26 +0000
asID:                     271700
IP address blocks:        177.67.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.crl
                          rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a5:4c:37:e7:df:a9:50:d3:b8:47:f3:c6:42:74:a6:24:74:e5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF6029EF76F1AD94520E558CCE3B70BDEE40E73
        Validity
            Not Before: Oct 29 20:36:26 2025 GMT
            Not After : Oct 28 20:41:26 2026 GMT
        Subject: CN=31293BD0FAAB0FEC9BFC0DD26211AE8C04DCD814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:85:b1:2d:ec:5b:59:e9:86:e9:b5:2c:4f:fc:
                    f0:be:27:c4:f7:a1:05:c3:75:6c:94:fc:2c:c1:df:
                    e0:25:eb:98:e9:62:45:80:cd:1c:5e:e9:24:de:c6:
                    7f:af:5a:9e:5e:60:80:28:2a:7e:b6:c2:03:08:8c:
                    0e:bd:d6:9c:07:0f:44:ca:e4:90:33:42:1f:60:d6:
                    f8:21:b5:f4:44:77:3b:45:9e:9b:72:29:d3:22:d6:
                    8e:c8:ca:53:bc:7e:11:6c:3f:ab:38:73:ca:66:e2:
                    a9:ab:ce:1d:89:9f:f0:ac:42:5c:4b:37:5e:75:83:
                    85:01:b7:1f:5b:6f:32:4b:bc:f6:24:21:87:e4:65:
                    01:11:04:cf:c5:2c:61:7c:76:62:1d:ce:59:71:ac:
                    4c:7c:df:46:cf:13:1b:e7:68:1a:78:2e:81:1f:6c:
                    4c:d7:13:1f:a3:10:0c:d2:c1:3c:16:39:46:cc:cd:
                    c6:ce:f8:2a:4e:ad:c3:9b:e3:75:99:bd:90:39:bc:
                    7c:61:60:ef:5a:05:2d:35:f5:3f:e0:49:a2:56:37:
                    06:89:cb:1c:fb:54:2f:2c:10:03:6c:b2:60:77:9f:
                    25:09:b2:38:5c:1e:4b:1a:58:ad:18:8f:14:58:8a:
                    31:70:c4:8e:b2:d7:24:bb:0b:d2:67:58:fc:2d:8d:
                    c4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:29:3B:D0:FA:AB:0F:EC:9B:FC:0D:D2:62:11:AE:8C:04:DC:D8:14
            X509v3 Authority Key Identifier:
                keyid:9A:F6:02:9E:F7:6F:1A:D9:45:20:E5:58:CC:E3:B7:0B:DE:E4:0E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3137372e36372e3136342e302f32322d3234203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:6f:0b:13:22:32:37:f3:49:3d:66:da:d7:7f:8f:8d:95:06:
         c6:3e:f9:95:ee:74:b0:b5:73:ce:56:5a:22:7a:a5:86:2e:99:
         83:87:a2:c7:34:b1:41:08:d0:45:0e:49:a2:9b:7d:d9:24:c2:
         89:78:02:43:8e:78:e7:a9:3a:2b:6e:ed:47:33:b9:de:cd:fe:
         8e:e0:a7:9a:81:78:a8:e7:fe:1e:4f:40:85:73:ab:6a:32:d2:
         d6:2b:a9:c4:e7:b3:9a:f5:a1:71:d7:14:6c:a8:7b:77:69:47:
         67:32:9d:42:92:d7:2f:e8:93:26:22:09:f6:ef:f9:b6:a8:75:
         95:51:fd:29:0e:dd:70:62:da:4a:5f:82:68:65:95:7e:03:2a:
         f7:d7:af:5c:9c:31:4c:39:6b:96:56:5f:fe:d0:3b:5f:10:eb:
         64:39:6d:88:af:dd:7e:8b:b5:d1:60:7f:e5:ae:5d:29:4a:d9:
         b6:6b:2b:d0:1a:a9:8c:75:c9:e5:6b:8a:fc:44:11:8b:eb:0a:
         f4:89:d0:e9:1f:25:16:8c:e2:46:31:69:2f:6a:9b:73:05:8e:
         4b:90:cf:fd:21:93:d1:78:2f:33:dc:65:3a:71:71:83:7d:37:
         38:5a:2f:9c:ca:80:87:5f:f7:3f:82:eb:46:7c:1c:c4:cd:54:
         c1:fd:4b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:06:01 2025 by rpki-client