Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3133322e302f32342d3332203d3e203533323235.roa
File:                     3138362e3235312e3133322e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          Ty672PJu1FQ7fE3na2EO7cm/dbSRpsMvhxc6wOy+taU=
Subject key identifier:   CF:BE:16:DF:02:A7:47:13:AB:FE:F2:97:34:90:45:F0:86:37:7F:E5
Certificate issuer:       /CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
Certificate serial:       11D099D205A4775046B98410C763A968F86CFF5D
Authority key identifier: 43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3133322e302f32342d3332203d3e203533323235.roa
Signing time:             Wed 02 Jul 2025 12:06:19 +0000
ROA not before:           Wed 02 Jul 2025 12:01:19 +0000
ROA not after:            Wed 01 Jul 2026 12:06:19 +0000
asID:                     53225
IP address blocks:        186.251.132.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d0:99:d2:05:a4:77:50:46:b9:84:10:c7:63:a9:68:f8:6c:ff:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
        Validity
            Not Before: Jul  2 12:01:19 2025 GMT
            Not After : Jul  1 12:06:19 2026 GMT
        Subject: CN=CFBE16DF02A74713ABFEF297349045F086377FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:91:db:e3:bc:3e:09:ca:a9:29:da:fa:c1:
                    a6:7b:7c:ef:ee:c5:79:d2:bb:2d:b7:6e:85:92:6f:
                    f7:02:83:f9:89:18:19:0f:7a:37:1e:01:f0:8a:06:
                    83:e3:a5:61:10:7f:73:68:e8:e4:cc:da:62:ba:c6:
                    08:e7:81:31:d3:2d:50:81:66:0c:10:22:6f:ed:f0:
                    c5:bf:c0:25:e4:95:4b:4a:b9:4c:91:78:76:47:7d:
                    a4:6d:ff:77:4e:d9:62:2a:b0:e4:5f:74:af:31:32:
                    00:4c:a6:6d:50:0e:60:06:2d:0b:96:76:99:31:18:
                    51:44:83:ea:50:42:e0:a9:88:78:13:53:c8:29:88:
                    47:c3:b6:c9:07:84:79:75:f9:91:68:84:cc:e3:7a:
                    1b:19:4c:c3:74:61:8c:9f:15:7c:27:fe:10:99:a7:
                    ad:b8:81:3c:a8:49:40:f4:28:39:f0:ab:1e:cc:e2:
                    d4:80:c6:76:66:2a:e4:bd:d8:63:db:7f:ea:c4:34:
                    f4:fc:36:72:b2:7f:d5:47:25:64:ff:80:f4:8c:9a:
                    3e:58:99:13:ea:4a:ea:83:c4:b5:e9:20:52:be:ab:
                    ee:94:48:3d:75:a3:7b:9b:ab:0e:92:14:a8:89:62:
                    fe:d7:72:ec:ca:5c:3e:bd:3d:0e:3e:92:a9:ed:36:
                    3a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BE:16:DF:02:A7:47:13:AB:FE:F2:97:34:90:45:F0:86:37:7F:E5
            X509v3 Authority Key Identifier:
                keyid:43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3133322e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:c9:4f:92:ce:1f:89:15:f3:b0:8f:4e:59:34:2d:98:8d:26:
         68:74:94:b4:7f:5e:d3:76:a2:7d:fd:e2:30:f3:8e:f3:46:9b:
         a8:b3:82:8b:a2:3f:c9:e7:75:13:fc:22:bd:00:13:7d:17:75:
         48:38:da:73:65:61:6d:11:4b:68:b1:ac:43:5b:a3:0a:ed:69:
         2a:2b:2c:65:73:68:9d:be:09:59:fb:c3:a5:fd:7d:78:e8:f6:
         17:9b:5d:e3:97:44:2c:f3:36:63:29:5d:47:ce:23:70:e8:eb:
         40:05:47:31:ef:91:e1:9c:ea:1a:df:72:02:06:52:3e:27:26:
         7f:d8:68:c9:30:ce:bd:13:d4:31:6f:a3:c6:b8:12:73:55:46:
         04:dd:f8:a1:92:89:08:45:a4:68:bb:1e:c5:cf:31:1e:57:b0:
         81:d2:ef:98:84:cc:a6:a8:89:a2:ff:16:f8:be:b3:8d:9f:f1:
         40:83:30:ad:bc:d8:48:9e:20:dc:4f:02:01:fa:e9:bc:fb:ed:
         38:21:47:d8:49:61:77:37:38:f3:6d:8f:b7:76:79:9b:f3:6e:
         15:f9:18:ed:16:0a:bd:b6:12:9a:f6:a0:55:eb:68:78:62:61:
         8e:e1:e8:0c:c7:a4:fa:b0:d3:c7:69:ec:fd:af:81:8c:a4:12:
         ee:67:35:cd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEdCZ0gWkd1BGuYQQx2OpaPhs/10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNBQ0RBREU0Q0U2Q0EyMUEwQ0RCOTg3NTBGMzVENjBG
QUREOTg5QjAeFw0yNTA3MDIxMjAxMTlaFw0yNjA3MDExMjA2MTlaMDMxMTAvBgNV
BAMTKENGQkUxNkRGMDJBNzQ3MTNBQkZFRjI5NzM0OTA0NUYwODYzNzdGRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoFJHb47w+CcqpKdr6waZ7fO/u
xXnSuy23boWSb/cCg/mJGBkPejceAfCKBoPjpWEQf3No6OTM2mK6xgjngTHTLVCB
ZgwQIm/t8MW/wCXklUtKuUyReHZHfaRt/3dO2WIqsORfdK8xMgBMpm1QDmAGLQuW
dpkxGFFEg+pQQuCpiHgTU8gpiEfDtskHhHl1+ZFohMzjehsZTMN0YYyfFXwn/hCZ
p624gTyoSUD0KDnwqx7M4tSAxnZmKuS92GPbf+rENPT8NnKyf9VHJWT/gPSMmj5Y
mRPqSuqDxLXpIFK+q+6USD11o3ubqw6SFKiJYv7XcuzKXD69PQ4+kqntNjrnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUz74W3wKnRxOr/vKXNJBF8IY3f+UwHwYDVR0j
BBgwFoAUQ6za3kzmyiGgzbmHUPNdYPrdmJswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlNmb2o0TU5LcG5hQnU4NTVNeE1qM01qWWh1M292bVMyMlhweDRMRDZT
UFEvMi80M0FDREFERTRDRTZDQTIxQTBDREI5ODc1MEYzNUQ2MEZBREQ5ODlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzQUNEQURFNENFNkNBMjFB
MENEQjk4NzUwRjM1RDYwRkFERDk4OUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZTZm9qNE1OS3BuYUJ1ODU1TXhNajNNallodTNvdm1TMjJYcHg0TEQ2U1BRLzIv
MzEzODM2MmUzMjM1MzEyZTMxMzMzMjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1
MzMzMjMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6+4QwDQYJKoZIhvcNAQELBQADggEBAGnJT5LO
H4kV87CPTlk0LZiNJmh0lLR/XtN2on394jDzjvNGm6izgouiP8nndRP8Ir0AE30X
dUg42nNlYW0RS2ixrENbowrtaSorLGVzaJ2+CVn7w6X9fXjo9hebXeOXRCzzNmMp
XUfOI3Do60AFRzHvkeGc6hrfcgIGUj4nJn/YaMkwzr0T1DFvo8a4EnNVRgTd+KGS
iQhFpGi7HsXPMR5XsIHS75iEzKaoiaL/Fvi+s42f8UCDMK282EieINxPAgH66bz7
7TghR9hJYXc3OPNtj7d2eZvzbhX5GO0WCr22Epr2oFXraHhiYY7h6AzHpPqw08dp
7P2vgYykEu5nNc0=
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:29:40 2025 by rpki-client