Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3133392e302f32342d3332203d3e203533323235.roa
File:                     3138362e3235312e3133392e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          l51yXK4i+fxhIw0msu09+9Cx9XI069s1M+Ky64lF8UA=
Subject key identifier:   9F:73:A7:87:DF:4F:05:4D:59:71:F3:49:99:B3:93:38:81:2E:73:E8
Certificate issuer:       /CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
Certificate serial:       0C7AC5CEC284DB0404D88DADD044295AB6628495
Authority key identifier: 43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3133392e302f32342d3332203d3e203533323235.roa
Signing time:             Wed 02 Jul 2025 12:06:22 +0000
ROA not before:           Wed 02 Jul 2025 12:01:22 +0000
ROA not after:            Wed 01 Jul 2026 12:06:22 +0000
asID:                     53225
IP address blocks:        186.251.139.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7a:c5:ce:c2:84:db:04:04:d8:8d:ad:d0:44:29:5a:b6:62:84:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B
        Validity
            Not Before: Jul  2 12:01:22 2025 GMT
            Not After : Jul  1 12:06:22 2026 GMT
        Subject: CN=9F73A787DF4F054D5971F34999B39338812E73E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7a:33:32:f0:68:42:21:a6:b6:b6:ae:d8:ac:
                    2f:4d:dd:05:60:18:19:4d:93:5b:b4:30:54:60:d7:
                    2e:a4:ce:42:21:5b:38:10:b8:d6:86:f5:59:e6:61:
                    cc:88:41:bd:cb:63:26:44:44:4f:e8:be:8a:bb:7a:
                    a3:d9:cd:57:13:0e:65:b2:a3:a3:c9:54:7f:44:cf:
                    3c:d7:4e:f3:d2:1a:e0:6f:2c:4e:86:98:6d:37:a5:
                    54:3d:d4:92:50:5b:a2:53:f2:2f:1e:48:aa:cf:0e:
                    9e:81:33:63:d2:9d:6a:0a:25:04:76:4f:c5:3f:5b:
                    21:33:43:5b:5c:7b:f1:c6:8b:6a:12:77:0c:a1:e1:
                    2b:a3:54:b8:24:d4:d4:e5:ec:2f:71:9a:4a:7a:76:
                    41:54:41:b2:8a:d0:95:6f:1c:3f:ee:07:14:b2:d3:
                    58:ca:23:65:e9:77:2a:71:d3:b3:e5:86:cd:28:86:
                    ae:aa:99:c4:09:4c:93:43:93:74:91:ef:60:4a:c7:
                    b3:19:39:d8:73:ac:8a:01:37:ab:56:00:08:f3:dd:
                    23:51:42:b0:26:4c:cf:cd:fc:5e:dc:c9:1a:1f:04:
                    6e:55:c0:3d:29:03:22:5a:99:1f:c1:fe:02:fd:43:
                    d1:a8:35:2c:ae:bf:91:65:f3:59:ea:73:79:40:56:
                    d7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:73:A7:87:DF:4F:05:4D:59:71:F3:49:99:B3:93:38:81:2E:73:E8
            X509v3 Authority Key Identifier:
                keyid:43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/3138362e3235312e3133392e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:06:e3:2f:e6:42:a3:b1:ba:94:4c:39:cf:46:57:7f:0e:91:
         b4:0e:8b:c9:e6:9c:5f:18:bb:92:c1:0b:e7:ed:1d:56:0f:d7:
         03:cd:7e:19:e7:d5:b2:5c:da:3f:97:b1:fa:b9:e1:51:89:3a:
         ea:cf:00:dd:6b:3d:ba:b0:ff:96:de:b3:42:fa:bb:53:d9:98:
         5f:90:00:fe:65:14:00:1b:b6:43:7b:34:43:37:ce:8f:a4:3c:
         aa:b6:f4:29:29:50:f5:da:4f:bd:11:0a:33:0a:5e:d4:f9:18:
         41:55:95:5c:4e:8b:6a:ce:2b:b5:ee:aa:29:5a:d6:66:24:4e:
         6e:ee:a5:e8:86:68:1a:33:d5:96:24:03:61:97:1e:bb:5c:23:
         cf:f9:1e:ab:a0:bc:0b:d2:da:6b:de:8a:bc:0d:6b:8f:9e:fc:
         a9:12:79:f3:2b:f0:a6:b0:05:cf:ba:2c:41:f6:6f:2d:ba:bb:
         47:11:b1:f5:16:db:0a:6a:1c:4e:e8:77:d1:57:8e:30:08:d5:
         de:58:50:4d:27:03:44:0c:b2:55:0d:8d:d1:30:89:0d:37:20:
         0b:ff:fd:69:87:b8:44:e4:75:b2:f3:88:6b:98:b3:ac:73:f3:
         25:71:b2:9b:53:0f:9d:05:de:ee:a4:4d:d2:25:de:81:14:e8:
         8b:f7:d9:9c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDHrFzsKE2wQE2I2t0EQpWrZihJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNBQ0RBREU0Q0U2Q0EyMUEwQ0RCOTg3NTBGMzVENjBG
QUREOTg5QjAeFw0yNTA3MDIxMjAxMjJaFw0yNjA3MDExMjA2MjJaMDMxMTAvBgNV
BAMTKDlGNzNBNzg3REY0RjA1NEQ1OTcxRjM0OTk5QjM5MzM4ODEyRTczRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ejMy8GhCIaa2tq7YrC9N3QVg
GBlNk1u0MFRg1y6kzkIhWzgQuNaG9VnmYcyIQb3LYyZERE/ovoq7eqPZzVcTDmWy
o6PJVH9EzzzXTvPSGuBvLE6GmG03pVQ91JJQW6JT8i8eSKrPDp6BM2PSnWoKJQR2
T8U/WyEzQ1tce/HGi2oSdwyh4SujVLgk1NTl7C9xmkp6dkFUQbKK0JVvHD/uBxSy
01jKI2Xpdypx07Plhs0ohq6qmcQJTJNDk3SR72BKx7MZOdhzrIoBN6tWAAjz3SNR
QrAmTM/N/F7cyRofBG5VwD0pAyJamR/B/gL9Q9GoNSyuv5Fl81nqc3lAVtfpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUn3Onh99PBU1ZcfNJmbOTOIEuc+gwHwYDVR0j
BBgwFoAUQ6za3kzmyiGgzbmHUPNdYPrdmJswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlNmb2o0TU5LcG5hQnU4NTVNeE1qM01qWWh1M292bVMyMlhweDRMRDZT
UFEvMi80M0FDREFERTRDRTZDQTIxQTBDREI5ODc1MEYzNUQ2MEZBREQ5ODlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzQUNEQURFNENFNkNBMjFB
MENEQjk4NzUwRjM1RDYwRkFERDk4OUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZTZm9qNE1OS3BuYUJ1ODU1TXhNajNNallodTNvdm1TMjJYcHg0TEQ2U1BRLzIv
MzEzODM2MmUzMjM1MzEyZTMxMzMzOTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1
MzMzMjMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6+4swDQYJKoZIhvcNAQELBQADggEBAKgG4y/m
QqOxupRMOc9GV38OkbQOi8nmnF8Yu5LBC+ftHVYP1wPNfhnn1bJc2j+Xsfq54VGJ
OurPAN1rPbqw/5bes0L6u1PZmF+QAP5lFAAbtkN7NEM3zo+kPKq29CkpUPXaT70R
CjMKXtT5GEFVlVxOi2rOK7Xuqila1mYkTm7upeiGaBoz1ZYkA2GXHrtcI8/5Hqug
vAvS2mveirwNa4+e/KkSefMr8KawBc+6LEH2by26u0cRsfUW2wpqHE7od9FXjjAI
1d5YUE0nA0QMslUNjdEwiQ03IAv//WmHuETkdbLziGuYs6xz8yVxsptTD50F3u6k
TdIl3oEU6Iv32Zw=
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:36:57 2025 by rpki-client