Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/3136382e3233322e3133322e302f32342d3234203d3e20323634393431.roa
File:                     3136382e3233322e3133322e302f32342d3234203d3e20323634393431.roa (raw, json)
Hash identifier:          CFrIC6iB6nNgIi8tw1sD8L8mX0+PR+KyOOpa11PVBWY=
Subject key identifier:   46:C4:DB:0A:2A:44:D7:21:32:82:99:12:18:0B:23:A8:A6:32:6A:A3
Certificate issuer:       /CN=E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D
Certificate serial:       4FFF7238102784D7113E2099872FBFCA176E5B39
Authority key identifier: E5:79:D9:FF:63:D9:A4:8D:BD:6C:7C:9A:21:1C:5A:62:53:89:1E:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/3136382e3233322e3133322e302f32342d3234203d3e20323634393431.roa
Signing time:             Tue 02 Sep 2025 00:31:09 +0000
ROA not before:           Tue 02 Sep 2025 00:26:09 +0000
ROA not after:            Tue 01 Sep 2026 00:31:09 +0000
asID:                     264941
IP address blocks:        168.232.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.crl
                          rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 06:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ff:72:38:10:27:84:d7:11:3e:20:99:87:2f:bf:ca:17:6e:5b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D
        Validity
            Not Before: Sep  2 00:26:09 2025 GMT
            Not After : Sep  1 00:31:09 2026 GMT
        Subject: CN=46C4DB0A2A44D72132829912180B23A8A6326AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:b1:06:dd:2e:36:6a:df:bc:ce:0a:1c:bd:
                    aa:26:c7:17:ba:bd:81:f3:9c:38:de:bd:53:6c:8e:
                    ae:09:63:be:5d:58:c4:63:74:7d:03:64:b4:07:62:
                    ac:20:c1:83:96:96:19:78:92:2c:a2:0a:6f:ab:53:
                    6c:85:37:7a:53:5f:14:fc:5a:dc:cb:4e:5b:dc:85:
                    90:a3:98:43:e5:c0:f0:a4:ba:72:78:71:31:3b:40:
                    27:63:19:45:56:fc:a9:bf:fb:b2:29:84:10:a0:42:
                    f2:63:ba:cc:0c:03:1b:7f:2d:14:78:14:59:82:03:
                    03:60:18:c4:f7:29:a3:a7:8d:b7:74:01:f1:e9:0e:
                    97:42:c3:05:07:10:4f:2d:cf:a4:a0:5c:d6:93:5a:
                    c9:8e:6b:1e:46:e8:12:59:49:d2:ef:96:f1:fc:e5:
                    6b:d1:0c:2d:a0:ac:aa:fc:1b:4b:af:08:27:3f:fb:
                    34:b8:f8:99:b7:7f:a8:eb:30:61:16:c8:12:af:5d:
                    64:54:88:44:45:f7:2a:95:aa:ea:a0:21:9d:cb:85:
                    4a:f3:26:6c:28:5a:65:06:99:57:16:cb:c7:45:7f:
                    4a:9a:c2:5f:35:c2:1b:37:9d:b9:aa:84:e3:a7:cf:
                    9e:a9:e2:5e:86:40:2f:ad:e4:21:89:9c:5e:af:cb:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C4:DB:0A:2A:44:D7:21:32:82:99:12:18:0B:23:A8:A6:32:6A:A3
            X509v3 Authority Key Identifier:
                keyid:E5:79:D9:FF:63:D9:A4:8D:BD:6C:7C:9A:21:1C:5A:62:53:89:1E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/3136382e3233322e3133322e302f32342d3234203d3e20323634393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:3b:1b:32:ed:7f:24:05:bd:66:d1:88:6e:f8:10:bd:8d:de:
         5a:57:61:55:e1:ed:fd:68:b1:ec:7e:89:f4:37:69:15:ba:4f:
         ab:30:d3:05:b7:bf:cf:69:8c:79:b7:ee:d4:48:f4:78:7f:84:
         da:85:e8:46:cb:2f:d4:7e:a5:51:78:0e:25:8a:09:47:89:59:
         8a:51:92:d2:93:69:f2:72:95:d8:da:c9:af:8e:46:84:04:5b:
         8c:ba:55:f6:5d:70:a2:34:ee:6e:c5:27:58:91:96:6b:57:7f:
         5a:f3:6d:b2:1a:2d:9d:ae:7f:e4:07:e9:5c:d4:41:b0:55:20:
         45:00:9c:41:f1:4e:4f:98:f9:32:8d:85:d3:56:5d:69:ea:5d:
         1b:d9:37:42:b0:f5:df:82:c0:23:d8:45:45:e1:6e:20:03:7f:
         83:56:4f:6f:af:da:fd:da:6d:2d:c6:98:7c:a4:f1:6b:80:2c:
         bd:55:fd:d6:06:f6:78:a8:a7:3e:11:d9:5b:8c:16:f9:ca:03:
         bd:08:ae:5e:8c:82:dd:4c:4c:b0:98:5d:bd:e6:15:92:6e:a7:
         6c:0d:a4:b6:92:dc:d2:c6:70:16:58:20:99:95:b5:b2:d3:08:
         47:9f:51:9b:8b:d9:2f:a3:b3:bf:7f:ed:13:df:db:3a:2c:10:
         7a:10:51:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:26:01 2025 by rpki-client