Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/3136382e3139372e3134302e302f32322d3232203d3e20323635343832.roa
File:                     3136382e3139372e3134302e302f32322d3232203d3e20323635343832.roa (raw, json)
Hash identifier:          D/95D7ID3hdEpeFZGh5aLHPqlZoxH0SmZesZ6sn94XU=
Subject key identifier:   4A:B5:81:F8:E9:F6:C6:2B:71:D1:B5:2B:A8:B2:E5:54:DC:2A:39:AA
Certificate issuer:       /CN=A037C9BB48DDED51CE622118CDF20B2F0F9F31EA
Certificate serial:       6C33028046AA9A9E107056E8E176545C4351A3D7
Authority key identifier: A0:37:C9:BB:48:DD:ED:51:CE:62:21:18:CD:F2:0B:2F:0F:9F:31:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A037C9BB48DDED51CE622118CDF20B2F0F9F31EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/3136382e3139372e3134302e302f32322d3232203d3e20323635343832.roa
Signing time:             Sun 31 Aug 2025 23:41:15 +0000
ROA not before:           Sun 31 Aug 2025 23:36:15 +0000
ROA not after:            Sun 30 Aug 2026 23:41:15 +0000
asID:                     265482
IP address blocks:        168.197.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/A037C9BB48DDED51CE622118CDF20B2F0F9F31EA.crl
                          rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/A037C9BB48DDED51CE622118CDF20B2F0F9F31EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A037C9BB48DDED51CE622118CDF20B2F0F9F31EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 08:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:33:02:80:46:aa:9a:9e:10:70:56:e8:e1:76:54:5c:43:51:a3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A037C9BB48DDED51CE622118CDF20B2F0F9F31EA
        Validity
            Not Before: Aug 31 23:36:15 2025 GMT
            Not After : Aug 30 23:41:15 2026 GMT
        Subject: CN=4AB581F8E9F6C62B71D1B52BA8B2E554DC2A39AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:13:98:ae:79:85:42:6b:42:f0:a2:01:0d:2b:
                    80:c4:cb:5b:0d:f8:7b:50:5a:be:fd:54:47:c6:6e:
                    b5:ad:56:19:3c:34:13:f3:f4:d9:11:e2:66:d8:e7:
                    0c:a7:fa:fd:cb:d0:7e:6f:d6:35:7f:9e:5b:9d:3f:
                    a9:1b:95:6d:35:0d:46:78:24:cd:92:9c:c8:c4:c5:
                    15:08:fd:59:9a:ff:77:8f:da:c6:e0:48:8b:27:7c:
                    f4:ba:d6:0d:66:3e:cf:ae:69:46:23:89:16:59:84:
                    c5:26:4e:a5:e8:2b:0e:44:eb:27:42:9a:8a:09:f0:
                    f5:d3:70:21:87:43:de:e5:86:cb:cb:88:0c:41:8f:
                    b6:9f:dd:10:e9:1c:c9:58:08:ed:12:e3:26:24:2c:
                    20:f5:7f:a1:32:c7:a7:95:c7:f5:a1:4b:0f:12:86:
                    8c:4a:51:f7:67:05:a1:c1:ff:3a:a9:13:37:22:62:
                    d9:b3:36:14:59:5d:44:70:de:2d:ff:ec:71:70:e0:
                    12:64:2a:49:b8:f9:4d:3c:42:ff:42:c9:1e:74:79:
                    f1:3b:80:e7:22:fd:01:72:68:32:dd:55:f5:fe:1a:
                    28:88:4c:5e:97:51:a8:60:ad:60:fa:97:83:bd:e6:
                    70:56:97:89:5f:5c:99:f9:d6:00:63:b1:37:67:a2:
                    86:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B5:81:F8:E9:F6:C6:2B:71:D1:B5:2B:A8:B2:E5:54:DC:2A:39:AA
            X509v3 Authority Key Identifier:
                keyid:A0:37:C9:BB:48:DD:ED:51:CE:62:21:18:CD:F2:0B:2F:0F:9F:31:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/A037C9BB48DDED51CE622118CDF20B2F0F9F31EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A037C9BB48DDED51CE622118CDF20B2F0F9F31EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/3136382e3139372e3134302e302f32322d3232203d3e20323635343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:63:b1:60:d9:35:cb:aa:50:96:71:ef:76:d3:f1:56:68:82:
         70:0a:29:06:f6:80:37:1f:b5:fc:6f:1b:de:a9:d1:a0:f7:66:
         6c:36:47:6a:ce:f3:e3:77:3b:38:59:c4:82:f2:9b:cb:26:13:
         5d:87:84:65:06:f7:15:c1:8a:e7:90:41:34:50:9a:ca:01:59:
         f5:33:c6:0a:73:ae:aa:b4:cd:91:6f:31:df:e1:a3:d7:54:ba:
         fe:5f:29:e7:4a:88:28:29:82:11:f4:7c:3f:6c:bd:12:75:cb:
         70:d7:d6:92:45:ab:84:ea:7c:4d:19:b7:ce:1a:1e:ed:4d:aa:
         02:ee:a1:44:86:a7:fd:de:62:d0:17:62:25:6a:e0:0c:03:95:
         67:0e:d8:ce:09:0f:b2:ea:5a:6e:03:5f:ec:e9:31:44:2e:5e:
         a5:c2:ab:59:7a:39:8c:f9:71:16:c9:a9:06:80:b8:bf:0d:a8:
         9f:9f:7c:c7:f8:8e:4c:b5:06:6a:f4:8b:4f:df:85:0e:ee:a1:
         ae:7f:5d:e3:a2:21:2e:d9:63:42:99:07:c3:96:34:d9:ee:dd:
         7f:5e:a1:65:dc:b4:5b:4e:7a:ec:c3:c2:d2:fa:48:01:1a:53:
         dc:a9:e6:0d:ad:a7:fa:5f:6f:bd:07:78:3d:5d:80:f3:e6:c7:
         ec:36:bd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:49:24 2025 by rpki-client