Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/3136382e3139372e3134302e302f32322d3234203d3e20323635343832.roa
File:                     3136382e3139372e3134302e302f32322d3234203d3e20323635343832.roa (raw, json)
Hash identifier:          +pM++R79ADnj5lXYKE8gpuMkpPAgejhO13sxOuwoLRY=
Subject key identifier:   25:52:57:0D:B5:DA:8A:64:62:A3:90:B1:50:FB:2C:F2:9E:6C:61:79
Certificate issuer:       /CN=934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB
Certificate serial:       7DE2AD9BC10C5BFEED319098165E6DACFD29C619
Authority key identifier: 93:4D:D1:2E:97:C2:F4:04:35:AD:E3:46:2B:AE:C1:F3:7C:8F:B7:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/3136382e3139372e3134302e302f32322d3234203d3e20323635343832.roa
Signing time:             Thu 18 Sep 2025 21:05:12 +0000
ROA not before:           Thu 18 Sep 2025 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:05:12 +0000
asID:                     265482
IP address blocks:        168.197.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB.crl
                          rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e2:ad:9b:c1:0c:5b:fe:ed:31:90:98:16:5e:6d:ac:fd:29:c6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB
        Validity
            Not Before: Sep 18 21:00:12 2025 GMT
            Not After : Sep 17 21:05:12 2026 GMT
        Subject: CN=2552570DB5DA8A6462A390B150FB2CF29E6C6179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:7f:49:fb:82:f7:05:14:e2:3c:c4:2f:b5:
                    3f:14:5a:97:7f:76:d8:5e:8e:ff:a7:23:6f:32:86:
                    fd:10:13:c3:3e:01:cc:03:95:9e:05:a3:bd:a5:70:
                    d4:01:4f:87:1a:13:25:ee:85:43:16:47:d2:bf:9b:
                    25:42:67:cd:4f:d7:6a:43:8b:ef:03:7f:0d:1f:3c:
                    e8:5d:7f:b3:4a:55:89:08:39:23:c2:e6:8d:8d:d0:
                    c8:ab:b0:9c:e7:e3:63:8d:98:3c:6a:2e:61:27:e1:
                    81:1d:13:a4:93:4a:7f:d6:a4:df:8b:ae:b3:fc:d6:
                    c3:f2:25:d7:a0:cd:98:4e:ff:bc:de:93:07:6c:53:
                    e2:72:49:57:ac:f7:c1:a3:98:a2:d9:ab:3d:9c:97:
                    35:a7:f1:0d:fa:8e:a3:a4:c3:c2:d8:69:a4:78:d7:
                    bc:84:7d:a8:7c:66:88:6b:18:b7:8e:18:d7:90:ea:
                    29:f5:6e:74:14:7d:4b:17:fd:16:c5:04:43:a3:f5:
                    b2:39:bb:86:51:e6:26:1c:1b:43:53:8f:6b:82:b2:
                    e3:d5:d0:a8:63:ae:4d:c7:8c:cd:4c:1f:5e:01:60:
                    d0:35:5b:16:db:74:0b:29:9c:8c:a8:87:a4:c7:b2:
                    ac:43:c9:8f:32:01:87:f4:e2:2f:85:40:e6:43:7a:
                    d8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:52:57:0D:B5:DA:8A:64:62:A3:90:B1:50:FB:2C:F2:9E:6C:61:79
            X509v3 Authority Key Identifier:
                keyid:93:4D:D1:2E:97:C2:F4:04:35:AD:E3:46:2B:AE:C1:F3:7C:8F:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/3136382e3139372e3134302e302f32322d3234203d3e20323635343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:08:ff:19:08:ec:1e:5a:0c:cd:23:7c:f5:97:a7:7a:6f:bf:
         f8:b5:ac:33:e4:e3:3d:5e:84:05:77:27:6a:73:f9:13:c4:67:
         8e:50:ec:05:4f:dd:4b:51:f5:4c:4b:bf:05:68:84:7c:59:8e:
         ab:3c:46:a8:d3:28:a4:19:93:69:80:df:03:b5:fa:17:31:d1:
         de:09:94:1a:05:64:f8:55:7a:34:12:c5:2b:01:ba:f9:39:1c:
         36:3a:75:c1:a8:e1:51:d7:ac:9e:64:dc:34:30:dc:36:28:c9:
         05:af:3e:a0:fc:0b:33:50:2b:41:bc:40:14:bf:c0:c1:2d:b7:
         71:21:cf:3a:d2:63:b7:ae:47:94:6d:fd:b7:c6:b7:b3:32:ec:
         e1:c4:9b:f4:4a:67:69:0b:20:7a:7d:d2:d8:3f:2b:7f:66:66:
         7b:4e:7d:20:1a:59:e8:ae:65:7c:77:c0:2e:b7:ff:c9:ef:42:
         3a:38:a7:83:6d:90:a0:10:fc:ed:1e:3d:ee:4a:60:b4:15:b9:
         e8:29:33:af:46:81:fc:88:ed:4d:70:d4:3a:34:36:ba:85:5e:
         0c:c0:d0:ab:4a:e5:83:39:a0:9b:ca:56:91:33:41:28:91:88:
         dc:e3:a9:da:5f:e7:47:bf:73:c4:47:f5:5f:91:3b:21:34:6a:
         e1:23:7b:59
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfeKtm8EMW/7tMZCYFl5trP0pxhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM0REQxMkU5N0MyRjQwNDM1QURFMzQ2MkJBRUMxRjM3
QzhGQjdGQjAeFw0yNTA5MTgyMTAwMTJaFw0yNjA5MTcyMTA1MTJaMDMxMTAvBgNV
BAMTKDI1NTI1NzBEQjVEQThBNjQ2MkEzOTBCMTUwRkIyQ0YyOUU2QzYxNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Dn9J+4L3BRTiPMQvtT8UWpd/
dthejv+nI28yhv0QE8M+AcwDlZ4Fo72lcNQBT4caEyXuhUMWR9K/myVCZ81P12pD
i+8Dfw0fPOhdf7NKVYkIOSPC5o2N0MirsJzn42ONmDxqLmEn4YEdE6STSn/WpN+L
rrP81sPyJdegzZhO/7zekwdsU+JySVes98GjmKLZqz2clzWn8Q36jqOkw8LYaaR4
17yEfah8ZohrGLeOGNeQ6in1bnQUfUsX/RbFBEOj9bI5u4ZR5iYcG0NTj2uCsuPV
0Khjrk3HjM1MH14BYNA1WxbbdAspnIyoh6THsqxDyY8yAYf04i+FQOZDetiNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUJVJXDbXaimRio5CxUPss8p5sYXkwHwYDVR0j
BBgwFoAUk03RLpfC9AQ1reNGK67B83yPt/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnJnNzlDMVFvdlJBOGpONUZqWHBWQWJ6YVdzQ2V2WkZpeVNWZ1g4V1BR
N28vMC85MzRERDEyRTk3QzJGNDA0MzVBREUzNDYyQkFFQzFGMzdDOEZCN0ZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzNEREMTJFOTdDMkY0MDQz
NUFERTM0NjJCQUVDMUYzN0M4RkI3RkIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZyZzc5QzFRb3ZSQThqTjVGalhwVkFiemFXc0NldlpGaXlTVmdYOFdQUTdvLzAv
MzEzNjM4MmUzMTM5MzcyZTMxMzQzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjFjDANBgkqhkiG9w0BAQsFAAOCAQEAUwj/
GQjsHloMzSN89Zenem+/+LWsM+TjPV6EBXcnanP5E8RnjlDsBU/dS1H1TEu/BWiE
fFmOqzxGqNMopBmTaYDfA7X6FzHR3gmUGgVk+FV6NBLFKwG6+TkcNjp1wajhUdes
nmTcNDDcNijJBa8+oPwLM1ArQbxAFL/AwS23cSHPOtJjt65HlG39t8a3szLs4cSb
9EpnaQsgen3S2D8rf2Zme059IBpZ6K5lfHfALrf/ye9COjing22QoBD87R497kpg
tBW56Ckzr0aB/IjtTXDUOjQ2uoVeDMDQq0rlgzmgm8pWkTNBKJGI3OOp2l/nR79z
xEf1X5E7ITRq4SN7WQ==
-----END CERTIFICATE-----
Generated at Fri Sep 19 10:40:48 2025 by rpki-client