Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136302e302f32332d3233203d3e20323635393433.roa
File:                     3133312e3139362e3136302e302f32332d3233203d3e20323635393433.roa (raw, json)
Hash identifier:          5iJTXlB5ffu9tbvUE8BT7ab4ly3j+5GTl/b81VJcxKo=
Subject key identifier:   89:60:37:F7:BF:87:FA:EF:C7:3C:FF:F7:D2:A3:CC:12:D1:00:7D:A2
Certificate issuer:       /CN=797F09A2D6DB762EDDE06177F9BAE31812984A51
Certificate serial:       3C3A0EBC3E9035ECDB05255485F672F286E03CA0
Authority key identifier: 79:7F:09:A2:D6:DB:76:2E:DD:E0:61:77:F9:BA:E3:18:12:98:4A:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797F09A2D6DB762EDDE06177F9BAE31812984A51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136302e302f32332d3233203d3e20323635393433.roa
Signing time:             Mon 01 Sep 2025 15:18:34 +0000
ROA not before:           Mon 01 Sep 2025 15:13:34 +0000
ROA not after:            Mon 31 Aug 2026 15:18:34 +0000
asID:                     265943
IP address blocks:        131.196.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/797F09A2D6DB762EDDE06177F9BAE31812984A51.crl
                          rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/797F09A2D6DB762EDDE06177F9BAE31812984A51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797F09A2D6DB762EDDE06177F9BAE31812984A51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 00:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3a:0e:bc:3e:90:35:ec:db:05:25:54:85:f6:72:f2:86:e0:3c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797F09A2D6DB762EDDE06177F9BAE31812984A51
        Validity
            Not Before: Sep  1 15:13:34 2025 GMT
            Not After : Aug 31 15:18:34 2026 GMT
        Subject: CN=896037F7BF87FAEFC73CFFF7D2A3CC12D1007DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:77:a9:5b:76:ce:65:38:3c:1e:2e:43:26:5f:
                    e6:0d:3f:27:42:5f:a6:1f:e9:89:5c:3f:d7:bc:ae:
                    ea:b6:f7:4e:14:d3:9c:d7:04:d2:a2:12:da:7c:da:
                    f3:92:19:fd:aa:76:df:e2:70:eb:ba:8d:fb:ec:78:
                    90:07:26:e5:7d:34:77:24:94:bc:32:f8:f9:55:b1:
                    8b:a3:53:26:a1:74:a1:7a:9b:6c:a2:04:e9:75:cd:
                    50:d5:45:7e:59:f1:80:b6:46:be:43:5c:7a:81:85:
                    03:48:3f:51:ab:5d:0c:36:26:4f:ee:22:9f:ca:54:
                    0b:a2:df:82:dd:f1:fe:0c:ef:bd:c8:15:43:98:ec:
                    f8:5b:46:18:51:1c:22:ff:cc:92:09:97:c7:8b:74:
                    95:48:10:fa:92:f7:1c:49:b2:9e:35:bf:da:31:49:
                    c7:84:de:eb:0c:1e:15:25:b6:65:de:cb:51:0d:6a:
                    0f:f7:87:aa:e9:da:29:33:76:82:bd:68:2d:1f:e7:
                    0d:5e:7d:34:ef:c1:de:5c:ff:b5:85:81:e8:1f:a3:
                    bd:55:72:17:b2:ec:2e:f1:27:8c:1c:7e:bb:6e:4e:
                    19:3e:cc:0b:7d:3e:72:08:04:73:d0:93:61:6c:20:
                    68:56:f6:73:83:e8:d4:fa:af:ae:73:2c:66:a1:94:
                    f2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:60:37:F7:BF:87:FA:EF:C7:3C:FF:F7:D2:A3:CC:12:D1:00:7D:A2
            X509v3 Authority Key Identifier:
                keyid:79:7F:09:A2:D6:DB:76:2E:DD:E0:61:77:F9:BA:E3:18:12:98:4A:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/797F09A2D6DB762EDDE06177F9BAE31812984A51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797F09A2D6DB762EDDE06177F9BAE31812984A51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136302e302f32332d3233203d3e20323635393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:8f:ae:34:d3:18:65:f2:5d:dc:fa:78:78:44:30:26:f0:1d:
         00:49:fa:6c:02:0a:68:77:3a:88:c2:a9:15:29:54:44:b9:47:
         73:a8:45:2a:c9:2d:17:05:81:cd:22:9b:2a:19:d7:08:f8:bb:
         a3:c6:e8:c0:1d:74:b3:1b:3d:ef:4f:35:eb:ff:d7:53:b3:98:
         26:4a:26:23:2b:14:7f:10:b4:80:94:7f:3c:48:bf:be:8a:9e:
         57:cc:ed:9e:07:a6:27:81:33:80:5e:c4:93:4f:95:9d:02:60:
         f5:f7:64:16:96:f6:30:65:e1:07:81:5f:54:cf:bb:10:4d:b0:
         00:eb:44:0a:ae:38:03:32:a9:64:18:82:a6:c5:b4:ed:c5:fc:
         ae:71:05:d2:8e:2c:e9:94:fa:59:5f:ac:bd:fa:ef:21:94:df:
         25:b5:e1:56:df:c5:f2:0b:c3:6c:1e:ed:20:58:55:17:5a:d2:
         49:8b:3b:45:e5:24:0b:de:2f:44:61:d9:47:fd:c6:58:55:87:
         9f:0d:a6:6e:6c:47:97:a6:b8:2d:37:96:f7:e5:2e:59:a2:0c:
         d5:e2:92:88:01:76:18:fe:0a:52:bc:c8:9e:cb:ec:e7:a5:26:
         1b:49:3b:f3:76:c6:f4:ff:fe:28:78:f2:97:f6:ec:5e:92:7c:
         ce:04:d8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:28:33 2025 by rpki-client