Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136302e302f32342d3234203d3e20323635393433.roa
File:                     3133312e3139362e3136302e302f32342d3234203d3e20323635393433.roa (raw, json)
Hash identifier:          y4TEuZ/vA4kOyiyX75dr5s96qYlKrTlEh9ZGDCvpqQ4=
Subject key identifier:   EF:6B:1B:E6:AA:B5:21:E0:ED:2B:48:09:C7:1D:50:F6:68:D3:B1:E9
Certificate issuer:       /CN=797F09A2D6DB762EDDE06177F9BAE31812984A51
Certificate serial:       543644BE759501CC946289C8C13A6311F5805FEC
Authority key identifier: 79:7F:09:A2:D6:DB:76:2E:DD:E0:61:77:F9:BA:E3:18:12:98:4A:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797F09A2D6DB762EDDE06177F9BAE31812984A51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136302e302f32342d3234203d3e20323635393433.roa
Signing time:             Mon 01 Sep 2025 15:18:35 +0000
ROA not before:           Mon 01 Sep 2025 15:13:35 +0000
ROA not after:            Mon 31 Aug 2026 15:18:35 +0000
asID:                     265943
IP address blocks:        131.196.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/797F09A2D6DB762EDDE06177F9BAE31812984A51.crl
                          rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/797F09A2D6DB762EDDE06177F9BAE31812984A51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797F09A2D6DB762EDDE06177F9BAE31812984A51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 00:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:36:44:be:75:95:01:cc:94:62:89:c8:c1:3a:63:11:f5:80:5f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797F09A2D6DB762EDDE06177F9BAE31812984A51
        Validity
            Not Before: Sep  1 15:13:35 2025 GMT
            Not After : Aug 31 15:18:35 2026 GMT
        Subject: CN=EF6B1BE6AAB521E0ED2B4809C71D50F668D3B1E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2e:87:b9:db:d9:64:c1:1a:f3:27:24:cc:4d:
                    63:5c:7a:73:b7:a6:b9:63:0f:86:7d:fb:94:6e:16:
                    22:37:b9:28:7d:8c:69:f6:5e:87:f8:4e:20:30:7d:
                    bd:cf:b8:ad:33:cd:8a:19:7c:3f:ee:95:c3:00:4c:
                    d2:a5:a9:64:fd:fe:e3:ea:87:49:e5:1a:7c:20:42:
                    cd:e0:b3:bf:f8:36:8c:08:f2:2d:b1:ec:cb:da:d9:
                    b4:5c:c2:ce:02:35:e6:ce:59:12:ab:d7:aa:a9:7b:
                    5f:4c:dc:e3:e1:30:d8:cc:d8:0e:28:1b:e3:60:b6:
                    52:b1:a9:3f:b8:11:f5:99:c3:4d:3d:fc:e9:0a:17:
                    26:dd:e9:4b:3a:d2:9d:2d:ac:88:b8:c1:22:50:17:
                    2b:bb:c6:aa:ca:74:4b:73:51:e8:69:e5:2f:3b:4e:
                    a2:cc:ba:ad:98:75:78:a5:23:cd:79:9c:32:2f:ed:
                    8b:2c:26:0d:5f:e6:f3:a5:e8:af:19:b8:af:0a:a2:
                    46:3e:a1:f0:f1:15:1a:f4:41:0b:c0:f7:79:91:ea:
                    54:42:b5:c3:9a:6d:bd:68:ff:1f:30:0c:19:28:81:
                    b4:b1:a2:93:e5:ff:f5:c7:ca:33:ba:d0:05:6d:ea:
                    72:ed:ac:32:42:2d:87:43:49:d5:8f:7d:6c:87:da:
                    3f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6B:1B:E6:AA:B5:21:E0:ED:2B:48:09:C7:1D:50:F6:68:D3:B1:E9
            X509v3 Authority Key Identifier:
                keyid:79:7F:09:A2:D6:DB:76:2E:DD:E0:61:77:F9:BA:E3:18:12:98:4A:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/797F09A2D6DB762EDDE06177F9BAE31812984A51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797F09A2D6DB762EDDE06177F9BAE31812984A51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136302e302f32342d3234203d3e20323635393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:f6:aa:ce:4d:a0:66:03:71:88:2b:47:35:f1:9a:dc:5e:af:
         38:bd:e5:d7:2a:a2:38:aa:00:79:7a:ee:85:a5:f8:ad:e7:d5:
         0e:ec:74:4a:e4:2e:e9:fa:4a:d0:67:97:e0:7c:56:be:90:6c:
         f5:7c:69:0e:4c:6b:b3:23:4d:d0:c2:66:0f:aa:65:37:a8:69:
         e4:ef:3a:b9:ec:9f:76:18:6e:b5:f6:f3:cb:50:82:30:5a:b7:
         5a:b9:81:24:e4:81:67:0e:45:ab:c5:1d:4d:e1:c7:5d:00:61:
         97:5f:d5:76:33:70:ba:5d:15:c2:12:04:9d:88:94:17:fb:08:
         1c:ec:9f:8a:45:11:15:b9:3b:36:54:98:27:ad:67:f7:e4:b8:
         22:87:ea:51:db:05:53:fd:15:07:99:71:cc:0c:5e:d0:04:66:
         28:3e:71:7a:af:be:63:a4:35:73:09:97:da:91:c5:79:5c:f4:
         86:40:60:d6:df:a5:55:71:c1:3c:11:3a:7c:1c:a6:11:26:3e:
         4b:19:4f:c1:fd:3d:32:2e:51:5d:32:8f:d0:64:0c:d5:67:60:
         4c:e3:83:d6:9c:08:3f:ce:6e:75:2d:d2:c4:4a:f4:b3:91:b3:
         76:d5:0c:9c:c1:94:71:84:41:05:8a:cb:69:29:c1:3b:9f:59:
         77:2f:e9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:33:51 2025 by rpki-client