Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3137302e3234372e32382e302f32322d3234203d3e20323639313934.roa
File:                     3137302e3234372e32382e302f32322d3234203d3e20323639313934.roa (raw, json)
Hash identifier:          QVOOR7iM6keIJgv4ssglVPvXIH3XG8XfzfqZqZXjTBQ=
Subject key identifier:   CD:50:85:D0:FC:33:39:5A:9A:7F:85:C7:FA:60:42:97:34:90:4E:12
Certificate issuer:       /CN=48022DC200AC7F7DEFAB830880AA3789A2E0C153
Certificate serial:       4D88B46206D784B816F0C8E74D1A5B5452E935FF
Authority key identifier: 48:02:2D:C2:00:AC:7F:7D:EF:AB:83:08:80:AA:37:89:A2:E0:C1:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48022DC200AC7F7DEFAB830880AA3789A2E0C153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3137302e3234372e32382e302f32322d3234203d3e20323639313934.roa
Signing time:             Tue 28 Oct 2025 12:00:25 +0000
ROA not before:           Tue 28 Oct 2025 11:55:25 +0000
ROA not after:            Tue 27 Oct 2026 12:00:25 +0000
asID:                     269194
IP address blocks:        170.247.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/48022DC200AC7F7DEFAB830880AA3789A2E0C153.crl
                          rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/48022DC200AC7F7DEFAB830880AA3789A2E0C153.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48022DC200AC7F7DEFAB830880AA3789A2E0C153.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 13:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:88:b4:62:06:d7:84:b8:16:f0:c8:e7:4d:1a:5b:54:52:e9:35:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48022DC200AC7F7DEFAB830880AA3789A2E0C153
        Validity
            Not Before: Oct 28 11:55:25 2025 GMT
            Not After : Oct 27 12:00:25 2026 GMT
        Subject: CN=CD5085D0FC33395A9A7F85C7FA60429734904E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f5:40:69:ca:13:4c:c4:6e:33:ce:f3:d0:63:
                    9b:cd:fa:10:3d:ac:be:bc:1a:47:a5:56:a4:a7:4b:
                    08:e5:55:62:df:4d:b9:5b:9d:b4:aa:7b:5a:af:e5:
                    ec:86:78:57:ef:5f:ae:0f:37:50:41:75:57:35:ad:
                    e5:46:ad:4e:4f:e2:f6:26:7f:ad:3e:9c:c7:ee:d5:
                    24:4f:ed:87:57:bd:6d:34:1b:98:e9:b5:93:80:e7:
                    e3:9e:0d:ce:c0:e3:75:9b:7f:c7:5d:c0:be:47:9f:
                    f7:4d:22:1c:a9:ce:ec:20:3c:6f:4f:a9:e8:6f:a0:
                    bb:d1:37:a0:41:1a:80:a9:0c:22:bf:f5:eb:38:46:
                    b8:08:5b:0d:98:69:80:ec:ed:8b:b8:4d:74:36:1b:
                    b0:6a:85:dd:a5:55:f0:18:bc:7d:8f:03:ea:42:cb:
                    11:4b:b3:32:8e:6e:19:be:3a:16:42:23:5e:64:cc:
                    a1:7e:da:3c:08:31:6d:14:ce:81:9c:3d:89:c6:35:
                    1e:9f:18:c0:20:fd:4e:f8:c3:17:88:7a:ba:25:dc:
                    a9:97:35:56:eb:12:68:b8:44:ea:19:a6:e8:6c:0b:
                    95:f5:c6:d1:b4:ce:f3:83:87:7c:0c:40:d4:31:8c:
                    d4:84:35:ec:dd:48:0c:10:fd:fe:c7:77:1f:96:9b:
                    16:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:50:85:D0:FC:33:39:5A:9A:7F:85:C7:FA:60:42:97:34:90:4E:12
            X509v3 Authority Key Identifier:
                keyid:48:02:2D:C2:00:AC:7F:7D:EF:AB:83:08:80:AA:37:89:A2:E0:C1:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/48022DC200AC7F7DEFAB830880AA3789A2E0C153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48022DC200AC7F7DEFAB830880AA3789A2E0C153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3137302e3234372e32382e302f32322d3234203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:8e:35:ce:b0:1c:cf:ce:4c:f9:02:dd:f4:a8:d4:03:d3:ad:
         7b:39:7e:f0:85:cd:28:cb:30:53:92:c8:1f:0f:0f:26:ba:20:
         a1:e6:41:66:93:25:a4:39:e2:c6:a9:b5:91:7c:ca:88:92:7a:
         18:3f:e1:39:9f:ed:91:7e:28:f9:40:a1:2f:05:72:8e:14:2b:
         c3:68:29:ec:c0:0b:f2:f5:e0:90:88:6c:7e:b8:22:76:88:12:
         75:18:88:2e:80:43:7d:09:a2:4c:7c:a7:45:10:41:eb:d5:8b:
         36:df:5a:e8:73:de:c1:6c:56:83:24:ed:4f:c8:9e:83:9d:a1:
         8f:0d:0a:7d:44:e5:e2:d5:d8:3a:cc:81:84:74:2f:ed:fe:3a:
         6e:99:b6:73:cf:16:1c:37:65:8d:04:90:f9:fc:64:dc:45:4f:
         27:af:87:25:ed:e3:5d:cd:6f:b7:71:e0:ad:a4:b0:19:08:1e:
         cb:0b:84:67:31:81:5f:76:c8:ae:f2:63:e2:9a:d4:8b:88:b3:
         f0:47:0e:fa:95:96:c9:68:a5:43:55:7f:86:94:70:65:df:d1:
         75:f8:f2:ad:e0:ba:a1:b3:57:18:19:ed:83:f5:14:8d:83:eb:
         e2:e3:6d:7c:e3:f7:90:99:4a:c9:6b:90:f6:b2:f6:9e:d0:88:
         41:c9:96:62
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTYi0YgbXhLgW8MjnTRpbVFLpNf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgwMjJEQzIwMEFDN0Y3REVGQUI4MzA4ODBBQTM3ODlB
MkUwQzE1MzAeFw0yNTEwMjgxMTU1MjVaFw0yNjEwMjcxMjAwMjVaMDMxMTAvBgNV
BAMTKENENTA4NUQwRkMzMzM5NUE5QTdGODVDN0ZBNjA0Mjk3MzQ5MDRFMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa9UBpyhNMxG4zzvPQY5vN+hA9
rL68GkelVqSnSwjlVWLfTblbnbSqe1qv5eyGeFfvX64PN1BBdVc1reVGrU5P4vYm
f60+nMfu1SRP7YdXvW00G5jptZOA5+OeDc7A43Wbf8ddwL5Hn/dNIhypzuwgPG9P
qehvoLvRN6BBGoCpDCK/9es4RrgIWw2YaYDs7Yu4TXQ2G7Bqhd2lVfAYvH2PA+pC
yxFLszKObhm+OhZCI15kzKF+2jwIMW0UzoGcPYnGNR6fGMAg/U74wxeIerol3KmX
NVbrEmi4ROoZpuhsC5X1xtG0zvODh3wMQNQxjNSENezdSAwQ/f7Hdx+WmxaDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzVCF0PwzOVqaf4XH+mBClzSQThIwHwYDVR0j
BBgwFoAUSAItwgCsf33vq4MIgKo3iaLgwVMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl
TDQvMC80ODAyMkRDMjAwQUM3RjdERUZBQjgzMDg4MEFBMzc4OUEyRTBDMTUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4MDIyREMyMDBBQzdGN0RF
RkFCODMwODgwQUEzNzg5QTJFMEMxNTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1cnhWZURBQnB6N3huWGhSY29aYm0zU0dWNUMxcEoyaHRaeXQ2QVNWZUw0LzAv
MzEzNzMwMmUzMjM0MzcyZTMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9xwwDQYJKoZIhvcNAQELBQADggEBAMaONc6w
HM/OTPkC3fSo1APTrXs5fvCFzSjLMFOSyB8PDya6IKHmQWaTJaQ54saptZF8yoiS
ehg/4Tmf7ZF+KPlAoS8Fco4UK8NoKezAC/L14JCIbH64InaIEnUYiC6AQ30Jokx8
p0UQQevVizbfWuhz3sFsVoMk7U/InoOdoY8NCn1E5eLV2DrMgYR0L+3+Om6ZtnPP
Fhw3ZY0EkPn8ZNxFTyevhyXt413Nb7dx4K2ksBkIHssLhGcxgV92yK7yY+Ka1IuI
s/BHDvqVlslopUNVf4aUcGXf0XX48q3guqGzVxgZ7YP1FI2D6+LjbXzj95CZSslr
kPay9p7QiEHJlmI=
-----END CERTIFICATE-----
Generated at Tue Nov 4 02:00:55 2025 by rpki-client