Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/3133312e3130382e3234392e302f32342d3234203d3e20323634333536.roa
File:                     3133312e3130382e3234392e302f32342d3234203d3e20323634333536.roa (raw, json)
Hash identifier:          Qr29lJi1CpN3xupclEaWtBOCJ/+kCgZEfYdhQngUtJo=
Subject key identifier:   6E:F0:86:B4:04:C6:F0:28:09:B9:2B:EB:77:0A:DA:D7:34:6D:7E:32
Certificate issuer:       /CN=D92133A080AA62F6B797FAD0AB6A6FD3074170E1
Certificate serial:       516C67DB43301664DF86E621F910A01B9C914A74
Authority key identifier: D9:21:33:A0:80:AA:62:F6:B7:97:FA:D0:AB:6A:6F:D3:07:41:70:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/3133312e3130382e3234392e302f32342d3234203d3e20323634333536.roa
Signing time:             Tue 21 Oct 2025 17:53:02 +0000
ROA not before:           Tue 21 Oct 2025 17:48:02 +0000
ROA not after:            Tue 20 Oct 2026 17:53:02 +0000
asID:                     264356
IP address blocks:        131.108.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.crl
                          rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:6c:67:db:43:30:16:64:df:86:e6:21:f9:10:a0:1b:9c:91:4a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D92133A080AA62F6B797FAD0AB6A6FD3074170E1
        Validity
            Not Before: Oct 21 17:48:02 2025 GMT
            Not After : Oct 20 17:53:02 2026 GMT
        Subject: CN=6EF086B404C6F02809B92BEB770ADAD7346D7E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:97:38:63:04:f2:d2:46:96:c8:43:63:0c:
                    f0:12:2c:9a:d7:85:fb:6a:e6:13:f9:ee:4b:d2:f4:
                    79:01:79:71:05:af:23:6c:f7:43:f8:ab:e4:67:91:
                    f2:cc:0b:d7:df:93:31:a6:fd:d9:22:7f:c2:5a:88:
                    98:5c:fd:ce:12:4c:cd:4b:bb:0d:f6:75:5d:a8:e0:
                    d9:6a:11:54:d9:22:dd:10:cd:52:58:49:2b:c3:06:
                    b9:b2:b3:f5:ef:57:d7:a6:57:e3:de:ca:3b:16:00:
                    7a:9a:2d:08:72:14:41:bc:7c:d3:46:09:8c:df:0a:
                    21:f1:0a:84:6b:32:b2:8f:92:b3:0f:d2:1d:c5:9a:
                    7f:9f:41:c1:82:fa:d9:72:61:e6:d9:cf:7d:26:11:
                    d0:d0:6c:4f:c3:b0:9c:a6:c0:ff:c3:62:03:ff:70:
                    9e:07:e6:49:24:a4:36:85:4a:00:90:ea:92:f9:bd:
                    86:b0:58:db:f0:e8:b7:e0:5b:4a:80:05:36:80:59:
                    f1:cc:db:c7:f7:21:22:40:55:0c:c2:16:4d:52:90:
                    62:ff:e9:e0:58:25:29:b1:29:fb:0b:58:c0:53:a3:
                    fb:92:19:28:1f:5e:93:11:e0:3d:8f:ed:1f:fb:eb:
                    41:41:b3:66:1b:20:17:0c:02:fc:ef:99:9a:20:32:
                    4b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F0:86:B4:04:C6:F0:28:09:B9:2B:EB:77:0A:DA:D7:34:6D:7E:32
            X509v3 Authority Key Identifier:
                keyid:D9:21:33:A0:80:AA:62:F6:B7:97:FA:D0:AB:6A:6F:D3:07:41:70:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/3133312e3130382e3234392e302f32342d3234203d3e20323634333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:0e:f1:79:f7:85:23:6d:4a:70:c2:46:e1:95:5f:3b:74:2b:
         4a:2a:04:a5:b0:a7:30:12:18:f4:0a:c3:13:fa:3a:76:34:79:
         84:7e:5f:57:2d:44:2a:a9:4b:2d:1c:11:64:0e:a7:e6:ff:5a:
         ba:c9:31:70:d7:6e:8a:14:72:ca:dc:53:61:eb:06:b9:73:69:
         0f:d5:94:3d:63:9f:8b:69:bc:32:a3:c8:55:fa:be:10:00:14:
         6c:ee:d0:99:9e:56:17:66:1a:99:78:c5:b5:7d:88:23:37:61:
         cb:bf:d1:a8:3f:b1:17:33:08:ab:87:0a:65:8a:ee:de:09:15:
         c5:a9:06:72:50:7b:27:4d:8a:04:d9:30:01:4a:03:d9:bc:2c:
         38:b4:d1:c6:fb:4c:a3:fd:7d:a4:7b:33:ed:e4:98:0b:f1:c3:
         c2:e2:db:d8:0b:12:09:0f:d5:3e:07:ef:dc:14:32:2b:ff:da:
         de:39:23:bc:f9:20:40:b7:45:77:bf:e5:02:db:e0:44:80:0e:
         1d:05:0d:85:17:36:c8:e0:42:02:25:69:25:78:fb:db:27:c4:
         bc:74:4b:5c:2c:e1:e4:a8:b3:20:22:3a:30:c6:75:e1:ac:b2:
         47:7e:a3:ef:fb:4b:c0:6d:00:f6:9d:5a:04:ca:94:23:d4:b3:
         26:3d:11:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:35:45 2025 by rpki-client