Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3133312e3232312e35382e302f32342d3234203d3e20323632373635.roa
File:                     3133312e3232312e35382e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          Qz87zj7WYDSrmcXFX9N59XCxOzh/kg6TgkLmeRnhs5s=
Subject key identifier:   19:7D:86:B6:19:96:5D:91:9D:E9:ED:C5:F4:CC:2D:76:1D:8D:C0:69
Certificate issuer:       /CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
Certificate serial:       7C4F1DF451782C173616FC06D5DC9AAC29E1A8B8
Authority key identifier: 77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3133312e3232312e35382e302f32342d3234203d3e20323632373635.roa
Signing time:             Wed 22 Oct 2025 20:48:48 +0000
ROA not before:           Wed 22 Oct 2025 20:43:48 +0000
ROA not after:            Wed 21 Oct 2026 20:48:48 +0000
asID:                     262765
IP address blocks:        131.221.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:4f:1d:f4:51:78:2c:17:36:16:fc:06:d5:dc:9a:ac:29:e1:a8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
        Validity
            Not Before: Oct 22 20:43:48 2025 GMT
            Not After : Oct 21 20:48:48 2026 GMT
        Subject: CN=197D86B619965D919DE9EDC5F4CC2D761D8DC069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8d:05:a3:e6:44:32:ac:50:55:c1:c3:75:52:
                    64:36:57:8d:8e:f0:8f:c4:1c:87:87:08:6c:92:a7:
                    83:59:2c:92:b7:cc:02:7e:a9:6f:fb:8e:8c:7e:53:
                    2f:5b:a6:7a:ab:94:3d:c5:03:73:90:c1:27:63:17:
                    ab:73:13:3d:4e:a3:3a:e1:28:54:ad:64:bc:ec:f7:
                    20:29:ab:d6:2e:e1:f9:fd:8e:69:12:10:eb:57:44:
                    5f:1f:4f:2d:b4:99:49:00:d7:7d:57:b2:07:66:1a:
                    46:c3:e8:a3:b8:5f:fd:eb:a7:fe:f4:59:2e:2f:de:
                    5b:50:31:95:c5:ef:14:1a:b6:e7:43:cd:3a:ee:d9:
                    be:fa:d1:4c:d8:06:78:f9:03:db:57:8a:6a:df:7b:
                    43:a6:b1:0f:04:ab:c5:37:fa:53:b9:0a:07:ab:ec:
                    42:ac:78:73:1e:d5:db:e9:1a:20:af:6b:6c:7b:66:
                    16:88:0f:b6:b2:dc:3b:e5:77:2b:52:7e:ec:2d:9b:
                    2a:2b:c2:db:fa:6d:88:a5:0e:54:d0:1a:7c:b9:7b:
                    4c:e5:20:de:ca:8d:60:59:d0:69:22:6f:df:9d:4e:
                    80:05:3a:31:62:fe:8d:53:be:4e:cd:f6:64:50:30:
                    41:1c:38:6c:63:17:f3:92:08:70:14:0a:87:6c:67:
                    14:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7D:86:B6:19:96:5D:91:9D:E9:ED:C5:F4:CC:2D:76:1D:8D:C0:69
            X509v3 Authority Key Identifier:
                keyid:77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3133312e3232312e35382e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:41:79:23:0d:3a:72:00:1d:ac:b7:96:ca:fd:18:76:a0:dc:
         90:2f:4a:9a:71:64:7a:55:9c:05:70:cd:5e:09:81:4c:5b:bb:
         c2:a8:74:ff:fa:3c:fa:0d:0b:e1:eb:30:9b:17:bd:77:49:32:
         dc:ea:68:37:f3:d7:3a:ad:df:07:0f:90:4c:92:cb:45:9e:d5:
         d5:5d:c5:72:a1:11:f5:4f:e4:ff:82:27:51:0e:51:27:b4:8d:
         50:99:df:6d:c9:23:dc:d2:98:e7:39:bc:a0:0a:0f:8a:2e:e4:
         cf:ad:ef:9a:1c:e5:b6:3b:fd:c2:84:5a:c1:5a:03:ab:2f:b8:
         f7:67:2c:07:31:97:a4:ba:89:f9:ed:9f:a5:56:d0:85:cc:fe:
         f7:cb:6e:31:8d:55:6d:00:1e:df:92:b8:de:bd:93:c5:25:f8:
         2e:a0:87:5d:01:b2:28:c3:9b:b1:d2:09:74:e6:17:d8:56:f4:
         84:ef:a8:35:3f:37:5e:2c:d3:cf:91:fc:db:90:3a:28:ec:31:
         5c:3c:01:d4:7a:2e:b1:bb:42:e4:7b:cc:66:55:44:8d:92:9d:
         bc:ae:db:1c:83:ba:89:da:6f:a8:a6:ae:f2:28:b9:26:66:c9:
         9c:ec:29:3c:07:45:3b:76:e7:65:44:67:2b:0a:3b:b1:61:6a:
         35:d8:76:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:46 2025 by rpki-client