Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3137302e38332e38302e302f32322d3234203d3e20323633303236.roa
File:                     3137302e38332e38302e302f32322d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          yxbRoHfWtwh6xMmlphpwB2OBsNVcchipPcjKM9kVzCI=
Subject key identifier:   C2:25:7B:7D:F2:C6:41:04:8E:B9:23:79:E8:1A:79:7B:DB:65:74:49
Certificate issuer:       /CN=41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68
Certificate serial:       592534B0047F1DF94584E58D7484E87C6776154A
Authority key identifier: 41:FD:33:29:BA:EE:7F:DE:9F:A6:AE:86:AE:40:25:B1:BF:AE:0A:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3137302e38332e38302e302f32322d3234203d3e20323633303236.roa
Signing time:             Mon 27 Oct 2025 14:51:02 +0000
ROA not before:           Mon 27 Oct 2025 14:46:02 +0000
ROA not after:            Mon 26 Oct 2026 14:51:02 +0000
asID:                     263026
IP address blocks:        170.83.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.crl
                          rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 06:05:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:25:34:b0:04:7f:1d:f9:45:84:e5:8d:74:84:e8:7c:67:76:15:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68
        Validity
            Not Before: Oct 27 14:46:02 2025 GMT
            Not After : Oct 26 14:51:02 2026 GMT
        Subject: CN=C2257B7DF2C641048EB92379E81A797BDB657449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f5:e1:4f:b8:17:5a:73:5d:0e:bc:fe:04:bb:
                    cc:fd:5d:b8:01:84:d1:43:af:f4:84:5a:a4:e0:d6:
                    43:6e:00:59:a8:97:2d:b5:e0:c6:25:f2:91:6d:81:
                    ac:b0:7b:c9:25:22:f8:15:e7:aa:b9:b7:67:72:96:
                    eb:03:43:61:49:81:d2:04:de:d6:12:1f:45:ae:ae:
                    1a:ae:f5:41:18:59:b8:0a:52:b7:84:ce:80:e5:6b:
                    c5:f0:e1:88:eb:c4:b0:63:e2:8b:b4:eb:01:34:7d:
                    37:82:78:4b:d6:0c:d8:f1:32:a2:f5:1e:40:10:3b:
                    7d:c4:15:aa:db:7c:0f:2a:e2:48:7e:2f:42:5b:67:
                    64:dd:69:be:fd:f7:59:a3:95:8a:bb:12:4a:66:68:
                    74:c2:2f:2e:89:74:cf:27:33:4c:1c:04:c5:8e:f7:
                    0d:9e:59:db:74:f3:aa:63:42:7d:ca:7c:e9:f8:c6:
                    85:7b:bb:9e:63:29:51:90:b4:61:c4:e0:d0:f2:43:
                    f3:ff:44:60:e4:9f:78:ad:50:74:7a:4c:e3:48:88:
                    91:dc:ba:e6:e6:7e:9e:95:12:4d:b1:22:75:91:ce:
                    a5:03:1d:7c:7c:81:b2:91:91:5b:a7:d6:86:01:0a:
                    9f:f0:c5:80:01:44:ce:ca:32:11:22:81:da:41:26:
                    d7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:25:7B:7D:F2:C6:41:04:8E:B9:23:79:E8:1A:79:7B:DB:65:74:49
            X509v3 Authority Key Identifier:
                keyid:41:FD:33:29:BA:EE:7F:DE:9F:A6:AE:86:AE:40:25:B1:BF:AE:0A:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3137302e38332e38302e302f32322d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:63:fd:92:02:7f:40:c1:4b:6c:62:ba:46:ab:83:ec:2f:32:
         85:ba:b6:8f:97:d7:dd:32:a3:97:38:ac:c6:9a:1a:c0:2d:55:
         cd:6c:30:c5:a2:36:57:60:b6:48:a5:d9:e8:73:08:39:b0:3f:
         e9:d1:13:25:b5:81:e1:31:55:17:97:ab:09:3a:27:2c:27:1e:
         fe:ef:ee:16:40:96:e3:7a:f4:bf:aa:ad:d2:60:41:6b:de:36:
         6b:fb:6e:ca:79:18:d8:6b:cb:d0:6b:2a:e1:23:25:f9:ea:ce:
         8f:63:6a:34:1c:3a:29:54:54:4e:f0:c3:12:fc:f7:e8:1b:8a:
         3e:80:4e:34:bd:94:f8:16:8d:b9:fa:ad:92:c6:12:31:fb:2e:
         2e:89:6b:75:2e:6a:32:82:25:06:11:a1:cb:b7:30:13:81:03:
         8b:70:9e:1e:c1:ce:03:46:64:63:e9:49:5b:53:42:e8:07:4d:
         71:71:49:f8:6a:a9:be:0a:7b:fc:4e:85:fc:4d:24:32:50:3a:
         5f:70:01:92:4e:dc:64:b1:ef:b1:44:f6:d3:53:18:c4:3d:d6:
         6b:2e:2b:e5:42:cd:e8:f6:33:3a:6c:91:26:f9:34:d8:71:37:
         f9:b2:69:24:19:8c:12:b3:88:54:c0:4a:09:76:a8:61:5d:e0:
         9a:db:57:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:37:39 2025 by rpki-client