Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130302e302f32332d3233203d3e203533313533.roa
File:                     3138372e36312e3130302e302f32332d3233203d3e203533313533.roa (raw, json)
Hash identifier:          ofO5LZIdBESTv/8VY1YLOBU3Bv4FmD941TCb8K5cZG8=
Subject key identifier:   71:9E:BE:56:81:80:8A:2E:3B:CD:6B:9C:A4:15:79:65:4D:49:FE:00
Certificate issuer:       /CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
Certificate serial:       6DCFDB71F35E9EBBC2ED278AD1D4B9E9768DED81
Authority key identifier: C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130302e302f32332d3233203d3e203533313533.roa
Signing time:             Thu 25 Sep 2025 13:35:23 +0000
ROA not before:           Thu 25 Sep 2025 13:30:23 +0000
ROA not after:            Thu 24 Sep 2026 13:35:23 +0000
asID:                     53153
IP address blocks:        187.61.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cf:db:71:f3:5e:9e:bb:c2:ed:27:8a:d1:d4:b9:e9:76:8d:ed:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
        Validity
            Not Before: Sep 25 13:30:23 2025 GMT
            Not After : Sep 24 13:35:23 2026 GMT
        Subject: CN=719EBE5681808A2E3BCD6B9CA41579654D49FE00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cd:fe:c5:72:2d:8a:de:07:81:0e:55:1f:74:
                    74:d4:a4:b6:96:66:cf:2e:0c:e7:d3:8e:a0:98:82:
                    fd:76:5c:ce:2c:65:2f:91:7b:30:34:97:39:82:18:
                    4b:3d:a0:e8:bb:58:52:cd:47:1d:28:6a:ed:1e:5d:
                    88:5e:e2:f3:f7:e9:34:18:de:62:cf:9f:eb:2f:2f:
                    1b:3e:41:90:5a:f4:5a:08:7a:19:4f:01:69:58:e9:
                    81:db:18:a6:1e:db:37:25:30:9d:07:7e:5f:cb:03:
                    a1:7b:1d:f1:4d:bf:ec:c8:e6:3e:1a:78:dc:e5:be:
                    61:4f:c8:a4:53:99:66:b2:ea:8b:04:e7:07:c5:83:
                    e1:87:84:69:f0:3d:cd:ee:4b:25:48:fb:88:7f:2c:
                    36:79:e6:21:5c:52:fa:e1:5a:c1:f1:4b:a7:68:37:
                    aa:e2:ba:28:b6:94:bf:06:2e:24:54:0e:ff:21:d6:
                    96:1e:14:9c:45:10:21:d5:06:84:4a:ec:82:3c:4a:
                    3f:b0:51:93:ca:21:58:f2:34:31:ec:25:05:dd:20:
                    fb:f7:18:8a:52:8e:63:5f:cf:44:4b:96:32:f5:4e:
                    5f:f4:ce:9c:2d:40:ed:3f:f3:6f:1f:4d:77:e1:89:
                    a6:19:40:b9:f7:40:84:82:cb:a6:f0:61:98:b9:d5:
                    f6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9E:BE:56:81:80:8A:2E:3B:CD:6B:9C:A4:15:79:65:4D:49:FE:00
            X509v3 Authority Key Identifier:
                keyid:C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130302e302f32332d3233203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:40:01:42:93:20:c5:53:b6:28:36:36:39:f3:ef:bd:c3:43:
         16:a4:a4:4b:54:59:a3:46:9d:fe:cf:d9:1c:68:a1:25:b4:c1:
         af:e5:e1:5e:18:f2:1f:85:19:97:e8:7e:a6:a1:88:60:75:aa:
         90:fc:5b:cc:7d:50:56:42:58:53:83:31:9e:ea:66:1a:f9:f6:
         6b:d9:f2:d5:25:66:54:da:71:db:e4:fd:26:d4:f6:0d:3b:64:
         d9:e1:8d:85:7f:b0:61:be:01:84:11:c1:c2:6f:6e:bd:c2:0f:
         46:c0:ef:0e:a0:65:e8:a3:1c:f0:b4:69:10:e7:28:8d:2f:1e:
         2d:d7:af:ca:5d:aa:c6:28:27:44:7b:d3:0b:b2:06:f8:52:6c:
         86:3b:24:41:51:4e:b6:4a:77:c2:39:38:40:84:de:e8:f0:cc:
         06:26:a4:d2:ad:3c:98:0a:87:3c:ef:fe:5c:5a:fe:29:de:2a:
         84:5f:1c:b5:0c:f2:77:63:9a:97:9e:73:6c:26:7b:f9:16:cb:
         9e:6a:33:f0:b8:f5:c8:57:c8:e1:67:89:35:6e:af:20:c3:d4:
         30:44:ae:f8:98:73:5b:cd:19:aa:d4:da:79:55:dc:31:2e:57:
         61:93:8a:61:47:45:72:7d:d9:c4:3f:98:a5:6e:8d:4d:53:79:
         7c:ab:75:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:56 2025 by rpki-client