Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3139302e3131312e3132382e302f32322d3234203d3e20323632363735.roa
File:                     3139302e3131312e3132382e302f32322d3234203d3e20323632363735.roa (raw, json)
Hash identifier:          OFmuTZ5VWSmP+/aUhwH4ESEiQhoz2OMx9jOncGXA/NY=
Subject key identifier:   05:BE:72:DE:D5:B8:FD:31:53:4A:FD:6C:90:6C:D3:6A:8D:77:16:79
Certificate issuer:       /CN=6480808F2DB085F4192DC9A7B2841A9AB635552E
Certificate serial:       73848ED66BF7B152E269BD96AC725E14F7D62E43
Authority key identifier: 64:80:80:8F:2D:B0:85:F4:19:2D:C9:A7:B2:84:1A:9A:B6:35:55:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6480808F2DB085F4192DC9A7B2841A9AB635552E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3139302e3131312e3132382e302f32322d3234203d3e20323632363735.roa
Signing time:             Mon 06 Oct 2025 11:32:07 +0000
ROA not before:           Mon 06 Oct 2025 11:27:07 +0000
ROA not after:            Mon 05 Oct 2026 11:32:07 +0000
asID:                     262675
IP address blocks:        190.111.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/6480808F2DB085F4192DC9A7B2841A9AB635552E.crl
                          rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/6480808F2DB085F4192DC9A7B2841A9AB635552E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6480808F2DB085F4192DC9A7B2841A9AB635552E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:84:8e:d6:6b:f7:b1:52:e2:69:bd:96:ac:72:5e:14:f7:d6:2e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6480808F2DB085F4192DC9A7B2841A9AB635552E
        Validity
            Not Before: Oct  6 11:27:07 2025 GMT
            Not After : Oct  5 11:32:07 2026 GMT
        Subject: CN=05BE72DED5B8FD31534AFD6C906CD36A8D771679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4f:a2:b7:75:29:01:93:75:2b:12:ea:61:0b:
                    a0:e1:25:7f:05:99:d9:53:53:a8:05:f8:ac:3c:b3:
                    3a:8b:96:17:6c:35:73:f6:f7:f1:2e:33:17:b9:e7:
                    d8:7e:09:be:89:5e:67:b0:54:f5:fb:13:d3:51:67:
                    92:d8:1a:1a:f7:70:88:57:a7:6f:ad:00:d7:35:69:
                    f3:f2:8d:41:67:d5:af:d1:37:fb:d9:c5:29:32:c3:
                    b9:54:cf:7d:38:59:70:70:a6:da:d3:09:6b:00:82:
                    13:68:28:09:d9:11:78:7c:a7:51:c2:06:d5:51:ee:
                    01:03:95:c7:94:fb:02:60:3f:ea:9c:dc:f3:ef:fa:
                    fe:72:ed:6b:29:4a:2c:66:d3:46:72:db:75:4b:cc:
                    7a:82:24:9d:2f:f7:1b:e8:f2:79:0a:2a:bd:af:c0:
                    49:44:52:ad:15:e8:c8:57:8c:c7:e4:7b:b0:b1:65:
                    5b:5b:c7:af:ca:9e:27:2f:67:65:f8:b9:6f:a1:4e:
                    79:a1:c2:f5:5d:42:d1:02:c8:4f:cd:9e:a7:4f:a0:
                    7c:ba:9c:ad:39:34:5c:bd:d1:8e:15:20:bc:cb:a4:
                    2f:af:a5:7e:b1:42:e2:33:4a:94:5a:a1:40:27:6e:
                    bb:0a:2f:57:4c:27:d6:58:d7:dd:3f:4e:12:f7:06:
                    36:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BE:72:DE:D5:B8:FD:31:53:4A:FD:6C:90:6C:D3:6A:8D:77:16:79
            X509v3 Authority Key Identifier:
                keyid:64:80:80:8F:2D:B0:85:F4:19:2D:C9:A7:B2:84:1A:9A:B6:35:55:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/6480808F2DB085F4192DC9A7B2841A9AB635552E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6480808F2DB085F4192DC9A7B2841A9AB635552E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3139302e3131312e3132382e302f32322d3234203d3e20323632363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:eb:d4:4e:00:5c:4d:5a:39:6f:bb:cb:d5:df:b5:a0:e9:d7:
         78:53:6c:95:73:74:e8:c4:6a:9d:d3:32:c1:42:05:62:ed:50:
         54:19:36:f1:ad:dd:4a:81:78:7c:dc:cd:dc:9f:4a:cd:91:11:
         56:c2:95:94:23:0d:c1:8d:9d:24:3a:8f:4f:e5:97:15:78:d0:
         38:6f:d8:ae:41:8e:56:b3:bd:cb:bf:7c:68:e6:d6:71:f9:db:
         85:19:66:d8:dd:28:b2:09:d8:0d:d5:f5:75:70:26:ec:17:4e:
         64:8f:d0:1e:cd:e5:bd:ef:d1:81:89:ae:9b:88:c9:5a:6b:40:
         15:c9:eb:06:7c:fd:2d:41:95:46:e5:0f:c3:a7:8e:4a:83:90:
         22:00:7b:cb:64:1d:4d:65:ed:ac:9f:98:f4:f2:b0:d2:1b:4a:
         60:7e:e3:0d:9c:16:09:aa:5a:ef:c8:c4:39:34:33:49:dc:4a:
         f8:96:0b:21:ef:fd:4f:af:96:45:79:51:d0:8f:67:1b:17:ea:
         01:ff:ee:96:a9:b6:35:3a:d9:2d:81:ff:0b:4a:32:1e:fa:4c:
         6d:16:37:f4:c4:85:53:c5:5f:43:64:f3:2a:54:21:29:e4:49:
         4f:ce:e4:dc:55:04:3b:e3:b9:cd:87:13:be:44:9e:17:fd:58:
         a0:6c:1d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:47 2025 by rpki-client