Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32332d3233203d3e203238323730.roa
File:                     3133312e3139362e37362e302f32332d3233203d3e203238323730.roa (raw, json)
Hash identifier:          zNctxNLBtyOS7QA6B6CVdOQYopKvZ2+Z/seF3TgrZE0=
Subject key identifier:   AC:F4:36:A1:FD:75:DC:9C:ED:52:EA:3E:7D:EF:D3:38:33:08:67:4F
Certificate issuer:       /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Certificate serial:       426327B85F9E2E7FF20083B5BD28B2D335658448
Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32332d3233203d3e203238323730.roa
Signing time:             Sat 18 Oct 2025 23:01:06 +0000
ROA not before:           Sat 18 Oct 2025 22:56:06 +0000
ROA not after:            Sat 17 Oct 2026 23:01:06 +0000
asID:                     28270
IP address blocks:        131.196.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:63:27:b8:5f:9e:2e:7f:f2:00:83:b5:bd:28:b2:d3:35:65:84:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
        Validity
            Not Before: Oct 18 22:56:06 2025 GMT
            Not After : Oct 17 23:01:06 2026 GMT
        Subject: CN=ACF436A1FD75DC9CED52EA3E7DEFD3383308674F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8d:f9:21:09:3f:60:f4:c4:49:2b:c8:1a:c8:
                    cf:5c:10:5f:3a:01:03:dd:33:2b:0a:f2:24:2d:a7:
                    8a:8c:e5:bd:a1:ac:7a:b9:d0:bd:f2:fc:5d:62:8d:
                    51:47:d4:14:8e:9e:f9:06:87:7d:05:e8:ba:61:6d:
                    53:df:c2:12:e0:a2:1b:9c:a7:cc:3c:ed:84:4a:b8:
                    04:66:a7:24:4c:64:b6:0b:0d:28:74:58:52:96:d8:
                    f4:d0:15:1a:b1:b2:b8:3b:06:ad:f1:42:9b:8f:34:
                    6f:90:8d:21:bd:2a:da:4b:4e:60:89:a8:b5:b4:e7:
                    1e:3c:1e:0b:3d:f2:46:a2:1c:c0:fa:2f:98:a0:8a:
                    7a:cc:03:7f:a0:d3:ac:ea:e6:39:38:45:49:a3:60:
                    21:cb:10:9f:3d:3e:b5:48:52:b5:d8:84:1d:9e:cb:
                    9b:a1:a8:7d:2a:38:03:52:19:2d:36:96:d0:09:dc:
                    38:a6:c3:1d:85:e8:55:95:0a:2b:c0:bc:4a:94:ba:
                    10:b0:d7:bf:7d:0c:a4:aa:06:f6:5a:94:dc:1c:9f:
                    28:2b:76:1d:2e:77:ad:af:0e:f6:b6:b6:59:e2:60:
                    51:3e:c9:6e:fd:90:6b:7a:2a:00:cc:4e:04:aa:8c:
                    5e:c9:1c:12:14:bd:de:85:8c:cc:df:9f:09:66:0a:
                    0a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F4:36:A1:FD:75:DC:9C:ED:52:EA:3E:7D:EF:D3:38:33:08:67:4F
            X509v3 Authority Key Identifier:
                keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32332d3233203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:98:ef:f6:bb:37:bc:3d:ed:61:31:0f:39:b9:84:58:b7:2b:
         7d:20:f7:81:e7:aa:00:0c:69:c8:5c:69:fa:da:46:ad:34:55:
         37:9a:ff:ff:7c:26:00:b6:b3:86:4d:19:40:45:b4:57:8e:58:
         9c:f1:42:8a:38:6e:31:cc:e8:e6:f8:cc:71:87:e7:0f:f5:b3:
         5a:b9:ca:73:25:3f:52:94:0b:44:7d:c4:5a:69:39:14:04:92:
         57:11:cf:e3:31:78:58:ea:fc:3d:a5:14:f1:f7:00:d6:67:e8:
         2d:53:32:c7:48:7e:f1:59:09:4a:35:71:31:cb:37:56:d3:e4:
         53:e9:c7:d9:22:92:30:e2:22:2b:2a:c7:5f:30:dd:5c:a0:af:
         20:2d:5d:63:d6:0f:58:4b:19:46:f5:12:a1:37:82:45:e1:03:
         2f:64:c7:9d:8e:33:f0:a3:b6:21:03:a9:58:71:43:be:cb:af:
         bc:e7:b7:54:d8:e2:b7:bd:c0:33:57:87:ad:bc:fe:23:dc:37:
         c8:c7:9a:a8:f0:d6:1b:4a:a8:bd:0a:d0:a5:a7:e4:66:20:61:
         11:54:c6:57:47:6b:c1:7c:aa:fc:69:1c:df:42:7b:ab:96:da:
         d4:36:87:e3:92:87:7f:67:44:fa:3f:1b:12:0e:49:26:67:60:
         48:c9:c2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:25:38 2025 by rpki-client