Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa
File:                     3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier:          CNQ0ix3DXJ4zwMH09heAgjn/F16QgFyjSTP9O09ja3Q=
Subject key identifier:   0D:23:1C:35:C9:94:54:3E:CC:35:5D:85:BC:70:67:C3:17:AF:C3:8F
Certificate issuer:       /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Certificate serial:       29820FCC4F1D58C6E7C02119D41DE64CE8D3ECF3
Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa
Signing time:             Sat 18 Oct 2025 23:01:04 +0000
ROA not before:           Sat 18 Oct 2025 22:56:04 +0000
ROA not after:            Sat 17 Oct 2026 23:01:04 +0000
asID:                     271724
IP address blocks:        131.221.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:82:0f:cc:4f:1d:58:c6:e7:c0:21:19:d4:1d:e6:4c:e8:d3:ec:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
        Validity
            Not Before: Oct 18 22:56:04 2025 GMT
            Not After : Oct 17 23:01:04 2026 GMT
        Subject: CN=0D231C35C994543ECC355D85BC7067C317AFC38F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:37:75:d8:a2:f3:a2:ec:16:bc:90:84:95:08:
                    64:d1:69:80:3f:ef:c1:24:0f:3c:5e:d6:36:f5:0f:
                    e8:66:2e:9c:e8:af:29:3f:3b:6b:32:11:be:90:a8:
                    c5:68:f3:2e:0f:99:65:e6:ab:a4:c4:f7:2d:82:7b:
                    4c:ec:3b:79:89:1a:ea:8a:db:c6:73:f7:dd:f1:1e:
                    2d:90:b2:d2:a7:b0:8e:de:d6:5f:39:89:ad:b5:5c:
                    43:95:d1:25:bf:f4:f4:33:0d:fc:ba:43:57:c1:b8:
                    8b:27:42:81:e0:e3:d1:f7:67:3b:af:3c:43:73:d8:
                    a7:b8:30:87:a0:19:2a:67:a1:d1:43:4d:50:0c:26:
                    5d:f5:dd:f5:57:f0:06:11:e7:4d:9d:6c:97:6f:5b:
                    8d:f5:98:25:48:40:31:b5:6e:f7:59:a5:15:58:b4:
                    9c:30:a6:e2:f5:f8:05:cd:cf:4e:2e:4b:ca:7d:0c:
                    7e:d6:95:28:17:14:88:50:73:82:82:04:78:d6:d8:
                    08:76:01:8a:02:c0:ea:6b:ed:99:9a:79:43:c8:14:
                    a7:f3:d3:ac:4d:8b:45:fd:6e:b7:8e:09:b2:ea:16:
                    f7:64:6d:10:9b:bc:c2:c8:98:24:b9:7b:e7:6d:88:
                    e7:49:33:6a:f9:aa:66:71:b7:97:d5:97:2e:25:58:
                    18:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:23:1C:35:C9:94:54:3E:CC:35:5D:85:BC:70:67:C3:17:AF:C3:8F
            X509v3 Authority Key Identifier:
                keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:08:64:78:10:4e:50:1d:c0:94:de:48:65:23:c8:b9:da:eb:
         be:65:43:39:d1:8c:5c:79:a1:01:b6:90:e0:8b:a6:72:82:76:
         ff:10:49:85:fd:86:30:f5:56:48:43:10:4b:39:2e:1b:91:e2:
         e8:de:58:84:a3:7b:a3:f7:08:1a:da:56:c9:62:57:97:c5:e8:
         5a:17:32:21:7a:7c:4a:0d:0b:19:48:2b:7a:ff:f3:37:25:7f:
         10:48:46:a4:bf:d0:fc:9b:49:52:63:53:83:cb:ce:81:d5:58:
         24:90:69:e4:14:df:bf:bf:11:2b:3d:12:83:12:72:08:df:a8:
         4f:09:66:69:33:82:93:24:db:81:dc:ff:57:63:42:46:9e:ff:
         8d:45:69:71:29:89:df:39:8b:02:fe:e8:73:c1:59:2f:ac:38:
         e5:08:b3:cb:33:a4:d3:c4:e9:73:c1:7c:dd:1a:3c:84:d1:54:
         9b:bb:c4:cf:51:dc:9b:3f:c0:c5:52:f2:7c:38:50:9a:37:cd:
         52:de:e8:53:e6:fc:5f:84:7e:23:ad:b3:ab:7e:ab:2d:ed:8a:
         c2:7b:f2:3b:e2:83:63:06:43:92:b0:e1:e0:04:a0:ce:df:b2:
         b3:30:16:42:d7:ab:ce:2b:14:d1:84:c2:27:58:e0:3f:c1:47:
         0d:31:23:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:03 2025 by rpki-client