Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3134342e302f32302d3230203d3e203238323730.roa
File:                     3137392e3139312e3134342e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          E9bPKFyB+zzbGur+VoidcJasLAb7e5V/x7KogVzHYQQ=
Subject key identifier:   54:20:7D:C3:3E:FA:5B:6D:60:58:9D:DC:DE:0F:0E:73:65:14:B3:C2
Certificate issuer:       /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Certificate serial:       40867C394DEE71328D0E1FDB95FA3DF29EF45E63
Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3134342e302f32302d3230203d3e203238323730.roa
Signing time:             Sat 18 Oct 2025 23:01:06 +0000
ROA not before:           Sat 18 Oct 2025 22:56:06 +0000
ROA not after:            Sat 17 Oct 2026 23:01:06 +0000
asID:                     28270
IP address blocks:        179.191.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:86:7c:39:4d:ee:71:32:8d:0e:1f:db:95:fa:3d:f2:9e:f4:5e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
        Validity
            Not Before: Oct 18 22:56:06 2025 GMT
            Not After : Oct 17 23:01:06 2026 GMT
        Subject: CN=54207DC33EFA5B6D60589DDCDE0F0E736514B3C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3f:47:01:a7:cd:15:ea:bc:21:fc:8d:ce:8e:
                    ef:4a:48:43:8c:d8:96:76:32:1a:d8:99:42:67:cb:
                    06:b3:ef:ce:9e:71:f4:56:ad:f1:cd:3a:67:bd:ea:
                    c8:59:cf:e1:15:7f:0c:36:3a:7c:90:af:92:29:24:
                    50:35:96:ae:91:26:bd:03:0d:7f:cb:62:1d:74:bf:
                    db:ec:89:86:07:ca:2f:2c:f0:fe:c1:26:18:a4:4e:
                    86:b4:7d:64:22:d4:f9:cf:dc:ec:3c:f9:d2:e7:af:
                    8a:01:d4:3d:cf:0e:53:53:ca:80:83:11:76:db:b4:
                    6b:11:c9:ad:dc:db:58:c6:0c:5c:95:e2:43:5e:d9:
                    c8:67:5c:63:7c:83:87:32:0d:2e:b0:7b:3b:f3:d9:
                    f2:d7:e2:16:40:f1:19:2e:ce:7a:93:4c:7e:27:ab:
                    c4:ad:69:39:04:d6:ea:b4:b8:cd:4f:78:36:1e:f3:
                    2a:ca:c0:36:92:f2:d2:47:bc:e4:84:c9:39:2e:f7:
                    86:7a:d2:97:f2:c7:aa:7c:f4:bc:6b:62:22:77:6d:
                    62:aa:98:af:a4:c2:68:64:fa:b0:ba:82:81:5c:c7:
                    5c:f4:32:73:aa:5b:37:9e:7c:1c:2a:c6:e5:77:bb:
                    cb:56:52:90:50:29:c3:14:9d:ca:40:87:07:33:4f:
                    1a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:20:7D:C3:3E:FA:5B:6D:60:58:9D:DC:DE:0F:0E:73:65:14:B3:C2
            X509v3 Authority Key Identifier:
                keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3134342e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:67:b2:82:41:74:73:1e:54:9a:a9:96:4f:7b:69:cb:06:53:
         86:ac:39:d9:2b:1b:7a:7a:24:2a:05:04:96:41:a8:17:a3:fd:
         5f:96:ee:96:e4:da:be:e9:62:16:93:29:3b:a4:6f:01:4b:1c:
         ed:a1:77:41:6a:9e:47:07:06:1c:bd:21:51:54:02:47:07:ef:
         a4:b0:8e:37:86:a8:c7:05:d2:61:bf:d9:40:fe:d5:b5:fe:a7:
         7e:d0:db:4a:0a:0c:04:9b:22:09:b7:95:c4:17:63:10:0d:50:
         52:2a:3e:8a:31:58:67:43:e7:d6:76:85:ee:94:cb:9d:c0:d2:
         50:1c:8a:ae:1c:00:57:c5:41:cb:5e:fe:94:ae:97:86:1f:5d:
         0a:29:7e:c9:76:0c:0a:14:aa:6e:33:9c:3e:14:57:1c:a6:55:
         c2:4f:6e:e4:84:65:9c:94:d2:52:d2:d8:55:3d:0d:7f:9a:2a:
         47:4d:d7:ac:a4:be:f1:2c:78:a7:bf:3b:17:bb:9d:bc:a8:03:
         af:be:66:22:b1:07:3f:c3:10:72:62:33:e3:8c:1f:d8:28:f3:
         df:4e:c2:e1:44:49:df:91:a7:ab:51:b9:e0:45:d6:32:bc:cf:
         9c:2f:07:d5:cd:8a:d9:99:39:fa:a2:69:f2:86:39:5c:86:84:
         cc:ec:81:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:44:40 2025 by rpki-client