Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa
File:                     3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier:          wcGEaZxxsEg0lkKmRHhL4WLlVSP7ix0DU03wZ/LyQDU=
Subject key identifier:   92:A7:D8:72:7E:07:0C:01:75:88:3D:14:C7:BA:96:44:51:FF:2A:7D
Certificate issuer:       /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Certificate serial:       6A0AD4DD359C793AF43FF62A81CCAE3B9EC87665
Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa
Signing time:             Sat 18 Oct 2025 23:01:01 +0000
ROA not before:           Sat 18 Oct 2025 22:56:01 +0000
ROA not after:            Sat 17 Oct 2026 23:01:01 +0000
asID:                     28220
IP address blocks:        187.110.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0a:d4:dd:35:9c:79:3a:f4:3f:f6:2a:81:cc:ae:3b:9e:c8:76:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
        Validity
            Not Before: Oct 18 22:56:01 2025 GMT
            Not After : Oct 17 23:01:01 2026 GMT
        Subject: CN=92A7D8727E070C0175883D14C7BA964451FF2A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:7c:43:9f:8e:c2:a5:d1:3a:ce:83:00:7d:
                    3b:50:0d:dc:7e:30:50:47:d4:44:60:7a:f7:e3:37:
                    53:b2:3b:f2:85:49:86:d3:a8:cc:fb:32:88:9e:1d:
                    14:fa:fa:46:3a:0a:47:d1:d5:03:63:d9:1e:2e:f2:
                    0d:f7:a6:32:2a:be:74:6c:e5:8f:94:29:0d:81:21:
                    d1:45:89:38:49:f5:5c:10:89:62:bc:b1:6d:af:88:
                    91:f1:64:e0:aa:f3:ea:18:c9:c7:75:19:be:fa:90:
                    75:ce:60:fc:1b:fe:fb:75:6c:a0:98:0f:21:b6:de:
                    a7:d1:af:26:1a:ad:a8:47:70:21:e4:da:4b:61:3b:
                    21:4a:37:d6:8d:c5:3a:d3:06:69:3c:2c:38:c7:4b:
                    8a:db:4d:a9:04:75:b1:52:b0:e7:02:8c:0f:a8:ee:
                    08:db:85:48:c4:3c:db:9d:2e:d3:1a:8d:a6:2f:c6:
                    50:f3:57:b2:9a:9c:9c:4b:db:56:c9:25:3c:f3:ef:
                    f1:0e:6e:1a:96:55:55:38:09:87:ae:e2:21:91:fd:
                    0d:20:b4:5c:d9:d9:c4:c6:55:89:90:80:7f:81:5a:
                    b8:aa:e1:c5:90:3e:b1:a4:11:4c:00:f3:00:8e:35:
                    5b:e5:5f:6c:85:4b:7f:3f:86:2c:2c:40:0b:32:75:
                    b4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A7:D8:72:7E:07:0C:01:75:88:3D:14:C7:BA:96:44:51:FF:2A:7D
            X509v3 Authority Key Identifier:
                keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:e9:52:cc:93:7b:0a:93:4f:8d:33:2e:c0:eb:f3:78:c0:40:
         19:9e:6f:b0:fe:bb:4b:a7:ab:6b:aa:bc:dd:2e:bc:b0:e3:95:
         16:c6:32:2d:a1:db:4d:25:0d:dd:01:33:4a:13:42:16:7b:71:
         2d:47:bd:dd:75:0a:da:ea:29:37:48:10:ad:01:b3:6f:6b:c3:
         21:e5:a3:3b:f5:eb:e0:e2:89:b2:c1:0f:59:f7:32:30:29:ed:
         c7:5d:52:50:0f:56:0e:aa:d0:b4:6c:76:4e:fe:11:c8:7f:b3:
         1c:94:33:33:a1:9c:50:9f:1a:7d:17:65:74:9e:f0:45:fb:82:
         85:18:0c:d6:ad:4e:e4:9e:5f:d0:0c:4e:0c:5b:4e:52:df:58:
         09:a3:cd:f5:12:21:ad:eb:25:73:5d:75:66:72:7e:76:51:9d:
         21:7d:f4:a8:d7:6a:ca:4e:05:dc:81:9d:1a:51:8a:fc:ac:fb:
         97:ae:2a:92:f7:ad:99:fb:ca:ae:a0:15:6a:fb:3f:5c:da:c2:
         86:e9:95:54:11:dc:58:5e:cb:e5:ca:31:53:d8:c1:c5:c5:6c:
         d9:b9:8a:35:ce:a0:fb:a8:d2:82:47:bc:2a:46:16:88:c8:9b:
         2c:f9:5b:e7:04:20:4b:9d:03:ab:4f:1e:c4:0f:75:18:b3:94:
         bd:1d:7d:c7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUagrU3TWceTr0P/YqgcyuO57IdmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy
RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDFaFw0yNjEwMTcyMzAxMDFaMDMxMTAvBgNV
BAMTKDkyQTdEODcyN0UwNzBDMDE3NTg4M0QxNEM3QkE5NjQ0NTFGRjJBN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5fnxDn47CpdE6zoMAfTtQDdx+
MFBH1ERgevfjN1OyO/KFSYbTqMz7MoieHRT6+kY6CkfR1QNj2R4u8g33pjIqvnRs
5Y+UKQ2BIdFFiThJ9VwQiWK8sW2viJHxZOCq8+oYycd1Gb76kHXOYPwb/vt1bKCY
DyG23qfRryYarahHcCHk2kthOyFKN9aNxTrTBmk8LDjHS4rbTakEdbFSsOcCjA+o
7gjbhUjEPNudLtMajaYvxlDzV7KanJxL21bJJTzz7/EObhqWVVU4CYeu4iGR/Q0g
tFzZ2cTGVYmQgH+BWriq4cWQPrGkEUwA8wCONVvlX2yFS38/hiwsQAsydbTxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkqfYcn4HDAF1iD0Ux7qWRFH/Kn0wHwYDVR0j
BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3
QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzODM3MmUzMTMxMzAyZTMyMzAzODJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMy
MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS7btAwDQYJKoZIhvcNAQELBQADggEBACPpUsyT
ewqTT40zLsDr83jAQBmeb7D+u0unq2uqvN0uvLDjlRbGMi2h200lDd0BM0oTQhZ7
cS1Hvd11CtrqKTdIEK0Bs29rwyHlozv16+DiibLBD1n3MjAp7cddUlAPVg6q0LRs
dk7+Ech/sxyUMzOhnFCfGn0XZXSe8EX7goUYDNatTuSeX9AMTgxbTlLfWAmjzfUS
Ia3rJXNddWZyfnZRnSF99KjXaspOBdyBnRpRivys+5euKpL3rZn7yq6gFWr7P1za
wobplVQR3Fhey+XKMVPYwcXFbNm5ijXOoPuo0oJHvCpGFojImyz5W+cEIEudA6tP
HsQPdRizlL0dfcc=
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:25:53 2025 by rpki-client