Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32322d3232203d3e20323635343633.roa
File:                     3136382e3139372e31322e302f32322d3232203d3e20323635343633.roa (raw, json)
Hash identifier:          03m/VkH7zMM8BPYkW7S+oH1tuzSMKY3dGYsUjg7iayw=
Subject key identifier:   43:46:64:9E:88:1D:02:69:25:46:C3:6F:2C:73:9B:F9:FC:6C:76:58
Certificate issuer:       /CN=62B51F20D88182C58CED03A4D282DE24A08CAE6E
Certificate serial:       42359D1FD0C1D26B8FCECFA655AC3B88403F3C47
Authority key identifier: 62:B5:1F:20:D8:81:82:C5:8C:ED:03:A4:D2:82:DE:24:A0:8C:AE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62B51F20D88182C58CED03A4D282DE24A08CAE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32322d3232203d3e20323635343633.roa
Signing time:             Sat 20 Sep 2025 12:49:16 +0000
ROA not before:           Sat 20 Sep 2025 12:44:16 +0000
ROA not after:            Sat 19 Sep 2026 12:49:16 +0000
asID:                     265463
IP address blocks:        168.197.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/62B51F20D88182C58CED03A4D282DE24A08CAE6E.crl
                          rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/62B51F20D88182C58CED03A4D282DE24A08CAE6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62B51F20D88182C58CED03A4D282DE24A08CAE6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 00:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:35:9d:1f:d0:c1:d2:6b:8f:ce:cf:a6:55:ac:3b:88:40:3f:3c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62B51F20D88182C58CED03A4D282DE24A08CAE6E
        Validity
            Not Before: Sep 20 12:44:16 2025 GMT
            Not After : Sep 19 12:49:16 2026 GMT
        Subject: CN=4346649E881D02692546C36F2C739BF9FC6C7658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:49:86:84:12:59:e5:2b:ce:57:16:96:16:8b:
                    e0:d3:60:1c:a0:25:79:d8:bd:9f:1e:0a:5f:e9:a3:
                    cb:c9:ec:80:1a:85:97:e9:0b:1e:7a:28:f6:db:a1:
                    9f:ad:61:36:97:ad:bd:4f:66:b8:38:e5:18:2e:1d:
                    87:73:b0:47:d7:14:9d:88:04:9a:3a:de:95:3f:72:
                    52:b3:38:97:61:c8:3d:b4:f4:72:c4:a7:cf:13:28:
                    33:39:71:5c:21:ae:4a:6c:25:87:b5:93:67:45:83:
                    0a:c5:b3:9b:f2:2a:c6:7f:4c:1c:8f:76:e5:aa:e6:
                    c1:87:eb:89:49:94:c4:a9:0f:0e:2c:42:fd:db:8c:
                    ed:31:96:34:46:61:14:16:3e:e9:ef:8b:e9:56:cf:
                    d1:e8:cb:af:66:35:31:48:39:34:28:59:f0:74:74:
                    f6:20:fe:ef:58:16:11:83:e2:b9:4a:f0:2d:f8:46:
                    7d:60:a8:05:e8:70:3e:4c:24:e6:c3:ce:38:de:cc:
                    2b:2d:b6:23:32:37:8b:3e:f3:21:f1:cf:53:67:c5:
                    9b:4d:e2:e8:9f:e8:9d:d0:e5:66:9f:64:4a:48:9f:
                    45:54:99:fd:9b:99:f2:51:a8:38:d1:89:a3:d0:32:
                    ce:72:cc:e4:fc:a1:20:1f:2c:fe:a0:65:6b:49:cf:
                    52:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:46:64:9E:88:1D:02:69:25:46:C3:6F:2C:73:9B:F9:FC:6C:76:58
            X509v3 Authority Key Identifier:
                keyid:62:B5:1F:20:D8:81:82:C5:8C:ED:03:A4:D2:82:DE:24:A0:8C:AE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/62B51F20D88182C58CED03A4D282DE24A08CAE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62B51F20D88182C58CED03A4D282DE24A08CAE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32322d3232203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:58:df:b5:7b:98:cb:00:71:3e:4d:4a:80:45:0d:23:fd:d6:
         3c:91:bf:58:b3:c8:56:73:10:5c:63:7b:ee:3d:e0:6d:3f:bd:
         99:7d:ff:b8:e0:ee:22:ab:c3:95:1f:b6:e1:e7:9b:1b:45:2d:
         e8:0a:38:13:08:fe:bc:26:78:87:84:0f:9b:df:9f:44:f3:7a:
         53:30:f7:2e:13:01:a7:ef:b5:74:8f:d6:70:60:4a:e4:72:eb:
         45:e5:19:3d:be:a9:5b:5b:d6:61:bb:9f:9d:04:bc:a7:1e:b1:
         58:14:b6:42:6a:3e:7e:eb:45:04:49:d7:f9:e7:23:09:8c:79:
         1b:7b:7f:96:0f:2a:d7:cc:fb:de:67:73:eb:ff:fb:f9:52:10:
         70:aa:fb:57:57:05:29:8d:50:0e:4c:0d:33:39:ee:48:7a:dd:
         72:bf:24:ca:d4:04:f6:67:ab:1b:7e:05:b6:e6:39:ce:45:ca:
         e8:e5:2d:8c:8d:74:37:90:78:cc:53:d0:42:23:5b:f4:db:6f:
         3a:e7:66:33:f4:6d:91:6c:3c:d5:d9:31:46:38:b0:d1:11:59:
         f1:99:87:83:b9:04:c6:65:ea:17:66:21:f5:7e:b1:3f:dc:49:
         99:07:92:a7:1d:dc:22:c5:01:71:a6:b8:53:9a:79:48:cd:df:
         17:3c:31:3d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQjWdH9DB0muPzs+mVaw7iEA/PEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJCNTFGMjBEODgxODJDNThDRUQwM0E0RDI4MkRFMjRB
MDhDQUU2RTAeFw0yNTA5MjAxMjQ0MTZaFw0yNjA5MTkxMjQ5MTZaMDMxMTAvBgNV
BAMTKDQzNDY2NDlFODgxRDAyNjkyNTQ2QzM2RjJDNzM5QkY5RkM2Qzc2NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgSYaEElnlK85XFpYWi+DTYByg
JXnYvZ8eCl/po8vJ7IAahZfpCx56KPbboZ+tYTaXrb1PZrg45RguHYdzsEfXFJ2I
BJo63pU/clKzOJdhyD209HLEp88TKDM5cVwhrkpsJYe1k2dFgwrFs5vyKsZ/TByP
duWq5sGH64lJlMSpDw4sQv3bjO0xljRGYRQWPunvi+lWz9Hoy69mNTFIOTQoWfB0
dPYg/u9YFhGD4rlK8C34Rn1gqAXocD5MJObDzjjezCsttiMyN4s+8yHxz1NnxZtN
4uif6J3Q5WafZEpIn0VUmf2bmfJRqDjRiaPQMs5yzOT8oSAfLP6gZWtJz1LfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQ0ZknogdAmklRsNvLHOb+fxsdlgwHwYDVR0j
BBgwFoAUYrUfINiBgsWM7QOk0oLeJKCMrm4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNmNDZTbnFGTDNLZ1Z6VVRGdFBTcmJjVzhMUHFkOVVkUEpRYVRSUjd0
dXAvMC82MkI1MUYyMEQ4ODE4MkM1OENFRDAzQTREMjgyREUyNEEwOENBRTZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyQjUxRjIwRDg4MTgyQzU4
Q0VEMDNBNEQyODJERTI0QTA4Q0FFNkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzZjQ2U25xRkwzS2dWelVURnRQU3JiY1c4TFBxZDlVZFBKUWFUUlI3dHVwLzAv
MzEzNjM4MmUzMTM5MzcyZTMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzNDM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoxQwwDQYJKoZIhvcNAQELBQADggEBAGpY37V7
mMsAcT5NSoBFDSP91jyRv1izyFZzEFxje+494G0/vZl9/7jg7iKrw5UftuHnmxtF
LegKOBMI/rwmeIeED5vfn0TzelMw9y4TAafvtXSP1nBgSuRy60XlGT2+qVtb1mG7
n50EvKcesVgUtkJqPn7rRQRJ1/nnIwmMeRt7f5YPKtfM+95nc+v/+/lSEHCq+1dX
BSmNUA5MDTM57kh63XK/JMrUBPZnqxt+BbbmOc5FyujlLYyNdDeQeMxT0EIjW/Tb
bzrnZjP0bZFsPNXZMUY4sNERWfGZh4O5BMZl6hdmIfV+sT/cSZkHkqcd3CLFAXGm
uFOaeUjN3xc8MT0=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:37:22 2025 by rpki-client