Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38322e302f32332d3233203d3e20323634393336.roa
File:                     3136382e3233322e38322e302f32332d3233203d3e20323634393336.roa (raw, json)
Hash identifier:          +73/Q9n3JMcWVOkBwpCcxXXDE0WJpXIyWu9tpyRHkF0=
Subject key identifier:   B0:A7:50:FF:CC:70:E7:81:2E:56:F8:5B:83:81:5B:03:B9:1A:E3:F2
Certificate issuer:       /CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
Certificate serial:       4C4EA992668A1094690E779AD9AF186D0BC1C2CE
Authority key identifier: D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38322e302f32332d3233203d3e20323634393336.roa
Signing time:             Wed 01 Oct 2025 22:07:08 +0000
ROA not before:           Wed 01 Oct 2025 22:02:08 +0000
ROA not after:            Wed 30 Sep 2026 22:07:08 +0000
asID:                     264936
IP address blocks:        168.232.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 04:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4e:a9:92:66:8a:10:94:69:0e:77:9a:d9:af:18:6d:0b:c1:c2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
        Validity
            Not Before: Oct  1 22:02:08 2025 GMT
            Not After : Sep 30 22:07:08 2026 GMT
        Subject: CN=B0A750FFCC70E7812E56F85B83815B03B91AE3F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d9:63:23:fd:5f:f8:34:09:2f:60:69:f2:81:
                    6b:aa:56:a4:06:c8:4d:d4:fb:1a:0f:45:44:47:73:
                    87:0c:4a:6e:97:51:e4:fc:78:86:96:1c:29:07:a8:
                    1b:6e:bd:0b:73:a1:c1:ed:8a:3e:99:22:0c:63:6d:
                    e6:29:c7:18:f9:58:f0:d8:61:5c:9c:d8:9e:58:bb:
                    82:9c:f3:2e:ec:3a:53:d8:e4:4d:0f:63:43:03:37:
                    a0:ec:03:9a:17:be:b3:e4:50:ed:f2:86:35:a6:0a:
                    7c:ea:81:6d:41:8d:61:b3:f7:6b:64:ed:c9:9e:21:
                    9a:63:00:6c:2d:94:61:e4:2f:93:4e:59:af:36:52:
                    28:a8:e8:d8:aa:cb:2e:65:42:7b:6c:b9:03:f2:9c:
                    40:43:53:21:f8:08:f1:e5:05:4d:33:b0:cb:1e:b3:
                    e9:a4:94:1d:11:a8:67:3f:d3:50:78:9f:32:d3:97:
                    f9:49:c6:dc:d9:15:4c:f8:cc:37:4f:c5:98:d4:8e:
                    80:ed:c0:4a:61:92:22:e1:59:a1:c6:63:71:f5:bc:
                    ce:6e:95:3f:e9:59:6c:a1:3e:ee:53:78:53:cf:a1:
                    8e:e6:1a:7e:14:e9:1f:d1:92:a8:cd:3b:c6:4c:f5:
                    3b:5a:53:4e:84:81:54:69:2a:6e:8e:74:a2:f2:f1:
                    69:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A7:50:FF:CC:70:E7:81:2E:56:F8:5B:83:81:5B:03:B9:1A:E3:F2
            X509v3 Authority Key Identifier:
                keyid:D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38322e302f32332d3233203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:2a:87:45:4a:a2:a8:0e:e7:40:c8:f5:b4:54:c7:ab:a5:f8:
         5b:0e:8a:7d:d5:40:29:2a:41:4a:33:41:ae:3f:52:20:bb:1d:
         d0:ea:be:79:74:65:50:01:46:70:51:4f:d3:15:30:4c:da:64:
         b7:08:3e:c2:48:65:24:cb:13:1b:1f:c7:41:71:ab:0c:9e:1f:
         10:01:f2:9a:98:1c:df:be:e9:6a:9e:4a:1e:d2:0e:fd:4e:95:
         eb:20:03:fe:c5:6b:5f:40:ff:43:85:07:9d:4a:02:a1:04:af:
         6c:93:4f:f5:be:c9:c6:d2:5d:0c:0f:ee:e0:ca:45:bc:16:d3:
         ed:7a:df:ba:5e:5f:ba:4c:cb:ba:04:2d:e7:a1:8e:bf:a4:6d:
         4d:b6:7f:a7:e4:1a:16:82:53:26:e1:7c:f5:f2:23:af:ef:f8:
         4f:0c:a5:94:d5:4d:3c:58:44:b8:05:f4:4d:bb:56:9e:d8:1a:
         01:5e:c3:97:f5:c6:55:ed:fd:e0:14:c9:6a:cf:45:24:41:b2:
         9c:84:45:fd:54:eb:68:f4:96:41:e1:96:a8:24:83:20:55:64:
         6d:23:fc:14:db:18:18:c5:fb:e8:19:0f:08:42:d0:e6:57:14:
         08:1a:6d:4e:5c:e0:22:e7:4f:ac:2e:6b:48:de:3c:f0:61:56:
         7a:0d:d8:00
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTE6pkmaKEJRpDnea2a8YbQvBws4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlBRUVFN0JDQjNEODFFQUFENjFGMDdGNjlBOUIwNTk3
OEY1ODBFQzAeFw0yNTEwMDEyMjAyMDhaFw0yNjA5MzAyMjA3MDhaMDMxMTAvBgNV
BAMTKEIwQTc1MEZGQ0M3MEU3ODEyRTU2Rjg1QjgzODE1QjAzQjkxQUUzRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm2WMj/V/4NAkvYGnygWuqVqQG
yE3U+xoPRURHc4cMSm6XUeT8eIaWHCkHqBtuvQtzocHtij6ZIgxjbeYpxxj5WPDY
YVyc2J5Yu4Kc8y7sOlPY5E0PY0MDN6DsA5oXvrPkUO3yhjWmCnzqgW1BjWGz92tk
7cmeIZpjAGwtlGHkL5NOWa82Uiio6Niqyy5lQntsuQPynEBDUyH4CPHlBU0zsMse
s+mklB0RqGc/01B4nzLTl/lJxtzZFUz4zDdPxZjUjoDtwEphkiLhWaHGY3H1vM5u
lT/pWWyhPu5TeFPPoY7mGn4U6R/RkqjNO8ZM9TtaU06EgVRpKm6OdKLy8WkfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsKdQ/8xw54EuVvhbg4FbA7ka4/IwHwYDVR0j
BBgwFoAU2a7ue8s9geqtYfB/aamwWXj1gOwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNyNUh0TnVhQnRmcUNEM0xiVmdHb2F3dmlyaXdWNk5YWXlwYmEzcmFX
UG4vMC9EOUFFRUU3QkNCM0Q4MUVBQUQ2MUYwN0Y2OUE5QjA1OTc4RjU4MEVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5QUVFRTdCQ0IzRDgxRUFB
RDYxRjA3RjY5QTlCMDU5NzhGNTgwRUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzcjVIdE51YUJ0ZnFDRDNMYlZnR29hd3Zpcml3VjZOWFl5cGJhM3JhV1BuLzAv
MzEzNjM4MmUzMjMzMzIyZTM4MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzOTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGo6FIwDQYJKoZIhvcNAQELBQADggEBACgqh0VK
oqgO50DI9bRUx6ul+FsOin3VQCkqQUozQa4/UiC7HdDqvnl0ZVABRnBRT9MVMEza
ZLcIPsJIZSTLExsfx0FxqwyeHxAB8pqYHN++6WqeSh7SDv1OlesgA/7Fa19A/0OF
B51KAqEEr2yTT/W+ycbSXQwP7uDKRbwW0+1637peX7pMy7oELeehjr+kbU22f6fk
GhaCUybhfPXyI6/v+E8MpZTVTTxYRLgF9E27Vp7YGgFew5f1xlXt/eAUyWrPRSRB
spyERf1U62j0lkHhlqgkgyBVZG0j/BTbGBjF++gZDwhC0OZXFAgabU5c4CLnT6wu
a0jePPBhVnoN2AA=
-----END CERTIFICATE-----
Generated at Tue Oct 21 05:57:41 2025 by rpki-client