Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138392e38342e3133362e302f32312d3231203d3e20323632393839.roa
File:                     3138392e38342e3133362e302f32312d3231203d3e20323632393839.roa (raw, json)
Hash identifier:          qaF9Q/vSh/jgOYymHutUAiNMvEiL36nNGTHl2/5jSTw=
Subject key identifier:   B9:B4:6A:AD:91:15:A4:5F:78:53:A3:6C:16:4F:2E:BF:9A:29:18:87
Certificate issuer:       /CN=6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8
Certificate serial:       0EE2D225899D9F38E06BE4D60E4AC214E7AE6858
Authority key identifier: 69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138392e38342e3133362e302f32312d3231203d3e20323632393839.roa
Signing time:             Tue 07 Oct 2025 17:16:39 +0000
ROA not before:           Tue 07 Oct 2025 17:11:39 +0000
ROA not after:            Tue 06 Oct 2026 17:16:39 +0000
asID:                     262989
IP address blocks:        189.84.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e2:d2:25:89:9d:9f:38:e0:6b:e4:d6:0e:4a:c2:14:e7:ae:68:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8
        Validity
            Not Before: Oct  7 17:11:39 2025 GMT
            Not After : Oct  6 17:16:39 2026 GMT
        Subject: CN=B9B46AAD9115A45F7853A36C164F2EBF9A291887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:20:73:b2:bc:08:10:90:f5:49:f5:37:de:
                    e4:ce:f9:65:34:94:d0:53:ae:f0:93:4e:22:4c:c9:
                    82:d5:eb:3c:8a:3b:41:a1:2f:b0:3a:0e:58:24:77:
                    7a:e0:05:30:5d:c5:b3:2f:73:38:6e:ef:17:4d:09:
                    f4:4d:b4:e1:b6:aa:b5:c5:9d:1b:c9:98:4e:c5:f7:
                    4f:b6:87:cf:09:69:88:a1:93:ea:de:2f:6d:56:dc:
                    4e:d1:cd:ae:40:87:62:e0:a9:7a:af:fa:05:c1:51:
                    c5:ae:d3:9b:00:23:88:39:c2:07:0e:5d:67:45:56:
                    53:08:36:c8:3d:e1:84:00:e2:b7:af:8b:51:43:af:
                    bf:29:29:7d:c5:1c:58:08:9c:53:c6:0e:38:6e:3c:
                    c4:0a:a5:31:89:de:9b:0d:f1:17:35:74:f2:fc:ab:
                    9f:7d:53:f9:ea:c1:28:39:c6:ed:fa:48:31:b5:5c:
                    95:f7:7a:fb:e5:6e:29:06:4a:3c:d6:88:ae:ec:ad:
                    29:22:39:ba:d6:11:1d:69:59:7f:cc:19:3d:84:13:
                    cf:0a:21:72:a2:8f:e5:fc:63:eb:ea:1c:8e:c2:45:
                    dd:30:f0:77:33:85:8c:eb:01:d3:97:3f:e4:f6:d7:
                    6b:6a:c9:59:7c:59:03:3b:8b:f6:94:03:8a:68:72:
                    ef:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B4:6A:AD:91:15:A4:5F:78:53:A3:6C:16:4F:2E:BF:9A:29:18:87
            X509v3 Authority Key Identifier:
                keyid:69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138392e38342e3133362e302f32312d3231203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:f6:03:af:44:38:74:03:00:2c:0e:73:7a:ad:9a:54:aa:22:
         61:83:20:d3:d5:59:97:f8:20:23:97:5c:c6:1b:49:9a:8d:b8:
         21:70:22:79:54:e8:38:67:0c:49:86:15:36:7b:cc:c0:a0:58:
         49:f4:3f:a9:ea:66:66:d7:93:ef:03:05:c3:4b:cc:de:d7:1a:
         f3:d2:02:8e:58:ef:9e:34:92:55:77:ab:0a:2a:bc:d6:12:0a:
         b5:ba:12:22:f9:db:ee:a4:7d:b2:24:4a:50:75:6c:3d:c9:f7:
         79:a5:22:dc:fb:2f:b7:ff:3e:b0:d4:26:59:c6:4b:9b:ba:52:
         e5:bf:34:e8:c1:76:04:88:c1:79:7e:60:b7:0c:cf:da:ae:fe:
         e9:c5:e9:2f:69:6b:46:b6:20:d7:b3:ef:db:43:41:63:a3:8a:
         20:9d:dc:23:13:dd:a4:6c:e8:e3:68:9d:04:1c:c0:87:09:db:
         f3:48:eb:64:4f:1b:fe:b4:58:20:04:16:8f:cf:1a:07:9c:7f:
         00:e6:d8:d4:6e:b7:7b:71:11:0b:5e:e6:c0:e0:4f:2c:e8:4c:
         5d:fc:22:98:96:33:44:5e:47:b5:5a:77:07:12:46:0b:41:c6:
         2e:06:d0:1e:4b:d8:af:d8:96:b9:44:67:98:e1:18:14:f6:64:
         f4:ae:3f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:36 2025 by rpki-client