Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136382e302f32342d3234203d3e20323632393839.roa
File:                     3139302e3130332e3136382e302f32342d3234203d3e20323632393839.roa (raw, json)
Hash identifier:          p3zhfefDioKfx2RGIDWkeaVkWDoUh3Mcrl9EnuZn7Og=
Subject key identifier:   49:02:8A:C2:62:CC:FD:D7:EF:32:43:1B:40:4B:CE:7C:C8:2B:22:82
Certificate issuer:       /CN=6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8
Certificate serial:       593259797933B4BC2F9C6DBCC095EC47514F99D2
Authority key identifier: 69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136382e302f32342d3234203d3e20323632393839.roa
Signing time:             Tue 07 Oct 2025 17:16:37 +0000
ROA not before:           Tue 07 Oct 2025 17:11:37 +0000
ROA not after:            Tue 06 Oct 2026 17:16:37 +0000
asID:                     262989
IP address blocks:        190.103.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:32:59:79:79:33:b4:bc:2f:9c:6d:bc:c0:95:ec:47:51:4f:99:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8
        Validity
            Not Before: Oct  7 17:11:37 2025 GMT
            Not After : Oct  6 17:16:37 2026 GMT
        Subject: CN=49028AC262CCFDD7EF32431B404BCE7CC82B2282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:32:e4:bc:cb:2e:0d:df:3f:db:a3:28:75:9e:
                    d2:c7:42:98:49:f6:a9:c9:02:c1:e4:f4:87:c0:3d:
                    68:3d:93:c0:c1:ae:24:75:95:57:0b:88:ab:14:14:
                    98:3b:6d:58:f3:2a:de:6d:bc:ab:0e:c7:e9:0d:52:
                    2c:28:e2:4d:bc:41:56:5b:e9:33:44:85:88:19:ed:
                    f9:85:39:63:ca:f2:56:f4:3b:9c:fb:37:d3:ca:0e:
                    8d:ca:4a:dc:fe:e5:aa:5b:f3:d2:8a:77:98:73:89:
                    78:a2:20:8f:f3:0b:30:ac:fd:52:a6:2a:a0:7b:7e:
                    97:45:8d:c8:f5:17:83:cf:ff:3e:bb:78:a4:7a:5f:
                    be:c1:22:8e:2f:0e:b2:99:5f:62:5c:6e:11:f8:de:
                    63:70:34:4c:8d:4d:31:92:5f:d1:22:53:9c:7d:78:
                    44:cf:5c:1c:87:0d:e5:73:74:4c:51:28:5b:a8:ca:
                    83:14:c1:5b:46:e3:e1:5b:e2:65:39:71:8e:e8:d5:
                    b3:e0:21:d1:c9:74:c3:b2:dc:03:1a:34:a0:12:02:
                    9f:ea:05:e3:00:fd:6d:11:4b:6c:7e:b2:c6:78:9f:
                    37:34:7a:bf:7b:a2:f3:db:ec:1e:d3:00:0e:75:93:
                    00:80:a3:97:80:9d:30:28:9f:e8:be:96:9c:cb:06:
                    43:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:02:8A:C2:62:CC:FD:D7:EF:32:43:1B:40:4B:CE:7C:C8:2B:22:82
            X509v3 Authority Key Identifier:
                keyid:69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136382e302f32342d3234203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:9c:91:bd:3b:88:76:05:78:e9:a4:c7:27:ca:61:1a:7e:a9:
         bf:c1:b9:33:a4:2f:fe:5c:9c:ff:e7:70:3b:9e:ed:86:d4:cb:
         b5:d4:e4:4e:27:7b:21:cb:6d:f8:4f:bc:84:cd:71:b0:23:da:
         b9:c2:1d:80:eb:ac:fd:85:97:1a:22:61:75:1f:c5:c7:11:ae:
         ae:b4:c4:ad:17:b5:4b:a9:f6:9d:46:dd:60:f8:8e:6b:03:c2:
         c9:f8:34:58:0f:6a:2a:ce:ec:3d:a6:eb:46:97:b0:1d:92:be:
         79:af:9a:b7:e8:ad:38:4f:9d:e2:0c:25:a3:f1:66:e1:ed:f6:
         d2:7d:86:9e:3b:a1:42:55:fe:80:90:82:8f:ce:48:31:8d:20:
         f3:a3:df:50:14:ae:20:17:27:90:ed:5f:6c:69:c9:09:a1:2f:
         b8:80:19:0c:b0:32:8d:1e:e5:44:a5:bf:69:0f:ed:fd:69:f8:
         24:0d:9a:91:f8:a8:88:52:cd:4b:5d:d3:51:f9:23:4d:1a:bb:
         5a:d1:cd:47:84:62:4a:e9:85:14:cb:96:4c:bd:8a:52:fa:ed:
         6e:e7:28:e4:53:3b:b3:73:79:b1:64:b5:24:07:dc:9a:fe:d5:
         70:cd:7b:74:1d:7f:27:38:b1:ff:8b:09:93:66:5e:23:f9:7d:
         0a:f3:c4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:25 2025 by rpki-client