Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3136382e3233322e3232302e302f32322d3332203d3e20323633363134.roa
File:                     3136382e3233322e3232302e302f32322d3332203d3e20323633363134.roa (raw, json)
Hash identifier:          SSpL4BGoMz2k8jMxASGNw8sxc3SoRqRXzUJjtI/QT14=
Subject key identifier:   62:D8:FB:56:7F:17:74:9A:47:12:CB:06:4F:EA:BB:8A:91:93:B4:61
Certificate issuer:       /CN=E453E20A56024AF3442573067B74ACA8B5BA9A21
Certificate serial:       7332D025C2C28BB9193720F99B139183C51C5F3E
Authority key identifier: E4:53:E2:0A:56:02:4A:F3:44:25:73:06:7B:74:AC:A8:B5:BA:9A:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3136382e3233322e3232302e302f32322d3332203d3e20323633363134.roa
Signing time:             Wed 24 Sep 2025 14:18:12 +0000
ROA not before:           Wed 24 Sep 2025 14:13:12 +0000
ROA not after:            Wed 23 Sep 2026 14:18:12 +0000
asID:                     263614
IP address blocks:        168.232.220.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.crl
                          rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 01:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:32:d0:25:c2:c2:8b:b9:19:37:20:f9:9b:13:91:83:c5:1c:5f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E453E20A56024AF3442573067B74ACA8B5BA9A21
        Validity
            Not Before: Sep 24 14:13:12 2025 GMT
            Not After : Sep 23 14:18:12 2026 GMT
        Subject: CN=62D8FB567F17749A4712CB064FEABB8A9193B461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:7b:17:23:59:45:3d:9f:22:28:e8:86:53:
                    91:2c:9a:f7:22:f6:2e:b5:2c:0d:6e:3f:6e:81:81:
                    68:ad:e2:8a:9f:c1:7a:5f:6a:ef:be:39:d7:7b:2a:
                    94:69:55:9b:df:71:58:e4:59:6e:a8:46:ef:ba:5b:
                    d5:1c:98:5e:2f:2d:39:25:b2:f2:c8:d5:6e:3a:a3:
                    60:47:5a:b5:49:15:3d:dc:a2:f2:84:d2:c6:df:db:
                    bc:94:ec:a4:60:28:b8:aa:d4:b4:86:22:b7:89:9f:
                    fa:e1:4c:14:de:c3:0f:7a:83:c3:38:0f:dd:7b:ba:
                    ad:dd:99:0b:80:0c:d5:a1:f1:98:95:a0:a1:ba:3a:
                    0f:47:d8:0f:8c:02:e5:02:79:5b:17:db:6e:7b:a4:
                    3f:42:65:41:50:2d:f5:71:79:0b:03:9b:bf:60:99:
                    9b:74:a4:4d:14:da:26:15:9f:d6:fb:84:60:e1:1f:
                    b8:b3:5c:49:73:2e:6d:5f:ed:d5:e7:fc:9a:16:c3:
                    ac:4a:f7:29:c8:e4:26:a7:92:22:55:4f:1a:1e:8d:
                    6c:72:94:83:c8:ed:c7:96:33:9e:59:b5:9a:e9:f8:
                    4c:6d:6e:5b:67:cc:5d:0c:53:06:22:bb:a6:ad:6c:
                    e9:f1:8f:a3:99:b5:da:17:bb:d3:4e:c6:ef:42:d9:
                    8f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D8:FB:56:7F:17:74:9A:47:12:CB:06:4F:EA:BB:8A:91:93:B4:61
            X509v3 Authority Key Identifier:
                keyid:E4:53:E2:0A:56:02:4A:F3:44:25:73:06:7B:74:AC:A8:B5:BA:9A:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3136382e3233322e3232302e302f32322d3332203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:fb:f8:fa:65:ad:7e:04:71:2f:f4:65:a6:a1:c5:5d:05:4c:
         ed:f4:1c:cf:b8:e0:ae:e7:fb:02:eb:36:08:36:83:92:78:47:
         da:78:6f:13:af:37:ce:e9:0a:71:71:0a:d1:a5:ee:cb:90:4f:
         bf:4d:f7:74:76:74:b5:b1:ea:6b:87:ed:c9:17:b4:02:05:64:
         a0:c4:08:3a:91:e1:aa:4a:3c:3e:ee:88:0d:f0:45:b5:d1:14:
         43:e0:84:47:62:f3:b5:4f:3f:0b:0d:f8:f5:f8:e1:b9:e6:91:
         4d:90:a3:68:10:fe:81:0f:db:c2:12:91:c0:4f:79:fb:a5:3a:
         ed:ed:12:5a:2a:0d:75:0e:88:4b:4a:c0:5d:bf:47:f5:00:f9:
         7e:04:ce:57:c9:eb:e0:7d:44:00:6d:a3:26:2a:29:63:e3:ef:
         20:e9:29:fe:9b:ab:3e:77:c0:36:3f:34:a0:aa:6a:46:84:5a:
         54:b2:c6:ed:82:f6:50:62:1e:54:e3:3d:08:9c:c6:4f:a0:c4:
         39:54:f3:40:0f:81:9c:fd:97:f5:c7:8d:f0:72:4e:1a:a1:6b:
         c5:be:3e:74:20:b9:f4:9a:38:62:8c:9a:d5:ad:fe:a8:c2:92:
         97:3e:56:97:bb:71:f3:5d:66:5f:0b:71:41:0a:b0:75:78:22:
         98:1b:1e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:41:15 2025 by rpki-client