Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/3133382e39392e3136362e302f32342d3234203d3e20323634323131.roa
File:                     3133382e39392e3136362e302f32342d3234203d3e20323634323131.roa (raw, json)
Hash identifier:          sNgxlZk2ma9RmJkEps2bSn9FSgfaDK8Ywb+EDJLYvMA=
Subject key identifier:   52:FF:D6:44:75:1D:6D:AC:96:79:E1:20:2D:E5:11:B1:71:DC:6C:BC
Certificate issuer:       /CN=916B2689E54D248C6020BC30FDA122F25B14FE87
Certificate serial:       2BFDB3A3110FD3285BDC7160B683E78C26855302
Authority key identifier: 91:6B:26:89:E5:4D:24:8C:60:20:BC:30:FD:A1:22:F2:5B:14:FE:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/3133382e39392e3136362e302f32342d3234203d3e20323634323131.roa
Signing time:             Sun 10 Aug 2025 17:09:39 +0000
ROA not before:           Sun 10 Aug 2025 17:04:39 +0000
ROA not after:            Sun 09 Aug 2026 17:09:39 +0000
asID:                     264211
IP address blocks:        138.99.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.crl
                          rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 13:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:fd:b3:a3:11:0f:d3:28:5b:dc:71:60:b6:83:e7:8c:26:85:53:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916B2689E54D248C6020BC30FDA122F25B14FE87
        Validity
            Not Before: Aug 10 17:04:39 2025 GMT
            Not After : Aug  9 17:09:39 2026 GMT
        Subject: CN=52FFD644751D6DAC9679E1202DE511B171DC6CBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:b7:02:d4:7a:39:33:35:01:29:7e:07:69:
                    45:cf:55:a6:dc:d6:85:ad:88:5b:e0:83:ac:7a:c9:
                    c7:7f:8c:d4:ab:cb:f8:13:2f:2d:e5:ca:4a:c5:e2:
                    6e:38:e1:e7:63:53:d5:1d:21:56:79:75:f2:63:1d:
                    a0:5e:00:a0:90:5d:2a:6d:45:63:17:86:e2:cd:cb:
                    e5:26:3a:88:25:92:93:f0:75:d7:63:db:ea:76:44:
                    ff:ef:61:75:d5:cb:b1:e7:73:82:56:0b:14:97:81:
                    f8:b6:de:78:99:f1:d4:5b:ac:97:fe:4e:b0:4d:75:
                    ce:61:4a:df:8b:67:73:0c:29:79:45:b4:dd:e1:c6:
                    26:cd:cb:77:ed:ac:e7:1e:69:f8:3e:d6:4a:91:f2:
                    bb:04:a4:4b:b1:21:57:02:01:7b:70:42:5a:35:27:
                    1b:f5:42:b6:9a:73:c9:fc:3e:6f:03:fe:5d:90:b0:
                    67:ae:2c:73:27:fb:67:71:ed:c5:1c:0b:f3:62:a7:
                    a6:57:bd:56:71:0a:56:fe:a6:3b:e3:a2:39:40:6d:
                    06:b6:04:29:d7:40:3f:d8:ca:a7:e7:8f:51:86:e3:
                    63:d1:1c:39:b2:21:bc:25:f5:d5:2f:2e:fa:29:87:
                    99:91:30:dd:e5:b4:44:cd:f1:d8:a8:53:95:18:21:
                    ad:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FF:D6:44:75:1D:6D:AC:96:79:E1:20:2D:E5:11:B1:71:DC:6C:BC
            X509v3 Authority Key Identifier:
                keyid:91:6B:26:89:E5:4D:24:8C:60:20:BC:30:FD:A1:22:F2:5B:14:FE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/3133382e39392e3136362e302f32342d3234203d3e20323634323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:e5:b3:49:ef:89:ee:13:9d:26:12:d6:50:ee:a1:07:f5:8f:
         b5:12:db:aa:8a:8a:18:ea:26:4f:48:cf:a1:a7:4a:6d:ca:b1:
         e9:53:95:3a:58:c9:59:0a:02:e2:b2:43:e0:5a:b6:09:71:aa:
         36:bb:a1:63:8a:3e:50:2d:88:f4:38:c9:37:8d:7d:31:db:4a:
         0a:b0:3e:9a:7e:26:89:d3:94:66:a6:90:a2:f4:e3:05:0b:ba:
         1c:15:e0:f3:5d:01:43:e9:1a:3e:e2:84:36:d6:b1:ba:d9:71:
         e5:14:c4:d6:44:d1:6a:c7:6f:3c:2e:6d:55:0d:1b:9c:c3:07:
         02:e7:9b:80:2c:ec:27:79:d6:22:b3:4a:01:0d:96:ce:db:21:
         52:2a:18:0c:f4:d9:6e:c0:ee:a7:f0:89:1c:85:f0:02:a3:8b:
         8f:94:1e:ec:b2:c2:b8:3b:a4:92:84:81:a4:03:76:40:c4:40:
         da:0a:bd:c0:c6:fb:e4:ec:7b:c7:65:fc:14:88:96:36:6e:0b:
         5e:26:f3:06:e9:05:79:3c:df:e5:6d:04:e1:34:04:eb:96:b1:
         04:b7:0a:cf:26:12:24:1d:98:48:b3:9f:61:06:72:c8:a9:48:
         6c:d8:a3:6b:d5:30:6f:85:1a:a1:69:dc:6a:cf:b0:77:8d:fc:
         a1:a6:1f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:54 2025 by rpki-client