Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/3138312e3233322e3232302e302f32322d3234203d3e20323732353432.roa
File:                     3138312e3233322e3232302e302f32322d3234203d3e20323732353432.roa (raw, json)
Hash identifier:          xRmHlFOqGbToRzEylPmNIUjBmsbQJGMNX1diCL+tOt0=
Subject key identifier:   98:27:C3:C4:0E:08:D1:2F:95:78:63:D2:4D:AD:95:30:93:2D:8D:C6
Certificate issuer:       /CN=03360C354BF0A76D3F0C6022D902E9A4E301E510
Certificate serial:       483C73A2A9D43F34224B2DE78D8E4EFC448E0FA0
Authority key identifier: 03:36:0C:35:4B:F0:A7:6D:3F:0C:60:22:D9:02:E9:A4:E3:01:E5:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03360C354BF0A76D3F0C6022D902E9A4E301E510.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/3138312e3233322e3232302e302f32322d3234203d3e20323732353432.roa
Signing time:             Tue 14 Oct 2025 23:58:29 +0000
ROA not before:           Tue 14 Oct 2025 23:53:29 +0000
ROA not after:            Tue 13 Oct 2026 23:58:29 +0000
asID:                     272542
IP address blocks:        181.232.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/03360C354BF0A76D3F0C6022D902E9A4E301E510.crl
                          rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/03360C354BF0A76D3F0C6022D902E9A4E301E510.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03360C354BF0A76D3F0C6022D902E9A4E301E510.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3c:73:a2:a9:d4:3f:34:22:4b:2d:e7:8d:8e:4e:fc:44:8e:0f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03360C354BF0A76D3F0C6022D902E9A4E301E510
        Validity
            Not Before: Oct 14 23:53:29 2025 GMT
            Not After : Oct 13 23:58:29 2026 GMT
        Subject: CN=9827C3C40E08D12F957863D24DAD9530932D8DC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:4e:8f:53:56:6b:49:10:88:ac:35:78:7e:
                    d9:28:f9:e2:db:79:54:7b:49:dd:24:eb:6b:ac:52:
                    0d:68:ae:8c:4b:04:c5:9f:9c:27:1c:ad:4a:64:07:
                    d1:2b:b6:5c:a8:ef:e5:8f:01:d8:39:db:3a:24:4d:
                    7f:61:f1:91:fb:f1:d5:10:62:6c:4e:7e:2d:7d:ff:
                    b2:9e:e7:86:0f:76:1b:68:4d:ff:ae:d2:0a:20:67:
                    84:78:31:4d:42:60:27:90:64:98:49:fe:95:d5:d0:
                    5e:de:ca:10:00:38:ba:c0:35:f3:20:74:79:53:eb:
                    c4:13:d6:a9:00:cc:69:59:90:96:35:02:06:72:42:
                    b5:11:64:dd:06:bb:2c:ed:05:de:af:12:f0:e9:96:
                    4d:a6:97:db:c3:72:82:79:68:11:b7:60:d5:ef:c9:
                    ba:d3:3a:e2:4b:ac:d8:3b:3e:a0:94:ce:23:7a:41:
                    2c:38:15:66:2b:fd:48:a2:5e:31:ed:f1:c4:37:8e:
                    12:e6:cf:9b:1d:e3:98:09:2c:86:0a:9e:80:4f:b0:
                    30:5b:74:a5:1b:96:cc:6c:90:b3:68:bc:93:dd:9e:
                    27:fe:a4:2d:81:98:69:6c:e3:d5:cf:00:24:2c:1f:
                    97:18:67:0e:16:8a:a8:16:82:28:00:52:65:b9:3a:
                    b3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:27:C3:C4:0E:08:D1:2F:95:78:63:D2:4D:AD:95:30:93:2D:8D:C6
            X509v3 Authority Key Identifier:
                keyid:03:36:0C:35:4B:F0:A7:6D:3F:0C:60:22:D9:02:E9:A4:E3:01:E5:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/03360C354BF0A76D3F0C6022D902E9A4E301E510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03360C354BF0A76D3F0C6022D902E9A4E301E510.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/3138312e3233322e3232302e302f32322d3234203d3e20323732353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:0f:35:ff:04:b7:2a:b0:19:a6:cb:7a:86:c2:3a:21:b7:ee:
         9a:5a:f0:a8:14:72:fb:c7:23:ab:14:c7:73:86:85:7b:c5:c9:
         02:0d:3b:a7:70:48:e4:66:e2:cc:0f:6e:73:cd:b0:7f:06:98:
         d2:bd:ae:a0:c0:52:95:67:50:6b:fd:50:da:6a:57:b9:5d:f4:
         79:9c:a6:2e:99:86:52:7c:44:fc:15:87:bd:2e:a6:c3:62:19:
         ae:e7:af:4a:44:96:d1:38:e2:d8:2d:d9:a8:43:a8:07:f2:94:
         cb:87:b2:6c:59:52:3b:42:35:98:4b:07:ea:e8:24:0f:fd:5c:
         24:26:7a:ef:93:35:42:37:f2:7c:58:e0:c0:55:8c:e1:0b:06:
         b5:97:6d:37:44:b2:3f:42:17:56:35:d6:d6:77:9a:d9:32:10:
         33:65:fa:00:f8:e1:cb:01:42:59:b4:c9:a0:2d:67:a9:35:e9:
         14:07:aa:24:92:79:39:1a:0c:a2:64:bc:8e:be:c0:46:48:bf:
         c9:40:1f:0b:5c:d8:6b:51:94:58:ea:fb:03:c5:fe:24:5b:99:
         bb:a0:2b:e8:a0:63:aa:2d:f5:14:4e:7a:71:57:66:d6:0c:8c:
         c1:b0:55:17:ea:72:fe:5e:04:e8:fc:bd:5a:3c:c3:ba:96:35:
         54:8c:0b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:39:03 2025 by rpki-client