Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3136382e39302e32342e302f32322d3234203d3e20323633333231.roa
File:                     3136382e39302e32342e302f32322d3234203d3e20323633333231.roa (raw, json)
Hash identifier:          TbL6gt6S4GcpxH/TvwBKa6RqSOcFFh/GBfAIBHH9uRE=
Subject key identifier:   1F:28:C4:94:25:3D:B2:AD:03:FD:37:41:5B:78:DB:06:03:E1:BB:0D
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       132D5C94D0894C62B555D195650B8CE7CC2968EF
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3136382e39302e32342e302f32322d3234203d3e20323633333231.roa
Signing time:             Fri 03 Oct 2025 01:29:35 +0000
ROA not before:           Fri 03 Oct 2025 01:24:35 +0000
ROA not after:            Fri 02 Oct 2026 01:29:35 +0000
asID:                     263321
IP address blocks:        168.90.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl
                          rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2d:5c:94:d0:89:4c:62:b5:55:d1:95:65:0b:8c:e7:cc:29:68:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: Oct  3 01:24:35 2025 GMT
            Not After : Oct  2 01:29:35 2026 GMT
        Subject: CN=1F28C494253DB2AD03FD37415B78DB0603E1BB0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:46:0b:37:e1:94:fa:99:a6:5e:1b:45:ac:05:
                    5a:e9:81:6b:31:57:d6:80:7a:25:68:a1:bb:68:3e:
                    4a:dc:d2:65:6a:f1:f6:5c:13:de:84:f6:ac:e8:f1:
                    8b:b3:ae:02:42:0e:66:59:58:a3:0a:9f:b0:bc:da:
                    ec:ec:39:60:ee:d3:52:d0:1a:d6:a6:52:8f:c5:0e:
                    96:c6:2f:6d:3c:7e:d2:31:45:d8:4b:46:54:9c:d7:
                    66:2c:8e:4b:00:b7:7e:6f:11:4b:f8:79:30:3d:04:
                    fe:47:55:31:52:2c:cd:ca:2f:ce:05:3f:56:ed:78:
                    a1:24:db:d3:b3:c6:59:d3:0d:9d:d8:47:13:b3:b0:
                    34:37:16:78:24:22:c4:51:05:4b:60:90:46:80:20:
                    9c:b8:e2:bc:20:3a:68:d3:3a:af:60:8f:e7:06:58:
                    c0:75:e7:7a:67:59:43:51:5d:ce:f0:92:63:a5:5c:
                    12:b7:62:21:6d:f0:ee:fd:24:40:df:9f:ed:88:de:
                    61:e0:52:cf:9c:82:a0:c7:5a:68:ef:e2:33:b2:2a:
                    90:e7:55:29:49:68:20:73:fa:ee:af:fa:6b:35:3e:
                    e5:0d:fd:79:75:ca:31:b0:33:0e:5c:8f:97:9f:66:
                    e5:99:dc:14:ca:e8:3a:41:40:35:7e:00:6d:b2:24:
                    61:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:28:C4:94:25:3D:B2:AD:03:FD:37:41:5B:78:DB:06:03:E1:BB:0D
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3136382e39302e32342e302f32322d3234203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:73:4d:27:58:f1:35:5b:af:e4:7a:5e:6f:25:a1:7a:c2:ce:
         9e:5b:81:b3:78:5f:b3:36:52:f3:17:16:3f:30:76:7c:73:c0:
         70:29:37:c5:13:34:e4:59:51:f5:53:29:c4:7a:34:7e:22:57:
         e7:e7:09:cf:82:01:93:5a:c4:65:5f:d8:a4:36:fb:36:86:22:
         2b:09:eb:89:22:19:cb:dd:f1:bf:c2:59:1b:03:72:9b:17:fe:
         e0:2a:f6:3e:34:5f:7e:13:44:90:bb:be:fd:8a:a6:e0:3b:13:
         ad:0e:55:75:4f:70:9a:37:e7:bb:f6:59:40:70:38:04:d8:d6:
         17:36:b3:c7:ae:f9:34:04:c1:ee:6b:02:78:55:39:c0:03:dc:
         ad:c7:6e:33:55:d3:e0:7d:52:e0:e9:d5:88:ca:15:22:b0:57:
         dd:46:75:18:ac:30:8f:68:02:fd:cd:9c:fd:7e:c6:94:92:25:
         48:6a:65:d8:f4:0e:d1:7b:91:98:7b:1b:b3:9d:06:b5:9d:9c:
         81:29:0f:1c:41:30:93:05:d1:54:86:a2:cf:fd:99:49:29:c4:
         12:33:d5:1e:cd:18:32:2e:d0:4e:25:31:a2:87:91:89:e9:4b:
         31:7c:65:a4:9f:90:e4:ca:3b:25:aa:80:27:49:93:99:a6:38:
         76:8e:be:1d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEy1clNCJTGK1VdGVZQuM58wpaO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhCRjAzNjdCNTU5MTIxNzc3QTIxQTg0RDk1M0E3MTdE
NkU4MkFFQTAeFw0yNTEwMDMwMTI0MzVaFw0yNjEwMDIwMTI5MzVaMDMxMTAvBgNV
BAMTKDFGMjhDNDk0MjUzREIyQUQwM0ZEMzc0MTVCNzhEQjA2MDNFMUJCMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoRgs34ZT6maZeG0WsBVrpgWsx
V9aAeiVoobtoPkrc0mVq8fZcE96E9qzo8YuzrgJCDmZZWKMKn7C82uzsOWDu01LQ
GtamUo/FDpbGL208ftIxRdhLRlSc12YsjksAt35vEUv4eTA9BP5HVTFSLM3KL84F
P1bteKEk29OzxlnTDZ3YRxOzsDQ3FngkIsRRBUtgkEaAIJy44rwgOmjTOq9gj+cG
WMB153pnWUNRXc7wkmOlXBK3YiFt8O79JEDfn+2I3mHgUs+cgqDHWmjv4jOyKpDn
VSlJaCBz+u6v+ms1PuUN/Xl1yjGwMw5cj5efZuWZ3BTK6DpBQDV+AG2yJGE9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUHyjElCU9sq0D/TdBW3jbBgPhuw0wHwYDVR0j
BBgwFoAUuL8DZ7VZEhd3ohqE2VOnF9boKuowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI4S205dEZvOGo5TG42MTVZa2trZzZUOHJCbmJnUGd3c2hiM2doc1Bq
SHEvMS9COEJGMDM2N0I1NTkxMjE3NzdBMjFBODREOTUzQTcxN0Q2RTgyQUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4QkYwMzY3QjU1OTEyMTc3
N0EyMUE4NEQ5NTNBNzE3RDZFODJBRUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcyOEttOXRGbzhqOUxuNjE1WWtra2c2VDhyQm5iZ1Bnd3NoYjNnaHNQakhxLzEv
MzEzNjM4MmUzOTMwMmUzMjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMz
MzMzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqFoYMA0GCSqGSIb3DQEBCwUAA4IBAQBTc00nWPE1
W6/kel5vJaF6ws6eW4GzeF+zNlLzFxY/MHZ8c8BwKTfFEzTkWVH1UynEejR+Ilfn
5wnPggGTWsRlX9ikNvs2hiIrCeuJIhnL3fG/wlkbA3KbF/7gKvY+NF9+E0SQu779
iqbgOxOtDlV1T3CaN+e79llAcDgE2NYXNrPHrvk0BMHuawJ4VTnAA9ytx24zVdPg
fVLg6dWIyhUisFfdRnUYrDCPaAL9zZz9fsaUkiVIamXY9A7Re5GYexuznQa1nZyB
KQ8cQTCTBdFUhqLP/ZlJKcQSM9UezRgyLtBOJTGih5GJ6UsxfGWkn5DkyjslqoAn
SZOZpjh2jr4d
-----END CERTIFICATE-----
Generated at Tue Oct 21 07:01:48 2025 by rpki-client