Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e36382e302f32332d3233203d3e20323633333535.roa
File:                     3139312e33372e36382e302f32332d3233203d3e20323633333535.roa (raw, json)
Hash identifier:          gBl1cVZBL9epoMEN1FsxNs+G9G1veszGKPXalic5j7I=
Subject key identifier:   9F:27:8C:AD:95:53:51:4E:EF:F8:13:C6:43:C7:01:13:A9:FE:E8:10
Certificate issuer:       /CN=2A6676986C812A17B00635484B147B51B75ADD4B
Certificate serial:       77F4B54B602DC64E960EDEAD76D6F517A4C18A31
Authority key identifier: 2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e36382e302f32332d3233203d3e20323633333535.roa
Signing time:             Tue 23 Sep 2025 18:08:07 +0000
ROA not before:           Tue 23 Sep 2025 18:03:07 +0000
ROA not after:            Tue 22 Sep 2026 18:08:07 +0000
asID:                     263355
IP address blocks:        191.37.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl
                          rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f4:b5:4b:60:2d:c6:4e:96:0e:de:ad:76:d6:f5:17:a4:c1:8a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6676986C812A17B00635484B147B51B75ADD4B
        Validity
            Not Before: Sep 23 18:03:07 2025 GMT
            Not After : Sep 22 18:08:07 2026 GMT
        Subject: CN=9F278CAD9553514EEFF813C643C70113A9FEE810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:06:6e:df:77:58:bd:9d:e4:74:fb:76:cd:07:
                    5c:76:1f:3f:c4:83:96:c9:b7:aa:f0:87:29:7a:95:
                    7c:39:49:53:1d:9f:b6:2a:0b:d2:4e:e3:bc:17:22:
                    7a:72:76:c3:37:cc:c1:13:e2:a0:22:6a:d0:8e:11:
                    88:c7:4f:5c:d4:b7:e8:31:1c:55:54:79:17:8e:74:
                    fc:28:67:1d:3c:14:27:4a:2c:02:04:19:95:e7:cc:
                    a4:c8:57:8a:43:9d:f4:a8:2d:52:08:ba:ce:5e:9d:
                    c1:a7:31:16:75:8a:62:ae:d5:72:29:34:98:b8:ce:
                    a5:43:26:2f:ed:3b:83:33:08:e6:6e:b5:a9:67:ad:
                    ab:da:b7:f6:76:5e:3e:39:58:35:54:24:dd:66:1a:
                    82:26:62:e8:30:18:9d:a6:db:44:99:5b:cf:2a:8c:
                    50:c4:29:55:55:13:a2:79:0e:f0:65:1d:fc:6d:5d:
                    41:c9:f4:84:75:d3:7d:e8:d4:a9:a5:b8:70:cd:a8:
                    46:da:19:31:59:e5:83:5a:80:de:47:35:31:02:b6:
                    6f:1b:bb:ac:9b:ab:60:8e:27:28:7a:e8:56:3d:5a:
                    f8:dd:be:c8:ea:5b:45:c2:4d:92:43:2e:97:a0:0f:
                    21:03:8a:e6:eb:5f:11:13:39:9b:4c:80:6c:66:68:
                    80:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:27:8C:AD:95:53:51:4E:EF:F8:13:C6:43:C7:01:13:A9:FE:E8:10
            X509v3 Authority Key Identifier:
                keyid:2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e36382e302f32332d3233203d3e20323633333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:a8:4e:14:c7:bf:d6:19:23:c1:7a:60:17:05:df:ba:81:1d:
         e5:da:4a:2f:7e:80:7e:5e:2d:e5:fd:c7:59:d4:b7:8a:7c:be:
         5b:02:a9:e2:3c:3a:31:3d:d3:c2:6c:01:b7:81:9d:9c:a9:e2:
         97:fc:21:e4:e4:94:7b:46:44:fd:6f:27:79:d6:2b:24:3e:0d:
         be:5e:a6:53:fa:08:a1:e5:93:94:a3:6f:a8:c5:5b:a4:43:f3:
         3a:02:89:0f:72:de:62:1a:cd:1a:bf:ce:1a:d9:21:78:6e:d5:
         6f:6a:81:a5:30:cc:cd:5e:99:02:b3:83:cc:f7:08:33:18:c6:
         d1:e2:bb:5c:71:44:47:6a:5d:e5:0e:9d:67:1e:e6:2b:d0:80:
         1e:f1:17:00:65:ed:1b:d4:12:22:5b:81:d0:d5:c8:71:e4:71:
         88:62:e1:75:2f:89:01:cb:6b:cb:6d:e7:8f:41:8b:8c:74:0f:
         ca:56:5f:20:70:58:30:97:1c:60:de:2f:97:23:b5:05:24:67:
         ef:7a:9b:29:04:41:18:e7:2c:20:ff:61:09:f7:42:60:c6:40:
         db:6e:1e:83:18:d9:b7:08:e9:40:98:ee:87:91:54:fb:c1:96:
         41:2e:a1:de:60:ef:69:ff:a6:70:cf:b4:34:f3:e6:1a:d6:ec:
         8a:85:d5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:03:53 2025 by rpki-client