Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/3136382e3230352e3130342e302f32322d3234203d3e20323632353139.roa
File:                     3136382e3230352e3130342e302f32322d3234203d3e20323632353139.roa (raw, json)
Hash identifier:          u7jFTziinpjWAlsLMJk9e+7JdYhWkIUNYw3qzq5Fx8c=
Subject key identifier:   29:BB:68:7C:2A:E9:40:D1:42:A8:2A:58:56:EA:90:8C:4C:C0:AF:4F
Certificate issuer:       /CN=CE2498E8CE7B488EBFB105BFE2A04876600CB5A3
Certificate serial:       56BFCA8FDB2BDC57766611D80498A3DB3DE9478C
Authority key identifier: CE:24:98:E8:CE:7B:48:8E:BF:B1:05:BF:E2:A0:48:76:60:0C:B5:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/3136382e3230352e3130342e302f32322d3234203d3e20323632353139.roa
Signing time:             Fri 08 Aug 2025 19:26:03 +0000
ROA not before:           Fri 08 Aug 2025 19:21:03 +0000
ROA not after:            Fri 07 Aug 2026 19:26:03 +0000
asID:                     262519
IP address blocks:        168.205.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl
                          rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 06:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:bf:ca:8f:db:2b:dc:57:76:66:11:d8:04:98:a3:db:3d:e9:47:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2498E8CE7B488EBFB105BFE2A04876600CB5A3
        Validity
            Not Before: Aug  8 19:21:03 2025 GMT
            Not After : Aug  7 19:26:03 2026 GMT
        Subject: CN=29BB687C2AE940D142A82A5856EA908C4CC0AF4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:57:80:01:98:5a:cd:5e:50:b8:79:5e:35:e7:
                    50:fa:fd:ee:c0:db:17:9c:3b:70:73:08:40:af:22:
                    2c:73:4e:59:69:0c:87:20:50:77:c0:2a:a3:9f:5e:
                    e4:82:cc:13:12:75:e9:43:a0:d6:bc:81:29:a2:dc:
                    2a:a8:34:10:b9:67:89:0c:42:ad:f7:b1:27:a4:25:
                    2f:f0:dd:e1:96:88:c6:eb:0f:a3:55:17:fd:59:bb:
                    79:ba:9c:b8:da:ba:53:49:6f:43:6b:a3:95:1a:1c:
                    b9:ad:14:3a:56:3a:8d:7a:b1:00:28:f3:e9:3a:35:
                    38:69:a3:82:7a:5e:35:0f:6a:da:29:7b:eb:39:2e:
                    97:54:40:2a:ed:b2:38:28:35:ab:15:12:57:c5:76:
                    67:70:f1:ec:f3:76:17:25:6c:64:2e:08:36:d6:a1:
                    35:02:03:88:c4:b0:cd:92:d9:06:67:12:c4:2b:8f:
                    5c:ec:7d:c1:6f:7b:62:ef:49:03:1f:ce:3a:ea:56:
                    2e:ea:ad:3d:b8:f9:59:a2:b1:91:fa:f6:c6:c4:53:
                    72:ef:e5:32:3a:8d:d9:ac:de:f3:cd:2b:7b:e1:3d:
                    7c:71:19:55:d1:ca:dc:d9:59:fa:03:67:10:12:46:
                    32:37:74:ad:f7:d9:b9:33:35:bd:13:ff:35:0d:46:
                    c1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BB:68:7C:2A:E9:40:D1:42:A8:2A:58:56:EA:90:8C:4C:C0:AF:4F
            X509v3 Authority Key Identifier:
                keyid:CE:24:98:E8:CE:7B:48:8E:BF:B1:05:BF:E2:A0:48:76:60:0C:B5:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/3136382e3230352e3130342e302f32322d3234203d3e20323632353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:d6:64:62:c3:d1:ff:c9:e8:c3:a7:24:ce:9f:4d:93:f9:fc:
         4c:a2:84:4d:98:8a:76:21:66:71:2a:ad:45:01:92:c8:4a:25:
         e6:91:fc:a6:a8:ab:61:4f:df:64:ef:ee:cb:80:37:cd:cd:74:
         c8:34:9e:21:e1:59:8e:95:2e:92:c7:bd:a0:f1:a1:24:ed:6d:
         8c:d8:5f:94:db:1f:3e:87:b8:17:84:1d:0f:57:ed:e7:45:80:
         64:44:0c:52:29:51:96:28:81:67:a1:c6:cb:d6:4a:02:51:21:
         b4:d8:03:f1:5a:e7:44:d6:07:31:a3:44:f3:30:2d:c2:72:d8:
         2a:54:57:e8:0e:f1:fd:4b:a1:58:8c:d1:7f:c4:01:42:b1:e5:
         27:e6:32:5b:40:17:ba:28:63:6f:8c:ec:f5:a0:08:78:c6:90:
         d8:ee:f8:fc:1f:9d:56:fd:3a:09:41:52:31:39:e8:59:b0:58:
         b0:5f:32:da:63:ac:fc:22:7c:a7:26:33:56:cc:99:1e:0f:19:
         76:ac:47:98:73:7c:1d:8f:2a:ec:14:c4:2b:19:ef:3d:d9:41:
         84:bc:0f:f5:57:18:8a:09:7e:5b:37:98:07:88:c1:bf:e9:52:
         10:fb:12:7b:e1:10:05:2b:a8:5c:04:be:5c:42:94:75:26:6b:
         29:98:18:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:06:29 2025 by rpki-client