Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32342d3234203d3e20323635313538.roa
File:                     3136372e3234392e31362e302f32342d3234203d3e20323635313538.roa (raw, json)
Hash identifier:          9A1/6OT4xQHcOEOVaRHvKvmcbWePNLb66BlnLe40yfg=
Subject key identifier:   40:37:C8:43:F6:DF:FC:7C:F3:E0:AA:79:45:1B:7C:FB:9F:35:CC:05
Certificate issuer:       /CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
Certificate serial:       06938171F9920D0100A4C434EC96E0668D416179
Authority key identifier: FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32342d3234203d3e20323635313538.roa
Signing time:             Thu 18 Sep 2025 12:24:02 +0000
ROA not before:           Thu 18 Sep 2025 12:19:02 +0000
ROA not after:            Thu 17 Sep 2026 12:24:02 +0000
asID:                     265158
IP address blocks:        167.249.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl
                          rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 01:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:93:81:71:f9:92:0d:01:00:a4:c4:34:ec:96:e0:66:8d:41:61:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
        Validity
            Not Before: Sep 18 12:19:02 2025 GMT
            Not After : Sep 17 12:24:02 2026 GMT
        Subject: CN=4037C843F6DFFC7CF3E0AA79451B7CFB9F35CC05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fc:0e:be:26:9d:b6:5b:e2:c1:5e:62:51:fd:
                    9e:7a:59:43:69:8c:0b:cd:cb:83:cf:d7:dc:d5:20:
                    78:db:35:47:44:76:b1:7f:d8:47:f4:e1:b3:d9:14:
                    50:96:50:b2:d7:d8:01:50:9d:17:15:93:f8:cd:0f:
                    24:b1:14:60:21:3a:28:f8:3e:fa:84:9d:bd:d7:aa:
                    c7:66:a5:01:b9:da:e4:e7:01:a4:7b:4c:ad:24:86:
                    f2:4b:bd:ef:85:ca:26:d3:05:51:f1:8b:93:78:ab:
                    3f:2e:16:26:1b:87:bb:66:be:11:93:57:71:50:57:
                    f5:42:ef:0d:a6:80:23:66:47:8b:37:ca:fe:b6:d6:
                    c3:54:65:b7:1f:f4:33:1f:a5:8e:5f:3f:72:e6:62:
                    8e:88:a4:7d:dd:da:ad:80:e0:1e:90:20:d7:ba:4f:
                    06:0b:7e:6f:f4:5a:6d:dd:2e:b0:f1:59:d9:a0:86:
                    15:14:a1:9b:74:24:1d:67:67:84:8e:6d:24:64:11:
                    39:8f:23:a7:a8:b5:45:f1:a3:99:c7:7e:47:14:b2:
                    9e:db:86:5c:24:e9:5b:82:20:d0:61:c3:1f:07:3f:
                    e1:85:bb:77:f6:f7:82:f7:80:a8:cf:91:5a:c5:05:
                    bd:5d:2d:81:05:8c:a2:01:2b:ed:f9:f1:a2:7d:cd:
                    80:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:37:C8:43:F6:DF:FC:7C:F3:E0:AA:79:45:1B:7C:FB:9F:35:CC:05
            X509v3 Authority Key Identifier:
                keyid:FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32342d3234203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:52:95:79:59:e5:58:ae:df:f0:37:d2:d3:f9:a2:88:12:b6:
         bb:7a:ac:5c:6a:1b:42:f5:35:9d:1c:ab:20:e8:15:49:51:cd:
         99:28:43:d9:7f:d2:ad:24:9a:9a:50:6a:4b:bb:19:ab:08:62:
         5e:b6:35:34:91:27:31:40:c1:41:65:cf:63:20:fc:6d:2d:f7:
         0e:20:72:7f:84:4b:a8:09:5f:cc:c1:e0:cc:c4:85:7b:c1:16:
         9a:f7:4c:be:a3:13:84:90:1b:1b:26:5d:24:68:ba:91:48:72:
         9c:41:af:70:d6:3d:a2:af:a7:78:ee:35:48:7c:3d:93:43:36:
         1c:4a:99:f4:d3:11:b4:6a:65:54:72:e5:27:31:b2:3c:bc:be:
         fa:c4:3f:19:df:05:9e:84:2d:cf:61:7a:3a:31:0e:d7:c8:b6:
         d7:dd:4f:b2:da:eb:a0:20:c1:be:1c:8c:c3:b7:61:9c:98:eb:
         c9:d6:5c:fb:80:f5:a9:43:43:90:56:95:6d:43:cf:a5:78:9d:
         21:c8:46:d5:46:5b:20:8d:54:3a:9d:ef:fe:a2:2d:9c:fc:25:
         ae:c0:69:c1:dd:e3:00:04:0c:04:05:0e:8e:98:b3:14:77:21:
         7e:70:53:99:83:06:fa:15:15:a9:56:bc:f4:08:88:c1:be:53:
         d1:24:72:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:52:47 2025 by rpki-client