Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31382e302f32342d3234203d3e20323635313538.roa
File:                     3136372e3234392e31382e302f32342d3234203d3e20323635313538.roa (raw, json)
Hash identifier:          PAiS/5e3jdxxY/LG8MX3vqjIWRFG3e9upMIBDaZBXow=
Subject key identifier:   D7:A6:F8:8D:3F:2C:09:28:4F:C2:5B:B1:35:6C:FC:CD:2B:5B:75:70
Certificate issuer:       /CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
Certificate serial:       783032B9BFEC357465D3F8741CC9F7E8963C4C7D
Authority key identifier: FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31382e302f32342d3234203d3e20323635313538.roa
Signing time:             Thu 18 Sep 2025 12:24:01 +0000
ROA not before:           Thu 18 Sep 2025 12:19:01 +0000
ROA not after:            Thu 17 Sep 2026 12:24:01 +0000
asID:                     265158
IP address blocks:        167.249.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl
                          rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 01:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:30:32:b9:bf:ec:35:74:65:d3:f8:74:1c:c9:f7:e8:96:3c:4c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
        Validity
            Not Before: Sep 18 12:19:01 2025 GMT
            Not After : Sep 17 12:24:01 2026 GMT
        Subject: CN=D7A6F88D3F2C09284FC25BB1356CFCCD2B5B7570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:95:db:e3:be:cb:98:b8:a9:62:f1:ab:e4:51:
                    26:17:cf:a8:f6:09:81:c3:a8:b5:b1:f7:a8:7f:22:
                    37:1c:19:ff:5f:89:83:7e:2f:a1:f4:b1:80:b1:4c:
                    f6:11:45:d8:56:46:9b:1c:f6:33:b4:b4:dd:0d:6b:
                    ea:7b:a4:7f:50:e8:98:4e:77:77:c7:17:e6:a1:c7:
                    93:c9:40:eb:05:0c:4a:78:48:e9:70:b3:8d:9d:a6:
                    e9:b8:2d:4a:9e:75:18:45:3a:54:b0:e5:66:51:e8:
                    da:08:3a:66:49:83:d1:d7:3d:a4:f0:40:12:f5:f8:
                    d8:40:e0:59:26:df:57:d7:7b:c0:a9:78:77:5d:46:
                    28:f5:16:4b:8d:9e:52:a7:6e:7d:0c:f2:99:93:97:
                    c2:fe:07:af:10:c4:10:20:4a:41:6c:63:82:34:e4:
                    ac:5d:e5:ca:7e:93:51:75:ab:2a:63:08:3d:24:c5:
                    14:08:b0:a8:ed:d4:01:4a:02:8c:12:52:80:a7:57:
                    b2:8e:10:6f:b5:38:bb:26:3b:97:2e:cf:7e:92:ab:
                    d8:21:e8:1b:04:fc:2f:e6:09:06:1c:48:ce:59:c3:
                    ef:4a:e3:74:a7:a9:e3:07:6b:8b:69:b0:75:dc:df:
                    c8:1a:db:29:f9:b6:ba:cf:ac:d8:5f:e8:8b:05:1c:
                    f3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A6:F8:8D:3F:2C:09:28:4F:C2:5B:B1:35:6C:FC:CD:2B:5B:75:70
            X509v3 Authority Key Identifier:
                keyid:FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31382e302f32342d3234203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:52:b7:9d:eb:95:b6:2a:33:f6:7b:c7:14:e3:58:48:a0:be:
         7c:3d:a7:87:8c:17:2c:95:57:a9:5f:e6:92:fe:d0:01:ef:68:
         4e:20:9a:32:21:8c:a2:a2:14:66:7d:b6:e1:8e:c0:98:7f:81:
         04:92:bf:48:ec:44:b4:6f:a3:0e:76:cc:0b:75:bf:ba:f7:a4:
         94:77:66:a8:1b:ea:67:7d:9e:08:bb:e4:c3:86:de:7b:14:21:
         49:28:20:d4:06:81:3f:88:16:c9:6c:d4:6f:fb:d5:a0:28:45:
         ed:2d:d3:13:0b:a4:f1:6c:9f:fb:77:43:64:d8:4d:71:1a:8d:
         af:6e:2d:a0:9f:b5:52:41:24:ad:ff:86:88:de:e5:24:eb:d4:
         7f:d1:c9:f9:98:d4:a6:d4:ff:24:88:08:63:6f:a0:9e:14:78:
         05:49:fa:14:25:37:fc:75:b0:dc:7f:e6:41:21:fa:bf:df:8f:
         b3:35:6e:44:d0:20:1a:de:1e:4d:e0:01:32:2d:89:9c:b4:4e:
         45:f1:8d:f6:47:f2:f0:56:31:e4:d9:87:69:8d:94:3c:c1:d5:
         23:cc:1f:2e:ad:28:1a:9c:78:0c:e3:1a:09:24:83:2a:d8:ea:
         d2:84:15:c6:0a:17:10:32:d1:3d:6c:77:05:0e:8f:3c:4c:a1:
         09:d6:37:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:52:47 2025 by rpki-client