Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33332e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e33332e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          7vb/5bNiavWBbMwlKRB4U2+hOZGXQTgAi52kgvQluvk=
Subject key identifier:   27:7A:BB:C4:4B:88:EE:93:3E:BF:DB:E1:1A:E1:CF:DF:07:07:F4:62
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       20BA53400CA2410B36FF96603687DEDBF9130D2F
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33332e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 10 Oct 2025 13:56:07 +0000
ROA not before:           Fri 10 Oct 2025 13:51:07 +0000
ROA not after:            Fri 09 Oct 2026 13:56:07 +0000
asID:                     263347
IP address blocks:        191.37.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ba:53:40:0c:a2:41:0b:36:ff:96:60:36:87:de:db:f9:13:0d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Oct 10 13:51:07 2025 GMT
            Not After : Oct  9 13:56:07 2026 GMT
        Subject: CN=277ABBC44B88EE933EBFDBE11AE1CFDF0707F462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:37:80:bd:04:ed:a9:55:bb:a1:34:0e:05:a4:
                    36:34:af:76:54:cc:32:df:dc:a4:54:dd:58:d8:e0:
                    0b:69:5c:8a:3d:4e:05:4d:7a:74:f6:d4:32:e4:08:
                    6c:c6:cc:67:d8:8a:d9:bb:ba:57:15:1d:bf:14:78:
                    80:8c:76:de:f2:8c:52:8f:d9:dc:79:e5:72:de:2d:
                    45:6e:9e:58:88:0a:10:2b:2f:01:75:fd:21:43:41:
                    d2:71:72:f2:de:ad:39:25:95:98:21:3d:18:0f:b6:
                    e6:50:36:bf:22:9a:d9:89:72:3b:85:61:b7:a8:eb:
                    9f:67:bc:28:44:97:4f:5a:07:39:f2:66:c7:78:b4:
                    0e:6f:aa:2e:20:c3:cb:74:eb:20:c8:2b:17:76:eb:
                    f7:b1:a2:48:e9:4d:ef:1c:a2:97:2c:fd:bb:e7:e9:
                    51:4f:04:7c:d7:99:fe:86:7a:53:39:2b:cf:c8:cf:
                    14:9b:95:12:7f:95:52:e5:7c:64:38:56:27:7d:f1:
                    35:b3:7c:dc:eb:c8:18:f9:8d:24:0b:56:87:0b:a7:
                    64:2b:51:3a:60:53:93:db:60:ff:0e:a2:fd:5c:2d:
                    f0:f2:2e:ab:a5:2a:b7:ec:b0:aa:6e:fe:5b:6d:22:
                    e8:6c:f9:41:eb:6f:2f:05:fd:8f:51:29:0c:e5:d0:
                    41:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7A:BB:C4:4B:88:EE:93:3E:BF:DB:E1:1A:E1:CF:DF:07:07:F4:62
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33332e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:82:e7:62:8b:59:9c:33:d8:81:2d:51:aa:6e:c0:14:43:56:
         db:c4:0c:f7:37:e9:5b:dc:82:d2:ee:11:cc:ac:84:1f:e5:2f:
         26:26:83:cd:88:09:04:81:e5:77:f8:d5:4e:c2:79:02:92:f7:
         99:05:07:03:6d:fd:70:ac:fb:f0:64:d3:3f:d4:5f:a0:7d:69:
         50:c0:0c:fe:3a:c7:33:27:69:3c:5d:94:7e:77:a5:3b:5e:da:
         89:71:2f:f6:cd:6f:d4:4c:e4:67:82:87:ff:1f:8e:fa:ff:b7:
         83:83:13:e2:53:7b:a1:4f:1f:78:78:d9:9c:3a:06:b0:ef:0c:
         46:f7:ff:55:bd:64:96:85:61:b1:a9:e7:d5:e8:8f:e0:17:d2:
         44:19:33:68:d1:e6:49:4d:3f:2b:94:c8:cb:47:f8:0d:2e:fd:
         e9:22:31:6c:7a:03:2c:72:c3:c7:ae:11:00:62:f1:92:49:7d:
         4b:79:ea:86:8d:49:45:d6:d2:e6:ae:28:4a:a1:02:6b:39:23:
         00:08:16:4e:33:61:bb:ec:02:1c:73:8c:fc:23:58:e8:f0:2a:
         2f:b8:43:68:d4:00:d4:53:17:13:27:42:85:2a:f9:1c:14:fe:
         31:24:25:ab:7c:eb:4a:0f:f8:f1:c3:32:77:5a:35:c9:db:cf:
         c1:82:d5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:09:38 2025 by rpki-client