Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34322e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e34322e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          LAapXagfzXO3OpdS+r+qnMfd/CYvfUFn+q6mH9hZ4iw=
Subject key identifier:   47:48:39:73:07:BB:87:26:FF:F9:D9:D4:36:22:C5:CC:A1:98:2F:46
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       6E56E6ED8F99BD7E7B2AC8D185A4A0557516929C
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34322e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 09 Oct 2025 15:51:31 +0000
ROA not before:           Thu 09 Oct 2025 15:46:31 +0000
ROA not after:            Thu 08 Oct 2026 15:51:31 +0000
asID:                     263347
IP address blocks:        191.37.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:56:e6:ed:8f:99:bd:7e:7b:2a:c8:d1:85:a4:a0:55:75:16:92:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Oct  9 15:46:31 2025 GMT
            Not After : Oct  8 15:51:31 2026 GMT
        Subject: CN=4748397307BB8726FFF9D9D43622C5CCA1982F46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:c2:0b:6c:82:48:3a:cb:41:e7:5b:4f:d9:
                    83:ca:8c:a9:62:00:0e:22:db:ce:28:85:a1:7f:ec:
                    a3:1e:0c:8d:97:ce:6d:5a:37:1e:3a:a1:29:2b:b3:
                    70:65:61:a6:84:f9:28:e8:c2:b9:0d:14:c5:21:4c:
                    f4:6a:6b:3d:10:6b:6f:68:a9:f3:a2:71:d5:63:52:
                    d5:ae:a4:7d:37:36:cd:8b:ce:ac:ec:0a:0c:d8:e0:
                    07:0d:af:78:a2:17:4b:86:e1:6e:58:a9:70:20:cf:
                    35:69:cd:c6:8b:a5:b8:63:72:fc:c2:aa:75:40:5b:
                    27:1d:81:69:de:72:42:f3:80:cb:dd:c2:07:f1:79:
                    5e:a2:e2:c1:1b:ff:65:99:12:e0:8f:6c:e1:ca:78:
                    ee:26:ad:c0:00:ef:a1:88:99:46:97:73:96:db:f8:
                    5a:16:74:cd:5b:01:96:3f:aa:96:7c:f6:8c:a9:80:
                    0a:c3:0c:5b:94:76:7e:92:63:41:6f:46:29:79:81:
                    b4:76:67:e5:87:be:5a:63:2f:a3:d9:d6:e6:ed:52:
                    76:dc:93:5d:2a:40:10:3b:da:20:ad:96:b0:9a:3a:
                    34:98:e9:0c:35:58:7d:ab:ed:43:89:67:9d:25:bd:
                    95:e9:cb:77:3d:0e:6d:47:70:ae:e0:aa:46:4f:e8:
                    d2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:48:39:73:07:BB:87:26:FF:F9:D9:D4:36:22:C5:CC:A1:98:2F:46
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34322e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:47:5f:84:fc:88:f9:f4:7e:e8:a3:ba:10:5e:93:84:3b:12:
         eb:35:23:0d:53:14:d0:eb:99:91:ee:fe:54:55:d2:4c:e9:73:
         e7:8a:0e:24:b8:fb:1b:c4:ba:8d:47:87:2e:e5:58:1e:43:28:
         1c:22:fa:00:ef:ba:5c:b5:c6:55:ca:21:65:b1:d6:46:2d:ea:
         b2:7d:59:dc:49:cf:80:84:4b:05:f8:19:5b:60:e2:e0:48:0e:
         39:9e:d9:4f:08:6e:b9:91:08:af:6c:b0:c2:de:1f:9e:b8:59:
         dd:1e:c7:05:21:e9:07:ae:3a:ec:6e:3e:75:c4:5c:b1:43:e9:
         37:31:7d:bc:01:43:f8:1f:d7:57:63:d0:12:54:2a:cf:99:1c:
         a4:cb:d9:53:d6:f6:9e:aa:08:d5:51:f2:87:50:7c:cb:64:c6:
         c9:8e:69:4b:1b:86:a1:2b:af:ce:6c:3d:79:5e:b1:22:27:c8:
         7e:d9:5b:93:1e:9c:4e:bb:62:51:66:25:38:58:f4:cd:0c:7f:
         c6:6a:d7:83:00:5d:0e:5b:e1:be:bf:69:1b:54:39:16:28:29:
         08:d7:66:a0:70:2d:0d:ff:d8:ed:3e:72:54:7e:2f:95:ec:b4:
         d9:15:3c:cb:1a:f5:59:16:7b:fd:f7:91:f5:17:e6:e7:b3:a0:
         9b:2a:6d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:35:34 2025 by rpki-client