Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35302e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e35302e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          EGq54zb1UN8pxJg0ZkPjy5nNm2q5atapLwkbV2c/8pw=
Subject key identifier:   79:79:78:3D:86:5D:02:6C:53:1A:C0:8B:3D:D6:B2:8A:F0:4A:90:CA
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       3C2A6950FCB7B8341F81BC97718C187296177EA8
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35302e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 10 Oct 2025 20:58:18 +0000
ROA not before:           Fri 10 Oct 2025 20:53:18 +0000
ROA not after:            Fri 09 Oct 2026 20:58:18 +0000
asID:                     263347
IP address blocks:        191.37.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2a:69:50:fc:b7:b8:34:1f:81:bc:97:71:8c:18:72:96:17:7e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Oct 10 20:53:18 2025 GMT
            Not After : Oct  9 20:58:18 2026 GMT
        Subject: CN=7979783D865D026C531AC08B3DD6B28AF04A90CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b1:0d:b2:aa:23:d3:84:a3:3e:80:d2:eb:0a:
                    e9:5c:40:19:ef:46:98:25:b6:6b:2d:a8:81:cb:95:
                    ac:75:04:88:14:d0:55:18:c7:d5:4a:6a:3a:d9:92:
                    dc:ea:8b:46:4c:ea:05:cc:08:70:da:e6:8a:5f:af:
                    b8:1f:9b:ff:18:44:fe:34:82:56:a1:f9:17:cb:eb:
                    91:f4:a7:c0:02:b5:94:91:9b:31:0a:26:67:84:52:
                    2c:ca:52:f7:e3:b9:49:ef:25:d8:0e:56:bc:50:69:
                    6b:55:cc:9f:f8:b4:57:8f:cc:d3:09:e6:2c:bf:5c:
                    b8:6b:c6:a9:81:a9:04:33:94:e5:ef:39:26:0f:11:
                    a4:eb:ed:f0:40:ab:dc:f3:9e:09:b9:94:21:72:ef:
                    8b:53:ca:30:d2:9e:3e:5f:8e:1a:69:b8:e2:36:a9:
                    18:d6:bd:fe:9b:bb:a2:2a:82:3d:9a:97:5d:ab:64:
                    3f:1b:da:07:7e:b7:e1:80:03:b6:4f:a6:d4:d7:27:
                    ed:ea:36:94:a9:c2:bb:db:1b:f4:1b:43:50:f4:41:
                    0a:2d:e8:b0:11:1b:51:a0:91:36:57:df:5c:be:7b:
                    73:a5:bf:38:b9:1e:6e:56:9e:10:4d:3c:94:55:ec:
                    87:c9:a5:05:4a:ce:c5:6a:9a:3c:56:ad:ba:2b:dc:
                    00:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:79:78:3D:86:5D:02:6C:53:1A:C0:8B:3D:D6:B2:8A:F0:4A:90:CA
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35302e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:02:f2:99:4b:70:72:c3:7b:f3:06:9f:fd:d3:93:7c:c6:b3:
         e1:93:2a:e7:59:9b:48:36:5f:d8:fb:ae:c3:02:c1:6f:d9:68:
         9f:ab:37:8f:dd:d0:92:13:1c:9e:b6:c2:36:10:07:08:44:44:
         35:c7:c2:54:de:a6:5c:9a:11:44:cd:3b:37:cc:87:e9:04:95:
         cb:83:86:40:de:f5:36:b3:78:73:d0:5c:9c:9e:1a:65:7c:ae:
         7c:70:e3:d1:9b:45:ca:b4:75:fc:2a:8b:21:25:4d:18:9b:fa:
         07:22:f2:72:7d:53:c0:d4:c9:f3:92:e8:29:21:6e:78:d8:06:
         0c:9b:73:a0:7f:d4:7e:73:71:cc:e0:60:fa:3d:f4:51:f7:32:
         a4:13:35:f8:55:91:8a:b8:3c:7a:f3:6f:33:94:8a:e9:d8:83:
         bd:56:8a:1a:61:f2:b8:22:63:5c:ef:49:85:46:1f:fe:c6:a9:
         2b:4a:3e:82:12:3f:7a:99:f8:9d:9f:b2:48:e6:73:4d:2a:59:
         3b:c3:48:7a:5b:c8:65:17:9a:f5:37:d7:85:a2:50:66:d3:52:
         8e:5b:49:76:f8:d6:3b:73:c5:70:b5:13:6a:dd:a6:98:a4:fd:
         0d:d1:10:ce:e9:b3:15:76:2a:d9:1e:ab:86:86:ed:80:ab:b7:
         0b:73:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:01:24 2025 by rpki-client