Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35362e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e35362e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          fc6CvWp8Vuo0J/fZwv0dJYsvvZc6sAPE6ruQS6BTWIc=
Subject key identifier:   DD:D8:99:2D:67:25:EC:D5:7A:26:C4:F3:7F:4C:6D:11:6C:B1:83:BD
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       5B177BA3A57BCD6543A20FEE2B90912D74C32C29
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35362e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 10 Oct 2025 20:58:19 +0000
ROA not before:           Fri 10 Oct 2025 20:53:19 +0000
ROA not after:            Fri 09 Oct 2026 20:58:19 +0000
asID:                     263347
IP address blocks:        191.37.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:17:7b:a3:a5:7b:cd:65:43:a2:0f:ee:2b:90:91:2d:74:c3:2c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Oct 10 20:53:19 2025 GMT
            Not After : Oct  9 20:58:19 2026 GMT
        Subject: CN=DDD8992D6725ECD57A26C4F37F4C6D116CB183BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:42:ea:1c:be:1d:5d:88:04:65:4a:0d:ac:88:
                    9d:a0:ac:32:c8:98:33:27:9b:01:62:5b:c4:79:da:
                    36:76:55:3c:2a:99:7e:46:30:b4:32:7e:7f:59:2f:
                    5d:34:82:a1:a3:54:e5:7b:b1:00:86:31:48:6b:1c:
                    b8:28:e9:d1:92:95:e7:de:b7:84:1f:9e:9c:8b:9e:
                    86:57:a5:2b:51:ba:f2:0f:06:1b:d5:c6:62:c9:1e:
                    c0:8a:4d:9b:74:81:ad:d8:fa:21:17:f2:c8:19:63:
                    af:d5:7c:58:88:d0:ca:ae:dd:8c:9f:e6:86:76:51:
                    7e:e8:d7:6e:8f:d3:1b:8d:83:f1:d0:53:e0:7a:a8:
                    2f:72:71:b5:22:8b:f4:93:6d:45:a4:38:f2:b4:d6:
                    89:04:1f:9d:14:be:69:cc:7c:67:cb:01:eb:b9:df:
                    0d:09:79:4f:fd:02:79:97:b8:d7:ec:a0:fc:bf:38:
                    a0:e5:8a:33:64:5f:e4:7b:b7:7e:3a:56:bf:26:3d:
                    8e:97:fd:62:04:1f:fe:b5:18:f1:f3:23:c2:70:b1:
                    29:b6:f2:2f:ec:6b:ad:88:ae:69:fe:8a:48:00:cb:
                    f8:ab:a8:15:b6:47:6a:f2:bd:6e:e2:db:c9:47:a5:
                    ab:72:52:65:16:f3:48:23:c0:3e:85:33:c5:d4:06:
                    88:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D8:99:2D:67:25:EC:D5:7A:26:C4:F3:7F:4C:6D:11:6C:B1:83:BD
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35362e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:0b:33:f5:f6:f6:95:76:e6:62:8e:f6:d3:42:8b:32:e7:ec:
         2e:e8:f0:0b:5f:a6:75:46:cb:fb:8b:a7:2b:55:5a:90:c1:dd:
         42:5c:ee:87:85:7a:e9:92:94:6b:85:dd:3b:f6:a8:0b:1a:98:
         dc:1b:25:6f:13:c8:1e:f8:0b:dd:09:fc:e0:12:a4:19:82:66:
         99:2f:9c:fa:51:66:bd:ec:71:e4:55:97:ee:72:b5:aa:05:42:
         9d:c9:61:31:c3:b7:7d:e9:5d:4d:44:37:dd:b6:43:98:cc:21:
         90:23:64:d9:c7:7a:6d:cf:f3:6e:de:ab:1d:d4:65:58:ad:dd:
         eb:64:9a:5e:b9:e1:49:bb:89:21:71:5f:47:4f:97:80:e7:3d:
         25:26:15:e7:85:3a:f2:94:dc:51:bc:42:90:af:d0:91:d4:73:
         d3:b6:a2:74:95:6e:76:ee:83:99:9d:58:95:ec:68:4e:7f:6f:
         92:e6:7a:6f:dd:74:33:ca:e0:c8:7c:b2:82:39:98:35:f5:ef:
         c1:3a:32:66:12:32:f7:58:8c:a4:a1:19:af:0f:b0:40:58:53:
         8b:23:3d:0d:f6:6b:b8:94:f7:c2:b8:a4:be:22:a3:a4:db:62:
         9d:69:9c:17:b9:16:62:1a:36:92:1d:c4:a7:f1:66:e7:57:48:
         ab:43:c6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:01:26 2025 by rpki-client