Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/3137392e3130372e382e302f32312d3332203d3e20323633323635.roa
File:                     3137392e3130372e382e302f32312d3332203d3e20323633323635.roa (raw, json)
Hash identifier:          c4/eCnm11wf52KZhGuLppr4NQApA/XFR5cO8KT517dw=
Subject key identifier:   94:CA:84:62:82:42:55:8E:50:05:44:9A:74:13:90:38:89:79:A0:13
Certificate issuer:       /CN=89C86114565777DCA20A0F5E5C3319F12FC1DC5A
Certificate serial:       3312D291C38F4454BB37B7A7B088527CC7C0DD10
Authority key identifier: 89:C8:61:14:56:57:77:DC:A2:0A:0F:5E:5C:33:19:F1:2F:C1:DC:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/3137392e3130372e382e302f32312d3332203d3e20323633323635.roa
Signing time:             Wed 24 Sep 2025 14:31:59 +0000
ROA not before:           Wed 24 Sep 2025 14:26:59 +0000
ROA not after:            Wed 23 Sep 2026 14:31:59 +0000
asID:                     263265
IP address blocks:        179.107.8.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.crl
                          rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:12:d2:91:c3:8f:44:54:bb:37:b7:a7:b0:88:52:7c:c7:c0:dd:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89C86114565777DCA20A0F5E5C3319F12FC1DC5A
        Validity
            Not Before: Sep 24 14:26:59 2025 GMT
            Not After : Sep 23 14:31:59 2026 GMT
        Subject: CN=94CA84628242558E5005449A741390388979A013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:85:36:c1:a4:31:83:c9:ae:63:0c:1b:6e:
                    b8:3a:83:aa:46:c9:1d:55:da:81:60:6d:26:75:30:
                    e1:bd:06:cb:bd:c3:56:a6:85:e5:a4:58:bc:4d:28:
                    bc:6c:7f:02:2d:93:02:fc:5a:38:0a:43:a6:43:29:
                    6e:c7:84:62:2d:0a:21:78:2c:77:2d:ae:0b:5b:e6:
                    68:2d:fc:71:c5:7e:f5:da:81:a5:17:93:5a:54:98:
                    80:6f:f4:f3:72:59:f2:72:13:6d:92:1a:e0:c8:ae:
                    8c:65:b6:58:3f:ff:20:fd:52:38:a8:7e:c3:0b:9f:
                    b7:80:e2:fb:56:b3:86:37:f7:b5:9f:2f:eb:14:27:
                    13:75:d5:46:53:f8:2b:5b:68:a4:11:ed:88:7c:8d:
                    f9:a3:2e:26:e4:b1:1e:1d:be:20:97:0e:8e:1e:7d:
                    fe:24:16:de:86:34:2c:95:f8:47:43:78:42:5f:5e:
                    7f:21:ad:46:6d:6a:00:67:24:06:64:01:e6:6c:a1:
                    e4:96:4d:82:02:c1:89:08:73:65:03:a6:c8:1f:dd:
                    cd:ce:fc:15:53:43:4a:de:0f:f4:6f:52:1b:d8:3e:
                    6d:1e:ac:8e:5c:cc:97:17:d1:ac:7c:f3:03:26:bf:
                    dc:f1:3d:76:0b:d6:9a:60:dc:ba:4c:5a:20:e2:fb:
                    07:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CA:84:62:82:42:55:8E:50:05:44:9A:74:13:90:38:89:79:A0:13
            X509v3 Authority Key Identifier:
                keyid:89:C8:61:14:56:57:77:DC:A2:0A:0F:5E:5C:33:19:F1:2F:C1:DC:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C86114565777DCA20A0F5E5C3319F12FC1DC5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/3137392e3130372e382e302f32312d3332203d3e20323633323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a6:e3:0c:2a:5e:7e:51:63:60:d9:ad:8c:4e:b9:da:6e:db:c9:
         79:9e:17:93:3c:35:4a:b0:ae:54:43:58:47:79:7b:a5:18:c2:
         53:95:28:e7:82:6f:99:22:44:0a:a5:3b:cf:3f:1e:0b:14:b7:
         53:3d:11:c7:e2:ea:62:e6:23:28:d5:82:fc:13:e8:68:a8:d7:
         ce:c6:99:d5:db:50:73:7b:b5:22:b9:24:d1:db:d7:ee:62:97:
         df:95:2c:5e:52:b5:33:2d:f8:e3:90:ef:98:12:c5:15:ff:d4:
         09:96:a5:42:38:56:91:4c:ba:71:d0:e0:32:4d:a2:d7:6f:ef:
         61:51:2d:bd:8c:3e:b3:85:3a:14:f6:4b:2a:d7:2c:33:ed:a0:
         17:26:55:49:62:09:0f:9c:ca:64:a4:1f:62:1c:4c:86:d1:ff:
         e3:fa:2a:e0:90:05:30:6b:1d:d9:bd:34:b2:61:65:20:d8:95:
         aa:88:49:33:3a:cd:07:fa:52:b8:93:23:b9:3a:7c:07:44:79:
         aa:7e:0a:0b:01:32:f2:9d:7d:5f:c0:09:31:e4:b2:ba:d5:d7:
         79:98:21:8c:00:99:62:40:39:72:e9:06:ec:2f:ee:ab:d9:78:
         49:1d:e4:1e:4c:12:11:49:3f:ec:94:f9:bd:27:a3:75:97:61:
         28:10:0d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:53:31 2025 by rpki-client