Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9P5K1ZWLQouNfCtpsuVdwQa8RxzwZJsUyRuNF6aGL62U/0/3138372e3130332e3230342e302f32322d3234203d3e20323730353334.roa
File:                     3138372e3130332e3230342e302f32322d3234203d3e20323730353334.roa (raw, json)
Hash identifier:          /Iu0R7EyJ6RQYPxRbdbGVmwBV2RPcsYEPE2f4q/vL9k=
Subject key identifier:   C3:1E:61:34:C1:29:10:CF:E5:55:CB:FA:97:DC:2D:D6:0D:39:D1:AC
Certificate issuer:       /CN=722C40902C50F6C00FEFB65E6CAB6BE0A009CFC1
Certificate serial:       630B373471220D1307C208D9CBF31C8DE2751728
Authority key identifier: 72:2C:40:90:2C:50:F6:C0:0F:EF:B6:5E:6C:AB:6B:E0:A0:09:CF:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/722C40902C50F6C00FEFB65E6CAB6BE0A009CFC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9P5K1ZWLQouNfCtpsuVdwQa8RxzwZJsUyRuNF6aGL62U/0/3138372e3130332e3230342e302f32322d3234203d3e20323730353334.roa
Signing time:             Mon 13 Oct 2025 17:58:06 +0000
ROA not before:           Mon 13 Oct 2025 17:53:06 +0000
ROA not after:            Mon 12 Oct 2026 17:58:06 +0000
asID:                     270534
IP address blocks:        187.103.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9P5K1ZWLQouNfCtpsuVdwQa8RxzwZJsUyRuNF6aGL62U/0/722C40902C50F6C00FEFB65E6CAB6BE0A009CFC1.crl
                          rsync://rpki-repo.registro.br/repo/9P5K1ZWLQouNfCtpsuVdwQa8RxzwZJsUyRuNF6aGL62U/0/722C40902C50F6C00FEFB65E6CAB6BE0A009CFC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/722C40902C50F6C00FEFB65E6CAB6BE0A009CFC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:12:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0b:37:34:71:22:0d:13:07:c2:08:d9:cb:f3:1c:8d:e2:75:17:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722C40902C50F6C00FEFB65E6CAB6BE0A009CFC1
        Validity
            Not Before: Oct 13 17:53:06 2025 GMT
            Not After : Oct 12 17:58:06 2026 GMT
        Subject: CN=C31E6134C12910CFE555CBFA97DC2DD60D39D1AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:cb:fa:b0:da:82:ec:e0:77:cd:c6:0d:11:
                    4d:73:d1:5d:e5:fd:ba:e4:4d:7f:6a:79:3a:e0:4e:
                    fc:8c:8a:c8:78:fe:34:a1:9a:e3:0f:ee:c7:cb:00:
                    21:d7:23:3f:7d:c4:f9:af:69:7b:37:fc:9a:97:62:
                    4e:a2:c2:e9:76:88:c5:5d:19:68:a0:ca:5c:fb:43:
                    c3:eb:70:91:99:9a:c6:eb:41:26:cf:7f:31:65:c4:
                    4d:92:d9:7c:16:1b:bf:db:38:8e:86:8f:6d:ff:1c:
                    5a:ce:a5:fc:b2:4d:93:40:b1:31:4a:ae:a7:4e:53:
                    07:92:41:a6:6f:f8:50:1d:a5:c2:11:53:df:ce:2f:
                    70:e9:b8:df:b6:06:0d:9a:97:cf:bc:b7:71:15:e1:
                    e1:20:30:10:92:5c:58:ea:da:2f:a1:b8:e9:9c:b5:
                    06:6d:19:f2:81:59:52:25:c0:b1:38:c0:ad:c5:39:
                    56:a8:20:e1:71:da:86:e8:b4:ee:09:5b:d8:25:be:
                    c6:70:17:bc:75:5b:04:f2:5a:a5:d9:27:83:18:b0:
                    1d:5e:ab:9a:be:9c:62:82:c0:3f:e9:50:ea:97:d9:
                    a4:ac:6c:7e:d9:25:5c:5d:80:e9:19:54:05:e7:44:
                    dc:aa:61:ea:9f:10:bc:cd:33:36:ac:66:a2:3c:14:
                    83:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1E:61:34:C1:29:10:CF:E5:55:CB:FA:97:DC:2D:D6:0D:39:D1:AC
            X509v3 Authority Key Identifier:
                keyid:72:2C:40:90:2C:50:F6:C0:0F:EF:B6:5E:6C:AB:6B:E0:A0:09:CF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9P5K1ZWLQouNfCtpsuVdwQa8RxzwZJsUyRuNF6aGL62U/0/722C40902C50F6C00FEFB65E6CAB6BE0A009CFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/722C40902C50F6C00FEFB65E6CAB6BE0A009CFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9P5K1ZWLQouNfCtpsuVdwQa8RxzwZJsUyRuNF6aGL62U/0/3138372e3130332e3230342e302f32322d3234203d3e20323730353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:28:dc:8e:1a:d4:7b:86:61:51:e9:03:40:59:33:b4:a9:de:
         9e:84:9e:86:48:32:b6:07:82:1d:b4:3f:74:af:ad:4a:7c:d4:
         91:40:4e:57:2b:6d:9c:2f:39:fc:a3:d7:d3:98:9f:50:a1:fe:
         1a:6e:4e:6c:61:00:ae:6d:ed:90:9e:74:9c:e0:82:75:a7:4d:
         db:71:3d:d2:30:01:58:ed:e6:57:ec:8c:5a:b5:23:14:ea:c6:
         78:1f:d1:51:d0:37:4d:83:e3:9c:39:b2:56:ce:06:c3:2a:63:
         a2:c4:1e:ac:1e:52:e8:a4:3e:9f:f2:1f:d4:72:d7:86:bd:9e:
         45:4e:40:eb:4c:f4:b4:99:02:d7:c9:1a:e3:a1:d5:62:81:4c:
         57:d7:75:59:da:96:3a:89:8d:3f:8a:21:a5:5a:db:8c:80:5b:
         24:68:60:11:e4:7f:88:7d:88:0d:1f:2d:55:ba:88:2f:5c:71:
         5d:47:95:55:a0:2a:46:8e:e1:27:53:49:3c:e4:d1:6f:f7:a7:
         3a:cf:db:1a:7c:d6:1a:bb:78:ce:e0:ed:71:a4:3b:df:ac:00:
         a9:bf:ea:39:11:0e:97:87:53:df:dd:a0:06:bd:fa:09:d3:58:
         6f:60:29:7e:45:84:eb:c6:d0:b1:ee:82:ce:69:b5:99:e2:28:
         b9:c4:69:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:30:41 2025 by rpki-client