Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e37332e3234302e302f32302d3234203d3e20323632363639.roa
File:                     3138372e37332e3234302e302f32302d3234203d3e20323632363639.roa (raw, json)
Hash identifier:          aPqSa7IHqzSU92vJ08nKzMibbPrNwDlCrcxQXHOq36M=
Subject key identifier:   02:21:67:FD:32:E9:1C:9F:F4:4B:7E:FD:16:B9:22:11:BB:9C:BC:2E
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       51D926115B62A57A7275864B3FA9F5BC1C888E8D
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e37332e3234302e302f32302d3234203d3e20323632363639.roa
Signing time:             Sat 02 Aug 2025 12:58:15 +0000
ROA not before:           Sat 02 Aug 2025 12:53:15 +0000
ROA not after:            Sat 01 Aug 2026 12:58:15 +0000
asID:                     262669
IP address blocks:        187.73.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d9:26:11:5b:62:a5:7a:72:75:86:4b:3f:a9:f5:bc:1c:88:8e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Aug  2 12:53:15 2025 GMT
            Not After : Aug  1 12:58:15 2026 GMT
        Subject: CN=022167FD32E91C9FF44B7EFD16B92211BB9CBC2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:bf:16:08:91:30:4c:3b:75:f7:6c:ea:81:
                    c6:4d:c1:74:4a:61:73:dc:02:ac:85:e1:ed:29:97:
                    6f:07:d4:3c:ee:8c:18:03:b1:c5:ef:c6:61:3c:c7:
                    19:3d:e1:5c:85:b8:6e:f9:1d:f7:f5:39:d0:39:96:
                    91:e5:47:d2:99:f2:7c:26:3e:5f:a7:3e:49:ef:b4:
                    03:8f:9f:9c:c9:e2:07:76:48:12:3e:98:4b:9d:a8:
                    1f:b7:d0:68:95:e9:b7:4a:23:b7:2a:18:06:75:48:
                    2a:16:11:62:8f:3a:0d:9d:25:32:60:eb:8c:37:a0:
                    e8:02:36:54:88:5a:89:b7:8f:02:ec:1c:93:05:f0:
                    6e:39:94:21:be:14:59:b8:ad:9c:86:85:cc:20:03:
                    3f:df:44:20:28:d2:ad:0c:57:c5:49:45:f3:4d:62:
                    da:aa:17:4b:4b:77:62:a8:a6:2b:aa:dd:3f:86:62:
                    fb:00:5d:d5:fd:fe:6b:92:25:5f:e5:d7:2b:f3:c4:
                    be:57:56:ea:c9:0a:d8:e5:0b:e7:2a:be:ec:4e:51:
                    3f:71:f1:0a:ee:e6:57:87:90:03:6b:7f:50:f4:34:
                    bb:a9:7d:05:5a:c6:d1:09:3c:61:4d:80:03:c0:65:
                    c2:1b:ff:23:c5:6d:05:7b:ff:6b:7e:0b:aa:8e:24:
                    74:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:21:67:FD:32:E9:1C:9F:F4:4B:7E:FD:16:B9:22:11:BB:9C:BC:2E
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e37332e3234302e302f32302d3234203d3e20323632363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:e6:23:b2:a6:d3:80:a7:da:a4:77:92:f4:25:8d:76:e2:64:
         04:49:9c:2f:b6:d6:69:d0:b2:e3:02:14:d9:f8:db:3a:94:87:
         b4:b0:9e:1a:e1:e4:d0:87:cd:1c:6d:86:0c:37:e1:bc:8f:8a:
         b7:b8:c5:dd:55:f2:f4:f8:f1:4b:1a:af:15:5c:51:38:7f:91:
         8a:e2:3a:c5:ed:c7:db:0f:f8:57:7a:51:18:e4:b3:b3:24:37:
         23:cb:c9:c0:d2:1a:d1:6c:8c:55:b2:b6:f3:a0:25:40:30:b2:
         27:33:4f:a3:ba:ea:20:75:69:f7:91:a1:01:24:fa:20:7f:9b:
         d5:c5:e7:fb:4d:a2:7e:4d:4a:eb:f7:bb:6a:1e:0f:64:7b:b1:
         5f:64:1a:be:f1:bb:93:48:6e:82:1c:6b:54:0b:40:dc:69:5f:
         0c:65:3c:c9:82:ba:ff:d0:16:26:cc:f7:32:3a:ad:28:47:15:
         5f:a5:b3:e9:39:2a:f1:4b:cc:bb:dc:59:04:de:57:97:cb:7c:
         3d:22:b1:eb:1e:e9:9d:fd:1c:3c:6c:81:ed:bc:f1:88:5c:98:
         a3:c1:cd:32:7a:bb:08:fa:66:b6:9d:b9:52:4c:9c:5e:c4:7f:
         18:14:a1:3f:0d:11:ca:f4:fb:8d:53:94:04:05:d6:64:db:ac:
         13:f8:11:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:39 2025 by rpki-client