Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/3138312e3139312e3234302e302f32342d3234203d3e20323637343536.roa
File:                     3138312e3139312e3234302e302f32342d3234203d3e20323637343536.roa (raw, json)
Hash identifier:          vBq941zM4ZwJpTNNegpectIEvRDQbqQrFOIqKYmdiNI=
Subject key identifier:   D2:13:8B:63:C9:59:DD:0C:39:CE:32:2A:22:53:B1:02:0C:1D:59:7A
Certificate issuer:       /CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
Certificate serial:       3E841AFBAE0B7E92D89CEDA1F69ED8FE43C2A0C1
Authority key identifier: 76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/3138312e3139312e3234302e302f32342d3234203d3e20323637343536.roa
Signing time:             Thu 16 Oct 2025 03:46:12 +0000
ROA not before:           Thu 16 Oct 2025 03:41:12 +0000
ROA not after:            Thu 15 Oct 2026 03:46:12 +0000
asID:                     267456
IP address blocks:        181.191.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl
                          rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:84:1a:fb:ae:0b:7e:92:d8:9c:ed:a1:f6:9e:d8:fe:43:c2:a0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
        Validity
            Not Before: Oct 16 03:41:12 2025 GMT
            Not After : Oct 15 03:46:12 2026 GMT
        Subject: CN=D2138B63C959DD0C39CE322A2253B1020C1D597A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:55:0a:73:6f:75:b8:f7:7d:74:b9:a5:fd:
                    84:d2:3c:54:08:b4:20:a3:ce:8a:3d:22:96:ae:93:
                    e1:cd:3d:c8:82:a6:e3:a0:47:e3:cc:00:78:c6:c0:
                    c0:db:f9:86:e0:4f:56:3d:78:a6:4b:61:17:07:03:
                    10:24:b4:f4:00:f8:f3:f3:0f:b3:90:a7:60:50:16:
                    23:85:f4:c3:4e:06:d0:f6:97:e9:55:69:7b:84:63:
                    c0:0f:aa:27:f4:be:7c:2e:f9:24:38:27:58:08:4d:
                    d8:b9:f0:44:b2:d9:43:53:31:a3:83:46:e1:92:17:
                    73:73:a4:65:70:99:b4:88:40:a0:62:96:d3:7d:13:
                    dd:98:06:65:7a:c4:ab:08:9d:1b:64:f7:ff:7f:0e:
                    e5:be:08:1c:01:e5:73:6d:5f:69:61:46:f4:fb:a1:
                    7a:d7:04:4d:d4:dc:cd:0c:1d:d1:25:0e:ef:ca:36:
                    cc:c5:97:8d:1e:5e:d1:e8:b6:4d:79:c1:61:62:c7:
                    b3:1b:b7:f3:ae:d4:61:e3:74:8b:e5:b2:4a:f7:70:
                    d3:62:23:39:7a:23:8c:90:69:7e:68:9f:60:12:eb:
                    dc:a3:ff:44:eb:0e:ae:08:b3:70:e6:39:94:cf:e6:
                    0f:e5:3c:24:ac:50:e6:d4:9d:0b:d1:aa:69:11:a1:
                    49:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:13:8B:63:C9:59:DD:0C:39:CE:32:2A:22:53:B1:02:0C:1D:59:7A
            X509v3 Authority Key Identifier:
                keyid:76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/3138312e3139312e3234302e302f32342d3234203d3e20323637343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:42:69:3b:e5:0f:d8:d5:c7:a2:b1:48:1d:76:47:30:64:a9:
         a7:0f:92:a6:97:26:d3:44:28:8b:a5:35:62:3f:2e:c4:ad:6f:
         d8:b3:d4:b1:12:da:4e:59:38:d9:21:ad:31:41:19:a0:a8:e9:
         a7:bb:19:fe:37:ea:4b:29:cf:42:b7:0e:c2:b0:c0:96:94:cd:
         48:5d:34:fc:07:cc:bd:a0:cd:9a:0f:b4:eb:64:ec:97:1f:ad:
         82:48:1e:36:97:6e:f8:e3:cd:aa:c7:62:67:8a:8e:b5:7d:75:
         15:a6:32:7a:9b:e9:0b:78:9d:d6:b3:4f:5b:c1:d9:19:c2:43:
         7a:2a:2f:d0:e0:aa:ba:9f:57:d2:42:54:2a:7e:95:15:42:90:
         6d:7c:1f:28:f8:f4:d9:80:d9:0a:94:48:c6:6f:9d:06:b1:4c:
         6f:f6:e3:86:24:1a:12:55:f9:b9:6b:c8:f5:b6:b6:d4:3a:11:
         dc:1b:b9:bb:9e:68:a3:c9:41:39:f2:40:1b:3c:ab:9b:39:be:
         a3:c1:98:3f:75:68:61:49:48:4f:c6:94:39:db:c2:b1:1d:94:
         8d:89:d6:f4:cf:f8:a1:d8:f8:c4:dc:30:bf:16:d5:6e:ad:d2:
         2f:c3:b5:a8:22:2c:cd:27:d4:0d:0e:e6:b9:e6:a2:d8:ad:07:
         25:0f:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:35:19 2025 by rpki-client