Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/3139302e3131312e3130382e302f32322d3234203d3e20323730343137.roa
File:                     3139302e3131312e3130382e302f32322d3234203d3e20323730343137.roa (raw, json)
Hash identifier:          gpm/0PXcAio5zaXBKIME9f+opfZ4vyceUQhgW/q0Loc=
Subject key identifier:   F8:FD:9E:EE:C6:15:44:E6:1B:00:8C:47:48:FF:15:FB:B1:78:E3:F1
Certificate issuer:       /CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
Certificate serial:       6CE32B3E2AA8C93D2ABEEB2565924B6F2DA0C90A
Authority key identifier: 4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/3139302e3131312e3130382e302f32322d3234203d3e20323730343137.roa
Signing time:             Mon 13 Oct 2025 19:47:22 +0000
ROA not before:           Mon 13 Oct 2025 19:42:22 +0000
ROA not after:            Mon 12 Oct 2026 19:47:22 +0000
asID:                     270417
IP address blocks:        190.111.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl
                          rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e3:2b:3e:2a:a8:c9:3d:2a:be:eb:25:65:92:4b:6f:2d:a0:c9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
        Validity
            Not Before: Oct 13 19:42:22 2025 GMT
            Not After : Oct 12 19:47:22 2026 GMT
        Subject: CN=F8FD9EEEC61544E61B008C4748FF15FBB178E3F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a0:2f:f3:b0:1d:70:db:a2:82:e5:88:28:1c:
                    ba:63:30:74:3c:3a:10:b6:02:13:7b:d3:c2:52:cd:
                    a4:9a:78:a7:33:17:3e:d2:f3:7c:4a:48:c2:af:27:
                    cd:c2:11:02:4c:0f:24:74:a4:47:1e:36:0c:b7:2e:
                    46:3e:a8:14:2f:d5:c7:f9:dc:2c:bb:7b:0d:60:b6:
                    9e:32:2e:a9:d1:65:01:50:fd:96:54:b6:01:dd:4d:
                    62:8a:f4:00:00:a3:2e:01:1c:5b:66:29:0e:26:ef:
                    c3:53:d1:19:5c:b6:1f:58:50:37:56:ea:62:a7:a1:
                    4e:8e:66:fb:70:e5:53:b0:ce:88:b2:be:53:9d:46:
                    e3:36:e4:75:48:a3:52:b2:b1:26:95:72:12:b3:a9:
                    ed:70:fc:8a:b2:fb:a7:59:9c:6f:0e:28:ef:61:1e:
                    91:f3:13:43:03:6a:07:01:62:e5:9d:e7:aa:72:8f:
                    17:6f:2d:4a:cf:91:4f:ef:df:ea:19:d9:61:8e:4e:
                    75:eb:dd:d9:3d:80:cd:12:25:3a:50:43:93:35:e4:
                    b4:ad:36:43:d8:f7:86:94:9d:b3:87:e7:55:cc:19:
                    c7:c9:dc:e7:2d:8b:7a:fb:c3:7d:d2:13:e5:08:94:
                    78:52:f1:21:e7:65:a6:4f:85:14:8b:d6:bf:b6:60:
                    d2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FD:9E:EE:C6:15:44:E6:1B:00:8C:47:48:FF:15:FB:B1:78:E3:F1
            X509v3 Authority Key Identifier:
                keyid:4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/3139302e3131312e3130382e302f32322d3234203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:ba:e7:f6:13:5e:f5:7d:f9:1f:f1:c2:ed:4a:80:d4:da:20:
         be:90:43:43:07:af:54:d3:44:e9:ca:44:5e:41:aa:76:53:db:
         29:c5:f3:7a:17:b3:b6:b0:68:9a:b8:cc:62:77:8b:1f:cb:29:
         e9:f5:f6:e5:20:6f:23:45:f8:8a:f9:76:ac:23:ff:57:a5:ae:
         f8:44:b7:81:ea:af:7b:82:44:e2:c8:92:62:dc:79:f5:4e:3e:
         19:4f:70:94:00:64:89:ae:4e:f5:30:4e:fd:e3:b7:0e:4f:c6:
         1a:e4:63:3e:a1:6c:7c:da:3c:97:a4:78:4d:fe:8c:d8:80:b2:
         88:39:fb:e1:f5:a4:a5:64:ce:20:1d:eb:ef:0e:70:80:a7:78:
         8e:79:c7:a5:32:19:45:83:e9:e8:ef:d4:f1:b3:4a:2f:6b:b0:
         eb:de:46:b2:1e:79:ff:eb:cd:de:b6:62:dd:e3:96:95:7c:42:
         57:e1:cc:85:87:2f:4a:74:2c:00:d8:ec:b7:85:43:a9:6a:b3:
         b1:17:30:d8:52:28:60:42:7c:01:de:52:a8:4f:c1:9e:bc:bd:
         97:3b:72:6a:72:92:fe:6c:ad:78:3d:01:bd:b9:30:a0:ad:4e:
         6e:f2:2b:f2:17:64:08:38:38:2b:20:28:e4:4a:5b:eb:60:54:
         2d:1a:8d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:26:28 2025 by rpki-client