Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230372e3234382e32382e302f32322d3234203d3e20323639303733.roa
File:                     3230372e3234382e32382e302f32322d3234203d3e20323639303733.roa (raw, json)
Hash identifier:          /BvWRiblHzPoJo5E9Y8tZeenZX3uj+rM1bXI7M5sCDQ=
Subject key identifier:   BE:2E:BE:C5:F4:95:02:8E:E9:0E:51:90:02:84:40:56:C1:CB:D7:56
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       2B03D8D4080950777B5331667F869E323FD70478
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230372e3234382e32382e302f32322d3234203d3e20323639303733.roa
Signing time:             Thu 25 Sep 2025 14:19:35 +0000
ROA not before:           Thu 25 Sep 2025 14:14:35 +0000
ROA not after:            Thu 24 Sep 2026 14:19:35 +0000
asID:                     269073
IP address blocks:        207.248.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 22:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:03:d8:d4:08:09:50:77:7b:53:31:66:7f:86:9e:32:3f:d7:04:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Sep 25 14:14:35 2025 GMT
            Not After : Sep 24 14:19:35 2026 GMT
        Subject: CN=BE2EBEC5F495028EE90E519002844056C1CBD756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c0:33:de:53:4d:99:51:91:44:d6:4d:c5:79:
                    42:e4:a7:84:c5:24:ae:c2:bb:34:3f:b9:5c:c0:8b:
                    3b:fa:c7:a0:a3:30:58:4b:64:18:a3:6d:ce:8a:dd:
                    be:66:77:b7:e4:ba:63:f4:04:b4:12:a2:2d:df:0a:
                    e0:5e:25:0a:dc:e3:21:44:da:9a:d6:8a:ec:31:4d:
                    3c:05:00:4c:70:f4:c3:ee:6e:f9:3f:c2:ab:3c:9b:
                    32:66:03:19:45:a2:71:64:95:49:8a:62:b7:15:0e:
                    cb:52:44:a2:56:e0:c7:7e:75:34:1e:a9:17:a8:37:
                    b5:5c:de:4a:a6:19:18:44:35:03:85:55:89:e7:88:
                    87:b5:25:81:6f:e5:85:f6:16:f7:88:50:84:2d:85:
                    32:95:fe:94:09:d1:ab:7a:d2:59:6a:fb:72:6f:fb:
                    b2:03:a4:eb:6f:2e:fa:cd:c3:1b:52:e0:22:b1:38:
                    50:72:51:67:3c:3f:38:df:c2:75:5a:e0:b0:12:d0:
                    9b:c4:11:e7:ec:0e:22:5b:67:e0:7f:41:2f:8a:8c:
                    83:e3:16:8a:33:fa:d1:fa:bf:0c:b8:98:1a:a6:17:
                    cf:57:09:25:55:ed:6e:99:84:12:95:e7:c2:95:96:
                    51:08:f1:f9:19:0c:bc:f3:a8:18:77:a9:9c:6a:50:
                    c0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2E:BE:C5:F4:95:02:8E:E9:0E:51:90:02:84:40:56:C1:CB:D7:56
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230372e3234382e32382e302f32322d3234203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:a0:d2:5c:bd:f4:c3:a3:b5:61:a1:3c:ea:95:45:25:7d:5d:
         0c:63:b1:78:b8:b5:57:3b:6b:b1:c2:02:64:d8:6c:ae:52:76:
         8c:72:01:ce:22:41:cf:8d:8c:ac:23:c1:44:58:e5:88:57:6a:
         a8:0e:db:ed:90:25:f3:32:f4:1c:ab:b2:f6:90:62:52:e0:b4:
         61:d4:d8:8b:4a:b9:4d:3d:c3:57:74:96:a9:36:1b:5e:f2:46:
         43:99:53:4f:bc:63:93:f3:1b:59:35:60:d6:22:cb:7a:85:c6:
         5a:ec:f9:1e:6f:33:45:10:d2:0e:02:0b:96:df:5b:50:4e:78:
         3d:44:ea:25:87:7a:b4:dd:76:52:81:5e:20:6d:41:ce:a1:78:
         d3:5b:c7:54:9e:98:12:fb:f9:27:60:0f:db:88:be:0d:8d:cf:
         7d:e7:4c:34:d5:d2:4e:4a:56:df:48:f1:7c:49:f2:89:59:71:
         6f:0e:93:1f:77:6b:77:1d:e9:3b:da:6e:c9:aa:20:8a:d3:86:
         f3:e5:94:18:a8:3f:02:23:c7:27:c1:50:fc:32:43:b2:7f:f2:
         d6:21:38:a5:d0:33:c4:d6:b4:4a:e2:73:9b:40:c3:2f:19:a4:
         ee:3c:81:3d:3a:fd:a8:78:42:0f:74:38:a7:91:b4:64:ce:36:
         cf:5d:b0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:55:06 2025 by rpki-client