Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131342e302f32342d3234203d3e20323634383931.roa
File:                     3136382e3232372e3131342e302f32342d3234203d3e20323634383931.roa (raw, json)
Hash identifier:          5Jb3Yo4TnRneHOHx1ZPFRdU3E6PohSxEWilwpY583e0=
Subject key identifier:   E3:C1:80:B0:27:28:27:1B:EE:CA:3D:0E:11:AB:F6:12:21:F0:3D:DA
Certificate issuer:       /CN=6295613937297D5F10674AC45D3ACAB7545474C7
Certificate serial:       6501C30E13F061A05C2E3EE26E877709B49886ED
Authority key identifier: 62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131342e302f32342d3234203d3e20323634383931.roa
Signing time:             Wed 06 Aug 2025 12:41:27 +0000
ROA not before:           Wed 06 Aug 2025 12:36:27 +0000
ROA not after:            Wed 05 Aug 2026 12:41:27 +0000
asID:                     264891
IP address blocks:        168.227.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl
                          rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 21:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:01:c3:0e:13:f0:61:a0:5c:2e:3e:e2:6e:87:77:09:b4:98:86:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6295613937297D5F10674AC45D3ACAB7545474C7
        Validity
            Not Before: Aug  6 12:36:27 2025 GMT
            Not After : Aug  5 12:41:27 2026 GMT
        Subject: CN=E3C180B02728271BEECA3D0E11ABF61221F03DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:57:18:b8:59:e9:18:0b:e0:ba:1d:2a:c9:e5:
                    9a:7a:e0:14:9e:c0:dd:e1:75:5e:dd:ec:9d:c5:da:
                    99:75:1d:2f:6b:7c:13:b8:4a:db:57:f9:26:8a:25:
                    61:2e:e1:9d:3a:e9:2d:83:8e:31:aa:87:51:4d:58:
                    7e:6b:5f:36:65:d1:8d:6d:ac:40:52:d0:2b:f5:29:
                    bc:46:ef:d9:a6:c6:64:d7:22:9f:3e:c2:0e:f0:36:
                    e1:f5:12:e0:a8:ae:c8:f1:30:33:f3:0d:5e:be:a8:
                    7e:8a:c4:1a:90:12:cd:64:ac:35:dc:7a:6f:b5:44:
                    85:6f:25:92:a8:87:fe:c9:dd:92:3d:c2:8c:a5:84:
                    1a:42:0b:c4:3d:84:71:c5:d1:b4:d4:34:84:cb:8d:
                    a9:6f:5e:c9:cb:ac:ce:27:3d:e3:14:1d:d4:11:30:
                    99:01:32:d8:e9:ee:e6:88:b1:c7:36:25:cd:a6:fd:
                    39:55:73:55:86:0e:e5:f9:3d:a6:2c:a4:10:27:8d:
                    43:f0:32:4d:3e:8d:43:57:d9:33:33:73:c2:86:b8:
                    f7:30:9a:00:e8:12:8f:c3:e6:61:f5:75:10:47:f8:
                    35:76:4f:b4:05:be:e9:44:79:d8:86:03:09:ed:08:
                    8c:27:c7:2b:e2:d3:01:89:bf:8d:4a:16:10:e9:93:
                    24:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C1:80:B0:27:28:27:1B:EE:CA:3D:0E:11:AB:F6:12:21:F0:3D:DA
            X509v3 Authority Key Identifier:
                keyid:62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131342e302f32342d3234203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:70:48:bd:f8:54:42:23:5f:6b:86:80:4e:b0:da:14:a1:81:
         e9:8d:29:55:a9:e3:c9:c6:d7:6b:ae:d2:6f:ff:c8:0b:95:d5:
         46:33:1b:6e:99:d2:c5:8d:96:e9:08:dc:22:78:5b:98:ec:2a:
         a2:fe:5b:54:5e:98:9b:3b:cf:2f:5c:89:da:12:af:b8:59:bd:
         c8:38:ae:db:4e:a9:9c:80:ae:67:c4:51:be:be:0a:19:50:7c:
         85:c4:33:94:00:17:86:e0:9e:0f:25:0f:e2:9f:d9:6d:98:8c:
         35:09:1c:7d:56:57:f8:b2:6a:40:48:8a:12:29:94:72:ce:8b:
         1a:b9:7e:a8:8f:a6:44:38:72:c1:d6:8e:c7:74:f4:d7:cc:6d:
         9b:bb:c3:4e:b9:4f:e7:6a:e7:84:91:2c:85:a0:96:66:13:82:
         49:10:4d:5a:0d:5e:66:35:2d:06:00:a4:1a:20:f0:15:00:38:
         e2:05:92:5f:1f:65:ff:a1:c8:89:d0:ba:65:58:e3:10:7a:d8:
         f0:ad:fe:c9:96:ad:42:c9:c7:9b:dd:dd:38:a6:b2:6b:d6:54:
         e8:62:d7:20:98:31:b7:04:9b:92:e8:51:1e:bd:c7:7d:4a:8e:
         ad:b3:0a:ff:1b:55:bc:93:e9:fa:2d:13:2b:84:11:47:ef:d8:
         99:f6:24:13
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZQHDDhPwYaBcLj7ibod3CbSYhu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI5NTYxMzkzNzI5N0Q1RjEwNjc0QUM0NUQzQUNBQjc1
NDU0NzRDNzAeFw0yNTA4MDYxMjM2MjdaFw0yNjA4MDUxMjQxMjdaMDMxMTAvBgNV
BAMTKEUzQzE4MEIwMjcyODI3MUJFRUNBM0QwRTExQUJGNjEyMjFGMDNEREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Vxi4WekYC+C6HSrJ5Zp64BSe
wN3hdV7d7J3F2pl1HS9rfBO4SttX+SaKJWEu4Z066S2DjjGqh1FNWH5rXzZl0Y1t
rEBS0Cv1KbxG79mmxmTXIp8+wg7wNuH1EuCorsjxMDPzDV6+qH6KxBqQEs1krDXc
em+1RIVvJZKoh/7J3ZI9woylhBpCC8Q9hHHF0bTUNITLjalvXsnLrM4nPeMUHdQR
MJkBMtjp7uaIscc2Jc2m/TlVc1WGDuX5PaYspBAnjUPwMk0+jUNX2TMzc8KGuPcw
mgDoEo/D5mH1dRBH+DV2T7QFvulEediGAwntCIwnxyvi0wGJv41KFhDpkyQxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU48GAsCcoJxvuyj0OEav2EiHwPdowHwYDVR0j
BBgwFoAUYpVhOTcpfV8QZ0rEXTrKt1RUdMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnhhYUtCa1JSUEw1QVRHcldCMXdYR0RmVE51QnFWQ1VRWmVtdzhZcXUx
TTEvMC82Mjk1NjEzOTM3Mjk3RDVGMTA2NzRBQzQ1RDNBQ0FCNzU0NTQ3NEM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyOTU2MTM5MzcyOTdENUYx
MDY3NEFDNDVEM0FDQUI3NTQ1NDc0QzcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J4YWFLQmtSUlBMNUFUR3JXQjF3WEdEZlROdUJxVkNVUVplbXc4WXF1MU0xLzAv
MzEzNjM4MmUzMjMyMzcyZTMxMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM4MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjjcjANBgkqhkiG9w0BAQsFAAOCAQEAAnBI
vfhUQiNfa4aATrDaFKGB6Y0pVanjycbXa67Sb//IC5XVRjMbbpnSxY2W6QjcInhb
mOwqov5bVF6YmzvPL1yJ2hKvuFm9yDiu206pnICuZ8RRvr4KGVB8hcQzlAAXhuCe
DyUP4p/ZbZiMNQkcfVZX+LJqQEiKEimUcs6LGrl+qI+mRDhywdaOx3T018xtm7vD
TrlP52rnhJEshaCWZhOCSRBNWg1eZjUtBgCkGiDwFQA44gWSXx9l/6HIidC6ZVjj
EHrY8K3+yZatQsnHm93dOKaya9ZU6GLXIJgxtwSbkuhRHr3HfUqOrbMK/xtVvJPp
+i0TK4QRR+/YmfYkEw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:53:35 2025 by rpki-client