Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3332203d3e203631373536.roa
File:                     3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (raw, json)
Hash identifier:          ff5fnWNx341MgcrmBHedmB9h7orSMUG+v/FPbvSdt9w=
Subject key identifier:   61:09:02:2D:B6:32:A7:C0:09:1A:77:66:70:FA:3C:77:4F:D4:78:27
Certificate issuer:       /CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3
Certificate serial:       7231E8AF791D67022CC8AE369EA1F3A44D5207D0
Authority key identifier: 04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3332203d3e203631373536.roa
Signing time:             Wed 24 Sep 2025 19:41:14 +0000
ROA not before:           Wed 24 Sep 2025 19:36:14 +0000
ROA not after:            Wed 23 Sep 2026 19:41:14 +0000
asID:                     61756
IP address blocks:        131.100.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl
                          rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:31:e8:af:79:1d:67:02:2c:c8:ae:36:9e:a1:f3:a4:4d:52:07:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3
        Validity
            Not Before: Sep 24 19:36:14 2025 GMT
            Not After : Sep 23 19:41:14 2026 GMT
        Subject: CN=6109022DB632A7C0091A776670FA3C774FD47827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:25:28:df:da:eb:49:84:b3:c3:77:04:fd:27:
                    67:1e:bd:0c:df:51:00:d0:53:24:05:7d:9f:3f:d6:
                    64:ce:ff:62:68:d1:4e:f2:3c:52:4c:47:b5:41:32:
                    1b:df:45:d4:91:28:3f:24:22:ec:3a:10:c6:c7:0a:
                    38:c8:16:87:76:de:f3:fd:f8:23:73:dd:a6:89:cb:
                    ed:b6:e0:e2:ed:51:62:37:d7:d5:63:73:3e:a4:bb:
                    b5:0a:a5:d5:57:35:68:8f:b6:8e:ba:7e:73:3e:54:
                    00:8a:0a:2b:3a:23:3f:3f:6a:71:90:a7:78:e4:d1:
                    cf:e3:8c:5a:ec:4f:55:f6:25:ff:06:cf:00:7f:b4:
                    61:9d:74:65:c2:4a:8f:93:44:61:a3:aa:fc:a7:cd:
                    ea:d1:60:2e:90:9b:7a:d8:37:33:84:9d:82:60:2c:
                    f3:2b:e8:03:de:c6:1c:5b:c0:66:19:42:0c:9c:79:
                    e1:4a:b3:0d:07:9b:2e:b1:c1:6a:16:96:6e:dc:b2:
                    6a:18:4e:4f:78:e9:de:47:4f:36:93:b9:a4:8a:29:
                    46:36:2b:98:0e:c0:4f:2f:0c:5c:33:a7:cb:b3:6f:
                    96:25:6e:3d:55:98:ba:e0:76:67:6b:3c:3c:95:9d:
                    cb:33:e2:73:3c:c4:01:07:41:40:5b:e2:32:96:8e:
                    9b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:09:02:2D:B6:32:A7:C0:09:1A:77:66:70:FA:3C:77:4F:D4:78:27
            X509v3 Authority Key Identifier:
                keyid:04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3332203d3e203631373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:53:49:42:8d:cd:b6:59:ac:07:85:45:53:ed:ea:69:43:60:
         c5:6d:60:1d:c9:af:f4:bb:88:68:ef:84:08:b6:78:d1:2d:f6:
         5b:39:f2:29:d2:fa:fb:cd:61:64:0e:bf:19:6e:ec:6a:39:c8:
         20:ed:de:f3:89:9e:a5:63:d1:06:e1:a9:97:b2:d3:f0:e5:0e:
         1f:63:a2:fa:dd:4b:a4:4d:7b:98:7b:8c:5e:6b:2b:da:24:32:
         4b:12:38:66:dd:e0:5e:3b:8e:cf:9d:5b:89:ac:3e:3c:a7:6a:
         ba:b6:af:47:e8:c1:1a:9b:b5:27:0f:e9:25:7d:16:88:f6:88:
         8c:ac:47:f7:69:da:a2:fe:c6:2f:3b:40:a9:0d:e6:fd:a9:47:
         93:1d:a4:17:76:67:2c:5c:3f:f5:63:6f:2a:c9:8e:44:3c:fa:
         a9:a8:31:04:93:9c:29:be:aa:bd:a3:68:45:ce:dd:cc:c7:c3:
         e3:00:c2:a1:a8:68:8b:f2:31:bc:f7:8b:97:e2:87:e8:23:32:
         23:04:d4:a4:cc:67:d7:94:f7:97:23:3d:14:eb:c2:f3:5a:87:
         ba:b8:a1:69:62:36:9c:2a:b6:e8:b4:17:bd:a5:76:73:dd:94:
         75:3f:75:80:64:f9:9e:c3:f9:55:93:9f:c1:91:0a:d5:6f:49:
         4c:84:6b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:02:01 2025 by rpki-client