Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3134332e3230322e3233322e302f32322d3332203d3e20323637303033.roa
File:                     3134332e3230322e3233322e302f32322d3332203d3e20323637303033.roa (raw, json)
Hash identifier:          QInAZJHOKDo8IYE3bjn2eUM4bc8hiByZJFollhVPo+E=
Subject key identifier:   61:FB:DC:96:30:BF:68:69:59:D2:0A:2E:B6:4E:99:43:5B:5F:A4:CD
Certificate issuer:       /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial:       0380362BC2E1E827E9C5CB006A9437A559CF12CE
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3134332e3230322e3233322e302f32322d3332203d3e20323637303033.roa
Signing time:             Fri 03 Oct 2025 18:20:17 +0000
ROA not before:           Fri 03 Oct 2025 18:15:17 +0000
ROA not after:            Fri 02 Oct 2026 18:20:17 +0000
asID:                     267003
IP address blocks:        143.202.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl
                          rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:80:36:2b:c2:e1:e8:27:e9:c5:cb:00:6a:94:37:a5:59:cf:12:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
        Validity
            Not Before: Oct  3 18:15:17 2025 GMT
            Not After : Oct  2 18:20:17 2026 GMT
        Subject: CN=61FBDC9630BF686959D20A2EB64E99435B5FA4CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ff:b7:62:46:03:93:4b:d8:fc:08:a5:98:3c:
                    5c:33:63:78:e2:8b:4d:dc:b9:7e:92:82:3c:3f:3f:
                    f1:ca:4d:31:87:ae:e0:9f:3a:23:ac:87:72:0e:c9:
                    55:e2:ab:35:0e:3c:09:bb:59:2c:ce:56:c6:e6:2e:
                    35:82:25:9b:01:84:0b:ef:bc:e8:d2:93:63:30:95:
                    2c:aa:ec:9e:5f:d2:d1:bf:d2:58:8c:9f:0e:44:9e:
                    f8:52:e5:75:ab:74:8d:c5:6a:9e:d6:b9:f3:74:59:
                    04:53:fe:90:af:a7:e0:7e:e4:7e:ae:1e:65:2a:73:
                    37:f1:20:56:15:e3:14:e2:90:21:69:c3:88:ca:ce:
                    a6:eb:5d:b0:9a:fb:4b:50:67:68:53:f6:68:1f:57:
                    42:61:91:ec:15:ca:2b:24:a1:04:ed:ef:f3:1c:8f:
                    b0:ce:db:0c:b1:b3:db:4a:11:f4:24:ba:2a:66:56:
                    9a:97:73:08:9a:68:98:48:98:e3:d6:36:c1:59:88:
                    71:26:cc:fc:8b:6c:2b:85:cd:56:2a:07:83:05:89:
                    ad:8b:38:14:8e:ea:ab:cd:ab:17:4a:db:61:da:f1:
                    36:95:7f:ea:13:39:a7:cb:52:38:a8:45:a1:04:07:
                    80:80:f5:a9:4b:9b:35:bc:d8:47:5c:95:14:2a:dd:
                    39:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FB:DC:96:30:BF:68:69:59:D2:0A:2E:B6:4E:99:43:5B:5F:A4:CD
            X509v3 Authority Key Identifier:
                keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3134332e3230322e3233322e302f32322d3332203d3e20323637303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:6a:36:86:da:84:a0:6a:36:fa:fc:c4:97:78:a2:7c:ef:8e:
         b8:eb:df:bf:0c:fd:e5:fd:21:76:57:c4:1b:2b:21:6c:4f:ad:
         23:5d:b3:a1:bf:22:48:9e:06:59:b3:f2:e6:fc:a1:d0:57:12:
         c5:15:37:fd:24:f9:21:3b:51:ee:f5:6a:3c:62:93:fa:03:05:
         72:98:96:06:6d:6d:52:ae:e1:ba:1a:86:42:1e:ed:a1:f3:53:
         ca:ef:b1:f0:f8:78:94:44:ab:1a:1a:ce:c8:e0:2e:3b:a4:25:
         23:d1:82:ca:5b:14:41:d3:b7:48:6b:20:57:20:3c:17:ce:9a:
         68:5b:0d:a5:78:73:00:ba:5e:5b:a2:af:23:25:ff:89:8b:93:
         a2:de:75:62:02:a9:37:40:42:a2:ed:e5:04:f7:2d:48:06:90:
         a6:5e:8e:35:22:9d:ba:80:71:dc:cb:c2:fb:1b:e8:9e:64:ce:
         fa:85:a4:42:06:a8:36:a0:69:ee:81:37:e5:70:f0:5a:2c:61:
         df:8a:f9:56:d0:57:0e:82:2a:2b:88:c8:c3:40:8d:c1:a4:34:
         67:72:49:24:a7:e4:8c:b5:76:2c:0a:ae:23:bc:4d:74:68:e1:
         42:0e:5f:b6:39:bd:c7:c2:dd:75:c8:76:49:2b:0d:b6:32:ce:
         6b:0a:de:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:03:57 2025 by rpki-client