Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130362e302f32332d3233203d3e20323731363037.roa
File:                     3139302e392e3130362e302f32332d3233203d3e20323731363037.roa (raw, json)
Hash identifier:          WBH4FJc7CIobjLqMzLThMCmIR1FV3fR1DTGTW9nTUk0=
Subject key identifier:   4D:F5:C6:F1:2D:B4:EC:A2:3B:8F:6B:03:5E:D5:97:E2:05:A3:F9:F7
Certificate issuer:       /CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9
Certificate serial:       0D317E6D26D6388BD79BDE3BAD81B2D614D4D11D
Authority key identifier: 23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130362e302f32332d3233203d3e20323731363037.roa
Signing time:             Wed 01 Oct 2025 18:07:17 +0000
ROA not before:           Wed 01 Oct 2025 18:02:17 +0000
ROA not after:            Wed 30 Sep 2026 18:07:17 +0000
asID:                     271607
IP address blocks:        190.9.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.crl
                          rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:31:7e:6d:26:d6:38:8b:d7:9b:de:3b:ad:81:b2:d6:14:d4:d1:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9
        Validity
            Not Before: Oct  1 18:02:17 2025 GMT
            Not After : Sep 30 18:07:17 2026 GMT
        Subject: CN=4DF5C6F12DB4ECA23B8F6B035ED597E205A3F9F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:02:46:e3:e6:03:4a:90:49:ec:d5:50:1e:
                    91:a0:3f:6d:3f:3f:53:4b:e7:54:27:5c:bb:d8:9d:
                    3f:54:58:66:66:9e:5d:5d:64:35:49:ed:5b:79:a5:
                    a8:99:19:da:67:12:31:10:68:35:af:c8:31:c6:0f:
                    89:1e:c7:39:98:46:80:9c:50:58:9b:8a:ec:69:23:
                    7b:62:41:de:22:cf:cf:b7:12:ab:74:c5:bd:e2:b6:
                    ef:69:1b:3a:a8:0c:98:a0:8f:c0:f6:66:9f:11:8b:
                    51:77:10:66:69:6b:fc:43:c5:54:d6:db:b4:7f:d8:
                    cd:23:82:cb:64:5a:0c:9e:26:ba:21:aa:74:12:ca:
                    1b:b1:51:a6:a0:44:e9:ce:e6:ca:f8:a7:30:11:b8:
                    17:56:8c:06:cf:ff:5d:ca:99:c5:cf:69:39:68:ed:
                    68:58:69:44:7a:88:2e:a7:69:f8:0d:32:5d:40:e3:
                    7f:b8:0e:06:6e:48:30:30:5e:7a:3c:2d:44:f9:3a:
                    59:b4:e8:a9:ef:ce:db:f2:cd:6e:d5:91:9e:29:a7:
                    d2:2f:98:b1:d3:e4:ca:ef:01:2b:77:43:6a:c5:d8:
                    9a:17:62:56:ca:61:47:c0:71:6e:3c:09:3a:84:28:
                    10:4d:70:48:3c:49:14:f3:84:aa:c3:a2:4f:fd:2d:
                    b6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F5:C6:F1:2D:B4:EC:A2:3B:8F:6B:03:5E:D5:97:E2:05:A3:F9:F7
            X509v3 Authority Key Identifier:
                keyid:23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130362e302f32332d3233203d3e20323731363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:37:62:7e:e6:d5:60:34:fc:28:83:02:31:71:2b:06:01:ac:
         30:4c:7d:38:27:a6:ab:51:ff:84:ef:6e:26:85:66:1b:b6:6f:
         f1:dc:0e:90:9e:fd:36:83:50:d7:a1:2f:4d:9f:79:56:e8:fd:
         5b:60:da:c4:fa:29:41:a6:4b:db:a3:cd:67:f4:02:da:7b:e7:
         63:dc:d7:11:70:b1:f2:1c:5f:06:d1:ba:ba:1b:1d:e5:02:6b:
         d4:3a:fe:f6:c7:62:9a:9b:33:09:ea:76:1f:e6:50:fd:57:a3:
         9c:45:29:c1:49:ae:65:f7:81:83:45:a7:84:ee:c2:38:d9:8e:
         eb:a0:2b:b2:33:3d:18:aa:f9:ec:94:8e:f7:2e:0e:79:cf:60:
         fd:33:11:0c:0a:01:99:0b:c9:25:c5:2f:02:80:68:32:5c:b5:
         d9:14:65:75:d4:53:a2:1f:cc:33:46:86:ee:b9:ae:d2:ba:4c:
         38:8a:0a:48:09:9c:ee:35:a0:a5:ae:92:c2:21:61:73:38:79:
         92:3a:cf:af:ff:16:e2:08:96:b2:23:0b:03:82:53:4a:af:83:
         22:9d:f9:67:fe:c8:11:16:4f:e3:20:12:cd:05:cc:2c:ac:da:
         9c:b7:45:0a:a5:1f:ec:3b:f0:a6:31:d9:9a:03:a7:88:19:75:
         6c:d1:a2:3e
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUDTF+bSbWOIvXm947rYGy1hTU0R0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM3Q0I3RjFDRDQ1QUVERDYxQzkzNDlGNDExQjlDOUNB
RjBDMURFOTAeFw0yNTEwMDExODAyMTdaFw0yNjA5MzAxODA3MTdaMDMxMTAvBgNV
BAMTKDRERjVDNkYxMkRCNEVDQTIzQjhGNkIwMzVFRDU5N0UyMDVBM0Y5RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq3gJG4+YDSpBJ7NVQHpGgP20/
P1NL51QnXLvYnT9UWGZmnl1dZDVJ7Vt5paiZGdpnEjEQaDWvyDHGD4kexzmYRoCc
UFibiuxpI3tiQd4iz8+3Eqt0xb3itu9pGzqoDJigj8D2Zp8Ri1F3EGZpa/xDxVTW
27R/2M0jgstkWgyeJrohqnQSyhuxUaagROnO5sr4pzARuBdWjAbP/13KmcXPaTlo
7WhYaUR6iC6nafgNMl1A43+4DgZuSDAwXno8LUT5Olm06KnvztvyzW7VkZ4pp9Iv
mLHT5MrvASt3Q2rF2JoXYlbKYUfAcW48CTqEKBBNcEg8SRTzhKrDok/9LbYrAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUTfXG8S207KI7j2sDXtWX4gWj+fcwHwYDVR0j
BBgwFoAUI3y38c1Frt1hyTSfQRucnK8MHekwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DaTJhc1A5MmVxTGN3cmRMRUJudGJlRmVwY21KVlR4N2pVc1pKZGNjWlNH
LzAvMjM3Q0I3RjFDRDQ1QUVERDYxQzkzNDlGNDExQjlDOUNBRjBDMURFOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yMzdDQjdGMUNENDVBRURENjFD
OTM0OUY0MTFCOUM5Q0FGMEMxREU5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9D
aTJhc1A5MmVxTGN3cmRMRUJudGJlRmVwY21KVlR4N2pVc1pKZGNjWlNHLzAvMzEz
OTMwMmUzOTJlMzEzMDM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMxMzYz
MDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBvglqMA0GCSqGSIb3DQEBCwUAA4IBAQApN2J+5tVgNPwo
gwIxcSsGAawwTH04J6arUf+E724mhWYbtm/x3A6Qnv02g1DXoS9Nn3lW6P1bYNrE
+ilBpkvbo81n9ALae+dj3NcRcLHyHF8G0bq6Gx3lAmvUOv72x2KamzMJ6nYf5lD9
V6OcRSnBSa5l94GDRaeE7sI42Y7roCuyMz0YqvnslI73Lg55z2D9MxEMCgGZC8kl
xS8CgGgyXLXZFGV11FOiH8wzRobuua7Sukw4igpICZzuNaClrpLCIWFzOHmSOs+v
/xbiCJayIwsDglNKr4Minfln/sgRFk/jIBLNBcwsrNqct0UKpR/sO/CmMdmaA6eI
GXVs0aI+
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:07:28 2025 by rpki-client