Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa
File:                     3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa (raw, json)
Hash identifier:          9bHKoBVKQeeeAm6Z1ycdoh98mqPvLkckW2W0TKHBR48=
Subject key identifier:   AC:5F:CD:10:9D:38:35:38:83:5B:39:EB:F3:34:DA:8A:FE:BC:4F:E2
Certificate issuer:       /CN=17461A5AF98839DE20C2D7F7A0A8537C77AC52B2
Certificate serial:       319DC19390A76725464DB2DF18DBD224D8671E02
Authority key identifier: 17:46:1A:5A:F9:88:39:DE:20:C2:D7:F7:A0:A8:53:7C:77:AC:52:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa
Signing time:             Thu 26 Jun 2025 00:36:39 +0000
ROA not before:           Thu 26 Jun 2025 00:31:39 +0000
ROA not after:            Thu 25 Jun 2026 00:36:39 +0000
asID:                     265919
IP address blocks:        131.196.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:43:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9d:c1:93:90:a7:67:25:46:4d:b2:df:18:db:d2:24:d8:67:1e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17461A5AF98839DE20C2D7F7A0A8537C77AC52B2
        Validity
            Not Before: Jun 26 00:31:39 2025 GMT
            Not After : Jun 25 00:36:39 2026 GMT
        Subject: CN=AC5FCD109D383538835B39EBF334DA8AFEBC4FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:f3:f3:28:d5:84:0e:41:fe:d4:1f:ab:a9:
                    b6:7f:47:6d:3e:30:87:e8:50:9b:81:29:38:4d:c1:
                    a0:b2:44:09:62:20:3a:ad:ba:fe:88:99:c5:d4:42:
                    99:44:c6:67:02:d7:0d:2f:b1:e0:49:82:09:64:fa:
                    52:89:c9:52:0f:63:70:68:51:95:14:0d:09:8e:01:
                    bb:68:5c:08:9f:28:47:56:4a:13:ff:bf:ac:6b:29:
                    87:f1:e4:03:c5:08:da:25:8b:da:1f:04:60:31:86:
                    4d:e5:b7:22:d3:7d:4e:be:c6:f3:a2:40:8c:ff:18:
                    16:e3:51:af:92:3e:b6:7a:07:2a:a3:78:73:81:4e:
                    19:6a:ab:3c:39:ff:b9:a9:0b:7d:35:af:18:09:d1:
                    d3:a8:fa:9b:94:2c:55:6e:6b:ba:19:fa:c7:59:00:
                    a3:48:bf:34:c7:ee:88:06:8e:10:61:94:52:2c:c1:
                    4b:ae:02:03:6a:e2:90:dd:84:6c:9a:d0:8f:a2:1d:
                    25:98:8c:24:29:fe:6c:91:c6:3f:e4:3b:d5:16:e6:
                    fa:9f:39:da:b9:ba:b6:1a:ed:ac:c0:c0:dc:7b:ee:
                    36:8e:ef:8a:01:d1:b0:52:9a:75:8e:94:fb:89:69:
                    48:0c:ce:5f:3b:64:ba:45:b9:10:87:b1:5b:34:dd:
                    3d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5F:CD:10:9D:38:35:38:83:5B:39:EB:F3:34:DA:8A:FE:BC:4F:E2
            X509v3 Authority Key Identifier:
                keyid:17:46:1A:5A:F9:88:39:DE:20:C2:D7:F7:A0:A8:53:7C:77:AC:52:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:08:5c:6d:08:bb:3a:61:de:f4:84:7b:59:59:6c:96:0a:59:
         d9:02:56:02:6c:9f:69:ff:f4:9b:f2:6d:fb:62:02:1d:92:19:
         88:1d:9b:03:7a:5e:40:bc:ff:41:90:1d:27:71:39:77:2a:c3:
         35:0f:8e:03:b5:ae:2c:08:99:7a:e8:35:45:c4:f6:44:3b:a7:
         a5:6f:09:bb:34:97:4c:9b:b8:fd:5a:14:61:e4:f6:f7:9c:91:
         c9:c9:8d:45:bc:b7:3f:ae:00:f0:0f:fe:69:73:84:b6:5f:25:
         e0:1c:14:80:6a:b0:d8:06:99:e5:05:5b:01:10:da:c9:4c:56:
         af:ee:9a:9d:f4:31:a2:5f:ad:89:31:60:35:d9:8f:f9:92:4b:
         ef:97:b2:12:14:56:da:d6:39:e5:4f:d9:d1:04:48:52:c8:4b:
         0c:c3:b5:7a:e6:27:11:0c:a6:1f:99:f5:41:64:95:e9:fb:61:
         98:e7:61:65:0a:a9:22:36:8c:ca:a8:11:89:fd:5e:e5:ce:0b:
         02:ea:42:f4:5f:b8:3c:cd:47:64:fe:bc:cc:94:3d:db:21:16:
         2f:68:fe:26:b3:ef:a0:4a:e6:9d:5d:d6:dc:eb:28:75:32:38:
         0d:11:ed:65:2c:0b:f0:c4:6a:75:17:a4:e2:e2:a7:93:a4:68:
         b3:ee:36:82
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMZ3Bk5CnZyVGTbLfGNvSJNhnHgIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc0NjFBNUFGOTg4MzlERTIwQzJEN0Y3QTBBODUzN0M3
N0FDNTJCMjAeFw0yNTA2MjYwMDMxMzlaFw0yNjA2MjUwMDM2MzlaMDMxMTAvBgNV
BAMTKEFDNUZDRDEwOUQzODM1Mzg4MzVCMzlFQkYzMzREQThBRkVCQzRGRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRAfPzKNWEDkH+1B+rqbZ/R20+
MIfoUJuBKThNwaCyRAliIDqtuv6ImcXUQplExmcC1w0vseBJgglk+lKJyVIPY3Bo
UZUUDQmOAbtoXAifKEdWShP/v6xrKYfx5APFCNoli9ofBGAxhk3ltyLTfU6+xvOi
QIz/GBbjUa+SPrZ6ByqjeHOBThlqqzw5/7mpC301rxgJ0dOo+puULFVua7oZ+sdZ
AKNIvzTH7ogGjhBhlFIswUuuAgNq4pDdhGya0I+iHSWYjCQp/myRxj/kO9UW5vqf
Odq5urYa7azAwNx77jaO74oB0bBSmnWOlPuJaUgMzl87ZLpFuRCHsVs03T0hAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUrF/NEJ04NTiDWznr8zTaiv68T+IwHwYDVR0j
BBgwFoAUF0YaWvmIOd4gwtf3oKhTfHesUrIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREZBcFFkcjNldWQySGpwM0hXRk52NkV1M3lBaXk3WE5vTjVpRlduWXFh
bzQvMC8xNzQ2MUE1QUY5ODgzOURFMjBDMkQ3RjdBMEE4NTM3Qzc3QUM1MkIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3NDYxQTVBRjk4ODM5REUy
MEMyRDdGN0EwQTg1MzdDNzdBQzUyQjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RGQXBRZHIzZXVkMkhqcDNIV0ZOdjZFdTN5QWl5N1hOb041aUZXbllxYW80LzAv
MzEzMzMxMmUzMTM5MzYyZTMxMzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM5MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPExDANBgkqhkiG9w0BAQsFAAOCAQEAYwhc
bQi7OmHe9IR7WVlslgpZ2QJWAmyfaf/0m/Jt+2ICHZIZiB2bA3peQLz/QZAdJ3E5
dyrDNQ+OA7WuLAiZeug1RcT2RDunpW8JuzSXTJu4/VoUYeT295yRycmNRby3P64A
8A/+aXOEtl8l4BwUgGqw2AaZ5QVbARDayUxWr+6anfQxol+tiTFgNdmP+ZJL75ey
EhRW2tY55U/Z0QRIUshLDMO1euYnEQymH5n1QWSV6fthmOdhZQqpIjaMyqgRif1e
5c4LAupC9F+4PM1HZP68zJQ92yEWL2j+JrPvoErmnV3W3OsodTI4DRHtZSwL8MRq
dRek4uKnk6Ros+42gg==
-----END CERTIFICATE-----
Generated at Sat Jul 12 14:16:27 2025 by rpki-client