Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133312e3235352e3131342e302f32332d3234203d3e20323632393037.roa
File:                     3133312e3235352e3131342e302f32332d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          WDQQzvHK/xlxYApLmMSIIkmuoUX/iTyrqRZ+w7anGiw=
Subject key identifier:   E6:B3:3E:B0:DF:54:7F:16:F1:6F:87:F5:A1:A4:63:6B:E9:9F:3C:A1
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       2DE4A4F5A2278E98A3341B1F412E5777503DEAB7
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133312e3235352e3131342e302f32332d3234203d3e20323632393037.roa
Signing time:             Wed 15 Oct 2025 18:10:04 +0000
ROA not before:           Wed 15 Oct 2025 18:05:04 +0000
ROA not after:            Wed 14 Oct 2026 18:10:04 +0000
asID:                     262907
IP address blocks:        131.255.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e4:a4:f5:a2:27:8e:98:a3:34:1b:1f:41:2e:57:77:50:3d:ea:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Oct 15 18:05:04 2025 GMT
            Not After : Oct 14 18:10:04 2026 GMT
        Subject: CN=E6B33EB0DF547F16F16F87F5A1A4636BE99F3CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0f:2d:93:59:49:31:39:08:1e:07:e6:d7:81:
                    b6:d1:a6:5e:36:bc:58:9a:ed:07:1b:5d:ce:ba:31:
                    03:45:b0:49:a5:75:1a:68:f7:86:f2:ab:0a:92:b7:
                    57:24:49:d0:1c:33:cb:9c:bc:b2:3b:43:45:03:30:
                    7b:12:0d:91:61:b9:39:87:51:32:d6:f0:80:41:7b:
                    2b:7f:8c:8e:24:3e:7c:5b:8b:54:ba:38:89:c0:ff:
                    6d:62:df:9b:d2:16:61:79:92:11:a5:2b:7d:fd:5b:
                    d8:e2:13:2c:22:04:98:70:48:29:a3:1f:5f:28:60:
                    08:16:63:f2:8b:64:e9:d3:08:c8:6a:4e:43:96:a4:
                    e1:fa:33:77:86:87:38:15:cf:cb:83:f5:57:15:97:
                    a6:1a:4c:53:a1:76:e1:84:fb:1d:3d:92:a7:e7:f0:
                    03:38:02:fb:8c:ff:27:29:02:c1:94:84:ad:46:58:
                    ce:a1:dc:b8:c3:48:5f:74:0c:64:bb:38:e7:46:82:
                    d5:4d:2e:c1:5c:95:c6:10:ab:e3:67:16:f4:a3:78:
                    e4:0f:4b:35:ac:1d:b4:11:39:cd:f4:84:12:75:e4:
                    7e:7c:d7:d6:aa:f2:a2:20:58:45:a2:41:a5:d7:4d:
                    fa:f3:e5:5e:b0:d1:bd:78:b1:80:a5:65:a9:a7:ac:
                    c2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B3:3E:B0:DF:54:7F:16:F1:6F:87:F5:A1:A4:63:6B:E9:9F:3C:A1
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133312e3235352e3131342e302f32332d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:73:3e:e7:21:0a:48:12:1d:4f:fa:a8:ed:d9:4b:ac:8f:00:
         d1:29:02:89:c7:a9:20:79:ec:10:07:5a:83:ff:51:03:3a:c4:
         67:69:81:0c:33:07:a7:69:a3:a5:f4:66:ee:b7:10:e6:b7:3d:
         d9:7d:1c:e9:ae:87:ff:1a:1d:bf:db:e6:39:a0:5c:4f:97:c0:
         68:fb:1f:01:42:04:74:56:60:fb:95:d0:29:54:f8:df:5a:20:
         95:38:da:0b:73:cf:0d:2f:cc:68:1c:a0:b2:f8:e1:72:48:0a:
         1e:d5:d5:d9:c7:23:0d:f6:ab:73:75:d4:6c:78:6c:8a:02:cb:
         09:ef:58:65:6d:39:c4:37:09:f9:a4:7c:9e:2c:cf:1f:f9:61:
         f7:84:52:d8:8d:d8:73:f7:62:21:1c:76:1b:1e:a6:1f:56:eb:
         92:4a:46:e5:ee:40:79:1f:11:ec:c3:88:fa:e0:11:6b:5f:8f:
         0d:13:f2:9e:5d:40:9b:cd:40:67:0f:8b:39:9f:3b:43:7e:fa:
         c5:4b:46:a0:df:92:d0:7c:25:07:74:99:81:ae:bc:c0:07:5a:
         9d:a2:17:4b:c1:f5:3a:e1:0e:ee:1d:47:86:30:81:e9:8f:1d:
         a6:49:8e:71:7b:9d:da:73:3e:9a:44:e3:37:b3:a9:b5:e6:1a:
         53:f0:7a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:57:07 2025 by rpki-client