Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/3136382e3139372e3234342e302f32322d3234203d3e203631393038.roa
File:                     3136382e3139372e3234342e302f32322d3234203d3e203631393038.roa (raw, json)
Hash identifier:          AbhiS6atM/ufUan1NgjjbSssoI/bofGFQ0tlSXQ5Em0=
Subject key identifier:   C9:9E:0E:97:CF:5F:33:38:CD:18:21:1A:A7:EE:1C:A9:40:E5:AB:F4
Certificate issuer:       /CN=BB0E18F43E99502212097842E9F81169A8D29D2E
Certificate serial:       30E86CA9A1A44F7476FA4281289BFFC726D5B31B
Authority key identifier: BB:0E:18:F4:3E:99:50:22:12:09:78:42:E9:F8:11:69:A8:D2:9D:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0E18F43E99502212097842E9F81169A8D29D2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/3136382e3139372e3234342e302f32322d3234203d3e203631393038.roa
Signing time:             Mon 15 Sep 2025 00:33:15 +0000
ROA not before:           Mon 15 Sep 2025 00:28:15 +0000
ROA not after:            Mon 14 Sep 2026 00:33:15 +0000
asID:                     61908
IP address blocks:        168.197.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.crl
                          rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0E18F43E99502212097842E9F81169A8D29D2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e8:6c:a9:a1:a4:4f:74:76:fa:42:81:28:9b:ff:c7:26:d5:b3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB0E18F43E99502212097842E9F81169A8D29D2E
        Validity
            Not Before: Sep 15 00:28:15 2025 GMT
            Not After : Sep 14 00:33:15 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:26:41:58:df:8d:91:6e:21:43:69:a4:da:
                    76:12:a3:0f:5c:a4:4d:c3:df:a0:b9:08:2c:89:af:
                    63:31:32:be:e0:e8:7d:4e:c5:1a:f3:80:12:cc:2c:
                    7a:f7:bc:1d:06:43:0f:b3:14:10:6c:ae:4b:5b:44:
                    b0:49:64:45:06:1d:3c:0b:e2:f3:c6:43:a3:1e:e3:
                    71:6e:17:be:19:04:db:d3:5e:00:63:51:4f:10:a9:
                    2c:86:b4:0b:4e:47:1a:2f:a4:4f:5b:1d:f9:06:5a:
                    ca:80:db:34:8a:6c:83:84:bc:2e:27:3b:d4:c6:1e:
                    0c:c0:fb:a8:47:74:66:a1:2d:10:35:d6:1e:c6:fb:
                    e1:70:3b:4f:65:03:10:93:b4:64:8c:04:fc:96:a0:
                    47:f7:81:68:db:d3:9f:52:ce:2e:39:33:48:b9:8c:
                    56:db:27:7d:bb:00:f7:7c:12:be:e5:c7:40:cd:b8:
                    13:d2:d9:ac:a5:d8:0b:52:70:6f:87:6c:48:a5:23:
                    95:fe:58:b5:a4:54:34:70:5c:10:34:f3:2e:19:3e:
                    e3:74:eb:92:26:d9:30:3e:43:33:ed:cf:44:f7:63:
                    11:7d:c4:18:0e:70:4f:09:37:e1:58:d0:4d:34:46:
                    dc:bc:e6:fb:37:31:a1:06:a1:ba:62:73:74:a2:78:
                    e4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9E:0E:97:CF:5F:33:38:CD:18:21:1A:A7:EE:1C:A9:40:E5:AB:F4
            X509v3 Authority Key Identifier:
                keyid:BB:0E:18:F4:3E:99:50:22:12:09:78:42:E9:F8:11:69:A8:D2:9D:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0E18F43E99502212097842E9F81169A8D29D2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/3136382e3139372e3234342e302f32322d3234203d3e203631393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e0:1e:bb:70:9f:a1:a1:61:a8:41:a1:10:e0:70:53:d7:26:d4:
         5c:60:d9:5c:4d:56:72:58:07:30:4e:b2:97:68:99:0a:65:ef:
         d7:c4:51:71:36:f8:f5:a1:29:a0:fd:cd:7a:1b:f8:bf:bb:08:
         7c:01:32:ea:5b:0e:a0:3c:4f:2d:75:3b:78:2a:98:46:f5:e9:
         ba:05:a3:e9:43:ab:f9:5e:1c:4e:27:03:f9:92:92:fa:ad:6a:
         b6:61:34:85:21:69:87:8a:b9:9b:21:8c:bc:80:94:f4:24:b7:
         6b:ff:26:a1:73:ce:06:3a:ad:5e:c5:81:55:83:e1:91:31:76:
         3c:a9:a5:8c:fd:9d:5c:4d:97:1f:01:59:a4:64:4d:4d:11:8c:
         9f:73:15:54:15:70:3f:16:6a:cb:9d:4e:b7:cf:62:96:50:86:
         55:15:83:42:e0:ee:cc:82:41:d6:25:31:5c:a7:b0:a6:64:f7:
         24:a5:87:29:34:20:47:68:29:ca:88:8e:ec:5d:39:88:5d:cc:
         9e:95:9b:c1:c0:d1:28:6f:d0:fc:48:b6:a6:55:09:b4:06:5d:
         f9:0d:d6:9b:22:7c:6c:d7:74:cf:9d:28:2c:5d:29:14:ee:02:
         75:55:61:8b:fe:03:86:16:f5:46:e8:9c:45:30:9b:14:28:2b:
         75:02:f6:75
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUMOhsqaGkT3R2+kKBKJv/xybVsxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIwRTE4RjQzRTk5NTAyMjEyMDk3ODQyRTlGODExNjlB
OEQyOUQyRTAeFw0yNTA5MTUwMDI4MTVaFw0yNjA5MTQwMDMzMTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0JDNjI2NDE1OERGOEQ5MTZF
MjE0MzY5QTREQTc2MTJBMzBGNUNBNDREQzNERkEwQjkwODJDODlBRjYzMzEzMkJF
RTBFODdENEVDNTFBRjM4MDEyQ0MyQzdBRjdCQzFEMDY0MzBGQjMxNDEwNkNBRTRC
NUI0NEIwNDk2NDQ1MDYxRDNDMEJFMkYzQzY0M0EzMUVFMzcxNkUxN0JFMTkwNERC
RDM1RTAwNjM1MTRGMTBBOTJDODZCNDBCNEU0NzFBMkZBNDRGNUIxREY5MDY1QUNB
ODBEQjM0OEE2QzgzODRCQzJFMjczQkQ0QzYxRTBDQzBGQkE4NDc3NDY2QTEyRDEw
MzVENjFFQzZGQkUxNzAzQjRGNjUwMzEwOTNCNDY0OEMwNEZDOTZBMDQ3Rjc4MTY4
REJEMzlGNTJDRTJFMzkzMzQ4Qjk4QzU2REIyNzdEQkIwMEY3N0MxMkJFRTVDNzQw
Q0RCODEzRDJEOUFDQTVEODBCNTI3MDZGODc2QzQ4QTUyMzk1RkU1OEI1QTQ1NDM0
NzA1QzEwMzRGMzJFMTkzRUUzNzRFQjkyMjZEOTMwM0U0MzMzRURDRjQ0Rjc2MzEx
N0RDNDE4MEU3MDRGMDkzN0UxNThEMDREMzQ0NkRDQkNFNkZCMzczMUExMDZBMUJB
NjI3Mzc0QTI3OEU0NTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAy8YmQVjfjZFuIUNppNp2EqMPXKRNw9+guQgsia9jMTK+4Oh9TsUa
84ASzCx697wdBkMPsxQQbK5LW0SwSWRFBh08C+LzxkOjHuNxbhe+GQTb014AY1FP
EKkshrQLTkcaL6RPWx35BlrKgNs0imyDhLwuJzvUxh4MwPuoR3RmoS0QNdYexvvh
cDtPZQMQk7RkjAT8lqBH94Fo29OfUs4uOTNIuYxW2yd9uwD3fBK+5cdAzbgT0tms
pdgLUnBvh2xIpSOV/li1pFQ0cFwQNPMuGT7jdOuSJtkwPkMz7c9E92MRfcQYDnBP
CTfhWNBNNEbcvOb7NzGhBqG6YnN0onjkUQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FMmeDpfPXzM4zRghGqfuHKlA5av0MB8GA1UdIwQYMBaAFLsOGPQ+mVAiEgl4Qun4
EWmo0p0uMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RxYVBXM3lNYVptNXpD
c25idHpIV3FVWFdlNlVpcWZIS2pXOXJWQXlFaXpHLzAvQkIwRTE4RjQzRTk5NTAy
MjEyMDk3ODQyRTlGODExNjlBOEQyOUQyRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CQjBFMThGNDNFOTk1MDIyMTIwOTc4NDJFOUY4MTE2OUE4RDI5
RDJFLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EcWFQVzN5TWFabTV6Q3NuYnR6
SFdxVVhXZTZVaXFmSEtqVzlyVkF5RWl6Ry8wLzMxMzYzODJlMzEzOTM3MmUzMjM0
MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMxMzkzMDM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
qMX0MA0GCSqGSIb3DQEBCwUAA4IBAQDgHrtwn6GhYahBoRDgcFPXJtRcYNlcTVZy
WAcwTrKXaJkKZe/XxFFxNvj1oSmg/c16G/i/uwh8ATLqWw6gPE8tdTt4KphG9em6
BaPpQ6v5XhxOJwP5kpL6rWq2YTSFIWmHirmbIYy8gJT0JLdr/yahc84GOq1exYFV
g+GRMXY8qaWM/Z1cTZcfAVmkZE1NEYyfcxVUFXA/FmrLnU63z2KWUIZVFYNC4O7M
gkHWJTFcp7CmZPckpYcpNCBHaCnKiI7sXTmIXcyelZvBwNEob9D8SLamVQm0Bl35
DdabInxs13TPnSgsXSkU7gJ1VWGL/gOGFvVG6JxFMJsUKCt1AvZ1
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:35:14 2025 by rpki-client