Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/3136302e3233382e3234302e302f32322d3332203d3e20323636353732.roa
File:                     3136302e3233382e3234302e302f32322d3332203d3e20323636353732.roa (raw, json)
Hash identifier:          dw6jcW0eOdo8aQ8haUhV4/Kw4nxYiBl7iWo5epZbUR0=
Subject key identifier:   CE:54:C9:D0:EA:22:56:62:53:CA:BA:4D:FD:AA:20:3B:60:22:5E:58
Certificate issuer:       /CN=9327DF660841FA793EB561E1E5F01B343216B1DF
Certificate serial:       139706BF16969293350E57E30DFD6E8966059C89
Authority key identifier: 93:27:DF:66:08:41:FA:79:3E:B5:61:E1:E5:F0:1B:34:32:16:B1:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9327DF660841FA793EB561E1E5F01B343216B1DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/3136302e3233382e3234302e302f32322d3332203d3e20323636353732.roa
Signing time:             Mon 06 Oct 2025 18:36:22 +0000
ROA not before:           Mon 06 Oct 2025 18:31:22 +0000
ROA not after:            Mon 05 Oct 2026 18:36:22 +0000
asID:                     266572
IP address blocks:        160.238.240.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/9327DF660841FA793EB561E1E5F01B343216B1DF.crl
                          rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/9327DF660841FA793EB561E1E5F01B343216B1DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9327DF660841FA793EB561E1E5F01B343216B1DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 20:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:97:06:bf:16:96:92:93:35:0e:57:e3:0d:fd:6e:89:66:05:9c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9327DF660841FA793EB561E1E5F01B343216B1DF
        Validity
            Not Before: Oct  6 18:31:22 2025 GMT
            Not After : Oct  5 18:36:22 2026 GMT
        Subject: CN=CE54C9D0EA22566253CABA4DFDAA203B60225E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:1f:1e:7e:81:0e:a4:06:34:25:76:8c:e7:
                    b5:97:48:f3:70:79:25:f3:21:be:ba:25:70:94:23:
                    4a:12:34:9c:2f:34:61:d9:22:f0:74:71:c6:c0:39:
                    ee:17:f0:c0:b6:b6:81:47:1c:af:9d:99:56:56:99:
                    19:19:47:37:70:87:99:ea:29:39:d3:4a:7b:a8:25:
                    30:96:2a:98:c0:40:5f:37:e3:30:1d:12:eb:92:78:
                    6b:30:1b:8d:b7:d0:f9:b4:32:89:65:ef:56:d5:fd:
                    f2:84:0f:f3:01:fa:aa:d0:31:55:fb:3d:48:f3:09:
                    72:33:94:42:24:31:d2:03:f2:9d:c4:75:1f:6f:0e:
                    28:e0:03:f3:c5:fe:a0:51:8e:14:6c:1b:03:12:f2:
                    59:8f:42:60:78:4b:29:55:33:c0:9e:3a:9d:f2:77:
                    c9:50:77:d6:39:ca:b3:a7:fa:9a:d0:aa:fe:f5:31:
                    c3:e4:16:d4:80:ae:8c:73:c9:0b:dc:e6:0d:4b:5b:
                    31:71:7c:0a:ae:e2:ec:8e:db:be:bc:30:80:6b:79:
                    5d:05:66:a9:8c:b9:b1:a7:ad:1e:52:9d:d7:49:62:
                    27:1c:e4:79:07:10:ef:ba:a7:b9:9c:5f:68:16:72:
                    39:57:71:d0:30:ea:d0:9a:d0:af:4e:12:76:a2:ee:
                    aa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:54:C9:D0:EA:22:56:62:53:CA:BA:4D:FD:AA:20:3B:60:22:5E:58
            X509v3 Authority Key Identifier:
                keyid:93:27:DF:66:08:41:FA:79:3E:B5:61:E1:E5:F0:1B:34:32:16:B1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/9327DF660841FA793EB561E1E5F01B343216B1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9327DF660841FA793EB561E1E5F01B343216B1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/3136302e3233382e3234302e302f32322d3332203d3e20323636353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:ed:d0:a9:df:9e:02:89:b9:28:9f:0c:ce:11:dc:8d:7e:84:
         d8:72:9a:55:49:f7:10:41:a4:66:84:49:27:ab:12:d3:81:f3:
         f1:a3:d8:6d:c1:93:ca:e9:31:c3:4c:2f:75:3b:b3:2c:b3:e8:
         da:ec:43:b6:dd:c9:d7:64:43:ad:2c:0e:80:8c:86:aa:9a:0e:
         52:f8:12:ad:bf:7c:ee:b3:12:e5:e3:0d:b5:b9:eb:92:97:a3:
         d7:2c:2d:03:d1:61:f4:a0:fd:d8:80:ca:0e:3b:0a:d2:ff:02:
         df:ab:ea:2c:96:08:ee:de:3e:8a:61:96:61:46:6a:b9:a3:d1:
         62:2a:84:92:83:79:20:ac:f3:fd:ef:01:ce:89:db:35:3e:b1:
         3d:1f:70:33:18:57:df:34:9b:e8:f9:3e:df:f5:40:63:d2:81:
         33:2a:48:39:ca:cf:6b:4f:90:4f:42:b4:b3:c4:d6:7b:7e:12:
         2b:92:bb:b6:01:6c:be:8d:3f:1a:2a:01:8a:3f:3e:ec:58:ab:
         ae:cc:60:58:5b:02:d5:6e:12:75:d7:b8:10:c4:0b:94:33:35:
         d5:a4:00:46:b7:71:1e:58:dc:43:89:15:5b:31:98:3f:ec:2a:
         87:34:ed:5e:a5:0b:99:fb:91:2a:79:11:68:d4:ab:19:f3:3a:
         30:97:5d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:37:22 2025 by rpki-client