Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e372e302f32342d3234203d3e20323634383939.roa
File:                     3136382e3232382e372e302f32342d3234203d3e20323634383939.roa (raw, json)
Hash identifier:          64eC0ByMQUhJowB9tjMnvjfPD/0J57tLB5Fz/cqnxsM=
Subject key identifier:   17:E0:60:6B:ED:E1:B9:C2:80:8E:80:AD:55:14:EC:97:E0:EE:1D:BD
Certificate issuer:       /CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
Certificate serial:       53FDDD304828563348A5FF9F2A686D7C2C1232A9
Authority key identifier: 14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e372e302f32342d3234203d3e20323634383939.roa
Signing time:             Thu 16 Oct 2025 18:31:03 +0000
ROA not before:           Thu 16 Oct 2025 18:26:03 +0000
ROA not after:            Thu 15 Oct 2026 18:31:03 +0000
asID:                     264899
IP address blocks:        168.228.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl
                          rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 05:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fd:dd:30:48:28:56:33:48:a5:ff:9f:2a:68:6d:7c:2c:12:32:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
        Validity
            Not Before: Oct 16 18:26:03 2025 GMT
            Not After : Oct 15 18:31:03 2026 GMT
        Subject: CN=17E0606BEDE1B9C2808E80AD5514EC97E0EE1DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8a:c6:99:04:0d:bb:99:f5:6e:ef:43:c5:41:
                    7d:e6:2d:d2:29:a8:77:39:04:68:b0:d9:43:fc:c9:
                    7b:2c:02:9d:0f:2f:7c:37:67:25:ae:26:50:bb:53:
                    fe:d4:12:4f:2c:ea:45:25:88:55:85:3d:05:25:4e:
                    5a:5f:c2:65:2e:6a:25:c3:21:33:f1:5b:66:73:eb:
                    82:89:c4:24:0d:c5:e8:d2:cb:f6:49:05:04:40:6e:
                    7d:27:41:ef:42:c1:09:4c:e9:1c:aa:ba:3d:0c:8a:
                    fb:57:e0:37:46:2f:a4:76:40:af:98:11:c3:ae:15:
                    f4:dd:a3:e5:9b:31:32:b7:aa:52:b0:f5:ed:d2:4d:
                    e4:fc:dc:ca:5c:6f:39:48:15:04:35:69:18:bb:37:
                    2c:a3:e9:48:62:df:34:ee:f9:5a:da:52:b5:72:ed:
                    42:ce:ee:55:2e:70:f6:e9:cb:0f:f6:53:57:d8:9d:
                    0b:9e:09:c5:9c:a4:5e:49:24:8c:81:00:af:c5:1b:
                    1d:d7:b1:24:fa:e3:11:e8:1c:50:f0:95:f8:0f:9b:
                    e6:2d:82:00:f5:1d:6a:3b:25:97:b9:83:cb:69:c2:
                    70:4f:99:ec:02:84:a8:92:11:c7:fc:24:e3:3e:d1:
                    20:0a:43:87:39:80:73:b1:c9:11:1d:9f:56:03:ae:
                    ca:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E0:60:6B:ED:E1:B9:C2:80:8E:80:AD:55:14:EC:97:E0:EE:1D:BD
            X509v3 Authority Key Identifier:
                keyid:14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e372e302f32342d3234203d3e20323634383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:73:2b:e1:15:5d:d2:35:98:63:0d:60:65:5f:a8:74:11:1a:
         88:d0:bb:ef:45:ed:bc:52:8a:bc:d3:61:dc:94:e7:b0:52:cb:
         11:92:ed:e4:13:4a:9a:08:7e:e3:91:6f:0d:65:28:ce:9c:af:
         93:26:ba:10:49:62:f5:07:ee:a6:99:44:d5:fb:51:88:0b:34:
         fa:bb:14:34:b1:4d:92:02:8f:92:89:96:09:29:4a:b9:c3:73:
         b2:c5:ad:71:9d:fe:d9:d1:c2:32:47:35:b2:b6:7f:c7:f2:e5:
         8b:d9:0d:39:0e:94:51:1a:47:a4:6a:24:2d:6b:7f:bb:73:f3:
         8c:52:93:2a:33:78:f5:89:a1:21:a7:cc:38:8e:33:46:f7:cb:
         a9:09:6a:5f:16:8f:4b:7d:16:2f:82:59:ce:42:3a:26:2c:71:
         72:aa:9a:b6:76:af:6c:97:ac:c9:a3:f5:0e:9f:ee:99:03:4d:
         89:a1:04:b8:d8:a4:f7:11:92:31:97:04:82:79:cb:51:13:51:
         da:67:27:85:71:f6:00:d5:24:3c:2b:ac:01:50:71:07:67:66:
         c0:0c:b7:3f:f3:55:6f:82:d8:00:cc:0e:e1:1b:f8:39:b5:ac:
         82:fb:75:20:74:7a:e3:c3:39:7f:08:e3:02:e5:1e:62:3b:02:
         d1:24:c2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:38:26 2025 by rpki-client