Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/3137372e39312e3139322e302f31392d3234203d3e203532393435.roa
File:                     3137372e39312e3139322e302f31392d3234203d3e203532393435.roa (raw, json)
Hash identifier:          iq+MWqmEH923hgu4W80ZrY9pG7n2JYxXsrLnyaXvQzk=
Subject key identifier:   E0:4C:19:7B:3F:F8:1B:AE:EB:2E:07:95:5B:09:E1:65:23:CE:34:A6
Certificate issuer:       /CN=C264FB166D810B0B079997649A78C2454ECCCB7F
Certificate serial:       567EA54440B468D67A32F1970D76EEE7B0B465F5
Authority key identifier: C2:64:FB:16:6D:81:0B:0B:07:99:97:64:9A:78:C2:45:4E:CC:CB:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C264FB166D810B0B079997649A78C2454ECCCB7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/3137372e39312e3139322e302f31392d3234203d3e203532393435.roa
Signing time:             Fri 12 Sep 2025 19:42:20 +0000
ROA not before:           Fri 12 Sep 2025 19:37:20 +0000
ROA not after:            Fri 11 Sep 2026 19:42:20 +0000
asID:                     52945
IP address blocks:        177.91.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/C264FB166D810B0B079997649A78C2454ECCCB7F.crl
                          rsync://rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/C264FB166D810B0B079997649A78C2454ECCCB7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C264FB166D810B0B079997649A78C2454ECCCB7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:7e:a5:44:40:b4:68:d6:7a:32:f1:97:0d:76:ee:e7:b0:b4:65:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C264FB166D810B0B079997649A78C2454ECCCB7F
        Validity
            Not Before: Sep 12 19:37:20 2025 GMT
            Not After : Sep 11 19:42:20 2026 GMT
        Subject: CN=E04C197B3FF81BAEEB2E07955B09E16523CE34A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0a:40:db:92:80:96:26:f5:0f:c2:5e:5d:14:
                    3d:82:68:6e:b4:ab:40:ad:f5:92:62:da:08:21:1d:
                    87:30:81:c5:2a:40:92:5f:72:f1:af:08:2d:8e:8a:
                    3a:bc:75:ca:7a:4b:f3:76:3d:5b:17:76:6f:04:52:
                    c1:04:34:75:fc:18:2a:ca:40:dc:2b:a9:83:ad:a4:
                    ea:b7:cb:86:a4:7d:2a:d2:2e:79:be:cf:d8:04:b0:
                    45:7d:45:0f:b0:5b:e5:51:f4:14:91:9a:ab:bf:e0:
                    b5:96:3d:3a:d4:02:36:c1:e0:92:37:be:f6:ed:74:
                    97:37:52:b7:81:2a:7a:5f:2e:31:b6:6e:9c:db:e6:
                    b1:aa:75:70:28:18:64:0e:bc:b5:4d:77:89:b0:2f:
                    b0:84:78:3f:e6:41:1e:04:3c:44:70:ce:19:fd:23:
                    ca:2a:fc:58:90:19:1b:c2:e4:b4:42:40:54:00:fe:
                    0d:db:ff:7d:1a:f1:df:f4:26:7c:c0:db:45:f2:6c:
                    35:14:45:9b:6c:f8:61:f2:1a:bf:e6:39:b7:9c:00:
                    f6:53:b7:68:df:65:a5:79:13:d8:0e:02:08:8b:7a:
                    4d:2f:d7:ef:a8:06:97:e6:cc:d1:44:b9:4c:db:ae:
                    1d:1c:fb:37:c7:ef:ae:e2:5a:f4:89:4f:df:84:e0:
                    12:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4C:19:7B:3F:F8:1B:AE:EB:2E:07:95:5B:09:E1:65:23:CE:34:A6
            X509v3 Authority Key Identifier:
                keyid:C2:64:FB:16:6D:81:0B:0B:07:99:97:64:9A:78:C2:45:4E:CC:CB:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/C264FB166D810B0B079997649A78C2454ECCCB7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C264FB166D810B0B079997649A78C2454ECCCB7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/3137372e39312e3139322e302f31392d3234203d3e203532393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6d:47:d2:26:69:9a:c4:5c:57:11:19:8e:6d:c4:9f:b9:f4:75:
         99:c4:1c:32:5b:90:bf:a6:1c:f1:ec:df:d8:02:89:7c:be:5b:
         fe:90:4f:a7:7c:a2:1d:17:58:e9:85:33:9f:df:6e:0f:a1:bf:
         f3:51:da:01:3e:1d:02:98:a9:e5:56:13:b2:36:56:49:b6:40:
         25:ca:5b:44:6e:c3:7d:28:b7:0a:6f:9e:c6:d2:aa:50:a2:2a:
         24:a1:34:47:bf:53:93:9f:b5:9f:92:7c:45:ad:80:f3:48:af:
         cd:4d:18:de:33:05:d3:46:b9:be:ef:81:4c:f2:ba:32:80:e9:
         f1:40:bc:85:bd:fd:45:0b:34:5e:f1:11:53:7d:1f:d5:d9:2d:
         0d:3a:d7:3d:12:18:e4:28:68:30:28:9c:29:d5:ec:d1:3d:1f:
         63:4a:f1:6d:f2:9e:19:24:34:5e:7c:ac:0b:e7:38:9b:ce:2d:
         e3:68:c6:89:54:2c:0e:5d:e5:a9:42:5c:45:ca:1b:3c:28:58:
         d6:66:40:71:38:68:9e:54:49:a9:87:5f:01:c1:1a:67:88:a9:
         6d:41:e5:9d:9f:12:70:9d:d8:27:32:da:91:00:41:e3:90:a1:
         43:97:2b:2c:0a:5c:2d:df:6f:b2:f2:a7:19:c6:4a:e3:bd:cb:
         67:95:66:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:53:50 2025 by rpki-client