Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132322e302f32332d3233203d3e20323635303535.roa
File:                     3137302e3233312e3132322e302f32332d3233203d3e20323635303535.roa (raw, json)
Hash identifier:          kMFeGvLwygKxcHyC8eTFNx15JSQt6N9t4c2qJQT+/hY=
Subject key identifier:   9D:F6:57:F5:2D:96:C1:CD:7A:BB:B0:29:1B:BC:94:E7:7E:83:7A:C5
Certificate issuer:       /CN=A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3
Certificate serial:       3973D5C710F949093E336320B99860199BBAC53E
Authority key identifier: A0:BD:39:FF:72:B4:E3:DA:FE:35:21:F4:0F:4E:43:89:CB:58:87:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132322e302f32332d3233203d3e20323635303535.roa
Signing time:             Wed 08 Oct 2025 20:03:23 +0000
ROA not before:           Wed 08 Oct 2025 19:58:23 +0000
ROA not after:            Wed 07 Oct 2026 20:03:23 +0000
asID:                     265055
IP address blocks:        170.231.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.crl
                          rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:73:d5:c7:10:f9:49:09:3e:33:63:20:b9:98:60:19:9b:ba:c5:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3
        Validity
            Not Before: Oct  8 19:58:23 2025 GMT
            Not After : Oct  7 20:03:23 2026 GMT
        Subject: CN=9DF657F52D96C1CD7ABBB0291BBC94E77E837AC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:b0:a2:94:91:4e:84:83:77:f2:e6:04:6f:
                    94:07:1b:3f:9c:a3:2f:a5:43:9a:59:03:d5:ef:51:
                    e9:f3:c5:cb:7d:59:33:67:28:9f:78:29:0a:bb:74:
                    37:31:e2:f4:9f:a0:2a:45:3a:c5:0c:b8:7c:b5:b5:
                    f2:4b:7b:27:f5:30:a1:b0:e8:44:81:70:e3:cc:1e:
                    e1:a2:bd:1e:3a:2f:0e:ef:91:13:5f:7c:22:bb:93:
                    98:e5:62:14:d7:8a:90:36:c7:46:61:11:57:8a:a1:
                    e1:14:6e:cf:a9:c9:18:44:46:e3:fc:cf:50:19:21:
                    3c:45:c5:19:55:d6:e7:f9:2a:ac:c2:12:65:8a:c6:
                    6c:8b:3b:ab:3a:c0:ec:ff:2f:e4:d1:8f:1b:4d:39:
                    a6:ea:c7:02:ff:13:8c:8f:aa:65:f8:09:41:f8:e6:
                    89:4d:e4:b7:0b:a7:9d:08:f2:ae:69:8f:25:06:4a:
                    0f:6c:cd:42:f3:71:eb:7d:a4:55:dd:47:68:c6:00:
                    15:ac:c0:29:ef:66:d3:f7:9d:8c:a5:7c:2d:be:4a:
                    52:44:83:5c:c5:74:05:8b:11:d0:02:c3:84:be:22:
                    43:f7:9a:fe:ed:a4:e5:10:af:99:37:a5:a5:4e:18:
                    34:03:ab:82:b8:8e:5e:0e:e8:f5:dd:c6:d3:9f:a4:
                    34:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F6:57:F5:2D:96:C1:CD:7A:BB:B0:29:1B:BC:94:E7:7E:83:7A:C5
            X509v3 Authority Key Identifier:
                keyid:A0:BD:39:FF:72:B4:E3:DA:FE:35:21:F4:0F:4E:43:89:CB:58:87:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132322e302f32332d3233203d3e20323635303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:b1:2e:18:98:79:b3:f1:55:f4:0a:38:87:61:b1:00:08:54:
         82:6d:da:31:cc:11:9c:d0:d2:87:cc:66:59:be:93:16:89:2a:
         f5:c6:26:38:0c:f5:99:30:85:e1:6c:37:52:32:85:07:92:84:
         e1:28:fb:1b:27:18:e2:0d:1a:be:6c:80:a7:8c:87:c2:49:60:
         5a:94:c8:45:df:15:54:a8:f1:73:fc:ae:d0:40:a7:52:c3:a3:
         e0:82:25:25:da:50:ff:0a:d8:23:6f:64:15:f0:43:76:28:24:
         46:e0:b7:96:7b:4c:b3:e0:c4:15:cb:e4:12:79:30:c9:51:91:
         7c:36:bd:17:ea:4d:a1:8b:e2:22:a1:aa:03:0d:5c:3e:8c:58:
         27:63:37:09:15:32:d9:30:d9:90:fd:a7:63:5c:ae:70:ca:d8:
         e2:87:99:ac:5e:4c:bf:69:06:50:68:37:08:2b:22:65:46:08:
         66:6b:f4:a4:39:16:f4:91:1f:08:cf:1f:a5:f9:38:88:09:3b:
         81:4f:80:5b:2f:39:ae:22:a5:ad:b1:71:5a:ba:c6:94:66:ec:
         b0:75:6c:51:68:be:f7:8c:cb:fc:b4:4f:43:c4:19:e4:23:94:
         54:c0:01:b9:8a:06:20:b3:5c:9a:28:44:c7:13:0d:8f:1b:a1:
         14:02:d1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:44:45 2025 by rpki-client