Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa
File:                     3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa (raw, json)
Hash identifier:          f/0TXNBXTy4RjG9pro5hEdXYT5IZGbVXHyuoI6QrmQU=
Subject key identifier:   42:29:0A:70:0B:49:94:21:D1:FA:BF:6D:12:8B:E7:29:4B:9B:C3:D0
Certificate issuer:       /CN=26E3D1B009E7A8557F73668315C1AA6376A4A0C1
Certificate serial:       179B5800B58F5B0393BE71D4986C607A66146D55
Authority key identifier: 26:E3:D1:B0:09:E7:A8:55:7F:73:66:83:15:C1:AA:63:76:A4:A0:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa
Signing time:             Sat 11 Oct 2025 15:06:01 +0000
ROA not before:           Sat 11 Oct 2025 15:01:01 +0000
ROA not after:            Sat 10 Oct 2026 15:06:01 +0000
asID:                     263441
IP address blocks:        200.225.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.crl
                          rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9b:58:00:b5:8f:5b:03:93:be:71:d4:98:6c:60:7a:66:14:6d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26E3D1B009E7A8557F73668315C1AA6376A4A0C1
        Validity
            Not Before: Oct 11 15:01:01 2025 GMT
            Not After : Oct 10 15:06:01 2026 GMT
        Subject: CN=42290A700B499421D1FABF6D128BE7294B9BC3D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f6:06:b4:20:19:7f:fb:ef:b2:6c:be:91:43:
                    83:ed:1e:70:3a:07:48:1f:b8:1c:35:c6:f6:26:56:
                    69:94:e3:f4:d3:82:7b:ec:30:91:c1:94:7f:b0:62:
                    24:89:1a:e6:73:b8:61:70:4c:bc:5b:49:f5:27:f6:
                    ad:99:61:27:64:df:84:cf:8f:61:2c:ef:62:d9:4a:
                    3f:c5:de:69:7c:1c:d4:29:33:fc:2f:3c:4b:1a:2e:
                    8e:86:48:39:da:29:1a:ae:66:fc:5d:73:da:2c:c4:
                    cf:91:32:ea:e6:a4:2b:1b:12:c9:9d:08:d7:21:07:
                    a7:20:89:71:b1:b7:3d:19:86:b1:a0:b4:f7:d2:b3:
                    77:12:3e:14:06:eb:5a:2d:4a:85:43:d0:b5:4d:33:
                    f0:78:4e:dc:a4:59:1c:53:bb:77:15:08:e7:1b:30:
                    5a:97:31:8e:22:aa:a2:82:1a:df:2f:de:f3:9c:62:
                    5d:26:e0:36:77:79:40:1c:b8:f5:f7:10:8c:c8:74:
                    1a:74:85:5a:07:74:46:1d:9e:00:79:78:f0:e7:bb:
                    3b:f3:8d:59:05:6a:2a:8b:6b:7a:f7:2a:59:5e:d0:
                    a0:f1:37:b4:ad:11:d5:f3:d2:54:d2:69:f6:20:8c:
                    c7:b2:e9:55:e2:d9:db:d7:c4:d2:ce:54:e5:a5:f3:
                    d5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:29:0A:70:0B:49:94:21:D1:FA:BF:6D:12:8B:E7:29:4B:9B:C3:D0
            X509v3 Authority Key Identifier:
                keyid:26:E3:D1:B0:09:E7:A8:55:7F:73:66:83:15:C1:AA:63:76:A4:A0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:7d:20:8b:cc:c9:98:da:2a:4f:59:ec:74:c0:37:c8:66:c1:
         73:9b:70:fa:1e:5f:3f:c8:8f:df:dd:df:1f:d6:6c:c7:12:e1:
         f8:25:ae:e6:ef:3d:3e:05:a2:c3:d9:5a:60:29:c1:59:dd:c3:
         0d:a3:19:5f:b4:41:82:8b:da:b1:7e:1a:48:9f:14:af:b1:04:
         a6:6c:e6:eb:ab:c7:1f:73:92:d4:76:a6:24:09:2a:f6:71:7d:
         e6:9f:e2:11:d4:14:04:dc:3b:1d:53:ff:8a:be:95:19:1a:a5:
         98:0a:35:13:8b:55:f5:4d:be:86:2a:74:8b:eb:25:33:8d:b0:
         be:73:64:42:dc:13:b0:d0:b9:5b:58:67:c9:a3:4b:e2:af:65:
         83:86:12:e9:b2:dc:32:27:8d:23:fc:b0:73:b4:23:59:70:dc:
         db:36:b4:1a:17:92:47:d6:a5:40:53:35:e3:f7:d4:f6:5c:41:
         5c:ca:99:b0:b3:dd:b7:e5:25:33:ea:50:3b:49:37:b7:84:10:
         f5:31:d5:a1:0b:26:dd:60:5e:93:93:8c:9f:fc:fc:0e:e7:02:
         2a:18:fc:89:97:cf:ce:36:49:e8:86:35:4c:b6:4d:38:65:f9:
         72:9d:f9:fa:36:4f:14:45:16:94:a2:2b:b4:ad:35:a9:90:26:
         75:cd:92:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:02:42 2025 by rpki-client