Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/3139312e3234322e3232342e302f32322d3332203d3e20323633343833.roa
File:                     3139312e3234322e3232342e302f32322d3332203d3e20323633343833.roa (raw, json)
Hash identifier:          BmFxsArsVx4hu0nCDn+g34flSfwMR/89Ii2fLm9TTFQ=
Subject key identifier:   11:19:40:9F:C4:3C:68:A6:66:F3:52:31:3A:23:7B:1B:AC:21:FC:39
Certificate issuer:       /CN=7D1B0166FDC8051F0765B0C6D92955CF1509B704
Certificate serial:       1B65E916AF006EAD1D68F693713CF5DB26D66BEE
Authority key identifier: 7D:1B:01:66:FD:C8:05:1F:07:65:B0:C6:D9:29:55:CF:15:09:B7:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D1B0166FDC8051F0765B0C6D92955CF1509B704.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/3139312e3234322e3232342e302f32322d3332203d3e20323633343833.roa
Signing time:             Wed 08 Oct 2025 12:24:46 +0000
ROA not before:           Wed 08 Oct 2025 12:19:46 +0000
ROA not after:            Wed 07 Oct 2026 12:24:46 +0000
asID:                     263483
IP address blocks:        191.242.224.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/7D1B0166FDC8051F0765B0C6D92955CF1509B704.crl
                          rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/7D1B0166FDC8051F0765B0C6D92955CF1509B704.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D1B0166FDC8051F0765B0C6D92955CF1509B704.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:65:e9:16:af:00:6e:ad:1d:68:f6:93:71:3c:f5:db:26:d6:6b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1B0166FDC8051F0765B0C6D92955CF1509B704
        Validity
            Not Before: Oct  8 12:19:46 2025 GMT
            Not After : Oct  7 12:24:46 2026 GMT
        Subject: CN=1119409FC43C68A666F352313A237B1BAC21FC39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f0:e2:88:04:ea:8b:cd:92:33:f0:eb:c7:33:
                    c6:82:09:32:35:17:0e:fa:67:91:1e:90:c1:4e:6f:
                    88:c9:e1:dd:38:e6:6f:bf:71:4c:d1:5b:18:69:7d:
                    e9:e8:50:ef:cc:e7:d9:12:79:ff:53:73:46:7a:a8:
                    e0:39:24:a0:be:0d:33:59:4a:06:41:3c:da:24:bd:
                    78:cd:9d:58:60:09:d4:d1:10:ab:eb:d5:43:e5:2d:
                    9c:5f:f3:ee:74:f1:0a:49:fd:6d:bf:d1:0f:69:85:
                    a6:b0:d5:30:c3:55:9b:65:23:7e:b8:64:0c:26:3b:
                    fd:ff:d7:e2:5d:51:7f:83:29:99:eb:2a:ef:71:be:
                    55:8b:a1:e8:3b:2c:c8:6b:3f:4e:11:08:64:75:07:
                    ad:0a:4c:de:5b:b8:64:4a:6a:9e:f5:52:05:b4:78:
                    be:3d:0f:ad:51:ed:36:46:9f:64:40:54:41:07:80:
                    97:09:36:b9:50:f1:32:c5:dc:d4:04:94:7e:b0:4b:
                    0b:16:f4:c2:8e:65:39:72:6b:03:64:b8:70:ad:31:
                    f3:48:96:f5:7d:d1:c1:9f:b8:a4:0d:61:97:a2:78:
                    2a:d1:06:68:02:e0:23:8c:2b:77:2c:c3:d3:79:b6:
                    9e:3e:55:96:4b:a9:18:94:81:0e:af:42:b0:49:41:
                    2c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:19:40:9F:C4:3C:68:A6:66:F3:52:31:3A:23:7B:1B:AC:21:FC:39
            X509v3 Authority Key Identifier:
                keyid:7D:1B:01:66:FD:C8:05:1F:07:65:B0:C6:D9:29:55:CF:15:09:B7:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/7D1B0166FDC8051F0765B0C6D92955CF1509B704.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D1B0166FDC8051F0765B0C6D92955CF1509B704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/3139312e3234322e3232342e302f32322d3332203d3e20323633343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:17:96:d5:1d:84:8d:6a:b1:61:9f:f0:02:7d:9b:22:9d:40:
         d6:a8:f0:27:7b:0a:e2:9e:ad:66:be:09:8d:bf:0b:47:49:28:
         f3:06:67:c3:cc:ce:a6:5f:4c:db:77:12:d5:6d:66:1f:bd:18:
         17:89:a1:54:4f:98:e5:07:52:0b:0d:9d:5f:18:e1:0d:53:6b:
         aa:a9:ce:d5:a9:d1:f1:c6:d2:19:d1:f2:b0:83:eb:74:32:c2:
         34:81:94:9e:4b:26:f5:e0:eb:b0:9e:d8:b7:c7:f8:88:25:11:
         56:c7:af:c6:ba:64:8d:d1:cc:a0:34:71:89:99:db:c6:c3:a2:
         21:4b:a5:1b:00:83:98:d0:58:4e:04:6e:eb:a9:79:2e:1b:29:
         58:d6:9b:82:fa:c9:23:f2:73:d2:1b:9a:4c:0c:70:15:4f:b8:
         2b:49:48:d5:d1:1a:b7:e6:d5:d8:e6:26:b9:b4:5a:ca:5b:32:
         04:78:0d:82:d5:4c:2b:fa:92:f7:4c:65:64:bd:8f:1f:e5:ad:
         2b:84:09:b4:89:71:63:8a:d9:38:71:5e:24:f8:dc:bd:bd:f2:
         f6:07:73:97:fe:d9:f5:7e:9d:80:1c:7b:fd:5f:3b:98:74:54:
         a6:f1:a2:93:7e:59:e4:8c:2c:c5:77:64:d3:4b:ab:d5:27:35:
         24:c3:21:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:15:02 2025 by rpki-client