Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/3133382e39372e3139322e302f32322d3232203d3e20323634323030.roa
File:                     3133382e39372e3139322e302f32322d3232203d3e20323634323030.roa (raw, json)
Hash identifier:          lyptdHgc5LAwz7D5PHQXeUW+ibpMYXQ5YinRPWpT63I=
Subject key identifier:   01:5A:8C:B0:95:94:C9:B7:30:D1:15:B1:7C:08:BC:78:54:27:B0:4E
Certificate issuer:       /CN=BA19CE12E965E20D169A9F9481AC6C8F31644D3E
Certificate serial:       0D803E5EE07955F7081ABD3E32BB8F559EA6B523
Authority key identifier: BA:19:CE:12:E9:65:E2:0D:16:9A:9F:94:81:AC:6C:8F:31:64:4D:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/3133382e39372e3139322e302f32322d3232203d3e20323634323030.roa
Signing time:             Sat 20 Sep 2025 01:14:17 +0000
ROA not before:           Sat 20 Sep 2025 01:09:17 +0000
ROA not after:            Sat 19 Sep 2026 01:14:17 +0000
asID:                     264200
IP address blocks:        138.97.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.crl
                          rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:80:3e:5e:e0:79:55:f7:08:1a:bd:3e:32:bb:8f:55:9e:a6:b5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA19CE12E965E20D169A9F9481AC6C8F31644D3E
        Validity
            Not Before: Sep 20 01:09:17 2025 GMT
            Not After : Sep 19 01:14:17 2026 GMT
        Subject: CN=015A8CB09594C9B730D115B17C08BC785427B04E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:9d:19:72:79:60:65:a4:35:62:70:d0:f6:
                    2f:1c:1b:e4:ad:77:c2:02:c6:7a:39:bd:fb:38:7d:
                    c6:c2:5a:21:a2:0b:da:bd:93:a2:4e:04:af:9f:64:
                    79:4d:7c:a8:1c:27:06:72:58:2a:32:39:7e:7a:a1:
                    27:e2:2f:0e:79:ba:a9:d2:95:fb:b1:99:7f:d6:4f:
                    38:66:e2:f1:e9:18:7a:79:8e:3f:df:0e:95:f9:e0:
                    cb:8a:0c:52:b3:f2:c3:a2:c4:58:65:0b:d5:6a:cd:
                    64:8f:93:14:be:a6:ef:06:e2:fe:4c:df:f6:78:31:
                    77:16:76:80:3c:4c:1b:ee:12:ce:29:95:5c:b2:70:
                    af:aa:2e:4a:b5:fa:41:44:cd:74:85:79:62:3c:ee:
                    d6:02:db:61:e9:08:91:99:c9:d4:7b:d8:24:ec:b7:
                    6b:9f:a8:02:f2:e0:1f:77:c5:9f:b8:b0:f8:d7:ba:
                    88:96:e9:24:4b:7b:95:c1:f1:35:8d:03:e1:25:1b:
                    75:71:21:cd:09:9a:7f:13:f6:ed:0b:18:e3:b5:da:
                    15:76:1a:ff:e5:29:72:35:ec:48:2b:c7:2b:b3:71:
                    8f:de:d1:62:d3:fd:da:6b:33:e4:1a:28:0c:b6:75:
                    b0:a6:72:28:2b:0d:bb:41:f0:bc:c4:86:6a:f1:6f:
                    9b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5A:8C:B0:95:94:C9:B7:30:D1:15:B1:7C:08:BC:78:54:27:B0:4E
            X509v3 Authority Key Identifier:
                keyid:BA:19:CE:12:E9:65:E2:0D:16:9A:9F:94:81:AC:6C:8F:31:64:4D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/3133382e39372e3139322e302f32322d3232203d3e20323634323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:ca:86:a4:c8:25:ea:cf:de:cb:46:28:6a:2f:58:d5:7d:4d:
         6d:b3:56:a5:7b:17:52:d7:28:8f:13:8d:f2:4c:f2:24:6e:90:
         a2:2e:9c:73:a8:f5:fe:d5:db:c4:45:63:98:86:83:b2:4d:84:
         6d:13:30:1b:03:e3:33:24:59:22:20:80:6f:c0:57:d0:8f:0a:
         8e:35:05:9e:7d:5b:07:70:97:63:35:67:2c:d9:ab:04:8a:4b:
         72:8b:4a:07:ae:ff:54:bb:a0:d4:71:d3:b0:6c:79:d7:98:85:
         87:60:24:f0:d4:a5:a4:e5:74:29:1a:87:f4:34:10:1c:b3:eb:
         76:26:7d:2c:ff:cc:8d:85:4e:ea:b7:57:8c:ca:37:13:41:0a:
         9f:4b:3f:d5:fa:83:96:b5:a6:db:be:c0:1d:5f:ea:48:2d:9b:
         85:94:16:fe:2d:d3:d7:f0:d8:06:55:83:1c:da:59:56:ea:80:
         ed:a4:8c:af:4c:9f:db:30:41:50:04:44:60:07:b9:64:af:d4:
         7e:e2:6f:06:67:30:91:19:b6:b8:af:53:be:d4:74:02:e1:a0:
         a6:5f:a7:11:46:8d:f1:a3:81:3f:98:28:3d:00:a0:56:04:a2:
         68:6a:04:b3:ab:e4:39:d5:a9:d7:89:cf:19:86:e6:57:aa:5f:
         e4:cc:15:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:31 2025 by rpki-client