Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136312e302f32342d3234203d3e20323635393433.roa
File:                     3133312e3139362e3136312e302f32342d3234203d3e20323635393433.roa (raw, json)
Hash identifier:          gQMy+I2FqyvR0sIPQqNbLN9zymVDhimyozmE1xSq4/I=
Subject key identifier:   B1:5E:65:DB:DD:72:3B:0F:1C:11:75:8D:0F:A6:57:37:50:44:08:C2
Certificate issuer:       /CN=797F09A2D6DB762EDDE06177F9BAE31812984A51
Certificate serial:       46EF1882E43B4A416F834AE196FC131AFD9CFC47
Authority key identifier: 79:7F:09:A2:D6:DB:76:2E:DD:E0:61:77:F9:BA:E3:18:12:98:4A:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797F09A2D6DB762EDDE06177F9BAE31812984A51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136312e302f32342d3234203d3e20323635393433.roa
Signing time:             Mon 01 Sep 2025 15:18:34 +0000
ROA not before:           Mon 01 Sep 2025 15:13:34 +0000
ROA not after:            Mon 31 Aug 2026 15:18:34 +0000
asID:                     265943
IP address blocks:        131.196.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/797F09A2D6DB762EDDE06177F9BAE31812984A51.crl
                          rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/797F09A2D6DB762EDDE06177F9BAE31812984A51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797F09A2D6DB762EDDE06177F9BAE31812984A51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ef:18:82:e4:3b:4a:41:6f:83:4a:e1:96:fc:13:1a:fd:9c:fc:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797F09A2D6DB762EDDE06177F9BAE31812984A51
        Validity
            Not Before: Sep  1 15:13:34 2025 GMT
            Not After : Aug 31 15:18:34 2026 GMT
        Subject: CN=B15E65DBDD723B0F1C11758D0FA65737504408C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:9e:8c:cf:20:f4:b9:2e:66:ca:24:c0:7f:
                    ad:9b:a4:a5:63:c2:53:c0:fd:91:38:54:24:a4:f7:
                    9b:44:ef:14:f6:95:43:67:4c:33:5d:61:f1:83:73:
                    0e:a0:fd:d1:51:a8:42:ce:bb:05:18:b9:94:9a:02:
                    a8:9d:25:09:c7:c9:58:4b:b8:47:16:c1:dd:a4:f4:
                    1c:60:a4:b0:ac:94:a6:3d:97:e2:a5:74:09:1d:a6:
                    80:9c:aa:2f:bf:33:0d:92:fd:9a:0f:fd:85:b6:13:
                    fc:04:68:44:38:6c:16:cd:f4:c5:5c:37:58:0d:9d:
                    7f:5b:e3:ab:ba:6c:9a:78:ed:0b:3b:9b:a9:ab:a6:
                    e9:d6:dc:db:48:af:e8:da:e3:a2:34:fa:91:a2:cb:
                    10:7f:d7:44:18:b8:e1:5d:67:1b:09:bb:43:a7:28:
                    1e:d9:30:b7:1d:68:f5:61:ad:a6:ab:31:6e:de:3c:
                    7f:dd:38:8a:7b:02:e8:56:5a:98:77:d6:a3:19:d1:
                    8c:dd:84:09:72:5f:00:5e:fb:98:4c:26:2c:24:b4:
                    cf:44:1d:42:f6:52:79:b5:e0:bd:fd:15:15:8b:60:
                    c7:66:47:d0:ac:5d:93:e0:72:37:f2:f2:29:0e:66:
                    7f:66:fb:72:2d:51:9f:20:88:c6:47:49:0c:73:b9:
                    92:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5E:65:DB:DD:72:3B:0F:1C:11:75:8D:0F:A6:57:37:50:44:08:C2
            X509v3 Authority Key Identifier:
                keyid:79:7F:09:A2:D6:DB:76:2E:DD:E0:61:77:F9:BA:E3:18:12:98:4A:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/797F09A2D6DB762EDDE06177F9BAE31812984A51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797F09A2D6DB762EDDE06177F9BAE31812984A51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136312e302f32342d3234203d3e20323635393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:62:f3:cb:cb:a5:8f:71:1a:34:3b:00:eb:1c:fb:fc:96:a5:
         7b:79:03:3d:c8:6d:9d:d3:de:6d:a9:49:81:5e:9a:62:70:31:
         c8:dc:d9:9b:ea:94:1b:61:c0:0c:51:de:46:a1:9b:fe:1f:58:
         bb:fa:b1:62:ba:ad:ac:7b:fd:ef:3e:5e:f2:d0:91:9e:3f:24:
         92:44:a7:1b:6c:39:6c:98:ec:f6:46:4d:0e:4e:b0:3d:8e:f3:
         fb:f2:e7:fc:9a:f1:fb:90:d0:96:6d:97:6e:8d:62:8b:7a:bc:
         29:e5:8e:f7:73:2a:50:15:7c:e3:82:73:ac:44:a1:79:b1:44:
         e4:73:c9:6b:8c:46:dc:5d:5e:8b:f8:13:08:43:a9:42:5f:ce:
         fc:77:b0:ac:67:dd:8d:36:d7:40:67:86:e7:38:42:7a:a3:91:
         b4:37:2f:96:4a:d3:ee:a3:31:a6:94:13:7d:67:d1:07:5f:c4:
         e2:61:ff:de:3a:18:a5:5b:aa:3f:4b:31:2a:fb:7f:fc:89:ae:
         c7:06:f2:75:69:87:18:79:92:ee:2a:4a:e9:70:41:a7:05:a5:
         0b:0d:04:53:be:9a:02:08:55:a4:a2:23:25:9c:8b:75:10:1d:
         0a:ff:1f:d8:a0:77:f1:63:64:f5:31:88:57:1e:a7:66:4b:17:
         6b:a0:55:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:40:41 2025 by rpki-client