Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa
File:                     3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          Dh7gCFV+91jvR79G+Vw/+jzoGCGirZ/JjD2MzJ79agg=
Subject key identifier:   F0:66:02:9F:28:DA:31:24:1C:8A:BA:41:CE:6B:42:17:CF:64:13:D1
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       590AE87947C1238A6540B0D3B452F2632F0C0102
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa
Signing time:             Fri 26 Sep 2025 13:29:25 +0000
ROA not before:           Fri 26 Sep 2025 13:24:25 +0000
ROA not after:            Fri 25 Sep 2026 13:29:25 +0000
asID:                     263518
IP address blocks:        168.197.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0a:e8:79:47:c1:23:8a:65:40:b0:d3:b4:52:f2:63:2f:0c:01:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Sep 26 13:24:25 2025 GMT
            Not After : Sep 25 13:29:25 2026 GMT
        Subject: CN=F066029F28DA31241C8ABA41CE6B4217CF6413D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:e8:8d:f9:be:00:86:a1:3e:03:76:f7:f8:
                    c4:0b:7c:22:ab:60:dd:c5:39:9c:5b:ed:4d:a0:9d:
                    b5:00:0c:7b:d6:c9:d4:1b:85:70:81:b9:95:32:78:
                    03:bc:b8:db:a4:74:45:6e:cb:cf:76:58:24:fd:d7:
                    fb:df:38:d6:43:88:c5:95:49:28:03:ce:94:ff:ea:
                    ad:b9:5b:49:0d:d4:15:7e:b9:58:96:ab:52:ff:eb:
                    e4:a1:ac:15:de:f5:40:a6:29:a2:57:e5:96:7a:84:
                    40:98:77:53:1e:e0:ef:b0:c5:f1:07:22:29:81:60:
                    c5:38:bd:08:9b:c6:fd:02:ab:15:10:20:42:f2:97:
                    bc:86:aa:59:ba:dd:ae:4c:3a:d4:fe:57:dd:9c:f5:
                    c5:44:e4:f9:c5:55:6c:00:65:c5:8b:ad:9c:f6:84:
                    32:b0:01:ab:c5:11:a9:9e:d1:1b:bc:27:71:b8:e8:
                    e5:6f:14:30:a9:60:d5:d5:90:e7:5e:e3:14:e6:ef:
                    e7:84:96:ee:2f:28:95:47:51:3c:d6:38:57:49:d4:
                    f8:35:47:55:a3:f3:4d:0b:2d:5b:ac:49:b1:e0:bd:
                    74:17:2f:e4:8f:17:f0:fe:d6:d8:92:6f:0a:34:a4:
                    bd:14:2d:87:ca:4e:af:16:0e:c0:c5:c6:b5:7c:25:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:66:02:9F:28:DA:31:24:1C:8A:BA:41:CE:6B:42:17:CF:64:13:D1
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:b8:8b:0f:0c:44:08:4c:99:75:10:04:26:7c:0d:96:df:d1:
         be:2c:94:c5:c9:c8:93:61:7b:7a:06:cd:47:2a:04:33:ea:de:
         1f:1a:36:02:32:49:6a:b2:b3:7e:13:52:a8:e1:c6:c3:6e:12:
         df:01:03:c1:d3:53:0e:b3:01:2d:ba:d7:ea:44:7d:8f:be:86:
         10:b7:d4:e5:1d:05:83:d6:b4:59:9a:91:df:bf:2f:30:10:dc:
         22:9f:e2:93:1d:ce:e0:dd:ba:25:1a:9c:21:ff:2b:16:66:16:
         da:af:72:28:73:f7:60:7a:e0:52:12:0a:ec:bd:ba:df:0a:7d:
         24:82:07:df:fc:f9:c9:e8:3b:9a:df:c7:e5:f7:75:b0:ea:11:
         4e:aa:30:59:8b:f7:b6:d0:2a:55:d9:eb:b7:a8:4f:21:d2:3b:
         b2:ad:a5:dc:bc:56:ad:d7:70:c7:be:3e:94:f8:98:b8:86:61:
         3f:cc:88:4f:d4:fd:e5:3c:e4:49:ef:f5:4b:38:67:d7:b7:08:
         df:a0:a7:79:04:9f:03:d5:a5:e5:14:58:67:08:4e:c8:db:e4:
         ce:37:04:ce:a2:3b:b7:35:dd:e4:b7:8c:18:52:6b:a9:df:44:
         d8:79:04:0e:75:0f:a2:0f:7d:2c:6c:62:41:43:d6:f5:ae:39:
         f2:91:b4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:40:59 2025 by rpki-client