Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa
File:                     3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa (raw, json)
Hash identifier:          QStuQRfhXfo3YmaUMZOj5HL1MoxChou26ybUQ9ZfKWI=
Subject key identifier:   28:39:D9:A0:FF:82:EA:6E:0D:8C:97:D9:BD:79:67:CA:0A:E7:CC:80
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       F3BE02312CA86FCA38B213ED94D543F7F66DBD
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa
Signing time:             Fri 26 Sep 2025 13:29:18 +0000
ROA not before:           Fri 26 Sep 2025 13:24:18 +0000
ROA not after:            Fri 25 Sep 2026 13:29:18 +0000
asID:                     263518
IP address blocks:        191.243.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f3:be:02:31:2c:a8:6f:ca:38:b2:13:ed:94:d5:43:f7:f6:6d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Sep 26 13:24:18 2025 GMT
            Not After : Sep 25 13:29:18 2026 GMT
        Subject: CN=2839D9A0FF82EA6E0D8C97D9BD7967CA0AE7CC80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:da:ad:17:e8:17:ee:f6:5b:fd:83:1d:61:50:
                    1a:55:84:42:81:5b:63:0a:e3:cd:6f:86:77:b6:54:
                    e3:17:75:c7:bf:6c:71:94:a9:b9:6e:4c:1e:a1:78:
                    01:aa:9e:41:28:73:25:07:69:cf:fe:9f:ce:7c:3d:
                    4d:cb:bc:cf:c9:54:fd:4b:ae:2d:bb:6d:1a:4f:20:
                    e6:f9:44:24:ef:36:f5:67:9d:02:ca:84:ee:7a:fa:
                    4f:a5:62:f3:0e:64:92:4b:eb:20:89:24:2f:1a:73:
                    f4:20:e3:30:9b:d4:71:c6:81:66:a5:75:97:f3:2f:
                    1a:ab:d3:9a:4c:cd:1d:00:2e:d1:86:de:20:9e:c5:
                    d0:93:76:64:c4:99:b4:bd:e8:73:c4:cd:31:2d:d1:
                    45:d4:45:6b:45:a5:08:b7:bb:cb:e0:e8:b0:06:ca:
                    4a:63:db:79:61:f4:e1:8c:05:21:5d:4f:fc:4c:9d:
                    71:0d:ab:8a:ea:32:5a:5a:c8:f1:da:ba:11:3f:36:
                    f0:09:b7:8b:a2:40:55:df:34:a7:05:89:ac:1c:40:
                    0a:95:88:63:17:43:c5:49:0c:14:2b:b1:6d:c2:26:
                    8e:77:bb:4b:4a:a8:ee:3b:85:a2:2a:59:4e:88:8a:
                    7f:a7:3f:51:cd:69:69:00:80:75:fe:2e:37:30:2e:
                    96:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:39:D9:A0:FF:82:EA:6E:0D:8C:97:D9:BD:79:67:CA:0A:E7:CC:80
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32322d3232203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:73:b9:fa:38:50:d8:01:68:db:fe:af:d2:69:bc:c2:f6:b2:
         73:63:11:1c:8e:89:6c:e5:e8:16:14:6a:ea:5e:a4:5f:54:95:
         0a:13:89:89:5e:f4:b5:bf:97:f6:fe:ed:75:86:35:23:7e:6c:
         62:7c:fd:f2:5c:58:18:9a:c6:e2:2b:22:3e:44:d4:94:da:af:
         08:50:7c:24:43:4d:26:dc:e0:37:49:bf:44:02:82:16:81:6d:
         32:4d:0a:d6:53:f3:22:93:2b:71:b7:33:cc:9e:c9:28:58:8f:
         b2:a3:44:f4:40:66:7e:b1:e5:62:5b:27:7f:ad:30:65:51:a2:
         cc:84:5a:95:2e:f7:2f:86:12:f4:d8:db:55:d1:6b:26:cd:8b:
         80:d8:a1:be:c9:76:28:eb:6c:22:ac:87:b5:e9:a2:0f:e5:36:
         fd:3d:f3:bc:e5:cc:13:ef:04:f2:9f:4f:9e:40:1f:cf:a1:34:
         57:43:8b:e9:81:64:6b:d0:fb:ac:40:06:6e:1f:36:70:95:8b:
         f7:58:cb:a1:b5:bb:f3:2a:e8:ac:e7:58:23:c2:d9:8c:43:29:
         83:c2:3e:e6:37:22:c9:d1:0c:f7:2b:9f:26:0d:d6:8f:be:81:
         5f:86:bf:33:7d:14:b8:a7:7c:12:41:b5:c5:97:38:b1:7c:7d:
         bd:63:b7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:33:05 2025 by rpki-client