Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231342e302f32342d3234203d3e20323633353138.roa
File:                     3139312e3234332e3231342e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          IMi2YHOoFGuHr3nihkZp3YhlZBPFaqtcF8AunkspxR0=
Subject key identifier:   9F:50:D2:1D:E7:33:53:1E:98:0E:55:3A:25:B9:37:B9:89:32:2A:99
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       52A524AA6687ABF5AE17EDC9BD4D35539CBF185B
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231342e302f32342d3234203d3e20323633353138.roa
Signing time:             Fri 26 Sep 2025 13:29:20 +0000
ROA not before:           Fri 26 Sep 2025 13:24:20 +0000
ROA not after:            Fri 25 Sep 2026 13:29:20 +0000
asID:                     263518
IP address blocks:        191.243.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a5:24:aa:66:87:ab:f5:ae:17:ed:c9:bd:4d:35:53:9c:bf:18:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Sep 26 13:24:20 2025 GMT
            Not After : Sep 25 13:29:20 2026 GMT
        Subject: CN=9F50D21DE733531E980E553A25B937B989322A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:78:60:c8:82:9b:ff:5b:39:95:9e:eb:7c:34:
                    8e:28:da:65:eb:83:ed:5e:38:74:66:ac:76:38:ee:
                    3b:d9:f4:f8:a7:33:95:b6:05:15:f5:68:32:3c:cf:
                    9b:56:08:29:57:9b:f7:01:7e:71:4c:5a:e2:c7:15:
                    04:7f:06:1a:01:c9:a9:20:37:e8:bc:c4:3c:38:46:
                    b8:49:1a:78:b3:e0:c6:f5:3c:6f:27:4b:d5:d5:3f:
                    83:14:40:ff:f9:1f:41:96:40:76:1d:40:75:4a:0a:
                    8e:d1:12:e4:ac:d7:1c:8e:9e:f7:c4:6f:d6:ed:11:
                    77:ff:c5:32:e5:04:42:e9:b0:37:24:e6:d0:5b:3b:
                    54:8d:fc:4f:98:e8:00:0f:db:4b:34:0e:b2:72:d0:
                    9f:56:93:04:9e:c6:b6:eb:72:0c:02:92:ee:f1:88:
                    77:19:c2:73:f8:49:f1:44:fd:b1:7f:e1:c8:6c:9e:
                    51:73:f4:c2:a8:6c:49:aa:95:b8:dc:72:25:da:74:
                    71:a9:1f:68:29:bd:b9:1f:b0:86:9c:4c:e6:f7:01:
                    6b:97:55:95:f6:d9:ba:3e:15:b9:70:65:79:50:08:
                    63:1f:40:6f:3e:a7:41:28:f8:91:54:06:d3:7e:c1:
                    da:4a:3a:98:26:a2:6d:30:c5:46:97:e4:51:4e:34:
                    9d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:50:D2:1D:E7:33:53:1E:98:0E:55:3A:25:B9:37:B9:89:32:2A:99
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231342e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:8f:1c:bc:6d:c5:1f:c0:6a:9d:aa:c1:dc:78:70:1f:91:5b:
         66:24:fe:a6:21:14:5a:43:23:20:bd:0f:93:60:d8:cb:09:1f:
         58:03:be:d4:cc:2e:60:6f:35:5c:f6:ac:02:5e:b9:30:dc:76:
         82:b9:71:5f:95:4b:b4:4b:08:ca:23:b2:96:8f:7a:62:53:51:
         ff:9f:cc:5b:b4:37:b0:b3:a2:13:42:73:b1:93:60:cd:5e:be:
         65:ff:55:14:21:f8:e3:db:66:38:bf:d3:29:af:30:d3:46:29:
         76:82:c7:db:f8:79:d2:3a:30:e7:c3:18:67:9a:f7:be:be:ec:
         08:e7:42:63:10:0d:c9:be:b9:fe:0e:53:7d:15:81:92:4c:30:
         1d:58:29:9d:f5:bc:e0:49:b4:1f:58:df:3d:c4:76:ab:46:f1:
         c6:37:fd:c5:02:78:31:5e:bb:c7:b8:6a:8f:2d:63:c5:64:6c:
         61:58:b9:19:ac:1a:f4:35:c7:7b:c3:17:60:14:f6:64:07:f9:
         e7:6c:34:1c:70:06:b6:d9:c9:6e:37:47:bc:05:26:01:7f:3b:
         47:60:72:17:4b:0f:ad:99:2b:30:21:36:c1:8e:af:39:4a:ff:
         bf:49:69:04:2f:ba:13:5f:bd:15:da:ad:21:5b:9c:b7:6b:56:
         22:87:21:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:20:28 2025 by rpki-client