Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3139312e3235332e31362e302f32322d3332203d3e20323632373733.roa
File:                     3139312e3235332e31362e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          0OSNFca2yDjhmDeNXlOedCm8zTNRqr1NwNEjEsstCmM=
Subject key identifier:   8E:DB:37:19:F1:4A:8D:73:5C:89:B6:81:DE:9E:2E:5A:80:49:80:B0
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       3BC8EC607712DF369BFAB5AB99E79B0DA1CDF4E9
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3139312e3235332e31362e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 15:46:58 +0000
ROA not before:           Mon 11 Aug 2025 15:41:58 +0000
ROA not after:            Mon 10 Aug 2026 15:46:58 +0000
asID:                     262773
IP address blocks:        191.253.16.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c8:ec:60:77:12:df:36:9b:fa:b5:ab:99:e7:9b:0d:a1:cd:f4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 15:41:58 2025 GMT
            Not After : Aug 10 15:46:58 2026 GMT
        Subject: CN=8EDB3719F14A8D735C89B681DE9E2E5A804980B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:33:36:b4:bd:ab:e0:a4:4e:00:68:4e:39:47:
                    d9:f6:11:e6:c7:43:e3:3a:38:32:20:38:a9:2a:42:
                    e1:34:7a:fc:ef:35:e2:b9:cf:35:f9:d8:d3:c5:a9:
                    e5:78:3f:d9:90:58:e5:01:61:f6:4f:84:80:e8:95:
                    7a:8c:ef:47:18:23:f4:a2:d6:fa:08:5a:3e:3b:8f:
                    e0:a4:f5:41:8f:a7:40:28:e6:74:9e:af:a3:2b:19:
                    67:e7:bf:46:65:fb:23:9a:27:d3:49:83:ef:3c:40:
                    2d:ea:ab:98:a4:7a:5c:9c:d7:2a:97:b7:96:77:d2:
                    92:2e:2a:b3:c5:31:15:f0:0e:ce:c0:7a:b2:ce:af:
                    1c:bb:62:14:e8:4a:30:70:e3:33:36:6e:9d:e4:e3:
                    1a:ab:ff:4e:87:1d:2d:56:32:ec:b4:5a:27:52:10:
                    9a:75:14:08:5a:9b:e3:fb:09:40:2b:65:4f:40:a2:
                    51:f2:5d:28:05:9b:f7:e9:65:0f:d9:85:b9:5d:a7:
                    82:f7:40:52:cb:6b:1f:70:44:78:91:36:cf:0a:cf:
                    3d:80:5b:76:8d:e0:7e:b7:73:e7:11:7b:12:65:62:
                    d7:85:6d:db:98:db:01:35:9c:e7:e8:31:83:e3:5b:
                    b3:41:f8:56:dc:7c:a8:0c:71:28:4b:4e:f6:c1:50:
                    87:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DB:37:19:F1:4A:8D:73:5C:89:B6:81:DE:9E:2E:5A:80:49:80:B0
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3139312e3235332e31362e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:22:0a:f6:3f:b8:ef:6c:a8:12:ac:51:93:f7:20:6b:c6:96:
         14:d3:6d:b6:e6:e7:49:92:1e:5d:3d:6f:4a:57:f0:db:d3:0d:
         1f:df:d3:45:30:1d:9d:fa:cd:c6:7b:a4:67:4f:b2:1a:5d:14:
         bf:bf:ae:ea:36:cd:ba:95:62:1f:04:9c:28:1f:79:9d:47:83:
         e2:1e:35:06:41:ec:2e:1a:03:98:e1:fb:a0:74:20:78:87:bc:
         68:db:a5:70:6c:82:a3:05:08:db:cc:28:75:30:71:45:98:f2:
         d4:1c:51:4f:c3:45:64:bb:aa:a3:ad:e9:44:c4:63:9d:31:d6:
         85:d5:65:a6:f2:6c:03:eb:98:86:32:b0:d7:19:8d:f5:0c:26:
         af:83:b6:a6:43:e0:cf:61:20:40:01:8b:ea:e4:23:99:c1:38:
         1a:76:75:6c:9e:7a:c1:fb:4f:8f:f3:6d:33:c8:ae:ad:42:76:
         e2:7c:37:2d:86:21:27:19:39:93:a1:ca:0f:dd:8d:ff:8f:8a:
         f4:f1:6b:af:ef:23:57:f3:ae:98:56:9c:b9:71:34:ed:aa:98:
         32:e4:87:de:33:c2:29:9a:96:13:09:8c:50:35:1b:23:8c:1e:
         bd:f2:26:cc:b2:d9:0b:5b:31:a1:3b:9a:56:8b:1c:2b:4a:13:
         19:8d:ad:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:46 2025 by rpki-client