Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/3133312e3232312e34372e302f32342d3234203d3e20323634343039.roa
File:                     3133312e3232312e34372e302f32342d3234203d3e20323634343039.roa (raw, json)
Hash identifier:          b6gEUTnkgG6T0DfoZB/ZlRBcNBJALPJ2pl5zeUTQ8kU=
Subject key identifier:   DC:6A:1A:3E:49:B2:0D:68:91:73:13:E9:06:CA:36:FF:20:17:33:D1
Certificate issuer:       /CN=1067154D7B30C41A8514DBD5BE78C166941715B0
Certificate serial:       43BDB4FB13DD6ABA955333A76FD8735090709561
Authority key identifier: 10:67:15:4D:7B:30:C4:1A:85:14:DB:D5:BE:78:C1:66:94:17:15:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1067154D7B30C41A8514DBD5BE78C166941715B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/3133312e3232312e34372e302f32342d3234203d3e20323634343039.roa
Signing time:             Thu 31 Jul 2025 14:48:53 +0000
ROA not before:           Thu 31 Jul 2025 14:43:53 +0000
ROA not after:            Thu 30 Jul 2026 14:48:53 +0000
asID:                     264409
IP address blocks:        131.221.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/1067154D7B30C41A8514DBD5BE78C166941715B0.crl
                          rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/1067154D7B30C41A8514DBD5BE78C166941715B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1067154D7B30C41A8514DBD5BE78C166941715B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:bd:b4:fb:13:dd:6a:ba:95:53:33:a7:6f:d8:73:50:90:70:95:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1067154D7B30C41A8514DBD5BE78C166941715B0
        Validity
            Not Before: Jul 31 14:43:53 2025 GMT
            Not After : Jul 30 14:48:53 2026 GMT
        Subject: CN=DC6A1A3E49B20D68917313E906CA36FF201733D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a6:26:5f:0f:7a:dd:88:f7:6c:6f:43:c6:11:
                    81:72:00:7f:f2:5d:c9:19:5a:db:e0:ab:cd:ef:44:
                    ff:1f:80:4b:5f:b5:fa:8a:53:48:38:03:a1:17:d9:
                    25:d0:74:1e:32:b4:31:19:f0:1e:c9:18:0c:e2:57:
                    4c:67:72:b8:3d:18:e6:3a:99:96:db:15:f6:54:e5:
                    7b:99:04:97:45:0d:6f:6a:da:66:29:ca:c5:af:cd:
                    10:35:94:c6:a7:c9:b5:ed:2d:5f:b0:27:49:48:f8:
                    c5:6e:69:2b:c6:c2:f1:db:30:07:f8:47:f1:3a:f0:
                    22:24:45:b0:5d:cb:72:d4:35:87:45:8c:9e:22:29:
                    92:3f:2b:a9:7a:e2:31:96:8e:6d:13:67:57:5e:02:
                    83:07:87:06:2a:3a:da:3f:57:dd:17:b1:0b:27:c4:
                    cb:df:37:9f:47:1f:a0:4c:f0:b9:21:8a:3d:e5:9c:
                    6b:82:22:9f:30:e1:73:07:f4:66:2e:f5:d7:23:98:
                    a5:f8:ab:96:c2:6c:aa:e0:99:6c:01:2b:cd:e0:18:
                    28:cc:af:35:8c:9c:73:6f:51:76:b1:6f:32:8c:e9:
                    19:6c:42:21:20:dd:27:5e:23:4e:76:6f:64:64:66:
                    5f:e4:07:0e:7f:cf:80:03:6f:2f:d5:28:2b:c0:53:
                    ce:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6A:1A:3E:49:B2:0D:68:91:73:13:E9:06:CA:36:FF:20:17:33:D1
            X509v3 Authority Key Identifier:
                keyid:10:67:15:4D:7B:30:C4:1A:85:14:DB:D5:BE:78:C1:66:94:17:15:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/1067154D7B30C41A8514DBD5BE78C166941715B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1067154D7B30C41A8514DBD5BE78C166941715B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/3133312e3232312e34372e302f32342d3234203d3e20323634343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:b9:ba:a5:13:de:2b:a6:cc:cc:6e:d1:73:44:ff:c3:13:48:
         bc:2d:5e:d4:17:e3:4d:be:41:cd:0c:76:70:da:2d:7a:49:1d:
         4f:21:2e:b6:4d:fc:f6:96:38:9b:7a:33:9d:71:2c:6e:6d:c8:
         eb:f5:3f:be:63:8f:ff:13:97:dc:1b:8a:c1:ec:a7:3a:35:c0:
         2d:95:9d:d6:48:9e:64:46:e0:0e:4e:cf:c8:e9:44:fe:ba:42:
         3b:5c:db:9f:e3:b2:49:c6:4b:73:bf:9b:7a:96:9c:ad:96:eb:
         64:49:d0:e4:d2:d2:70:65:a5:22:53:fd:61:b9:3a:28:56:1c:
         c2:58:6a:cd:2c:26:fa:cc:19:2e:e0:31:88:9a:c1:ec:3a:d3:
         54:f7:33:4a:7d:58:e2:b0:94:54:86:6e:0a:cf:bf:f0:34:52:
         8f:27:93:26:ab:8c:f5:d2:c4:cf:a8:d9:85:de:9d:eb:1a:87:
         2c:ee:08:40:30:b5:a8:12:a1:d6:18:a5:37:8e:78:f2:b4:f0:
         d2:a4:c9:d9:d1:62:b3:8b:b3:fa:71:3d:f1:9e:c1:01:40:32:
         ed:db:38:b8:ea:73:5e:66:3f:8a:2b:dc:73:f4:87:63:36:42:
         8f:2e:7b:c8:38:86:56:f6:04:e1:f4:9a:46:2e:cb:0c:9f:31:
         bb:82:16:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:46:25 2025 by rpki-client