Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/3132382e3230312e35342e302f32342d3234203d3e20323636363238.roa
File:                     3132382e3230312e35342e302f32342d3234203d3e20323636363238.roa (raw, json)
Hash identifier:          Y3uUT1Nyx8Jbp6QBIT4Q2Cw01jB5BdDbVMY+/4EHgHU=
Subject key identifier:   EA:84:AD:E4:B1:45:2C:A7:B6:CD:48:39:BA:04:89:D9:E3:83:BE:A0
Certificate issuer:       /CN=9CFB76D20D558F08024B5656A94D7209D3BD1F09
Certificate serial:       04142061F0EDC8AAAEE646FA92BA5E05DB41B23B
Authority key identifier: 9C:FB:76:D2:0D:55:8F:08:02:4B:56:56:A9:4D:72:09:D3:BD:1F:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/3132382e3230312e35342e302f32342d3234203d3e20323636363238.roa
Signing time:             Tue 29 Jul 2025 23:00:00 +0000
ROA not before:           Tue 29 Jul 2025 22:55:00 +0000
ROA not after:            Tue 28 Jul 2026 23:00:00 +0000
asID:                     266628
IP address blocks:        128.201.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.crl
                          rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:14:20:61:f0:ed:c8:aa:ae:e6:46:fa:92:ba:5e:05:db:41:b2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CFB76D20D558F08024B5656A94D7209D3BD1F09
        Validity
            Not Before: Jul 29 22:55:00 2025 GMT
            Not After : Jul 28 23:00:00 2026 GMT
        Subject: CN=EA84ADE4B1452CA7B6CD4839BA0489D9E383BEA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ce:72:15:04:e6:73:51:04:32:c6:b9:33:fd:
                    4c:0e:78:7e:3f:20:14:95:67:9c:04:95:b0:67:31:
                    9b:d1:d0:70:56:80:87:0a:13:a9:7f:20:cb:64:3c:
                    78:b8:9d:18:06:94:d3:37:80:c8:8c:87:e2:65:00:
                    39:eb:a9:b8:27:60:e3:33:59:d5:8e:e1:01:03:b3:
                    bf:88:03:fc:c8:b7:4e:98:8c:f8:79:ae:da:e8:1e:
                    e6:18:47:44:d5:6f:2d:5d:65:ef:d9:0c:c2:ae:42:
                    bb:d9:7c:9c:04:ed:f3:db:87:31:bf:81:b0:a3:3c:
                    26:4f:a7:3b:f2:04:2b:8f:68:68:46:25:1e:d4:27:
                    3f:98:23:87:a3:09:82:2d:ee:5a:f9:de:2a:56:c2:
                    10:43:10:ca:50:cd:52:85:c1:5b:f5:28:65:77:98:
                    a2:5b:e5:db:db:55:dd:6d:0e:ca:49:d3:54:4c:b2:
                    5e:98:bd:68:f4:eb:6e:92:09:58:18:8e:fc:a8:f5:
                    0d:c3:cb:d9:4b:3b:e5:36:9b:1b:1d:cb:d3:4f:d8:
                    b2:5a:c1:4d:19:d9:b9:5e:fb:26:83:fd:da:18:1c:
                    dc:8d:00:63:74:51:15:fd:fa:4c:48:e9:a8:82:36:
                    33:39:69:46:7a:5c:9a:07:87:56:72:fe:1e:d5:07:
                    6e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:84:AD:E4:B1:45:2C:A7:B6:CD:48:39:BA:04:89:D9:E3:83:BE:A0
            X509v3 Authority Key Identifier:
                keyid:9C:FB:76:D2:0D:55:8F:08:02:4B:56:56:A9:4D:72:09:D3:BD:1F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/3132382e3230312e35342e302f32342d3234203d3e20323636363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:99:4b:0c:ea:b8:eb:a5:dd:80:66:fc:b2:87:41:41:c0:ab:
         41:a7:59:2a:c8:62:54:c3:08:07:c0:f5:00:08:cd:d9:26:12:
         ce:82:48:7b:a1:41:48:b2:21:63:52:43:b1:b6:c8:9e:c1:57:
         d2:cb:e8:fd:91:8d:41:fb:30:d6:5b:e0:1d:85:de:5f:2a:5e:
         9c:21:d5:80:fc:7a:b5:c1:e2:a1:bb:99:2d:00:a9:f8:ef:97:
         21:9a:da:19:db:84:67:0d:f8:07:88:7a:8b:c6:be:1e:c9:36:
         c4:86:f0:f4:d8:7c:a1:8a:16:cf:fd:0f:79:4e:05:4e:94:28:
         50:3e:ef:c9:ac:81:5c:40:aa:f4:44:34:43:38:fd:a6:c5:b0:
         59:a2:09:8f:db:d9:74:da:e7:1e:19:45:7b:18:6c:57:f8:e8:
         73:dc:13:82:4d:2d:e1:a9:1f:a5:11:d3:f8:ba:5a:2c:70:51:
         82:cc:bf:55:a4:65:79:cd:3c:a5:40:e0:ba:f8:ff:ba:88:8e:
         c7:29:69:c5:b9:78:14:83:7b:39:18:0e:3d:05:ac:e8:51:10:
         a1:46:4c:7d:54:69:79:24:ff:9e:be:77:1b:3d:35:da:23:7d:
         56:9e:e8:3d:d4:ea:d9:dc:88:80:10:c3:27:56:4b:16:6d:80:
         da:94:26:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:57:49 2025 by rpki-client