Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/3132382e3230312e35352e302f32342d3234203d3e20323636363238.roa
File:                     3132382e3230312e35352e302f32342d3234203d3e20323636363238.roa (raw, json)
Hash identifier:          019q0RBSJIzEDbXEB13oaIQmER5aG+rpH+nf+nQLSKo=
Subject key identifier:   32:60:8C:31:41:1A:B0:39:47:41:DA:76:B3:D1:EA:A2:20:2B:4F:1D
Certificate issuer:       /CN=9CFB76D20D558F08024B5656A94D7209D3BD1F09
Certificate serial:       6EE8F85D697AE0A83906BAEFF6A1474628A6865F
Authority key identifier: 9C:FB:76:D2:0D:55:8F:08:02:4B:56:56:A9:4D:72:09:D3:BD:1F:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/3132382e3230312e35352e302f32342d3234203d3e20323636363238.roa
Signing time:             Tue 29 Jul 2025 23:00:00 +0000
ROA not before:           Tue 29 Jul 2025 22:55:00 +0000
ROA not after:            Tue 28 Jul 2026 23:00:00 +0000
asID:                     266628
IP address blocks:        128.201.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.crl
                          rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 04:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e8:f8:5d:69:7a:e0:a8:39:06:ba:ef:f6:a1:47:46:28:a6:86:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CFB76D20D558F08024B5656A94D7209D3BD1F09
        Validity
            Not Before: Jul 29 22:55:00 2025 GMT
            Not After : Jul 28 23:00:00 2026 GMT
        Subject: CN=32608C31411AB0394741DA76B3D1EAA2202B4F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1b:ec:7e:3e:3f:10:26:eb:d6:37:0b:b9:67:
                    02:c2:51:e3:8b:bd:55:ff:bb:02:54:c0:c9:9e:f0:
                    c1:7f:a6:67:49:78:0c:8c:d7:3e:0d:30:84:a5:00:
                    89:07:32:95:14:43:f6:bf:79:8d:a9:54:14:ea:ca:
                    07:6b:10:a4:2c:84:99:88:3d:29:37:77:6f:a2:a7:
                    b1:a1:09:ff:58:72:48:35:1b:e4:a1:48:fc:cc:7e:
                    47:b8:e2:17:09:15:83:a4:43:e4:08:47:6b:55:fb:
                    ac:11:bb:c5:fe:f5:56:ca:68:6f:cd:04:da:82:49:
                    a7:d5:77:b3:20:4b:fa:28:89:23:12:b5:d3:b7:d3:
                    4f:13:75:23:5f:d3:7c:74:9d:74:6d:9f:c1:21:04:
                    12:93:34:c5:f1:87:0b:e4:4b:ee:b8:69:af:1a:a1:
                    3f:c9:61:77:80:c9:0f:88:13:ce:d6:55:f8:e6:7a:
                    b3:6c:40:63:eb:2a:15:24:50:ea:3d:17:85:6c:be:
                    f8:42:70:21:2b:16:ad:e2:45:fd:ce:2e:b4:d4:be:
                    5a:ae:58:1e:2a:07:d9:84:4b:d1:c7:80:ab:de:e2:
                    7d:b7:68:d2:da:5d:9c:68:4e:23:e1:40:03:b9:3d:
                    40:4b:7c:1e:d0:47:02:61:7d:a9:87:e5:08:f6:7f:
                    69:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:60:8C:31:41:1A:B0:39:47:41:DA:76:B3:D1:EA:A2:20:2B:4F:1D
            X509v3 Authority Key Identifier:
                keyid:9C:FB:76:D2:0D:55:8F:08:02:4B:56:56:A9:4D:72:09:D3:BD:1F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/3132382e3230312e35352e302f32342d3234203d3e20323636363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:36:87:5e:6d:11:3d:dc:41:0a:fa:43:35:a9:bc:bc:95:3f:
         01:19:6a:68:06:1d:64:42:ad:19:61:99:b2:d4:a8:e5:ac:98:
         61:69:e5:e4:90:30:08:7d:90:d0:87:83:0e:36:e2:19:48:8c:
         e3:42:cd:eb:87:55:e4:4c:8f:b3:df:27:2d:32:2d:42:71:35:
         15:b2:e4:36:65:ee:b0:be:cc:d4:8e:ce:92:45:ad:0a:bf:d0:
         0f:26:c2:f7:f0:2a:b7:07:d9:69:c3:1d:2a:a3:d5:a4:63:81:
         1a:69:e2:d7:76:88:4c:aa:cb:5b:de:a4:8a:3e:7c:dc:3e:e0:
         ef:41:1f:cd:e3:6b:fd:22:2f:02:8d:78:ae:5d:8d:5b:ed:3a:
         30:fe:76:99:ae:5b:52:74:6f:a1:5c:8a:86:61:6b:92:62:4a:
         29:2c:ba:bd:1b:90:76:b4:65:af:f5:f6:66:a9:94:5c:12:3f:
         43:3c:e9:e3:a0:49:6f:c8:43:f7:5b:5e:1e:0c:0d:c3:05:5f:
         b2:c9:49:ac:84:9b:39:da:fd:b9:29:7f:77:85:0e:43:db:c8:
         e2:01:7c:4f:fb:c8:49:c8:03:83:77:33:0d:38:f2:18:4c:a4:
         21:de:ce:b4:16:b5:2f:00:9d:62:12:8e:2d:09:f7:f9:70:36:
         5e:25:27:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:32:45 2025 by rpki-client