Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136342e302f32342d3234203d3e20323633353038.roa
File:                     3139312e3234332e3136342e302f32342d3234203d3e20323633353038.roa (raw, json)
Hash identifier:          xSRAxxuIs62Au1lb9VrP826H7g9Pl81bdvaLd0aVrdo=
Subject key identifier:   97:BF:B1:FF:BC:4A:0A:E8:81:2F:63:C0:FC:E9:57:FA:3C:DA:0A:70
Certificate issuer:       /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Certificate serial:       6F8960E1C4594583E2EFD6AD456BA41A3D7BA8B2
Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136342e302f32342d3234203d3e20323633353038.roa
Signing time:             Wed 30 Jul 2025 20:48:33 +0000
ROA not before:           Wed 30 Jul 2025 20:43:33 +0000
ROA not after:            Wed 29 Jul 2026 20:48:33 +0000
asID:                     263508
IP address blocks:        191.243.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl
                          rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 04:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:89:60:e1:c4:59:45:83:e2:ef:d6:ad:45:6b:a4:1a:3d:7b:a8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
        Validity
            Not Before: Jul 30 20:43:33 2025 GMT
            Not After : Jul 29 20:48:33 2026 GMT
        Subject: CN=97BFB1FFBC4A0AE8812F63C0FCE957FA3CDA0A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5d:44:a3:15:23:80:4e:c1:d5:59:8a:93:ce:
                    e4:e2:11:84:dc:78:21:1b:d4:3d:cd:14:b2:50:2e:
                    54:34:73:7b:3e:12:d6:b3:37:85:3b:29:17:6d:67:
                    a6:5a:e6:45:d1:0e:8f:39:21:86:03:72:ae:5c:d3:
                    d7:cf:e6:55:d9:c0:57:0f:25:33:9d:e4:43:d6:a3:
                    32:e3:b2:1a:b8:bb:29:bc:2a:fb:d7:a2:d7:c2:2a:
                    44:e1:63:54:d6:11:47:83:82:78:b7:fe:2f:c3:45:
                    30:7c:7d:2d:af:e6:e8:9f:56:51:12:9c:93:80:01:
                    d7:28:b3:c7:ec:76:ab:30:06:3d:49:6c:94:20:88:
                    3c:75:09:3c:8d:e8:20:fc:c8:0e:5b:d7:33:4c:9b:
                    f1:78:e0:8a:e0:3c:ef:6d:84:1f:25:9f:01:21:33:
                    ea:40:21:86:8d:72:60:f0:e6:8a:02:7a:59:d0:5a:
                    0e:3a:02:a8:21:2b:8d:27:ee:ce:c6:87:b0:82:bf:
                    86:c4:f3:1d:aa:74:9e:0b:f4:cf:56:f5:65:2d:48:
                    06:c0:ee:7d:96:6c:56:0a:d8:9c:3b:36:42:51:9a:
                    b7:c1:fc:bb:9f:ab:93:16:f6:8a:22:8c:d6:5a:63:
                    a3:35:ad:7e:58:80:1f:c5:62:c2:7e:13:4b:58:65:
                    fa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BF:B1:FF:BC:4A:0A:E8:81:2F:63:C0:FC:E9:57:FA:3C:DA:0A:70
            X509v3 Authority Key Identifier:
                keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136342e302f32342d3234203d3e20323633353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:a9:2c:cc:1e:e5:fb:73:15:c2:eb:3f:38:84:e3:2b:98:2e:
         32:b5:61:69:a1:09:40:84:58:0b:31:c4:57:1b:35:a4:b5:18:
         32:6a:30:6d:a3:af:43:c2:81:b6:eb:06:1a:3d:fd:a7:bb:62:
         24:6c:db:0f:15:6b:63:33:22:51:00:1d:bd:9e:60:35:5d:ff:
         ac:1b:16:60:a9:34:65:6c:87:f4:28:66:80:ba:f3:97:62:c6:
         8c:5d:ee:89:af:93:23:f8:91:5b:e0:cf:b0:db:56:56:60:c4:
         68:9a:8e:e9:b5:d8:ef:54:9d:96:5b:4c:0e:c8:f3:19:ff:e2:
         98:e1:df:17:5e:4e:e9:eb:2d:56:da:8e:85:1f:fb:f5:59:f6:
         31:4f:6c:77:00:79:14:8a:b8:19:30:eb:a6:da:ff:3e:bd:e5:
         c6:9c:0d:af:56:81:70:c1:e3:34:76:09:3e:7f:e6:8d:ba:10:
         28:2a:ff:01:24:34:7e:ff:de:64:bf:24:51:75:41:f8:4e:4e:
         c1:de:63:c9:93:a0:97:3e:5d:57:a2:99:8d:f2:2d:d9:21:c4:
         d0:7c:63:32:94:5c:c2:e6:15:17:25:c7:7c:c4:34:55:bc:b5:
         10:21:3a:c1:7e:49:d5:c8:ea:a0:85:e7:0b:a7:b1:85:20:1d:
         5f:ef:fa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:49:21 2025 by rpki-client