Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3133382e33362e37302e302f32342d3234203d3e203631373937.roa
File:                     3133382e33362e37302e302f32342d3234203d3e203631373937.roa (raw, json)
Hash identifier:          5GHI+923Pa6ZXUq9F2nmqLrNkdgU7N/KSO5xqZkF36k=
Subject key identifier:   D5:D5:62:1B:FD:E0:C0:3A:40:7C:11:46:17:60:9E:A2:64:05:73:77
Certificate issuer:       /CN=698DD058CC44A7087C5B128356D10FB024C7D778
Certificate serial:       46547DDF043F8CC3D0188A2C8A869C7460913830
Authority key identifier: 69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3133382e33362e37302e302f32342d3234203d3e203631373937.roa
Signing time:             Mon 03 Nov 2025 15:07:15 +0000
ROA not before:           Mon 03 Nov 2025 15:02:15 +0000
ROA not after:            Mon 02 Nov 2026 15:07:15 +0000
asID:                     61797
IP address blocks:        138.36.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 05:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:54:7d:df:04:3f:8c:c3:d0:18:8a:2c:8a:86:9c:74:60:91:38:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698DD058CC44A7087C5B128356D10FB024C7D778
        Validity
            Not Before: Nov  3 15:02:15 2025 GMT
            Not After : Nov  2 15:07:15 2026 GMT
        Subject: CN=D5D5621BFDE0C03A407C114617609EA264057377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:31:73:91:9f:8e:0e:36:63:c3:f0:22:1f:d8:
                    c5:48:84:d4:a0:cd:26:b4:09:4d:bd:b0:9f:2b:0b:
                    0a:27:64:c0:5a:fd:14:ea:0d:e6:3b:f3:bc:0c:f8:
                    33:c0:9e:5e:87:76:b9:59:ae:4a:5b:6c:e9:15:32:
                    46:94:76:f7:4d:7b:0a:06:c4:9a:79:e9:4a:0a:e3:
                    6e:28:24:12:00:a5:d9:11:b8:cc:d5:a2:e4:4e:b2:
                    6c:a3:59:b6:a8:49:96:ca:ed:02:fa:fa:fd:3f:ad:
                    5d:9f:6e:4b:46:e9:e7:5c:b5:a3:e7:f6:8d:99:b1:
                    ef:33:6d:2b:e2:1a:94:8b:50:cc:b6:1d:a3:bd:b8:
                    ae:53:e1:3e:7a:6e:fb:d1:8d:57:cf:03:61:1e:70:
                    e7:e4:f3:98:c2:a9:d0:11:40:df:55:27:4d:a9:f5:
                    d2:95:d6:16:e4:6c:c2:9e:ce:c3:b4:03:62:79:9c:
                    0f:c2:c1:ee:e2:f1:c6:ab:46:34:05:58:03:45:32:
                    8c:43:2e:58:88:ed:0d:8f:2c:db:95:e1:14:5a:1f:
                    65:94:69:c6:ba:af:33:42:07:42:5f:4a:87:b9:52:
                    c2:c2:ee:03:81:5b:bd:ad:1c:77:b0:52:03:6f:f1:
                    c0:2b:d3:e0:a7:5c:4a:95:9b:2a:e1:97:d7:a1:1f:
                    57:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D5:62:1B:FD:E0:C0:3A:40:7C:11:46:17:60:9E:A2:64:05:73:77
            X509v3 Authority Key Identifier:
                keyid:69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3133382e33362e37302e302f32342d3234203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:fc:7e:cf:9f:ff:40:b7:f8:cf:e0:81:5b:90:8c:d5:16:8b:
         ab:f4:d4:00:9b:2c:a3:df:63:13:e6:a8:c4:19:50:6c:f5:70:
         9e:2c:da:cc:9e:c0:c5:83:57:56:1e:19:a7:ea:77:f5:bc:4f:
         99:cc:de:1a:21:8d:96:26:84:d0:13:76:41:37:54:9a:24:4b:
         68:48:d2:e3:dc:0a:d8:73:c3:cc:96:bd:5f:32:08:e7:5e:54:
         09:2d:ca:29:05:f4:60:21:28:c6:1a:35:80:47:de:c4:6e:91:
         9d:f7:f7:32:89:7e:f9:b3:54:b3:4c:16:96:e1:c7:7d:45:c0:
         be:69:36:2a:17:4d:39:b4:01:d6:e8:1f:7a:b9:70:fd:c3:f2:
         86:9f:f9:f9:be:f4:73:48:46:f2:d4:c7:18:ca:1f:07:38:05:
         a9:10:b5:87:af:bf:0f:e2:93:5a:af:82:57:97:9a:73:79:5a:
         c4:1b:2d:b2:f3:68:b1:e9:3d:fa:b7:85:ef:f5:e5:36:88:b8:
         f6:da:f9:8e:82:7b:f4:ae:75:3b:8c:42:9a:24:30:00:ac:e8:
         c1:18:87:e7:8c:3a:11:2b:6c:f6:a5:1b:17:6b:9e:59:4c:94:
         57:94:4a:f2:9b:50:e5:2f:a4:e2:b4:b7:5c:98:de:00:03:cc:
         4c:99:f2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:03:57 2025 by rpki-client