Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e302e302f32342d3234203d3e203631373937.roa
File:                     3134332e3133372e302e302f32342d3234203d3e203631373937.roa (raw, json)
Hash identifier:          rXKfNISuKGs6SdvuTsgdjU9D+n9bEnSswPDgO2mzL88=
Subject key identifier:   9A:1B:A5:21:EC:8C:C5:69:A2:F6:65:21:32:88:2F:28:69:47:2A:3A
Certificate issuer:       /CN=698DD058CC44A7087C5B128356D10FB024C7D778
Certificate serial:       19AA417FEE4B014D02BF67654B02FC75DDE41B35
Authority key identifier: 69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e302e302f32342d3234203d3e203631373937.roa
Signing time:             Mon 03 Nov 2025 15:07:18 +0000
ROA not before:           Mon 03 Nov 2025 15:02:18 +0000
ROA not after:            Mon 02 Nov 2026 15:07:18 +0000
asID:                     61797
IP address blocks:        143.137.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 05:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:aa:41:7f:ee:4b:01:4d:02:bf:67:65:4b:02:fc:75:dd:e4:1b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698DD058CC44A7087C5B128356D10FB024C7D778
        Validity
            Not Before: Nov  3 15:02:18 2025 GMT
            Not After : Nov  2 15:07:18 2026 GMT
        Subject: CN=9A1BA521EC8CC569A2F6652132882F2869472A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:24:55:71:d1:2a:28:7c:86:b8:12:ce:7c:39:
                    a2:27:22:0a:db:34:e1:fc:29:71:79:6c:6c:ea:d3:
                    49:e3:5d:83:6c:13:53:0d:a8:7b:c0:ff:45:4c:8c:
                    ec:f6:99:2b:18:e5:1e:5c:75:e9:5f:2d:94:88:1e:
                    22:cf:2c:3b:f9:ed:b9:a7:ec:81:d3:90:b2:cc:a8:
                    68:ed:d4:3f:1e:36:e0:6c:7e:a1:60:53:55:e8:bd:
                    f5:8e:e5:75:17:b8:30:6d:f5:85:37:10:bb:7f:ed:
                    e6:92:a7:e2:ca:e5:00:f8:c7:c7:a8:d9:ce:8b:83:
                    21:33:1d:35:b7:07:51:e5:f2:94:bd:41:f4:32:78:
                    d5:fc:94:8c:7f:55:f6:b4:ef:1b:45:21:e0:af:c5:
                    a3:a8:a7:6a:6e:00:4d:8c:38:17:ac:84:8a:6b:a9:
                    c5:22:5e:2d:fd:b6:91:f4:0c:c0:28:0a:5a:86:d4:
                    60:08:b2:2e:1f:51:3a:7d:e6:f0:81:31:e7:4e:3d:
                    74:4e:bf:49:0f:c9:b7:f9:f5:8f:36:76:da:5a:d0:
                    d5:35:df:c0:4c:73:89:75:ce:0d:1f:fa:e4:f4:6c:
                    87:00:bb:2f:ff:77:a3:e6:72:47:b0:12:34:e2:c7:
                    ed:dd:39:88:a0:92:80:15:df:66:49:42:fe:4a:ac:
                    98:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1B:A5:21:EC:8C:C5:69:A2:F6:65:21:32:88:2F:28:69:47:2A:3A
            X509v3 Authority Key Identifier:
                keyid:69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e302e302f32342d3234203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:9e:41:56:62:ee:6a:4e:80:64:67:44:c5:a6:f4:36:fa:c3:
         b2:1c:d5:08:26:3d:43:e3:c2:c3:80:af:c7:e2:69:75:da:9e:
         54:47:15:e1:27:60:48:3c:8d:49:ab:6e:6c:cc:50:c4:cd:1c:
         52:ed:52:7f:fe:18:df:39:3c:d9:41:46:e9:88:5b:f6:18:7f:
         40:b0:7f:82:7c:70:73:e5:44:91:66:8e:66:68:31:13:ab:13:
         1e:fe:42:03:5e:44:b8:e5:2f:04:c3:a8:c0:4c:92:da:c4:6c:
         f3:bc:0c:34:fc:ba:aa:84:7d:ad:0b:0d:32:36:08:8a:fb:66:
         b9:86:17:31:8a:11:3a:3d:24:5a:c2:60:f1:09:d0:70:29:9d:
         65:81:6d:d6:e0:28:00:1c:bf:43:48:a0:28:4c:52:86:33:61:
         22:e9:55:8a:46:f3:00:ec:64:62:b8:b0:30:21:6c:e7:03:24:
         db:00:ec:5a:3e:45:55:84:c2:33:59:c6:4a:aa:01:a4:81:b5:
         7c:d9:d0:51:e4:2d:da:ce:54:89:69:79:70:98:28:4a:f6:2b:
         43:9e:21:cd:92:b3:b4:93:95:b2:c7:58:43:38:71:f0:73:b1:
         a6:63:da:43:a7:fa:d7:04:f8:de:be:2b:e4:16:82:ac:76:25:
         a4:74:ba:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:37:34 2025 by rpki-client