Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e312e302f32342d3234203d3e203631373937.roa
File:                     3134332e3133372e312e302f32342d3234203d3e203631373937.roa (raw, json)
Hash identifier:          eyGdMZpsT2n/1AkdKXTWuAV2EDnxahuVu9demWm8FEM=
Subject key identifier:   B5:DD:B8:62:16:49:B2:02:4D:09:BF:82:98:52:1C:B8:E9:72:42:F5
Certificate issuer:       /CN=698DD058CC44A7087C5B128356D10FB024C7D778
Certificate serial:       6FCD88C482E3AEA95531ED8B231C349AD8F74B51
Authority key identifier: 69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e312e302f32342d3234203d3e203631373937.roa
Signing time:             Mon 03 Nov 2025 15:07:07 +0000
ROA not before:           Mon 03 Nov 2025 15:02:07 +0000
ROA not after:            Mon 02 Nov 2026 15:07:07 +0000
asID:                     61797
IP address blocks:        143.137.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 05:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:cd:88:c4:82:e3:ae:a9:55:31:ed:8b:23:1c:34:9a:d8:f7:4b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698DD058CC44A7087C5B128356D10FB024C7D778
        Validity
            Not Before: Nov  3 15:02:07 2025 GMT
            Not After : Nov  2 15:07:07 2026 GMT
        Subject: CN=B5DDB8621649B2024D09BF8298521CB8E97242F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:12:8b:78:56:48:67:8b:6e:71:19:fc:ea:36:
                    ef:f6:06:23:63:f1:77:40:2f:58:4f:38:89:9e:07:
                    31:77:28:49:1c:3c:17:53:12:ef:3f:cb:09:c2:a0:
                    b1:d0:c7:cb:8b:3a:52:47:7f:d9:d5:79:b3:7b:31:
                    24:b5:c6:dd:71:9c:04:fe:22:0c:00:61:2f:40:fc:
                    ef:c5:e4:5e:7f:ae:8c:3b:e7:8b:d1:ad:cb:7e:ae:
                    a5:e9:77:b7:67:5c:0e:7c:12:f6:84:d3:57:99:24:
                    81:1d:c0:2f:fa:f0:bf:eb:fb:ec:0f:0f:f7:08:86:
                    54:0a:df:ab:78:6e:ff:cd:79:26:36:2d:fd:d4:78:
                    1b:12:33:f8:c6:ba:e4:f8:a8:7f:38:1d:27:47:9b:
                    f8:7b:4c:b8:e7:aa:6a:e5:93:ae:d7:d5:12:f5:41:
                    65:de:16:0c:bf:cd:1d:42:90:19:d2:f1:12:e6:38:
                    d1:53:6a:4e:b4:db:d3:e3:91:25:89:25:fb:34:86:
                    dc:f0:8a:4f:f9:c9:55:0f:e6:c7:10:85:59:f0:85:
                    ba:85:93:f3:3c:4c:10:36:f4:46:9d:1a:76:ee:de:
                    97:97:bc:2b:f3:62:53:19:56:f1:fc:fe:8d:53:67:
                    f6:29:18:8c:67:08:70:28:a2:79:b1:49:11:25:41:
                    19:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DD:B8:62:16:49:B2:02:4D:09:BF:82:98:52:1C:B8:E9:72:42:F5
            X509v3 Authority Key Identifier:
                keyid:69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e312e302f32342d3234203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:34:56:18:d4:f9:66:60:6b:b3:b8:66:b2:12:c0:20:cd:49:
         ee:8d:24:83:8b:24:bb:5b:a9:cb:0c:48:51:f2:a9:94:dc:da:
         4a:b8:9b:96:90:c0:b4:89:3f:df:c4:22:02:db:cc:13:03:02:
         c7:c6:54:9f:43:48:df:42:47:40:2e:9d:e6:f8:73:e9:7c:d1:
         f4:f4:d2:b2:2e:4b:de:bb:6b:2c:d3:cd:40:67:e3:b5:d8:d4:
         f7:c8:b3:65:f3:9c:f2:6f:2e:93:6c:05:2f:d0:8c:47:37:76:
         3c:b4:ed:cd:67:64:c8:37:04:7b:2a:80:fe:f2:fa:f7:a8:d0:
         b8:42:07:bd:ad:f0:34:dc:f6:8e:82:02:cf:af:9c:e2:29:9a:
         55:4e:e6:b9:92:a0:0a:6a:65:bc:77:22:77:f8:af:70:e9:3f:
         cb:28:3c:c7:d7:3d:b5:67:95:39:1a:90:5c:86:35:f8:d8:51:
         c6:d0:87:00:bb:64:85:ba:c1:1c:a0:23:32:3b:55:b7:01:e8:
         b2:cb:a0:cc:58:82:80:e4:0b:e1:fa:8f:df:c8:9c:59:7d:66:
         9e:1e:7d:3b:5c:72:39:9f:de:7b:4a:69:b4:51:c3:8e:51:3e:
         94:64:19:f7:12:df:39:64:2a:ec:61:5c:bc:6c:66:f0:39:c6:
         5b:24:2b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:37:36 2025 by rpki-client