Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/3139312e362e3235342e302f32342d3234203d3e20323633333032.roa
File:                     3139312e362e3235342e302f32342d3234203d3e20323633333032.roa (raw, json)
Hash identifier:          5zIV93ddyekID2aQmE9uvpzkqipfqAq3N3+52v1NiAM=
Subject key identifier:   6C:35:CE:3F:49:F2:29:20:43:75:58:D1:71:06:97:AC:7E:F7:DD:12
Certificate issuer:       /CN=1B07C34ADF8156B6635F6C7E1EA217E154F40A7F
Certificate serial:       0BFBCA08D17996227B3896CF9655EE06B87EA4A4
Authority key identifier: 1B:07:C3:4A:DF:81:56:B6:63:5F:6C:7E:1E:A2:17:E1:54:F4:0A:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/3139312e362e3235342e302f32342d3234203d3e20323633333032.roa
Signing time:             Mon 03 Nov 2025 18:31:47 +0000
ROA not before:           Mon 03 Nov 2025 18:26:47 +0000
ROA not after:            Mon 02 Nov 2026 18:31:47 +0000
asID:                     263302
IP address blocks:        191.6.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.crl
                          rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fb:ca:08:d1:79:96:22:7b:38:96:cf:96:55:ee:06:b8:7e:a4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B07C34ADF8156B6635F6C7E1EA217E154F40A7F
        Validity
            Not Before: Nov  3 18:26:47 2025 GMT
            Not After : Nov  2 18:31:47 2026 GMT
        Subject: CN=6C35CE3F49F22920437558D1710697AC7EF7DD12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:47:6c:e0:b0:7c:84:39:41:8d:73:d8:f4:19:
                    96:f7:0d:71:f1:2b:2c:5c:97:6e:63:b1:c1:b2:29:
                    5c:a2:33:f6:86:a1:63:b8:74:9c:49:6c:b8:2c:48:
                    bc:dd:cb:cb:74:90:8c:4d:40:f1:60:1f:da:d6:4c:
                    ae:21:56:bf:82:b8:c1:c5:99:e7:c4:55:40:90:f1:
                    a0:1d:5f:90:30:14:71:c3:ee:ff:3f:f2:b5:9d:c0:
                    d3:2b:9b:66:43:06:8a:24:f0:74:01:31:98:92:cd:
                    ba:9a:bc:b8:50:a1:92:fb:ee:fc:02:98:dd:ba:d9:
                    3e:3c:d5:40:25:2a:8e:2d:cc:91:4c:40:a2:2e:46:
                    34:c7:4c:13:38:7b:1e:98:28:b2:9a:60:d7:ca:aa:
                    ee:02:58:c2:2d:48:f7:c3:36:b8:71:8d:0b:72:72:
                    5b:64:62:75:05:ec:41:5b:23:a8:8c:3e:94:ea:c1:
                    7f:ed:bd:1f:9d:41:bb:89:bf:85:6c:92:e2:0b:58:
                    a1:ac:7b:3f:d6:2e:81:e9:48:05:c2:7b:19:23:bc:
                    9e:a5:81:71:16:34:8c:54:47:22:ea:47:19:97:65:
                    2c:f7:3f:eb:1d:3b:81:53:76:65:4a:38:e3:47:78:
                    0b:a8:ec:17:47:9b:4e:9f:fa:91:67:34:d5:fc:8c:
                    5d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:35:CE:3F:49:F2:29:20:43:75:58:D1:71:06:97:AC:7E:F7:DD:12
            X509v3 Authority Key Identifier:
                keyid:1B:07:C3:4A:DF:81:56:B6:63:5F:6C:7E:1E:A2:17:E1:54:F4:0A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/3139312e362e3235342e302f32342d3234203d3e20323633333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:6b:67:93:d0:0f:9d:8e:c2:17:30:67:d4:1d:ff:98:a4:eb:
         67:e6:26:00:46:e6:cc:9c:6c:47:b3:5d:6a:57:9c:31:20:54:
         22:21:7e:17:81:fc:40:92:63:2a:0d:75:fe:18:49:70:75:cb:
         e6:ba:cd:b6:e6:6e:2c:14:29:88:45:ef:eb:5d:26:fb:12:2c:
         3b:36:84:a0:1e:8a:6d:85:60:f7:c8:de:02:ed:0d:1a:32:39:
         77:1c:a5:be:b9:1e:42:0b:d3:52:5a:2e:9a:b6:cf:f8:69:72:
         97:2b:5a:99:4f:3c:53:06:c2:74:35:7a:88:e9:f9:a8:83:50:
         b1:de:23:2b:b3:e9:10:87:7f:22:35:05:28:b1:7e:b1:93:40:
         78:4c:71:43:fa:ab:48:97:af:dd:05:74:74:97:26:8e:f6:28:
         2e:04:48:15:e3:9e:cc:3a:ac:91:e1:ac:de:ab:77:68:11:33:
         d9:a9:fc:8e:d0:4e:b6:60:7a:0c:a9:a8:e3:01:cd:08:b9:0e:
         56:2b:50:fa:bb:e7:8a:82:f2:7c:8c:dd:4b:ae:e6:6c:c9:78:
         ae:72:39:8b:6a:7d:a2:ef:8a:57:27:54:e3:43:01:5a:59:1c:
         67:e8:46:0b:d4:80:76:d2:05:8c:87:83:1d:e4:ba:48:83:98:
         d1:46:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:38:20 2025 by rpki-client