Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32322d3332203d3e20323633323536.roa
File:                     3139382e35382e382e302f32322d3332203d3e20323633323536.roa (raw, json)
Hash identifier:          Eqmsv6uZ9xrsgQW3OoXMlywoCoPFjCZ5RB4lI2BKJ1w=
Subject key identifier:   F0:7C:D8:A7:04:B2:7B:28:5E:3B:F2:FC:5B:63:46:B4:C2:EA:D4:95
Certificate issuer:       /CN=4B994881FDDD6F476745B62FD48604002A6D30C5
Certificate serial:       0144E861D2DAE5AFF4F830AEA69F04DD6701CD6D
Authority key identifier: 4B:99:48:81:FD:DD:6F:47:67:45:B6:2F:D4:86:04:00:2A:6D:30:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B994881FDDD6F476745B62FD48604002A6D30C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32322d3332203d3e20323633323536.roa
Signing time:             Thu 31 Jul 2025 17:26:04 +0000
ROA not before:           Thu 31 Jul 2025 17:21:04 +0000
ROA not after:            Thu 30 Jul 2026 17:26:04 +0000
asID:                     263256
IP address blocks:        198.58.8.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.crl
                          rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B994881FDDD6F476745B62FD48604002A6D30C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 14:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:44:e8:61:d2:da:e5:af:f4:f8:30:ae:a6:9f:04:dd:67:01:cd:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B994881FDDD6F476745B62FD48604002A6D30C5
        Validity
            Not Before: Jul 31 17:21:04 2025 GMT
            Not After : Jul 30 17:26:04 2026 GMT
        Subject: CN=F07CD8A704B27B285E3BF2FC5B6346B4C2EAD495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:77:db:35:e7:53:d5:b2:61:17:f3:1c:f0:fa:
                    cf:54:6d:df:e7:0a:30:72:a7:5d:18:12:fc:a9:8c:
                    62:1e:7c:25:6e:73:a6:94:36:3e:e1:f3:2e:ef:a0:
                    bb:d3:f3:e3:ae:5f:11:8f:c9:11:5a:0c:90:06:6b:
                    b4:4b:fe:bc:d3:10:ae:29:c2:79:9a:11:cf:3a:8a:
                    97:5d:de:c6:c1:10:74:ce:81:17:81:df:b0:d7:5f:
                    ee:bf:45:fa:47:3f:0b:63:68:18:9e:b1:a6:b8:31:
                    b4:77:00:65:be:89:3b:59:d9:1c:c1:f0:b0:cf:6e:
                    59:b8:79:6e:69:37:cb:b6:04:1c:39:1a:a3:01:5b:
                    8e:52:a3:cf:db:72:2e:aa:ea:37:a8:93:5b:8c:8b:
                    d4:b8:47:5f:ad:b3:ac:2a:11:21:e7:90:20:96:70:
                    e2:21:44:34:c0:f5:d0:02:ce:51:92:0e:e5:74:da:
                    06:ae:4a:ff:ac:78:02:99:96:a3:3a:07:5c:6a:17:
                    cd:5c:b8:0d:b8:92:1c:89:81:38:16:be:d2:e4:3b:
                    65:a6:75:1e:0f:68:51:26:83:0a:ba:de:94:20:f2:
                    65:8b:3e:df:4f:11:f2:96:8b:00:da:73:db:f8:02:
                    45:cf:81:62:45:ae:e0:61:b8:15:87:84:5e:40:9d:
                    29:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7C:D8:A7:04:B2:7B:28:5E:3B:F2:FC:5B:63:46:B4:C2:EA:D4:95
            X509v3 Authority Key Identifier:
                keyid:4B:99:48:81:FD:DD:6F:47:67:45:B6:2F:D4:86:04:00:2A:6D:30:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B994881FDDD6F476745B62FD48604002A6D30C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32322d3332203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.58.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:0e:76:b6:ca:8c:6b:f7:7e:db:ab:ab:b4:6b:e9:e6:02:49:
         61:10:c6:35:c5:67:81:86:4c:6c:95:b1:d5:6a:2b:1f:ca:06:
         4b:35:28:eb:b4:ea:52:ae:06:1e:6c:13:ea:21:e5:3e:eb:1f:
         57:0c:34:0b:da:56:96:1a:47:c3:3a:36:6b:b9:dd:dc:cd:9f:
         fe:17:7e:64:4f:20:f4:18:0a:27:9c:4c:18:db:de:e7:14:e5:
         e5:7c:74:85:f5:d5:4f:6b:c1:e3:7a:01:9c:ca:49:3c:1f:d1:
         f0:ab:ba:33:84:ce:53:44:93:38:f6:a3:bc:20:ec:2c:38:19:
         dd:80:a9:2b:9c:a8:d2:be:2a:de:95:c7:31:8f:2f:26:61:0d:
         45:c9:da:c7:b0:aa:16:1d:8b:7d:a1:47:18:8b:2d:8c:cb:7c:
         a1:df:63:5d:f4:32:e0:41:0c:e0:2b:05:a3:8c:6f:fa:98:ea:
         dd:76:43:f3:ac:82:fb:7d:ca:0e:27:47:a4:21:6b:44:2c:91:
         80:bd:49:af:9a:09:9d:39:e4:c0:db:5f:bf:2e:63:f8:74:f8:
         42:ca:66:b6:16:d5:3c:37:42:ab:48:ca:8b:a3:54:2c:a4:8e:
         9d:6f:70:72:91:47:7c:b8:35:52:95:29:4c:0e:6a:85:e4:71:
         88:ff:f5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:25:16 2025 by rpki-client