Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa
File:                     3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa (raw, json)
Hash identifier:          I9G3ex2XveORcAEqGBwplD5mNPbZvqU6abd1zjBCLKY=
Subject key identifier:   C9:D4:0C:25:84:14:7A:C6:54:F2:4F:27:B2:30:F7:CE:ED:F5:E4:30
Certificate issuer:       /CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71
Certificate serial:       3C109BBEDC119704859D295B714B5F06FA650E80
Authority key identifier: 48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa
Signing time:             Wed 09 Jul 2025 22:40:32 +0000
ROA not before:           Wed 09 Jul 2025 22:35:32 +0000
ROA not after:            Wed 08 Jul 2026 22:40:32 +0000
asID:                     271238
IP address blocks:        190.171.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl
                          rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 04:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:10:9b:be:dc:11:97:04:85:9d:29:5b:71:4b:5f:06:fa:65:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71
        Validity
            Not Before: Jul  9 22:35:32 2025 GMT
            Not After : Jul  8 22:40:32 2026 GMT
        Subject: CN=C9D40C2584147AC654F24F27B230F7CEEDF5E430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8b:ef:db:06:3e:b5:45:2c:01:18:6a:06:dc:
                    49:82:2c:bf:d0:e8:f8:f9:b4:a7:93:7d:fa:7f:af:
                    bf:71:c7:4a:a7:87:f1:8c:53:20:e7:3a:25:b1:60:
                    92:12:53:c5:7d:71:de:4d:31:a2:aa:4b:57:33:fb:
                    23:c5:c9:60:43:56:3c:b6:cb:f4:55:fc:76:d9:77:
                    f8:ce:5e:5c:bb:de:cb:cd:84:f3:a9:01:d1:b6:e7:
                    e2:ed:f4:07:a2:12:b4:f1:76:4f:d8:18:35:7e:ed:
                    87:fa:bd:5d:69:2b:cc:b6:f7:1a:bf:cf:1b:c4:30:
                    94:d1:9c:d3:fc:49:9b:e5:3b:97:72:6a:f3:d4:0c:
                    a9:2e:8a:be:aa:29:cc:61:25:33:b6:be:a4:a7:b9:
                    07:70:2c:c8:bc:1a:c2:d1:0a:ff:6e:cd:d5:40:0b:
                    ec:f4:ba:40:93:79:ba:45:f8:01:30:bc:1d:e9:83:
                    6b:39:2b:99:df:06:82:e0:ac:a6:ff:c8:3f:4f:05:
                    96:d7:be:16:e0:09:19:1c:59:86:96:5f:f8:5c:ce:
                    69:2a:41:1a:c6:21:d2:56:0a:ef:fa:9b:56:bf:52:
                    73:5a:47:6b:ce:a8:cd:26:81:d6:d6:73:f2:6f:79:
                    e5:4a:e6:dc:89:34:bc:cb:5f:32:46:98:56:43:71:
                    4c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D4:0C:25:84:14:7A:C6:54:F2:4F:27:B2:30:F7:CE:ED:F5:E4:30
            X509v3 Authority Key Identifier:
                keyid:48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:af:84:3a:e3:f3:46:7d:92:e4:8e:55:8b:99:21:b6:31:d5:
         51:f9:79:7a:0d:df:b1:da:42:1c:4c:27:39:63:97:e7:f2:31:
         05:bb:7f:9c:45:10:7b:99:04:b3:db:31:5b:df:7b:ba:64:34:
         68:63:38:57:e0:b4:db:eb:c5:44:42:5d:fb:4c:53:6d:9b:f3:
         b3:e9:85:98:27:d0:98:24:50:44:9f:72:4e:9b:7d:9b:d0:4f:
         fb:ba:c7:64:5b:e5:72:fe:4c:3d:14:ee:8e:ba:fa:3d:bc:2f:
         ba:8f:9e:0d:89:ed:d9:53:9b:92:06:a9:54:c0:96:f3:06:e2:
         e1:e2:1e:a5:ff:73:87:8b:c2:4d:ea:57:8c:4f:b4:cc:6c:ff:
         63:ec:4d:90:36:e8:9d:38:59:64:44:d7:64:82:c9:84:65:25:
         97:fd:13:77:1c:6e:47:a9:15:13:5d:d1:84:ec:bc:81:8e:ac:
         41:8a:74:70:24:a7:9a:de:0e:93:66:f7:55:88:f4:5a:64:ce:
         a5:61:8f:df:ec:fb:77:6a:7f:fc:3f:17:a2:68:92:9f:4d:a1:
         73:68:d5:30:a7:4e:21:91:59:29:e6:0a:b6:c5:03:35:c5:37:
         68:ae:ca:23:79:30:1c:1a:07:86:be:d9:61:49:41:06:eb:70:
         08:1f:07:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:28:45 2025 by rpki-client