Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/3133312e3235352e37322e302f32322d3332203d3e20323634353233.roa
File:                     3133312e3235352e37322e302f32322d3332203d3e20323634353233.roa (raw, json)
Hash identifier:          UMQhuETAP3mo2VT6DbKKQ75ltp0Z6mOrCpfi41HCarM=
Subject key identifier:   E0:7F:19:64:99:F6:48:EE:D7:27:A1:18:AA:3D:09:D6:D8:C1:2C:B0
Certificate issuer:       /CN=0E8D4D28751C71CE312B11C82E2188BC7F54FB05
Certificate serial:       3D57B33D2D133A0AF49E23CF2493A5E84B289184
Authority key identifier: 0E:8D:4D:28:75:1C:71:CE:31:2B:11:C8:2E:21:88:BC:7F:54:FB:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/3133312e3235352e37322e302f32322d3332203d3e20323634353233.roa
Signing time:             Fri 26 Sep 2025 14:39:14 +0000
ROA not before:           Fri 26 Sep 2025 14:34:14 +0000
ROA not after:            Fri 25 Sep 2026 14:39:14 +0000
asID:                     264523
IP address blocks:        131.255.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.crl
                          rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 05:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:57:b3:3d:2d:13:3a:0a:f4:9e:23:cf:24:93:a5:e8:4b:28:91:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E8D4D28751C71CE312B11C82E2188BC7F54FB05
        Validity
            Not Before: Sep 26 14:34:14 2025 GMT
            Not After : Sep 25 14:39:14 2026 GMT
        Subject: CN=E07F196499F648EED727A118AA3D09D6D8C12CB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:fb:e1:2a:7a:a3:fa:32:ae:fc:1b:69:7d:
                    a9:e5:a6:81:5e:d2:3e:b0:6b:5b:ea:86:c4:6f:0c:
                    f7:a2:bd:b6:a8:40:00:7d:74:05:e6:ca:f3:a3:6e:
                    42:55:2f:d5:95:93:e1:c6:01:17:92:1c:10:14:77:
                    e8:87:bf:ed:58:08:bd:81:55:f6:bd:e0:0f:39:9c:
                    b7:26:36:99:2c:52:15:07:fa:18:09:53:35:95:20:
                    c2:13:88:4b:0f:a4:26:04:91:21:b3:25:1a:44:74:
                    22:64:af:fe:37:2f:14:30:d8:ac:45:97:1d:c9:52:
                    88:ac:b7:7f:ae:c5:8d:3d:d3:04:cc:76:a3:18:5c:
                    2a:25:3f:d7:14:2c:74:04:bf:48:e9:a2:8f:86:8c:
                    56:b1:53:c6:06:3f:11:e7:bf:b8:19:6a:2b:cf:6e:
                    81:f7:24:c8:82:db:ca:f1:d4:cb:67:a2:0a:53:58:
                    77:bb:da:39:93:90:df:69:3a:b6:58:7e:12:e3:40:
                    6f:d3:61:41:70:dc:67:d1:74:15:af:cf:77:5e:14:
                    15:f4:05:26:a2:57:ef:6e:aa:3c:2c:65:d3:ac:0c:
                    e5:46:2b:0a:53:5e:0a:ff:c3:05:44:2a:ac:9c:c3:
                    c6:36:2f:89:2c:03:3e:7b:23:80:79:96:34:8a:83:
                    5d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7F:19:64:99:F6:48:EE:D7:27:A1:18:AA:3D:09:D6:D8:C1:2C:B0
            X509v3 Authority Key Identifier:
                keyid:0E:8D:4D:28:75:1C:71:CE:31:2B:11:C8:2E:21:88:BC:7F:54:FB:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/3133312e3235352e37322e302f32322d3332203d3e20323634353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:e6:5a:80:07:46:5c:cd:98:cf:ad:d4:03:60:ff:a3:ba:b7:
         6f:a2:8c:92:0d:1e:6f:ab:6e:d5:ee:66:46:31:cb:b5:fc:de:
         98:c9:36:06:99:ff:fa:4b:ae:87:88:cc:a8:53:c9:89:0d:69:
         7b:59:01:cc:cd:b4:ba:f7:3e:81:c7:72:71:01:c1:24:53:a6:
         8b:7d:c6:ec:3a:7a:3b:6c:67:be:58:4d:5a:6f:c7:2c:90:0b:
         fb:16:3f:71:76:a6:9a:7e:0d:8d:d6:48:7c:78:ac:53:fb:27:
         a0:00:ef:22:30:83:37:8e:b5:b0:dc:8b:19:ba:1d:6a:b5:fa:
         47:72:73:81:a0:ed:a5:ba:00:9e:98:bb:d8:e2:5a:50:84:c7:
         e7:a4:8b:56:38:51:89:9e:04:51:2f:f0:63:4a:a1:e6:4a:af:
         f9:f1:49:c6:73:f2:d5:c0:91:8a:e1:ae:36:5c:0b:c7:b7:2e:
         b5:8b:8e:54:5f:e4:a7:ef:56:a4:53:27:5f:63:0b:5a:76:5d:
         6a:53:bb:dc:ca:0b:8e:df:b6:6f:85:75:5d:bf:8a:b0:d8:ab:
         08:92:7a:6d:3b:02:af:84:c7:8c:eb:42:f2:42:7a:73:73:64:
         11:cd:57:38:fa:21:f8:cd:16:e0:08:04:b5:fd:46:28:7d:44:
         67:05:b7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:46:46 2025 by rpki-client