Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32332d3233203d3e20323634353530.roa
File:                     3137302e302e33322e302f32332d3233203d3e20323634353530.roa (raw, json)
Hash identifier:          Jn7VlImRVXPwJKogDfn3PW3KXrjPqcCZhyLvDtCjMdc=
Subject key identifier:   6B:D7:87:44:7C:40:53:8D:9C:71:95:55:63:A8:48:DC:F0:D0:5B:A9
Certificate issuer:       /CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
Certificate serial:       6BE3B642930FBEC76663E2E2008AE3FC1D92AFF0
Authority key identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32332d3233203d3e20323634353530.roa
Signing time:             Tue 23 Sep 2025 00:05:13 +0000
ROA not before:           Tue 23 Sep 2025 00:00:13 +0000
ROA not after:            Tue 22 Sep 2026 00:05:13 +0000
asID:                     264550
IP address blocks:        170.0.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e3:b6:42:93:0f:be:c7:66:63:e2:e2:00:8a:e3:fc:1d:92:af:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
        Validity
            Not Before: Sep 23 00:00:13 2025 GMT
            Not After : Sep 22 00:05:13 2026 GMT
        Subject: CN=6BD787447C40538D9C71955563A848DCF0D05BA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cb:a4:cc:5e:11:1e:2f:8d:7a:21:23:ea:e9:
                    37:63:38:e8:4b:46:19:15:04:dc:35:eb:10:0f:2f:
                    b5:85:b5:4e:d2:59:43:88:19:d4:5e:b9:5f:38:b6:
                    16:29:9b:3b:9e:67:34:a1:25:31:1d:41:e2:fa:78:
                    e3:52:ef:ba:91:66:bb:85:91:3b:32:ac:57:c4:af:
                    42:f8:5c:20:f7:7f:0e:a1:b2:76:af:4b:d8:89:a4:
                    1a:ff:92:6b:28:89:d7:88:9c:b8:d0:c3:74:9e:9b:
                    1a:a2:c6:e0:ca:5b:25:0c:76:7f:4e:5e:e7:48:69:
                    a8:0d:5c:92:c5:fe:b4:95:9c:1a:ef:af:c7:87:31:
                    9c:66:db:ec:06:bb:bd:a3:4e:94:d5:26:73:a5:6f:
                    de:03:68:08:e1:c9:1d:f0:4f:33:ee:a3:68:16:c0:
                    e6:25:f7:97:9d:ef:91:70:b9:bb:77:5c:5f:0d:d0:
                    b2:47:dd:a7:41:33:bb:ad:bb:f8:41:b9:58:62:18:
                    7b:03:bd:b2:c8:c9:ac:42:3f:98:4b:e8:7b:84:83:
                    7c:21:32:b7:b7:3c:cf:ff:c2:4d:3a:21:08:d2:97:
                    0b:2c:44:69:54:8c:38:48:e6:db:70:84:3f:7a:cd:
                    d0:ce:25:56:49:29:c0:cf:94:fb:2a:32:f2:51:76:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D7:87:44:7C:40:53:8D:9C:71:95:55:63:A8:48:DC:F0:D0:5B:A9
            X509v3 Authority Key Identifier:
                keyid:FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32332d3233203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:51:6a:f6:8c:42:1a:e1:ea:6a:d4:ba:0e:df:94:51:4a:a1:
         f8:6d:73:3b:d3:45:c2:b0:fc:21:47:57:b7:f0:d4:f9:0a:ef:
         4a:fa:de:3c:9e:74:a2:8a:5a:36:95:fe:05:9c:33:a1:67:2d:
         26:c8:17:83:16:66:93:36:c4:a4:5b:02:d4:6a:32:72:57:a1:
         d5:01:27:e0:e6:43:1a:a2:1f:c4:ad:4a:f5:24:d7:7f:2a:fe:
         5a:f0:fe:e7:ce:5c:30:59:25:24:f7:62:96:13:6d:6e:be:1a:
         c5:9d:ac:49:9d:a6:17:8b:1f:a8:76:ed:4c:4d:ee:47:07:8d:
         fe:8f:c6:e5:dc:87:24:25:2c:7c:76:26:bf:41:e6:07:8d:52:
         05:2c:94:f9:2b:c9:be:2c:94:bb:16:10:06:d3:9f:98:ee:58:
         37:10:1a:f9:4d:7a:23:9f:56:8f:b2:80:1b:f8:3c:03:f6:71:
         1e:33:7f:23:42:f4:9c:c7:b9:46:1f:7a:c2:22:d7:13:0f:df:
         c2:97:91:e7:f5:8f:cb:e4:8f:9e:e0:1c:b7:54:d4:4c:61:1c:
         d4:de:c3:5e:25:10:17:21:3e:aa:c1:65:eb:93:c2:d5:43:e1:
         2e:87:a6:f6:71:11:d7:ed:8a:1b:d3:7b:75:f4:88:79:88:65:
         c5:69:db:22
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUa+O2QpMPvsdmY+LiAIrj/B2Sr/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI0MzVFNzk0RDg2Q0I5QkFFODAwQTZEMjg5QTg4Rjc3
MUI1QjU4MzAeFw0yNTA5MjMwMDAwMTNaFw0yNjA5MjIwMDA1MTNaMDMxMTAvBgNV
BAMTKDZCRDc4NzQ0N0M0MDUzOEQ5QzcxOTU1NTYzQTg0OERDRjBEMDVCQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCby6TMXhEeL416ISPq6TdjOOhL
RhkVBNw16xAPL7WFtU7SWUOIGdReuV84thYpmzueZzShJTEdQeL6eONS77qRZruF
kTsyrFfEr0L4XCD3fw6hsnavS9iJpBr/kmsoideInLjQw3SemxqixuDKWyUMdn9O
XudIaagNXJLF/rSVnBrvr8eHMZxm2+wGu72jTpTVJnOlb94DaAjhyR3wTzPuo2gW
wOYl95ed75Fwubt3XF8N0LJH3adBM7utu/hBuVhiGHsDvbLIyaxCP5hL6HuEg3wh
Mre3PM//wk06IQjSlwssRGlUjDhI5ttwhD96zdDOJVZJKcDPlPsqMvJRdpPRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUa9eHRHxAU42ccZVVY6hI3PDQW6kwHwYDVR0j
BBgwFoAU+0NeeU2Gy5uugAptKJqI93G1tYMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlZ1SndLd25uNDZuTmRTOWRFc3paOEp6S3FHbmFOOVpwRFBnZnNVbVN1
VVAvMC9GQjQzNUU3OTREODZDQjlCQUU4MDBBNkQyODlBODhGNzcxQjVCNTgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCNDM1RTc5NEQ4NkNCOUJB
RTgwMEE2RDI4OUE4OEY3NzFCNUI1ODMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJWdUp3S3dubjQ2bk5kUzlkRXN6WjhKektxR25hTjlacERQZ2ZzVW1TdVVQLzAv
MzEzNzMwMmUzMDJlMzMzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNDM1
MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAaoAIDANBgkqhkiG9w0BAQsFAAOCAQEAe1Fq9oxCGuHq
atS6Dt+UUUqh+G1zO9NFwrD8IUdXt/DU+QrvSvrePJ50oopaNpX+BZwzoWctJsgX
gxZmkzbEpFsC1Goycleh1QEn4OZDGqIfxK1K9STXfyr+WvD+585cMFklJPdilhNt
br4axZ2sSZ2mF4sfqHbtTE3uRweN/o/G5dyHJCUsfHYmv0HmB41SBSyU+SvJviyU
uxYQBtOfmO5YNxAa+U16I59Wj7KAG/g8A/ZxHjN/I0L0nMe5Rh96wiLXEw/fwpeR
5/WPy+SPnuAct1TUTGEc1N7DXiUQFyE+qsFl65PC1UPhLoem9nER1+2KG9N7dfSI
eYhlxWnbIg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:43:57 2025 by rpki-client