Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130332e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e3130332e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          RwY+eIhbd0TrSeMDw2N2L4bgufpResXmJnRQbP/MRL0=
Subject key identifier:   CC:46:12:94:3B:33:8B:B8:09:FC:8A:F5:7B:A0:1F:0C:7C:5F:2C:40
Certificate issuer:       /CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
Certificate serial:       78994815A9E4091B479E1228E8F7C52ECB4C3FCE
Authority key identifier: C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130332e302f32342d3234203d3e203533313533.roa
Signing time:             Thu 25 Sep 2025 13:35:22 +0000
ROA not before:           Thu 25 Sep 2025 13:30:22 +0000
ROA not after:            Thu 24 Sep 2026 13:35:22 +0000
asID:                     53153
IP address blocks:        187.61.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:99:48:15:a9:e4:09:1b:47:9e:12:28:e8:f7:c5:2e:cb:4c:3f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
        Validity
            Not Before: Sep 25 13:30:22 2025 GMT
            Not After : Sep 24 13:35:22 2026 GMT
        Subject: CN=CC4612943B338BB809FC8AF57BA01F0C7C5F2C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:46:89:16:5a:4d:a4:e3:c5:71:58:d5:7f:12:
                    13:6f:12:f8:15:31:a5:f6:e2:1a:45:1c:4f:b2:61:
                    c5:d3:64:08:cc:df:15:b2:09:e6:ab:66:e4:df:f8:
                    9d:46:07:6a:3c:0d:58:63:9a:1f:8d:11:e8:8a:cc:
                    56:a1:cf:69:21:db:b3:cc:da:c4:4d:96:0d:72:f8:
                    ea:82:75:1e:61:8a:2e:11:1d:9f:60:10:f4:bf:79:
                    1a:b0:58:83:aa:da:df:dd:38:9b:58:1f:8e:de:27:
                    07:69:55:8b:dc:be:14:fd:1a:d7:ca:e1:5b:62:cf:
                    2f:a7:94:dc:a8:85:8e:1d:52:cd:ed:e8:42:57:81:
                    01:c8:3d:12:5e:ad:d7:d5:ae:26:9e:07:6d:f4:53:
                    c9:cc:a2:83:b9:b7:56:53:f1:81:e4:37:2d:18:23:
                    90:5d:c5:fc:04:89:88:fa:62:21:52:d0:79:d2:ed:
                    99:f0:a6:da:15:57:8d:07:c0:0c:c2:66:31:ac:8e:
                    49:b0:1b:55:40:fb:39:49:ac:03:7b:98:19:8c:93:
                    e1:75:c4:bb:eb:ac:c4:ec:ab:8a:e4:29:50:e5:53:
                    8a:92:c3:94:a8:13:bd:fb:e1:36:06:1e:75:9f:c3:
                    92:e1:9f:f0:97:ad:52:23:0e:be:f2:b8:81:ac:17:
                    eb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:46:12:94:3B:33:8B:B8:09:FC:8A:F5:7B:A0:1F:0C:7C:5F:2C:40
            X509v3 Authority Key Identifier:
                keyid:C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130332e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:a0:34:90:fa:db:24:92:0c:f4:e0:a6:30:c2:c2:d8:f7:91:
         46:ca:17:42:9b:fe:b8:e2:44:20:84:1c:72:48:b7:27:09:c8:
         47:f9:ab:05:a6:86:b5:8d:d5:6b:46:92:02:d4:6d:71:28:32:
         06:cf:3f:7a:32:07:32:f9:9e:ac:b4:d7:1a:1b:b2:a9:46:3a:
         ac:06:6c:73:be:23:82:84:a1:16:36:c0:86:7d:09:7b:77:92:
         c3:0a:87:8c:9c:fe:d8:85:ac:ec:e8:8b:a9:86:f3:2e:5f:44:
         9a:45:79:43:ef:a8:04:94:e8:52:aa:0c:6b:f6:07:17:8e:de:
         f1:ff:4f:2a:b6:4f:e6:92:10:eb:1f:e4:0d:41:08:7d:8d:f2:
         06:40:64:9a:2d:ed:58:d5:3b:7c:7c:a3:d8:14:e6:76:76:be:
         0a:d3:a7:bb:2d:fb:a7:ae:3c:57:ea:cb:59:17:92:21:47:a5:
         41:7e:51:4b:9f:30:12:da:41:a3:8d:07:b7:50:13:a0:4c:b6:
         f5:24:ed:d2:ed:5d:5f:f9:c8:01:b3:0d:97:e1:c9:e9:94:f2:
         f6:3d:ab:99:13:e0:b3:84:17:ff:7e:9e:e9:b2:9f:8b:59:62:
         4b:03:e3:14:96:54:48:9e:40:6a:52:69:a6:00:db:4a:74:ec:
         5f:ee:6c:fc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeJlIFankCRtHnhIo6PfFLstMP84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzkyRTdCREMwQzg2NjlDODZGQkNDQUU2RjM0MjREQkY2
OUQ3NzU2RDAeFw0yNTA5MjUxMzMwMjJaFw0yNjA5MjQxMzM1MjJaMDMxMTAvBgNV
BAMTKENDNDYxMjk0M0IzMzhCQjgwOUZDOEFGNTdCQTAxRjBDN0M1RjJDNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3RokWWk2k48VxWNV/EhNvEvgV
MaX24hpFHE+yYcXTZAjM3xWyCearZuTf+J1GB2o8DVhjmh+NEeiKzFahz2kh27PM
2sRNlg1y+OqCdR5hii4RHZ9gEPS/eRqwWIOq2t/dOJtYH47eJwdpVYvcvhT9GtfK
4Vtizy+nlNyohY4dUs3t6EJXgQHIPRJerdfVriaeB230U8nMooO5t1ZT8YHkNy0Y
I5BdxfwEiYj6YiFS0HnS7ZnwptoVV40HwAzCZjGsjkmwG1VA+zlJrAN7mBmMk+F1
xLvrrMTsq4rkKVDlU4qSw5SoE7374TYGHnWfw5Lhn/CXrVIjDr7yuIGsF+tLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzEYSlDszi7gJ/Ir1e6AfDHxfLEAwHwYDVR0j
BBgwFoAUyS573AyGachvvMrm80JNv2nXdW0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC9DOTJFN0JEQzBDODY2OUM4NkZCQ0NBRTZGMzQyNERCRjY5RDc3NTZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5MkU3QkRDMEM4NjY5Qzg2
RkJDQ0FFNkYzNDI0REJGNjlENzc1NkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzODM3MmUzNjMxMmUzMTMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzEzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuz1nMA0GCSqGSIb3DQEBCwUAA4IBAQBWoDSQ+tsk
kgz04KYwwsLY95FGyhdCm/644kQghBxySLcnCchH+asFpoa1jdVrRpIC1G1xKDIG
zz96Mgcy+Z6stNcaG7KpRjqsBmxzviOChKEWNsCGfQl7d5LDCoeMnP7Yhazs6Iup
hvMuX0SaRXlD76gElOhSqgxr9gcXjt7x/08qtk/mkhDrH+QNQQh9jfIGQGSaLe1Y
1Tt8fKPYFOZ2dr4K06e7LfunrjxX6stZF5IhR6VBflFLnzAS2kGjjQe3UBOgTLb1
JO3S7V1f+cgBsw2X4cnplPL2PauZE+CzhBf/fp7psp+LWWJLA+MUllRInkBqUmmm
ANtKdOxf7mz8
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:49 2025 by rpki-client