Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS262794.roa
File:                     AS262794.roa (raw, json)
Hash identifier:          /oL973pimhXaIWrh3ZHppSptZmdpPE//upu/vrJLhQw=
Subject key identifier:   40:35:11:0C:9E:78:48:9B:B4:A2:AD:47:15:E1:F5:EA:5E:D4:BF:9C
Certificate issuer:       /CN=15A0CACB6F5D6B45006136392255670B81DB66F8
Certificate serial:       36F69287E79EB199925A8F5B3A6068EC038FA7F2
Authority key identifier: 15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS262794.roa
Signing time:             Mon 29 Sep 2025 11:46:53 +0000
ROA not before:           Mon 29 Sep 2025 11:41:53 +0000
ROA not after:            Mon 28 Sep 2026 11:46:53 +0000
asID:                     262794
IP address blocks:        143.255.244.0/22 maxlen: 24
                          168.195.84.0/22 maxlen: 24
                          201.76.112.0/20 maxlen: 24
                          2804:2b6c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f6:92:87:e7:9e:b1:99:92:5a:8f:5b:3a:60:68:ec:03:8f:a7:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A0CACB6F5D6B45006136392255670B81DB66F8
        Validity
            Not Before: Sep 29 11:41:53 2025 GMT
            Not After : Sep 28 11:46:53 2026 GMT
        Subject: CN=4035110C9E78489BB4A2AD4715E1F5EA5ED4BF9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:19:87:24:03:d5:5a:65:f3:b6:eb:8d:48:
                    4c:96:6c:9e:ab:0e:1f:2d:d5:cb:c5:e0:11:24:29:
                    d2:2d:d3:11:77:c6:4e:9b:ec:f9:e1:da:b9:9e:8b:
                    06:5a:a2:94:b7:5d:f7:34:45:b0:3e:54:ff:d3:fa:
                    e1:a5:32:f6:a1:99:3a:2b:d0:ed:3a:e6:9e:d1:7b:
                    58:0d:56:51:58:d4:7e:3e:b3:5c:be:85:70:94:9e:
                    34:3d:2e:d4:6d:b4:66:da:0e:53:0a:fd:fb:66:69:
                    cc:80:e2:d4:bb:60:0f:36:ca:e0:a7:a5:cf:a5:93:
                    c3:78:fc:e0:22:1e:f1:b2:8d:77:07:8c:f6:19:46:
                    fe:b3:c8:ae:e1:5e:b4:88:39:e3:f8:ff:0b:23:9a:
                    74:2b:e7:02:5a:2e:12:4b:e6:a9:da:95:7c:81:c9:
                    1f:9b:a9:54:5b:a8:9b:43:c5:cc:77:b8:0c:a7:13:
                    ee:a9:05:fe:9e:a8:c4:fe:90:d0:66:68:e8:6e:77:
                    94:0f:f4:4a:5a:3a:f4:b7:51:09:af:52:ab:d1:55:
                    43:40:7e:46:2d:e4:4f:d4:ae:ab:d5:d7:02:d9:36:
                    8e:25:c8:97:31:4d:10:3d:f1:4c:e3:55:47:f4:a8:
                    38:6c:9b:b0:40:58:1e:66:cf:7a:54:81:cf:43:32:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:35:11:0C:9E:78:48:9B:B4:A2:AD:47:15:E1:F5:EA:5E:D4:BF:9C
            X509v3 Authority Key Identifier:
                keyid:15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS262794.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.244.0/22
                  168.195.84.0/22
                  201.76.112.0/20
                IPv6:
                  2804:2b6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:e0:de:83:59:13:50:f1:b3:97:3b:1a:1c:7c:ab:64:86:b2:
         50:81:f7:03:8a:b1:79:3c:77:77:38:4f:8a:85:76:22:95:59:
         61:22:4b:01:c3:59:11:e6:2e:8d:dc:2d:69:6b:90:9f:fa:dc:
         5f:cc:6a:73:87:88:8f:a9:7a:68:a1:30:fe:bf:fb:57:ee:4d:
         86:b8:c2:07:97:c1:6a:f3:8a:7c:5c:88:b6:9b:fa:02:6e:9c:
         49:64:cb:e7:93:d0:12:d5:ed:40:75:52:49:a6:d2:f1:63:7c:
         b2:73:d2:48:fd:cc:f7:04:7c:e5:21:f9:84:56:da:9e:61:98:
         75:31:d2:6c:a3:ca:8c:13:c0:3c:08:b3:2f:31:1b:15:e7:fb:
         75:dd:32:ce:f4:ac:8b:ef:b1:b3:cd:71:ff:ad:bd:6a:39:95:
         0b:69:5d:87:92:e5:df:9b:03:9f:50:48:df:d4:d9:8d:48:d4:
         b7:f9:ae:3f:02:ca:8d:0d:37:c8:ef:c9:1d:2f:ec:fb:e8:3d:
         31:84:c1:ae:7c:c6:71:ad:84:4e:9f:c6:c9:03:e5:49:94:30:
         3e:0c:7c:df:9e:ff:1c:df:39:9d:44:a0:bc:48:95:f6:a0:a0:
         f6:df:e2:ac:d4:7d:ad:d9:1d:81:43:30:ec:a8:fa:20:ea:2f:
         c5:f1:c8:19
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUNvaSh+eesZmSWo9bOmBo7AOPp/IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVBMENBQ0I2RjVENkI0NTAwNjEzNjM5MjI1NTY3MEI4
MURCNjZGODAeFw0yNTA5MjkxMTQxNTNaFw0yNjA5MjgxMTQ2NTNaMDMxMTAvBgNV
BAMTKDQwMzUxMTBDOUU3ODQ4OUJCNEEyQUQ0NzE1RTFGNUVBNUVENEJGOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCodxmHJAPVWmXztuuNSEyWbJ6r
Dh8t1cvF4BEkKdIt0xF3xk6b7Pnh2rmeiwZaopS3Xfc0RbA+VP/T+uGlMvahmTor
0O065p7Re1gNVlFY1H4+s1y+hXCUnjQ9LtRttGbaDlMK/ftmacyA4tS7YA82yuCn
pc+lk8N4/OAiHvGyjXcHjPYZRv6zyK7hXrSIOeP4/wsjmnQr5wJaLhJL5qnalXyB
yR+bqVRbqJtDxcx3uAynE+6pBf6eqMT+kNBmaOhud5QP9EpaOvS3UQmvUqvRVUNA
fkYt5E/UrqvV1wLZNo4lyJcxTRA98UzjVUf0qDhsm7BAWB5mz3pUgc9DMrBpAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUQDURDJ54SJu0oq1HFeH16l7Uv5wwHwYDVR0j
BBgwFoAUFaDKy29da0UAYTY5IlVnC4HbZvgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU
Y3kvNC8xNUEwQ0FDQjZGNUQ2QjQ1MDA2MTM2MzkyMjU1NjcwQjgxREI2NkY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1QTBDQUNCNkY1RDZCNDUw
MDYxMzYzOTIyNTU2NzBCODFEQjY2RjguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr
BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK
NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS80L0FTMjYy
Nzk0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/
BCswKTAYBAIAATASAwQCj//0AwQCqMNUAwQEyUxwMA0EAgACMAcDBQAoBCtsMA0G
CSqGSIb3DQEBCwUAA4IBAQB64N6DWRNQ8bOXOxocfKtkhrJQgfcDirF5PHd3OE+K
hXYilVlhIksBw1kR5i6N3C1pa5Cf+txfzGpzh4iPqXpooTD+v/tX7k2GuMIHl8Fq
84p8XIi2m/oCbpxJZMvnk9AS1e1AdVJJptLxY3yyc9JI/cz3BHzlIfmEVtqeYZh1
MdJso8qME8A8CLMvMRsV5/t13TLO9KyL77GzzXH/rb1qOZULaV2HkuXfmwOfUEjf
1NmNSNS3+a4/AsqNDTfI78kdL+z76D0xhMGufMZxrYROn8bJA+VJlDA+DHzfnv8c
3zmdRKC8SJX2oKD23+Ks1H2t2R2BQzDsqPog6i/F8cgZ
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:25 2025 by rpki-client