Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3139302e3130392e38302e302f32322d3234203d3e203532393133.roa
File:                     3139302e3130392e38302e302f32322d3234203d3e203532393133.roa (raw, json)
Hash identifier:          cY/EGISIvDqPzArLRiXiuQfyFMimoOe3BNRGHIlormE=
Subject key identifier:   11:0E:7D:17:67:26:13:05:B8:5A:7A:3D:11:71:06:6C:AC:AA:27:72
Certificate issuer:       /CN=60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE
Certificate serial:       71B5F2055C8F3EBAF5C844EAECBB2894FD1D3B54
Authority key identifier: 60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3139302e3130392e38302e302f32322d3234203d3e203532393133.roa
Signing time:             Thu 11 Sep 2025 16:09:14 +0000
ROA not before:           Thu 11 Sep 2025 16:04:14 +0000
ROA not after:            Thu 10 Sep 2026 16:09:14 +0000
asID:                     52913
IP address blocks:        190.109.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b5:f2:05:5c:8f:3e:ba:f5:c8:44:ea:ec:bb:28:94:fd:1d:3b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE
        Validity
            Not Before: Sep 11 16:04:14 2025 GMT
            Not After : Sep 10 16:09:14 2026 GMT
        Subject: CN=110E7D1767261305B85A7A3D1171066CACAA2772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f3:80:29:b5:9f:86:cc:64:97:1e:6e:b1:65:
                    00:cb:80:fd:f0:27:05:59:b6:a8:81:90:4d:d9:dd:
                    39:6b:bc:a9:94:1a:c1:a8:8a:57:78:5a:8c:0c:12:
                    73:62:1f:a2:ce:b8:d7:f7:1b:40:99:ce:e5:37:f9:
                    d2:5b:81:d4:6f:75:7d:63:45:7e:66:39:1a:54:ae:
                    04:d7:87:87:5c:f0:64:0f:23:ef:c1:03:25:31:f3:
                    af:cc:8c:ab:c0:55:0c:4e:d9:84:50:67:2b:5a:d1:
                    b3:2e:8a:7a:2f:68:64:38:a4:70:77:92:25:ca:5d:
                    64:3f:3f:05:2c:f2:f3:c8:e5:34:3f:97:84:16:20:
                    eb:79:d1:86:d1:b1:88:89:9c:c8:33:b6:c6:ba:32:
                    aa:3d:ef:05:2f:e2:32:27:52:18:a4:dd:4d:38:aa:
                    02:46:50:03:2e:cf:50:9a:91:24:a2:47:fe:ac:22:
                    3c:12:68:f0:ab:dd:cc:1d:dd:a5:0c:1e:4b:6e:5f:
                    ce:46:30:78:18:06:ee:25:af:1e:bc:c2:ee:cd:ff:
                    84:15:ca:50:41:83:a3:a9:46:0a:f4:7f:e6:36:82:
                    b3:d3:f5:fb:d5:89:0e:ee:01:01:ac:4f:62:1c:8b:
                    00:44:91:01:1c:05:50:05:33:63:f1:a9:80:ae:ac:
                    a3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0E:7D:17:67:26:13:05:B8:5A:7A:3D:11:71:06:6C:AC:AA:27:72
            X509v3 Authority Key Identifier:
                keyid:60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3139302e3130392e38302e302f32322d3234203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:b0:14:8d:6e:82:0d:0d:f9:2b:17:3f:e5:57:21:52:ba:d2:
         40:58:09:86:11:de:b6:01:e5:8e:2c:11:96:80:16:1a:0a:0a:
         e0:24:8c:91:b0:42:60:f2:1f:41:00:72:cd:9a:05:02:7d:af:
         3e:ba:9e:52:46:fa:8c:1e:fd:9d:81:e0:0f:4b:95:57:30:10:
         5c:53:d9:98:b1:b7:cd:f0:af:3e:a6:4c:8e:53:b8:15:06:da:
         7f:11:5b:a9:3e:87:90:70:be:8b:7b:ab:a2:09:59:2a:b2:20:
         f1:07:ae:98:d7:fd:07:ae:ae:2c:fd:27:9c:14:8f:5f:48:4e:
         5a:ca:3c:4b:6a:4a:a5:0a:1f:bb:de:c1:2d:28:77:cc:1a:eb:
         d0:91:2a:9e:d0:c0:9f:07:2e:c4:78:ac:f5:06:7a:1c:36:cc:
         15:f3:76:d1:54:3c:c8:6d:8a:9a:e5:49:59:e3:24:8c:44:75:
         8c:2b:a7:4d:eb:99:85:54:a0:c1:6a:d8:a5:97:05:20:ca:d3:
         32:b6:14:fc:ad:53:eb:71:4b:dd:34:d8:b4:2c:5c:57:1a:7a:
         c5:8b:f6:3c:56:e4:ea:c1:91:45:b6:14:58:5b:4b:6e:91:22:
         ff:88:41:0a:40:37:f5:8d:41:e6:b7:9e:c5:0b:21:5a:f0:54:
         ac:07:d4:b8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcbXyBVyPPrr1yETq7LsolP0dO1QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBDQjFBOEZFQ0EzQkE3OTg0QUJEQzAyQURERjMyRTNE
MEI5RkFDRTAeFw0yNTA5MTExNjA0MTRaFw0yNjA5MTAxNjA5MTRaMDMxMTAvBgNV
BAMTKDExMEU3RDE3NjcyNjEzMDVCODVBN0EzRDExNzEwNjZDQUNBQTI3NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw84AptZ+GzGSXHm6xZQDLgP3w
JwVZtqiBkE3Z3TlrvKmUGsGoild4WowMEnNiH6LOuNf3G0CZzuU3+dJbgdRvdX1j
RX5mORpUrgTXh4dc8GQPI+/BAyUx86/MjKvAVQxO2YRQZyta0bMuinovaGQ4pHB3
kiXKXWQ/PwUs8vPI5TQ/l4QWIOt50YbRsYiJnMgztsa6Mqo97wUv4jInUhik3U04
qgJGUAMuz1CakSSiR/6sIjwSaPCr3cwd3aUMHktuX85GMHgYBu4lrx68wu7N/4QV
ylBBg6OpRgr0f+Y2grPT9fvViQ7uAQGsT2IciwBEkQEcBVAFM2PxqYCurKPZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEQ59F2cmEwW4Wno9EXEGbKyqJ3IwHwYDVR0j
BBgwFoAUYMsaj+yjunmEq9wCrd8y49C5+s4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1NWd1JheEQzU3dacEV0dUxkRk1MY056d2FDM0ZCdXJXVUFOZFc3bTRM
TnIvMC82MENCMUE4RkVDQTNCQTc5ODRBQkRDMDJBRERGMzJFM0QwQjlGQUNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwQ0IxQThGRUNBM0JBNzk4
NEFCREMwMkFEREYzMkUzRDBCOUZBQ0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNTVndSYXhEM1N3WnBFdHVMZEZNTGNOendhQzNGQnVyV1VBTmRXN200TE5yLzAv
MzEzOTMwMmUzMTMwMzkyZTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzkzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvm1QMA0GCSqGSIb3DQEBCwUAA4IBAQABsBSNboIN
DfkrFz/lVyFSutJAWAmGEd62AeWOLBGWgBYaCgrgJIyRsEJg8h9BAHLNmgUCfa8+
up5SRvqMHv2dgeAPS5VXMBBcU9mYsbfN8K8+pkyOU7gVBtp/EVupPoeQcL6Le6ui
CVkqsiDxB66Y1/0Hrq4s/SecFI9fSE5ayjxLakqlCh+73sEtKHfMGuvQkSqe0MCf
By7EeKz1BnocNswV83bRVDzIbYqa5UlZ4ySMRHWMK6dN65mFVKDBatillwUgytMy
thT8rVPrcUvdNNi0LFxXGnrFi/Y8VuTqwZFFthRYW0tukSL/iEEKQDf1jUHmt57F
CyFa8FSsB9S4
-----END CERTIFICATE-----
Generated at Tue Oct 21 07:59:45 2025 by rpki-client