Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f32302d3230203d3e203238323730.roa
File:                     3137372e37352e3139322e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          9IdiidV1YgqbZrkzNVScgJUd+VwX54IR5SJ8Jd3wpcs=
Subject key identifier:   A1:DB:5D:00:39:4B:49:AB:D4:05:C7:50:1C:B3:8B:26:00:83:42:52
Certificate issuer:       /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Certificate serial:       3785860E25E02BA7C7241018FD124B9136029654
Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f32302d3230203d3e203238323730.roa
Signing time:             Sat 18 Oct 2025 23:01:01 +0000
ROA not before:           Sat 18 Oct 2025 22:56:01 +0000
ROA not after:            Sat 17 Oct 2026 23:01:01 +0000
asID:                     28270
IP address blocks:        177.75.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:85:86:0e:25:e0:2b:a7:c7:24:10:18:fd:12:4b:91:36:02:96:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
        Validity
            Not Before: Oct 18 22:56:01 2025 GMT
            Not After : Oct 17 23:01:01 2026 GMT
        Subject: CN=A1DB5D00394B49ABD405C7501CB38B2600834252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1c:2f:a7:de:69:e0:15:b8:81:bf:3e:57:eb:
                    69:19:fa:ef:1c:b1:92:55:02:b1:3d:ff:9a:39:e4:
                    7e:6e:94:17:0a:33:12:3a:c6:1f:7f:98:dd:94:61:
                    9c:b3:73:ff:6c:ce:87:70:3f:9c:ac:e5:38:dd:9f:
                    db:70:59:e8:e6:5b:7c:c7:22:07:a0:c3:a7:91:3f:
                    58:b2:46:7a:33:04:95:cc:b4:4f:01:3b:c4:9e:71:
                    b0:aa:bb:89:df:53:77:89:11:a5:07:68:e8:7a:19:
                    7f:9c:7e:c0:cc:6d:29:a6:20:af:82:b6:c8:d9:e2:
                    5c:35:97:47:0e:06:96:e2:23:2d:10:13:0b:68:64:
                    48:72:ef:f0:cb:99:8a:2a:c1:49:01:45:25:ef:fa:
                    86:b9:14:8e:96:31:f6:08:eb:84:c9:ec:f3:d7:5d:
                    81:f4:ed:19:73:3d:ab:c4:2e:fe:d9:89:7f:0e:3c:
                    d1:79:05:1a:40:13:d9:e5:8d:64:5e:dc:a0:30:a0:
                    c8:22:67:3b:c9:ca:b2:1a:0e:ec:e4:1e:0b:20:dc:
                    79:95:ac:fd:ed:b3:47:ec:4e:09:23:bf:ba:8b:23:
                    01:73:50:fd:88:a9:77:e9:16:bf:07:9a:e8:8f:4b:
                    cb:4b:40:5d:f4:8f:d4:4f:c2:91:8c:ca:35:2a:f8:
                    28:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DB:5D:00:39:4B:49:AB:D4:05:C7:50:1C:B3:8B:26:00:83:42:52
            X509v3 Authority Key Identifier:
                keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:bb:96:c4:ac:af:02:a9:3a:ef:1e:08:da:58:19:93:4f:f3:
         3d:2f:46:82:f1:c1:78:96:21:56:20:ce:54:72:39:74:a5:b8:
         72:54:3e:1c:4f:85:4b:b1:e4:84:26:94:f5:51:66:55:5d:33:
         be:14:1b:51:7a:ab:a3:3b:7d:71:4d:43:8c:3e:79:22:6c:11:
         63:a2:bc:1b:a0:ea:e8:d2:0b:a8:84:fc:ea:7f:4a:2f:91:c2:
         cf:d2:d3:ce:08:66:cc:f8:c8:a8:e6:18:ce:a8:de:c4:89:6a:
         75:39:70:83:2d:37:43:34:88:42:8e:81:4d:b9:f3:fd:25:e2:
         3c:c4:9b:41:97:0a:75:83:16:84:2c:70:4d:ca:95:69:f5:7c:
         ef:06:b4:b1:53:28:d9:10:f5:d1:09:64:12:2d:90:77:dd:c1:
         04:51:23:93:0b:c8:50:5e:95:24:9a:37:c7:03:49:47:59:db:
         a2:3c:f8:ca:f4:e7:75:05:8e:4c:34:23:8c:03:fb:4f:30:63:
         8b:14:f8:e7:f9:f5:e7:ae:b0:0c:3b:3e:97:48:c9:2d:e8:48:
         52:ca:53:00:ea:a0:24:c3:db:a5:20:31:ba:29:c7:32:8a:a2:
         5a:69:ca:1a:f9:c0:97:3a:1c:ac:b1:1a:05:58:e7:07:75:99:
         c3:ec:30:ad
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUN4WGDiXgK6fHJBAY/RJLkTYCllQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy
RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDFaFw0yNjEwMTcyMzAxMDFaMDMxMTAvBgNV
BAMTKEExREI1RDAwMzk0QjQ5QUJENDA1Qzc1MDFDQjM4QjI2MDA4MzQyNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiHC+n3mngFbiBvz5X62kZ+u8c
sZJVArE9/5o55H5ulBcKMxI6xh9/mN2UYZyzc/9szodwP5ys5Tjdn9twWejmW3zH
Igegw6eRP1iyRnozBJXMtE8BO8SecbCqu4nfU3eJEaUHaOh6GX+cfsDMbSmmIK+C
tsjZ4lw1l0cOBpbiIy0QEwtoZEhy7/DLmYoqwUkBRSXv+oa5FI6WMfYI64TJ7PPX
XYH07RlzPavELv7ZiX8OPNF5BRpAE9nljWRe3KAwoMgiZzvJyrIaDuzkHgsg3HmV
rP3ts0fsTgkjv7qLIwFzUP2IqXfpFr8HmuiPS8tLQF30j9RPwpGMyjUq+CiFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUodtdADlLSavUBcdQHLOLJgCDQlIwHwYDVR0j
BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3
QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNzM3MmUzNzM1MmUzMTM5MzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM4
MzIzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsUvAMA0GCSqGSIb3DQEBCwUAA4IBAQAju5bErK8C
qTrvHgjaWBmTT/M9L0aC8cF4liFWIM5Ucjl0pbhyVD4cT4VLseSEJpT1UWZVXTO+
FBtRequjO31xTUOMPnkibBFjorwboOro0guohPzqf0ovkcLP0tPOCGbM+Mio5hjO
qN7EiWp1OXCDLTdDNIhCjoFNufP9JeI8xJtBlwp1gxaELHBNypVp9XzvBrSxUyjZ
EPXRCWQSLZB33cEEUSOTC8hQXpUkmjfHA0lHWduiPPjK9Od1BY5MNCOMA/tPMGOL
FPjn+fXnrrAMOz6XSMkt6EhSylMA6qAkw9ulIDG6KccyiqJaacoa+cCXOhyssRoF
WOcHdZnD7DCt
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:49:17 2025 by rpki-client