Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136312e302f32342d3234203d3e20323632393839.roa
File:                     3139302e3130332e3136312e302f32342d3234203d3e20323632393839.roa (raw, json)
Hash identifier:          e11bbYsOCzC8weLfq1sAYT9FMe30JDlFb/Dzh2LLSYA=
Subject key identifier:   C3:6E:8E:F0:E2:29:A0:63:65:D0:6E:A9:D3:09:7E:AF:97:20:C9:5D
Certificate issuer:       /CN=6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8
Certificate serial:       280B0C3F33CBD7F06E6DDF92A8CCF36973B8B4C9
Authority key identifier: 69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136312e302f32342d3234203d3e20323632393839.roa
Signing time:             Tue 07 Oct 2025 17:16:37 +0000
ROA not before:           Tue 07 Oct 2025 17:11:37 +0000
ROA not after:            Tue 06 Oct 2026 17:16:37 +0000
asID:                     262989
IP address blocks:        190.103.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0b:0c:3f:33:cb:d7:f0:6e:6d:df:92:a8:cc:f3:69:73:b8:b4:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8
        Validity
            Not Before: Oct  7 17:11:37 2025 GMT
            Not After : Oct  6 17:16:37 2026 GMT
        Subject: CN=C36E8EF0E229A06365D06EA9D3097EAF9720C95D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cd:1c:74:46:20:94:d1:6b:0f:68:be:af:85:
                    4d:3c:ea:3c:25:2f:b7:20:3e:22:57:02:cd:54:d5:
                    49:d4:8e:82:67:1e:1a:9b:f3:20:1a:29:c6:60:dc:
                    63:f6:32:d9:66:a8:03:ea:0a:f1:a7:8a:f4:17:12:
                    1f:ac:34:8c:42:9e:10:56:ca:8d:ff:9e:81:cc:3a:
                    70:0c:9d:08:d6:91:07:51:d8:93:e6:62:d3:8d:7d:
                    e9:e7:0d:c3:42:4a:56:e3:ca:ba:db:45:7b:57:d1:
                    e8:64:52:64:71:ca:94:cb:3e:83:f4:ac:2a:15:ef:
                    b1:12:cb:19:05:cc:3c:c9:e0:8e:58:e4:35:fc:84:
                    a9:aa:9b:84:51:90:80:51:b7:e5:d1:32:f1:a4:28:
                    09:fa:a0:fc:a9:81:9f:c5:a3:56:c3:3b:7c:88:07:
                    e6:da:db:5e:97:9a:75:74:cd:d7:21:bb:0e:f2:6d:
                    0c:e8:ac:77:3d:96:c4:44:01:5e:65:5d:62:d5:9e:
                    a6:b3:ab:dd:bc:17:7a:b6:3a:b2:82:92:ed:5d:ae:
                    3b:c6:7d:95:67:d3:01:4c:b0:85:a7:5c:56:84:d7:
                    76:89:d1:92:95:65:35:b8:3f:f5:4c:66:f8:fe:d2:
                    fb:b0:16:55:83:0c:dd:b5:8e:38:98:23:4c:6d:e0:
                    69:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6E:8E:F0:E2:29:A0:63:65:D0:6E:A9:D3:09:7E:AF:97:20:C9:5D
            X509v3 Authority Key Identifier:
                keyid:69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136312e302f32342d3234203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:3c:4c:5a:3d:22:f7:01:20:30:cf:9d:f1:c8:1e:e4:b6:30:
         75:4a:70:dd:ae:32:ff:1f:df:e5:9b:68:df:86:3e:64:40:04:
         bd:c9:4d:f2:58:94:e6:75:cc:2e:1b:e6:09:c9:db:fc:30:f3:
         ac:38:d3:bd:7a:09:6b:86:5b:b7:26:0e:47:67:e0:60:6c:18:
         7a:36:ae:b3:68:f0:d8:3d:ba:1a:a7:64:98:01:64:2f:0a:10:
         d1:6d:60:9a:67:35:83:4f:d8:40:55:3e:58:d1:71:5c:2a:d8:
         ee:8d:af:3d:c5:d7:79:a7:97:53:6e:11:ea:95:6e:ee:ab:54:
         72:ab:18:e1:59:a8:ed:b0:3e:41:6a:10:21:90:93:bd:5c:a4:
         31:c2:e9:49:7c:74:f3:22:ff:d6:1d:f9:1f:9a:d1:8a:4e:c0:
         ab:3e:77:e8:2d:da:57:3f:f3:d9:c3:ca:b7:d1:dc:4b:6b:78:
         84:d1:ea:f8:cb:e3:2c:b0:98:15:20:64:4e:a0:d6:e4:f0:9f:
         45:78:24:e2:cc:19:19:27:79:42:5a:48:8a:25:73:e8:48:2d:
         c0:12:5b:04:50:e8:49:74:2c:28:55:39:e3:94:05:b8:40:1a:
         c7:93:b5:bb:a2:3c:76:ef:f0:2a:ea:c9:28:f4:ff:ea:7f:43:
         cb:f9:a1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:17 2025 by rpki-client