Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136322e302f32342d3234203d3e20323632393839.roa
File:                     3139302e3130332e3136322e302f32342d3234203d3e20323632393839.roa (raw, json)
Hash identifier:          0sf6fJBN3kcyGfXQqVki3+8Xk6QAdyQuoPDVR9Nhw1A=
Subject key identifier:   8D:23:92:76:B0:46:46:37:E7:09:B2:C6:FB:F6:89:CB:BC:F7:9C:5B
Certificate issuer:       /CN=6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8
Certificate serial:       4DE8810DDB77C5040BCCA82D9876BBD579864AB1
Authority key identifier: 69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136322e302f32342d3234203d3e20323632393839.roa
Signing time:             Tue 07 Oct 2025 17:16:42 +0000
ROA not before:           Tue 07 Oct 2025 17:11:42 +0000
ROA not after:            Tue 06 Oct 2026 17:16:42 +0000
asID:                     262989
IP address blocks:        190.103.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e8:81:0d:db:77:c5:04:0b:cc:a8:2d:98:76:bb:d5:79:86:4a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8
        Validity
            Not Before: Oct  7 17:11:42 2025 GMT
            Not After : Oct  6 17:16:42 2026 GMT
        Subject: CN=8D239276B0464637E709B2C6FBF689CBBCF79C5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5f:81:35:04:64:94:27:ad:ba:df:0b:a8:02:
                    e2:f8:7d:d7:53:3b:b0:eb:bb:8e:a6:e9:9c:e1:dd:
                    e8:78:4a:00:a2:f0:9e:dc:19:0d:3a:01:89:31:98:
                    bb:33:ee:f4:1d:e3:21:3c:c7:ad:ce:b3:3f:0e:4a:
                    4f:8b:2a:c2:48:41:42:8a:d4:d8:96:d7:52:12:70:
                    92:43:36:6e:b7:84:36:ad:6a:da:4f:4c:7f:24:c9:
                    0d:3d:4e:9b:9e:bb:4e:72:4f:71:d5:e4:f5:7c:0d:
                    ae:be:1e:7c:c7:8d:dd:9f:3f:43:23:cb:b2:f6:b7:
                    00:07:40:e4:0c:c3:1c:f8:d3:6a:55:04:24:df:2f:
                    56:53:11:e2:ea:be:cd:c1:a2:10:b9:12:18:fe:c8:
                    8f:70:02:96:ae:a0:bb:99:a7:00:a5:2d:60:3a:53:
                    40:c5:6e:fa:f0:d6:5c:99:72:e8:28:06:fb:a9:28:
                    b2:91:f2:40:99:78:70:2f:29:bb:a5:18:c8:a1:de:
                    55:5f:b0:27:72:1f:cc:5b:33:cf:03:f6:0c:83:d6:
                    d3:ef:5e:12:6a:79:82:5e:29:5d:bf:6a:49:5b:d5:
                    4b:5c:ac:8d:d6:a8:c5:ee:e4:cb:08:cb:71:82:4f:
                    b1:df:b4:e9:5a:e6:d1:23:3f:d9:2e:d9:da:62:f8:
                    79:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:23:92:76:B0:46:46:37:E7:09:B2:C6:FB:F6:89:CB:BC:F7:9C:5B
            X509v3 Authority Key Identifier:
                keyid:69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136322e302f32342d3234203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e9:80:50:8e:b7:89:02:32:d3:b6:07:f3:24:37:ba:e2:9c:3e:
         3a:d3:84:d1:36:2e:5d:0f:c3:75:7b:a0:be:98:63:40:09:93:
         04:d0:c8:78:bb:20:49:48:47:78:8a:df:15:8f:58:c4:92:c6:
         2f:d0:b6:af:a7:a5:d0:3e:de:de:94:fb:d0:2c:53:a2:9b:64:
         95:93:e5:01:02:54:e0:f6:14:d0:05:73:c0:b2:89:9e:62:86:
         60:7f:2c:86:b7:4d:5b:e1:27:8c:39:5f:8f:dc:b3:dc:6e:bd:
         b7:0f:c1:82:2c:08:08:2d:db:69:c9:42:f2:36:fb:6d:8f:9e:
         d0:86:a5:92:16:74:6e:00:10:88:7c:74:08:20:8a:85:85:8c:
         a6:1e:04:f8:6b:5d:f0:d0:d5:bd:74:cd:cd:92:44:68:1b:db:
         03:34:45:a2:b5:4b:9e:03:81:a4:d0:27:04:36:f9:a8:4f:7c:
         cb:9b:0a:cf:df:c3:77:65:87:f4:e8:df:35:a8:b3:cd:e4:10:
         0a:35:63:51:40:92:3a:4c:d9:ea:90:19:75:f0:ca:a9:4e:0a:
         a5:88:31:e7:7c:e0:7c:a7:41:2b:1a:1a:38:93:27:54:24:00:
         ea:51:94:22:f5:32:fe:12:c7:11:9e:92:bb:5f:0e:74:a8:78:
         f1:ad:1d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:11 2025 by rpki-client