Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136342e302f32322d3232203d3e20323632393839.roa
File:                     3139302e3130332e3136342e302f32322d3232203d3e20323632393839.roa (raw, json)
Hash identifier:          jEv5wiw+EOpgFv9xdAUFr5OwG66Bntj20sxgfGL2Nis=
Subject key identifier:   35:48:ED:C8:96:35:E9:C8:71:67:38:01:6E:4A:7E:AB:F9:B3:B0:B5
Certificate issuer:       /CN=6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8
Certificate serial:       4CD1A4E6DAD2E3624DE0918F7F3400B34A410644
Authority key identifier: 69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136342e302f32322d3232203d3e20323632393839.roa
Signing time:             Tue 07 Oct 2025 17:16:40 +0000
ROA not before:           Tue 07 Oct 2025 17:11:40 +0000
ROA not after:            Tue 06 Oct 2026 17:16:40 +0000
asID:                     262989
IP address blocks:        190.103.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d1:a4:e6:da:d2:e3:62:4d:e0:91:8f:7f:34:00:b3:4a:41:06:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8
        Validity
            Not Before: Oct  7 17:11:40 2025 GMT
            Not After : Oct  6 17:16:40 2026 GMT
        Subject: CN=3548EDC89635E9C8716738016E4A7EABF9B3B0B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:84:fa:4f:0d:d2:c6:8a:9c:2b:58:99:32:f6:
                    16:60:a4:b4:af:02:04:58:ab:55:4e:66:fc:42:12:
                    7b:73:56:c7:84:1e:01:89:f5:53:30:44:b7:37:70:
                    ec:7e:b1:88:79:7b:d6:1c:25:ee:c0:3c:24:5e:d5:
                    fe:44:7a:35:f8:3a:f9:35:b5:7b:9f:d8:5a:1e:d0:
                    62:3d:03:14:ae:49:57:76:6a:c9:c8:59:c6:82:5e:
                    b4:42:e4:d6:06:94:6a:47:59:e3:9d:d2:ab:07:ed:
                    00:5a:11:14:06:d0:f6:fa:53:f6:90:36:2c:70:0d:
                    e4:6f:55:c2:0f:62:b0:93:e7:24:92:71:cd:e9:29:
                    09:86:e0:c6:cd:54:cf:fa:e4:ec:38:a5:b7:b2:4c:
                    f3:a8:50:c7:49:7b:ce:c0:b7:73:3c:8d:6f:44:c7:
                    3d:e6:db:60:e3:5c:d5:81:91:18:59:16:5c:2a:10:
                    15:60:12:6c:db:34:bd:dd:ad:d6:c3:be:aa:08:10:
                    54:67:00:6d:40:93:06:c3:30:26:24:2d:b3:23:ed:
                    66:17:ea:b3:ae:96:25:08:9b:f6:17:72:03:2d:d2:
                    3e:bd:0d:c2:32:10:f7:b5:6a:bf:5c:fe:1a:8f:f5:
                    93:e3:3f:d6:39:99:b7:8c:9f:45:88:96:ff:ab:b0:
                    04:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:48:ED:C8:96:35:E9:C8:71:67:38:01:6E:4A:7E:AB:F9:B3:B0:B5
            X509v3 Authority Key Identifier:
                keyid:69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136342e302f32322d3232203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:08:68:c0:28:57:ac:d8:75:44:c3:49:7a:74:ff:33:a0:1e:
         fb:21:44:28:54:4a:b1:ca:92:7f:85:17:d3:92:7f:8e:2a:2b:
         6a:a4:99:84:3f:df:f1:8f:e9:3d:7d:4e:7e:c2:73:20:22:70:
         36:92:a8:60:76:0b:94:b8:82:a3:38:16:f7:37:35:de:0a:55:
         90:15:ce:1d:d5:3a:d5:81:30:56:9c:ee:4f:22:d5:3f:f6:35:
         c9:93:d1:3f:88:0b:ec:c5:e6:ec:fc:81:e0:16:7b:3e:6a:0a:
         36:fe:29:15:ed:9c:64:f6:95:7a:11:b3:08:72:6f:38:d4:a7:
         d7:0f:41:e1:16:72:fb:5f:46:3a:a3:d8:05:c0:6d:58:f0:61:
         14:8c:af:6c:0e:12:a4:9d:33:cc:45:72:cf:76:28:78:84:35:
         9f:22:9d:27:67:c2:14:dc:f8:61:79:d2:d3:7f:c4:2a:52:7c:
         2c:de:2d:26:62:8b:c7:24:cb:d6:c5:d3:3b:e3:51:8f:7f:76:
         83:7b:e5:cf:73:73:85:c7:f9:fa:5a:28:0c:2b:0a:bf:b1:4f:
         65:f9:2c:1b:0e:78:75:d0:d3:20:06:ec:80:44:00:79:e3:e1:
         9f:d9:c9:63:48:56:fd:47:8f:67:33:66:f3:13:f8:2c:4d:fa:
         ae:72:5d:1e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTNGk5trS42JN4JGPfzQAs0pBBkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk2M0EyQjMzM0EwM0YyMEFEREE0RjBDQTJDMzdBQUZC
MDI2OEFCODAeFw0yNTEwMDcxNzExNDBaFw0yNjEwMDYxNzE2NDBaMDMxMTAvBgNV
BAMTKDM1NDhFREM4OTYzNUU5Qzg3MTY3MzgwMTZFNEE3RUFCRjlCM0IwQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCahPpPDdLGipwrWJky9hZgpLSv
AgRYq1VOZvxCEntzVseEHgGJ9VMwRLc3cOx+sYh5e9YcJe7APCRe1f5EejX4Ovk1
tXuf2Foe0GI9AxSuSVd2asnIWcaCXrRC5NYGlGpHWeOd0qsH7QBaERQG0Pb6U/aQ
NixwDeRvVcIPYrCT5ySScc3pKQmG4MbNVM/65Ow4pbeyTPOoUMdJe87At3M8jW9E
xz3m22DjXNWBkRhZFlwqEBVgEmzbNL3drdbDvqoIEFRnAG1AkwbDMCYkLbMj7WYX
6rOuliUIm/YXcgMt0j69DcIyEPe1ar9c/hqP9ZPjP9Y5mbeMn0WIlv+rsATFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUNUjtyJY16chxZzgBbkp+q/mzsLUwHwYDVR0j
BBgwFoAUaWOiszOgPyCt2k8MosN6r7AmirgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHYxQXJrZFBjaU1XTlZGTGt4NnhGd3NjYWIxUTNqSEp3QlJIZ1VhUkVx
cU0vMC82OTYzQTJCMzMzQTAzRjIwQUREQTRGMENBMkMzN0FBRkIwMjY4QUI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NjNBMkIzMzNBMDNGMjBB
RERBNEYwQ0EyQzM3QUFGQjAyNjhBQjguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR2MUFya2RQY2lNV05WRkxreDZ4RndzY2FiMVEzakhKd0JSSGdVYVJFcXFNLzAv
MzEzOTMwMmUzMTMwMzMyZTMxMzYzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM5MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5npDANBgkqhkiG9w0BAQsFAAOCAQEAmQho
wChXrNh1RMNJenT/M6Ae+yFEKFRKscqSf4UX05J/jioraqSZhD/f8Y/pPX1OfsJz
ICJwNpKoYHYLlLiCozgW9zc13gpVkBXOHdU61YEwVpzuTyLVP/Y1yZPRP4gL7MXm
7PyB4BZ7PmoKNv4pFe2cZPaVehGzCHJvONSn1w9B4RZy+19GOqPYBcBtWPBhFIyv
bA4SpJ0zzEVyz3YoeIQ1nyKdJ2fCFNz4YXnS03/EKlJ8LN4tJmKLxyTL1sXTO+NR
j392g3vlz3Nzhcf5+looDCsKv7FPZfksGw54ddDTIAbsgEQAeePhn9nJY0hW/UeP
ZzNm8xP4LE36rnJdHg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:41 2025 by rpki-client