Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136392e302f32342d3234203d3e20323632393839.roa
File:                     3139302e3130332e3136392e302f32342d3234203d3e20323632393839.roa (raw, json)
Hash identifier:          wEP8od6IIe7v+szfzMrN677siItZdL8nrMO4tVHUufs=
Subject key identifier:   97:CF:68:C6:63:CF:AF:53:10:BF:15:28:4B:95:72:FB:89:66:9B:A4
Certificate issuer:       /CN=6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8
Certificate serial:       695FBC800C55ADFA309AEA0CC887E8D225EA7309
Authority key identifier: 69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136392e302f32342d3234203d3e20323632393839.roa
Signing time:             Tue 07 Oct 2025 17:16:41 +0000
ROA not before:           Tue 07 Oct 2025 17:11:41 +0000
ROA not after:            Tue 06 Oct 2026 17:16:41 +0000
asID:                     262989
IP address blocks:        190.103.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5f:bc:80:0c:55:ad:fa:30:9a:ea:0c:c8:87:e8:d2:25:ea:73:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8
        Validity
            Not Before: Oct  7 17:11:41 2025 GMT
            Not After : Oct  6 17:16:41 2026 GMT
        Subject: CN=97CF68C663CFAF5310BF15284B9572FB89669BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:98:50:0e:fe:48:eb:d5:65:11:d7:67:86:41:
                    dc:f3:d2:c1:2f:f9:b0:9d:7d:a8:af:c3:6b:42:18:
                    24:42:aa:b0:07:90:4a:ad:29:c2:8e:6f:be:ac:ad:
                    83:66:12:21:e2:a0:38:8a:28:0e:57:67:4d:fb:70:
                    22:87:a1:13:0d:0b:5e:af:f6:e6:92:13:26:9b:66:
                    3c:a0:8a:29:74:d8:34:09:4c:91:15:29:eb:12:e6:
                    cc:97:ce:bb:8b:d0:f6:a2:c0:7a:4a:93:77:4a:2d:
                    1b:90:76:5c:52:74:0c:e9:2d:a2:87:c4:d7:10:8e:
                    48:cd:44:ec:08:90:05:bd:25:3d:b0:e7:20:2b:27:
                    31:28:e1:b8:8f:7c:9a:6f:93:d9:5a:1b:46:11:e2:
                    fa:5d:d7:80:9c:da:3f:a5:d8:25:23:53:37:5c:8f:
                    bc:c3:8f:73:e6:bb:db:20:9c:08:52:46:02:34:d5:
                    db:9d:8e:1f:02:9d:99:5a:80:5c:7d:1d:5f:47:28:
                    77:f3:25:b8:7b:08:28:8c:59:82:57:4a:63:a3:f8:
                    99:ab:de:71:ff:24:a6:65:40:ea:7c:b4:09:a1:14:
                    8b:a4:8c:96:1e:4f:75:4f:bf:54:08:93:c0:c5:19:
                    36:49:79:c4:23:f8:c5:c2:c7:de:4e:90:44:7e:24:
                    4a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CF:68:C6:63:CF:AF:53:10:BF:15:28:4B:95:72:FB:89:66:9B:A4
            X509v3 Authority Key Identifier:
                keyid:69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136392e302f32342d3234203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:f7:4e:e5:ae:bd:84:15:bf:43:be:cf:d3:b1:04:4b:b8:cc:
         99:3a:40:79:57:71:7b:82:07:16:50:e3:1c:64:b7:cd:b6:64:
         98:6a:e8:79:d3:83:eb:2d:fa:93:b1:82:45:d9:2d:52:42:f1:
         bc:84:8f:19:8a:04:8a:4e:de:f4:27:99:9b:83:57:e0:7a:37:
         62:0b:69:df:ef:bb:ca:68:f3:7c:8c:f2:9b:6c:30:0a:e5:bd:
         0e:94:bd:00:41:fe:30:ac:c8:fe:18:76:9e:e6:71:98:31:88:
         5b:5c:a2:b4:ca:3b:6d:a5:85:5e:43:d0:95:94:91:0c:4d:27:
         4e:b7:6c:1b:12:38:fe:ea:a4:2d:a4:6f:e1:b1:ed:ae:30:44:
         a0:90:fa:dc:74:e3:98:f6:df:35:1e:d2:34:03:0a:38:25:4a:
         c6:07:f1:a6:8b:6a:49:99:a7:fa:f2:34:cc:1c:a4:c7:cd:8e:
         0a:8c:3e:bf:0a:5b:ed:93:a6:92:b7:dd:8e:d8:37:1d:68:9b:
         1e:7b:2c:23:1e:db:70:e9:89:ee:28:4b:4c:45:92:4f:d5:da:
         23:f3:e2:93:d6:d0:0a:a2:4d:1b:a1:4e:67:41:a0:4f:58:2c:
         ed:3f:a1:5a:be:d3:aa:0b:9a:ff:1c:49:8d:2a:6f:dc:48:69:
         79:c6:ff:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:25 2025 by rpki-client