Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3137302e302f32342d3234203d3e20323632393839.roa
File:                     3139302e3130332e3137302e302f32342d3234203d3e20323632393839.roa (raw, json)
Hash identifier:          MPuqDx2to5lOhH8xqW9jZBJA/HTsqTSpoHKkWQR1xwg=
Subject key identifier:   94:CA:EE:AB:41:DB:5C:B4:9E:4C:A4:8E:5B:F9:98:87:6D:9C:68:91
Certificate issuer:       /CN=6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8
Certificate serial:       6350F8F8EBC044C571122DF64BCB5AFDEED8ED7D
Authority key identifier: 69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3137302e302f32342d3234203d3e20323632393839.roa
Signing time:             Tue 07 Oct 2025 17:16:37 +0000
ROA not before:           Tue 07 Oct 2025 17:11:37 +0000
ROA not after:            Tue 06 Oct 2026 17:16:37 +0000
asID:                     262989
IP address blocks:        190.103.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:50:f8:f8:eb:c0:44:c5:71:12:2d:f6:4b:cb:5a:fd:ee:d8:ed:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8
        Validity
            Not Before: Oct  7 17:11:37 2025 GMT
            Not After : Oct  6 17:16:37 2026 GMT
        Subject: CN=94CAEEAB41DB5CB49E4CA48E5BF998876D9C6891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b7:55:1e:73:91:b1:46:5e:18:8a:7e:4d:62:
                    92:20:9e:b5:bb:1e:b8:3f:17:78:f1:1d:01:83:a6:
                    aa:a7:01:8a:b8:f1:23:e7:3a:a2:96:75:e9:49:eb:
                    f2:a2:22:09:54:1a:cd:57:67:ff:fd:3e:4b:a4:d5:
                    82:9c:ac:30:39:56:b4:bc:21:52:30:22:2b:6b:82:
                    d8:33:5d:6f:6a:8e:f2:62:d0:8c:40:84:dc:05:06:
                    17:34:95:94:2c:0d:36:0b:a7:de:93:d8:e0:fe:d8:
                    f8:7b:99:c6:9e:48:2a:5f:c0:0e:b2:ea:67:76:23:
                    1d:43:5b:27:54:e2:a8:30:e8:24:1b:ea:f2:0a:47:
                    4c:e1:06:66:43:bf:b9:8c:7d:07:0a:84:e5:62:0d:
                    33:e2:86:bd:98:67:31:f8:68:b8:4f:66:8b:7b:55:
                    2d:4a:d3:03:b2:2a:fb:af:21:94:f4:e1:06:f0:bf:
                    af:b3:3d:97:d4:dc:2c:4f:72:fc:1e:8e:84:7b:53:
                    3d:67:ee:b5:c6:71:a1:c2:e3:d7:b0:06:5b:18:da:
                    d4:21:ab:96:97:7e:e4:2a:6c:05:77:0f:b1:24:3d:
                    0f:cc:79:17:13:3c:b1:a7:d8:a1:94:ad:4e:39:ff:
                    a4:5b:7f:8a:ad:cf:4b:34:62:8f:18:c5:64:ec:c4:
                    12:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CA:EE:AB:41:DB:5C:B4:9E:4C:A4:8E:5B:F9:98:87:6D:9C:68:91
            X509v3 Authority Key Identifier:
                keyid:69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3137302e302f32342d3234203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:93:02:d9:e2:ee:26:4a:bd:7a:a5:61:58:3a:41:6c:ba:9d:
         24:cc:7e:23:16:55:03:ff:d7:11:cd:68:0b:00:54:81:28:9a:
         3f:d8:87:57:de:1c:0f:69:da:39:f7:bb:ea:09:c9:ed:14:c4:
         98:90:3f:39:51:e0:26:fb:da:2c:ca:83:5c:41:3b:2a:ca:2b:
         09:1a:34:13:47:10:1c:bd:1e:88:81:18:38:5e:4a:46:54:20:
         11:0d:4d:b9:67:77:4f:31:94:10:93:af:25:e3:b8:f2:76:08:
         de:f3:71:c9:03:5e:25:8b:32:d2:c4:0d:52:43:1a:74:f5:41:
         3f:12:aa:52:a5:e9:aa:5c:2b:4e:21:03:a2:f2:9c:b1:de:15:
         d6:f1:89:4d:f0:f8:44:50:6a:a9:6e:7e:a1:6e:57:f4:80:a1:
         d6:ab:e9:ad:85:9d:f8:fc:96:b8:cc:b6:f4:69:cb:e5:2f:13:
         d2:fe:cd:34:1a:e1:62:27:2e:f4:1f:3d:8c:f6:5a:29:14:c1:
         94:66:49:fd:f8:9d:8e:0a:48:69:7a:93:f2:39:a7:35:cd:20:
         38:73:07:b9:72:07:ce:f0:9a:90:f4:dc:bd:7c:94:1a:b0:e6:
         38:63:f7:b1:ac:be:8a:78:ec:59:51:c7:7f:92:77:25:af:6c:
         f3:91:72:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:08 2025 by rpki-client