Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54h22jQLzq3NX7fFEaQ1Z7LYKrPzisDbrowsW6fkzZ8S/0/3139302e392e38302e302f32342d3234203d3e20323731353931.roa
File:                     3139302e392e38302e302f32342d3234203d3e20323731353931.roa (raw, json)
Hash identifier:          HeOsOv/9o78RMvNHGocrvpBpWS6BkaBX2ogv1AtDEhA=
Subject key identifier:   6B:13:58:37:6E:C7:B0:AA:A8:0A:30:AA:EF:EA:D8:60:63:FD:62:B0
Certificate issuer:       /CN=FD62B02BFD732AFC894AA053C84E33618DA10253
Certificate serial:       6FAD63F6CBB2520518B8891CFE1F90ADDB17DC5B
Authority key identifier: FD:62:B0:2B:FD:73:2A:FC:89:4A:A0:53:C8:4E:33:61:8D:A1:02:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD62B02BFD732AFC894AA053C84E33618DA10253.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54h22jQLzq3NX7fFEaQ1Z7LYKrPzisDbrowsW6fkzZ8S/0/3139302e392e38302e302f32342d3234203d3e20323731353931.roa
Signing time:             Thu 02 Oct 2025 21:15:37 +0000
ROA not before:           Thu 02 Oct 2025 21:10:37 +0000
ROA not after:            Thu 01 Oct 2026 21:15:37 +0000
asID:                     271591
IP address blocks:        190.9.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54h22jQLzq3NX7fFEaQ1Z7LYKrPzisDbrowsW6fkzZ8S/0/FD62B02BFD732AFC894AA053C84E33618DA10253.crl
                          rsync://rpki-repo.registro.br/repo/54h22jQLzq3NX7fFEaQ1Z7LYKrPzisDbrowsW6fkzZ8S/0/FD62B02BFD732AFC894AA053C84E33618DA10253.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD62B02BFD732AFC894AA053C84E33618DA10253.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ad:63:f6:cb:b2:52:05:18:b8:89:1c:fe:1f:90:ad:db:17:dc:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD62B02BFD732AFC894AA053C84E33618DA10253
        Validity
            Not Before: Oct  2 21:10:37 2025 GMT
            Not After : Oct  1 21:15:37 2026 GMT
        Subject: CN=6B1358376EC7B0AAA80A30AAEFEAD86063FD62B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:17:c8:dd:b7:4a:76:83:b5:f8:dd:30:58:93:
                    9e:56:7f:90:f3:ca:29:27:2a:52:e3:6c:e9:46:b6:
                    f3:d9:02:d1:83:86:5a:4e:4d:27:c0:cf:30:da:10:
                    68:c4:30:f5:2a:16:e2:64:db:e9:6b:82:40:c1:89:
                    98:5a:11:fd:00:d4:e4:e7:90:85:36:6d:38:90:6d:
                    23:86:cc:5a:64:10:80:d1:eb:bf:ed:f8:19:2e:ee:
                    f8:53:82:9c:1a:c0:a3:ed:38:5b:fb:a3:79:05:78:
                    fe:8a:ac:ab:38:ba:d1:24:7a:4b:60:74:7b:f2:b7:
                    a8:45:e4:dd:cf:41:d1:1c:d3:50:6a:a6:f2:3a:21:
                    74:80:fd:71:3f:51:b1:8d:6d:21:5f:4f:f0:99:4d:
                    f0:41:bb:9d:fa:6d:ab:e4:37:73:7d:1e:e2:7b:ab:
                    aa:6b:c0:c1:97:98:48:25:4d:3e:f7:f2:3d:7c:d3:
                    1d:95:81:85:a2:85:4f:b9:28:23:e5:90:cb:2c:3f:
                    7d:66:07:c3:bd:71:d8:64:3a:93:c5:71:ea:35:ff:
                    fd:d1:fa:59:15:94:ea:6f:4a:1d:2b:b4:6b:e6:72:
                    48:5f:98:bc:9c:6e:d7:17:dc:b6:7e:00:8f:f0:d8:
                    06:83:5f:4a:b8:ba:90:1e:f0:f4:84:d0:35:81:b0:
                    bf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:13:58:37:6E:C7:B0:AA:A8:0A:30:AA:EF:EA:D8:60:63:FD:62:B0
            X509v3 Authority Key Identifier:
                keyid:FD:62:B0:2B:FD:73:2A:FC:89:4A:A0:53:C8:4E:33:61:8D:A1:02:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54h22jQLzq3NX7fFEaQ1Z7LYKrPzisDbrowsW6fkzZ8S/0/FD62B02BFD732AFC894AA053C84E33618DA10253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD62B02BFD732AFC894AA053C84E33618DA10253.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54h22jQLzq3NX7fFEaQ1Z7LYKrPzisDbrowsW6fkzZ8S/0/3139302e392e38302e302f32342d3234203d3e20323731353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:05:ab:73:e6:eb:00:25:a1:51:18:10:72:c5:81:d2:e6:9d:
         e7:80:87:96:a4:65:ff:d3:4d:73:66:31:ba:ca:5c:ed:41:cc:
         7b:6e:81:a7:53:6e:b0:55:ed:61:99:e8:82:04:8a:0a:27:5a:
         6f:fc:84:64:a6:c1:b6:34:7e:fa:6b:51:73:06:e3:99:22:6b:
         87:a0:8f:b4:93:75:93:a6:6b:5f:7f:e7:27:28:3c:53:f5:4d:
         d8:96:ba:55:88:d0:f6:73:3c:6f:e9:34:08:d1:f2:84:80:ca:
         7e:a8:a4:b9:eb:df:a5:d8:ab:cd:ea:32:e4:51:de:17:a0:ef:
         3d:17:f8:14:13:e8:0d:fd:d0:a4:19:45:94:68:77:ac:2b:77:
         59:1c:f5:f3:be:31:1f:cf:82:94:67:85:0d:b4:20:f9:06:e5:
         0a:08:60:d8:4f:d6:d3:66:55:b1:c9:5b:0b:52:e2:fc:ee:2f:
         ff:d6:20:0c:d4:6f:cb:4d:cc:ee:58:c8:69:db:e5:96:76:92:
         5b:64:bc:ba:ff:78:60:a8:e3:c7:41:c4:92:61:ac:3e:82:89:
         fd:d7:10:d0:f4:ff:34:07:70:60:64:3c:29:10:fa:b6:b3:c0:
         0c:36:26:ac:79:a5:79:f6:d8:f5:9d:57:f3:73:fa:41:d9:4b:
         ba:a1:7c:d4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUb61j9suyUgUYuIkc/h+QrdsX3FswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ2MkIwMkJGRDczMkFGQzg5NEFBMDUzQzg0RTMzNjE4
REExMDI1MzAeFw0yNTEwMDIyMTEwMzdaFw0yNjEwMDEyMTE1MzdaMDMxMTAvBgNV
BAMTKDZCMTM1ODM3NkVDN0IwQUFBODBBMzBBQUVGRUFEODYwNjNGRDYyQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpF8jdt0p2g7X43TBYk55Wf5Dz
yiknKlLjbOlGtvPZAtGDhlpOTSfAzzDaEGjEMPUqFuJk2+lrgkDBiZhaEf0A1OTn
kIU2bTiQbSOGzFpkEIDR67/t+Bku7vhTgpwawKPtOFv7o3kFeP6KrKs4utEkektg
dHvyt6hF5N3PQdEc01BqpvI6IXSA/XE/UbGNbSFfT/CZTfBBu536bavkN3N9HuJ7
q6prwMGXmEglTT738j180x2VgYWihU+5KCPlkMssP31mB8O9cdhkOpPFceo1//3R
+lkVlOpvSh0rtGvmckhfmLycbtcX3LZ+AI/w2AaDX0q4upAe8PSE0DWBsL91AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUaxNYN27HsKqoCjCq7+rYYGP9YrAwHwYDVR0j
BBgwFoAU/WKwK/1zKvyJSqBTyE4zYY2hAlMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTRoMjJqUUx6cTNOWDdmRkVhUTFaN0xZS3JQemlzRGJyb3dzVzZma3pa
OFMvMC9GRDYyQjAyQkZENzMyQUZDODk0QUEwNTNDODRFMzM2MThEQTEwMjUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZENjJCMDJCRkQ3MzJBRkM4
OTRBQTA1M0M4NEUzMzYxOERBMTAyNTMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU0aDIyalFMenEzTlg3ZkZFYVExWjdMWUtyUHppc0Ricm93c1c2Zmt6WjhTLzAv
MzEzOTMwMmUzOTJlMzgzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTM1
MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL4JUDANBgkqhkiG9w0BAQsFAAOCAQEADgWrc+brACWh
URgQcsWB0uad54CHlqRl/9NNc2Yxuspc7UHMe26Bp1NusFXtYZnoggSKCidab/yE
ZKbBtjR++mtRcwbjmSJrh6CPtJN1k6ZrX3/nJyg8U/VN2Ja6VYjQ9nM8b+k0CNHy
hIDKfqikuevfpdirzeoy5FHeF6DvPRf4FBPoDf3QpBlFlGh3rCt3WRz1874xH8+C
lGeFDbQg+QblCghg2E/W02ZVsclbC1Li/O4v/9YgDNRvy03M7ljIadvllnaSW2S8
uv94YKjjx0HEkmGsPoKJ/dcQ0PT/NAdwYGQ8KRD6trPADDYmrHmlefbY9Z1X83P6
QdlLuqF81A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:54:31 2025 by rpki-client