Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/3138372e34392e3138322e302f32332d3234203d3e20323730353131.roa
File:                     3138372e34392e3138322e302f32332d3234203d3e20323730353131.roa (raw, json)
Hash identifier:          Nacq+rC8bYdd5DfO3lRqPFhllKsicPgQ+z2LDnPLUnw=
Subject key identifier:   F5:81:A0:26:35:27:A7:DE:E6:99:52:20:7A:C8:C4:28:54:66:55:0A
Certificate issuer:       /CN=9CFD748EA2A4CC27224EFD0917AED265979FC2CF
Certificate serial:       4F69221B89C5DE69AB451E9AA4E491A923986225
Authority key identifier: 9C:FD:74:8E:A2:A4:CC:27:22:4E:FD:09:17:AE:D2:65:97:9F:C2:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFD748EA2A4CC27224EFD0917AED265979FC2CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/3138372e34392e3138322e302f32332d3234203d3e20323730353131.roa
Signing time:             Fri 17 Oct 2025 19:56:00 +0000
ROA not before:           Fri 17 Oct 2025 19:51:00 +0000
ROA not after:            Fri 16 Oct 2026 19:56:00 +0000
asID:                     270511
IP address blocks:        187.49.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/9CFD748EA2A4CC27224EFD0917AED265979FC2CF.crl
                          rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/9CFD748EA2A4CC27224EFD0917AED265979FC2CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFD748EA2A4CC27224EFD0917AED265979FC2CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:69:22:1b:89:c5:de:69:ab:45:1e:9a:a4:e4:91:a9:23:98:62:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CFD748EA2A4CC27224EFD0917AED265979FC2CF
        Validity
            Not Before: Oct 17 19:51:00 2025 GMT
            Not After : Oct 16 19:56:00 2026 GMT
        Subject: CN=F581A0263527A7DEE69952207AC8C4285466550A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:61:6c:b2:8b:56:24:8d:8c:23:c0:36:c4:24:
                    96:76:a2:88:8e:c1:0a:94:85:02:53:dc:bf:eb:32:
                    1d:2e:cd:d2:6e:c4:18:85:b8:2c:7f:26:5e:62:e1:
                    89:9b:70:dc:4c:65:56:9c:bc:4b:24:47:96:d9:b2:
                    42:7f:2f:81:14:c2:e2:d9:c1:a5:e8:be:dc:00:20:
                    e2:60:bf:96:ba:d3:93:d0:16:95:a3:0f:b1:02:e8:
                    92:a4:ac:8a:18:3b:c1:0e:72:d8:42:ac:d0:cb:02:
                    2d:dc:fc:f1:1d:f8:8d:db:51:ee:d6:ed:d5:e4:5d:
                    8b:ef:b3:c4:8f:09:c8:ce:59:ea:e4:0e:c7:06:c5:
                    59:2e:d0:ac:28:f0:a6:4a:af:ce:65:27:61:50:e1:
                    c0:c5:b8:51:32:9e:ff:10:c1:44:75:e2:95:80:a8:
                    05:a3:20:fd:7e:bb:83:5d:cd:11:b3:39:8f:3f:4e:
                    49:60:48:44:a3:67:15:d5:61:ed:a6:6b:08:a0:5a:
                    01:9d:b8:55:e9:74:fb:ad:19:7f:a7:d0:a2:f4:76:
                    60:d0:86:bb:29:a4:e4:c5:d8:4e:55:f9:3a:2e:0a:
                    89:76:7b:a4:50:0d:4d:c9:1f:a2:d1:12:08:ee:84:
                    b9:7d:90:c4:14:dd:71:0f:69:27:54:09:7a:a5:19:
                    13:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:81:A0:26:35:27:A7:DE:E6:99:52:20:7A:C8:C4:28:54:66:55:0A
            X509v3 Authority Key Identifier:
                keyid:9C:FD:74:8E:A2:A4:CC:27:22:4E:FD:09:17:AE:D2:65:97:9F:C2:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/9CFD748EA2A4CC27224EFD0917AED265979FC2CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFD748EA2A4CC27224EFD0917AED265979FC2CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/3138372e34392e3138322e302f32332d3234203d3e20323730353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:52:43:c6:38:9b:65:84:9e:13:64:38:c6:c0:de:f3:2f:08:
         a7:24:88:3c:a2:53:63:c1:bd:4b:d0:33:5f:96:b0:20:1d:f0:
         cf:04:b2:0c:4e:a3:02:98:c4:8c:96:2a:0b:25:a8:67:7d:28:
         8a:45:bb:13:99:d6:a1:4d:01:b1:25:60:55:73:83:05:76:eb:
         fa:cb:7c:22:39:78:97:6d:6c:be:eb:0a:62:f3:bc:9e:5a:55:
         90:b1:01:8f:9e:bd:ad:f8:96:a5:2d:5b:b1:b3:2c:9a:91:0f:
         8e:45:65:2c:8d:0b:2f:1f:b5:73:01:a7:55:44:9a:15:fe:49:
         af:8b:e5:97:84:cc:8f:03:60:cc:67:e2:a8:12:9a:57:38:e8:
         ed:6b:9d:f9:df:5d:f1:6e:61:a5:e7:b6:df:d0:0c:4e:37:23:
         fa:00:f6:14:b4:a6:27:74:13:f4:b9:61:ca:53:80:bd:cd:de:
         ca:c7:d8:e5:0e:89:65:33:be:79:4b:f3:33:ed:8d:00:e4:4b:
         7a:88:87:0b:bb:4a:c9:ba:e6:17:7a:41:d3:8e:c4:e4:9c:b5:
         70:22:3d:aa:a2:72:7c:11:02:96:f6:10:1f:be:dc:fc:68:54:
         c8:ad:0c:06:30:c4:2a:6c:f3:d8:bf:12:c2:84:1d:c8:f4:d9:
         92:63:b0:5c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUT2kiG4nF3mmrRR6apOSRqSOYYiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNGRDc0OEVBMkE0Q0MyNzIyNEVGRDA5MTdBRUQyNjU5
NzlGQzJDRjAeFw0yNTEwMTcxOTUxMDBaFw0yNjEwMTYxOTU2MDBaMDMxMTAvBgNV
BAMTKEY1ODFBMDI2MzUyN0E3REVFNjk5NTIyMDdBQzhDNDI4NTQ2NjU1MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVYWyyi1YkjYwjwDbEJJZ2ooiO
wQqUhQJT3L/rMh0uzdJuxBiFuCx/Jl5i4YmbcNxMZVacvEskR5bZskJ/L4EUwuLZ
waXovtwAIOJgv5a605PQFpWjD7EC6JKkrIoYO8EOcthCrNDLAi3c/PEd+I3bUe7W
7dXkXYvvs8SPCcjOWerkDscGxVku0Kwo8KZKr85lJ2FQ4cDFuFEynv8QwUR14pWA
qAWjIP1+u4NdzRGzOY8/TklgSESjZxXVYe2mawigWgGduFXpdPutGX+n0KL0dmDQ
hrsppOTF2E5V+TouCol2e6RQDU3JH6LREgjuhLl9kMQU3XEPaSdUCXqlGRNtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9YGgJjUnp97mmVIgesjEKFRmVQowHwYDVR0j
BBgwFoAUnP10jqKkzCciTv0JF67SZZefws8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTZSZFh4RDlRWHdYV2VocmNoTHNMeVR6QWhMdTRSU3FXdlE2RnJLZXFh
QlUvMC85Q0ZENzQ4RUEyQTRDQzI3MjI0RUZEMDkxN0FFRDI2NTk3OUZDMkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDRkQ3NDhFQTJBNENDMjcy
MjRFRkQwOTE3QUVEMjY1OTc5RkMyQ0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU2UmRYeEQ5UVh3WFdlaHJjaExzTHlUekFoTHU0UlNxV3ZRNkZyS2VxYUJVLzAv
MzEzODM3MmUzNDM5MmUzMTM4MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG7MbYwDQYJKoZIhvcNAQELBQADggEBAAtSQ8Y4
m2WEnhNkOMbA3vMvCKckiDyiU2PBvUvQM1+WsCAd8M8EsgxOowKYxIyWKgslqGd9
KIpFuxOZ1qFNAbElYFVzgwV26/rLfCI5eJdtbL7rCmLzvJ5aVZCxAY+eva34lqUt
W7GzLJqRD45FZSyNCy8ftXMBp1VEmhX+Sa+L5ZeEzI8DYMxn4qgSmlc46O1rnfnf
XfFuYaXntt/QDE43I/oA9hS0pid0E/S5YcpTgL3N3srH2OUOiWUzvnlL8zPtjQDk
S3qIhwu7Ssm65hd6QdOOxOSctXAiPaqicnwRApb2EB++3PxoVMitDAYwxCps89i/
EsKEHcj02ZJjsFw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:44 2025 by rpki-client