Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e342e302f32332d3233203d3e20323632363432.roa
File:                     3137372e38372e342e302f32332d3233203d3e20323632363432.roa (raw, json)
Hash identifier:          vHNA9cn2GMeMamqtQUPlr2+QmEgyQdxtzRCNF0c/h7E=
Subject key identifier:   3E:BC:A6:17:22:F4:BC:F7:E8:54:FD:F9:55:76:CE:0E:7D:52:06:8B
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       090D31C155F9289842B3C931B45871ECF05E6683
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e342e302f32332d3233203d3e20323632363432.roa
Signing time:             Wed 08 Oct 2025 13:38:19 +0000
ROA not before:           Wed 08 Oct 2025 13:33:19 +0000
ROA not after:            Wed 07 Oct 2026 13:38:19 +0000
asID:                     262642
IP address blocks:        177.87.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:35:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0d:31:c1:55:f9:28:98:42:b3:c9:31:b4:58:71:ec:f0:5e:66:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Oct  8 13:33:19 2025 GMT
            Not After : Oct  7 13:38:19 2026 GMT
        Subject: CN=3EBCA61722F4BCF7E854FDF95576CE0E7D52068B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:49:26:92:eb:0d:97:f8:1f:b8:48:c7:16:dc:
                    d0:21:b5:c5:1a:1b:92:5e:34:81:37:af:64:15:8d:
                    66:e8:24:76:cf:4b:ad:ff:48:fb:38:6c:79:90:e2:
                    9e:5c:d6:fc:ea:0f:c7:c5:41:e6:a7:d4:4e:66:9c:
                    43:49:07:03:4a:37:df:96:63:c0:44:ee:32:4d:cb:
                    47:7c:a0:7a:ac:c0:75:3f:b6:8c:39:fc:94:b1:12:
                    a0:ec:4e:d1:9e:41:90:cd:b2:4a:cb:d5:63:30:a2:
                    ef:f8:7c:73:d8:fa:b5:0a:75:aa:d0:08:10:72:00:
                    e6:cf:66:4c:9b:0d:ef:9d:97:a8:0a:7e:8a:7d:60:
                    b2:1c:49:3e:4b:49:a8:a9:33:8a:bf:88:77:7e:67:
                    a3:b1:3a:ab:db:31:ab:eb:2e:7e:6d:f7:71:6d:89:
                    d0:78:29:af:ff:9c:e2:f3:27:31:c0:68:52:69:47:
                    f4:14:5d:92:ee:02:76:e5:49:0a:23:3d:0d:0f:8a:
                    31:57:73:1e:ee:8d:6a:12:26:5b:43:22:6e:cf:0c:
                    eb:91:d2:fc:21:28:4b:ba:de:11:36:73:d0:8b:e1:
                    2a:c6:0f:de:84:07:4d:08:97:b5:8f:2e:4e:cf:55:
                    65:d0:5b:95:f6:86:b0:b2:f8:39:e6:f4:6c:93:65:
                    c4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BC:A6:17:22:F4:BC:F7:E8:54:FD:F9:55:76:CE:0E:7D:52:06:8B
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e342e302f32332d3233203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:de:5c:77:be:60:8d:f5:2d:45:c0:77:23:51:09:65:c9:7c:
         3e:a3:7c:a6:13:88:ef:ef:7b:81:af:d0:19:26:f6:38:80:83:
         b7:7f:86:90:f6:b7:2b:49:78:43:da:82:a9:95:4e:c8:84:c5:
         ca:e6:37:c7:30:a0:d3:f3:3d:c0:ba:38:74:e8:86:e7:12:dc:
         19:21:de:ad:13:76:93:60:e7:6b:fb:78:3f:ae:b2:58:ea:9a:
         95:f5:eb:6b:27:11:eb:67:0a:aa:67:18:2e:cf:b7:70:96:1f:
         29:6f:e8:e9:69:86:94:f7:37:a2:09:d2:6b:ae:c0:5d:d0:82:
         2d:bb:c7:b6:02:d2:b3:c6:2a:b7:3b:a1:0d:08:32:fd:04:d5:
         d5:67:87:1a:2c:01:a0:f2:e8:7c:f1:57:7b:2d:40:ea:30:c5:
         b1:d6:0b:9a:a9:e3:9a:2c:e6:c4:11:bf:f2:60:0c:f2:3e:ad:
         a1:8a:5a:68:ee:12:96:cd:85:bd:36:3a:1e:fe:cb:91:a0:b2:
         81:32:29:39:49:12:95:d7:3b:0d:58:ee:48:10:f1:97:c3:0f:
         9c:0f:1e:60:51:8e:f1:7f:b1:5f:6f:8a:90:27:f0:d0:53:7b:
         5a:b7:77:d4:1f:66:c7:eb:ef:62:79:af:30:6d:3e:a8:1c:c7:
         c1:9a:86:97
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUCQ0xwVX5KJhCs8kxtFhx7PBeZoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ4RDhEOTZGMUZGRUM1RjIwQzZGMUY3MzNFRTY5NTAz
RTcxNjc0NTAeFw0yNTEwMDgxMzMzMTlaFw0yNjEwMDcxMzM4MTlaMDMxMTAvBgNV
BAMTKDNFQkNBNjE3MjJGNEJDRjdFODU0RkRGOTU1NzZDRTBFN0Q1MjA2OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpSSaS6w2X+B+4SMcW3NAhtcUa
G5JeNIE3r2QVjWboJHbPS63/SPs4bHmQ4p5c1vzqD8fFQean1E5mnENJBwNKN9+W
Y8BE7jJNy0d8oHqswHU/tow5/JSxEqDsTtGeQZDNskrL1WMwou/4fHPY+rUKdarQ
CBByAObPZkybDe+dl6gKfop9YLIcST5LSaipM4q/iHd+Z6OxOqvbMavrLn5t93Ft
idB4Ka//nOLzJzHAaFJpR/QUXZLuAnblSQojPQ0PijFXcx7ujWoSJltDIm7PDOuR
0vwhKEu63hE2c9CL4SrGD96EB00Il7WPLk7PVWXQW5X2hrCy+Dnm9GyTZcSzAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUPrymFyL0vPfoVP35VXbODn1SBoswHwYDVR0j
BBgwFoAUxI2NlvH/7F8gxvH3M+5pUD5xZ0UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjlHd2FpakNzZGExTm1EWG5jWGlkeDJyTGZiTWFtd3VKVXlUNFNvczUy
YWYvMS9DNDhEOEQ5NkYxRkZFQzVGMjBDNkYxRjczM0VFNjk1MDNFNzE2NzQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0OEQ4RDk2RjFGRkVDNUYy
MEM2RjFGNzMzRUU2OTUwM0U3MTY3NDUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5R3dhaWpDc2RhMU5tRFhuY1hpZHgyckxmYk1hbXd1SlV5VDRTb3M1MmFmLzEv
MzEzNzM3MmUzODM3MmUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMjM2
MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbFXBDANBgkqhkiG9w0BAQsFAAOCAQEAkd5cd75gjfUt
RcB3I1EJZcl8PqN8phOI7+97ga/QGSb2OICDt3+GkPa3K0l4Q9qCqZVOyITFyuY3
xzCg0/M9wLo4dOiG5xLcGSHerRN2k2Dna/t4P66yWOqalfXraycR62cKqmcYLs+3
cJYfKW/o6WmGlPc3ognSa67AXdCCLbvHtgLSs8YqtzuhDQgy/QTV1WeHGiwBoPLo
fPFXey1A6jDFsdYLmqnjmizmxBG/8mAM8j6toYpaaO4Sls2FvTY6Hv7LkaCygTIp
OUkSldc7DVjuSBDxl8MPnA8eYFGO8X+xX2+KkCfw0FN7Wrd31B9mx+vvYnmvMG0+
qBzHwZqGlw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:49:07 2025 by rpki-client