Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3137392e3130392e31362e302f32312d3231203d3e203237363933.roa
File:                     3137392e3130392e31362e302f32312d3231203d3e203237363933.roa (raw, json)
Hash identifier:          OXJcCe5CnHphKTd9lTUiDU9aAPbZUjMg7UlJiSdS/zo=
Subject key identifier:   ED:C9:2B:B8:4F:97:0C:FB:3E:CB:0C:09:99:A3:A0:5C:72:4A:A5:BC
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       7A631C476D07321DB940CB63B837A91FBB16DDB0
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3137392e3130392e31362e302f32312d3231203d3e203237363933.roa
Signing time:             Tue 23 Sep 2025 15:19:32 +0000
ROA not before:           Tue 23 Sep 2025 15:14:32 +0000
ROA not after:            Tue 22 Sep 2026 15:19:32 +0000
asID:                     27693
IP address blocks:        179.109.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:63:1c:47:6d:07:32:1d:b9:40:cb:63:b8:37:a9:1f:bb:16:dd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Sep 23 15:14:32 2025 GMT
            Not After : Sep 22 15:19:32 2026 GMT
        Subject: CN=EDC92BB84F970CFB3ECB0C0999A3A05C724AA5BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:62:4f:f7:d5:66:8a:a5:05:b8:b7:6a:cd:
                    de:57:97:25:e6:20:a2:d9:02:7b:1c:ab:79:fd:3d:
                    30:9a:16:70:10:86:17:d8:75:e4:ad:55:86:89:0e:
                    ce:ef:2c:c1:c9:f3:ac:e9:81:98:a2:07:82:0e:0a:
                    40:36:3d:ab:f7:cc:8b:86:47:be:6a:8e:f9:f2:01:
                    e5:50:e3:ae:54:bf:10:56:49:21:7e:77:b3:73:ea:
                    e2:49:23:db:dd:3a:3b:6d:59:a1:1b:82:26:6e:63:
                    5d:f3:c8:85:74:70:ed:20:e5:5c:73:bb:a7:17:fe:
                    63:49:23:d1:25:55:43:fe:fc:55:aa:05:19:d1:a7:
                    86:84:1f:c0:38:db:e1:e0:cf:8e:8f:82:94:2c:74:
                    01:ad:b3:4f:b0:1a:0c:c9:da:e9:cc:c5:ea:ed:d3:
                    e9:13:2c:ef:cc:d9:6d:9e:d5:39:ca:cf:8d:8b:ae:
                    7b:d8:4e:ad:7c:19:f2:8d:0c:5e:4f:13:fe:6c:97:
                    db:89:29:1e:30:e7:97:95:69:a8:04:a1:f3:ec:c7:
                    1d:a6:9b:60:79:10:d5:7b:23:eb:21:82:3f:52:5f:
                    38:2e:78:1a:65:c8:27:f8:99:a3:bf:86:f8:f2:81:
                    18:ae:5f:39:9d:c6:62:60:cd:c9:d5:f5:00:17:98:
                    e6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C9:2B:B8:4F:97:0C:FB:3E:CB:0C:09:99:A3:A0:5C:72:4A:A5:BC
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3137392e3130392e31362e302f32312d3231203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:d1:19:21:87:bf:8d:e6:a0:6d:01:5b:a5:94:fb:69:69:8f:
         cd:54:35:08:fe:fb:e0:ca:c4:ac:c9:13:2c:4b:91:16:a4:01:
         52:38:66:46:fe:5d:a6:1a:5f:2c:4c:37:41:95:9e:b6:81:84:
         bb:d0:3f:b9:c9:7a:ee:83:98:cd:32:8b:2a:cb:19:e0:dd:04:
         f6:11:62:c6:bb:40:50:64:d3:f4:ce:ae:19:39:c5:65:3e:3f:
         f0:e2:c6:3d:f6:18:03:ef:73:57:8a:99:e8:81:ec:4d:e4:4e:
         b9:a9:9e:16:5f:17:b7:ba:ba:0c:2e:85:69:76:c4:b5:e1:b4:
         9e:58:0a:31:e6:db:8a:44:a3:c8:db:3f:88:30:0d:0f:ca:61:
         8e:d7:a0:48:ef:c0:4b:e3:60:09:64:b0:43:8e:7c:ac:2c:31:
         df:9f:89:6a:67:39:ad:ca:46:90:61:96:ad:b6:73:fa:ff:7e:
         d8:ef:d7:09:4c:0b:98:7d:f2:bc:ae:2b:4b:de:08:4b:ee:32:
         d6:59:8a:39:c4:6f:94:6a:80:5d:fd:06:57:bc:52:7f:be:0e:
         c1:42:03:f7:c7:d3:c3:f4:88:1b:2e:34:2c:db:f6:3f:49:d4:
         9b:29:cc:3a:eb:e0:46:86:78:71:60:cd:09:5e:78:93:c0:6f:
         f1:3b:ad:e6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUemMcR20HMh25QMtjuDepH7sW3bAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM0NTQzOTA5OUM3OUMxM0Y1ODNEMjIzOEUzQkI3RDBE
NjBENjg3NzAeFw0yNTA5MjMxNTE0MzJaFw0yNjA5MjIxNTE5MzJaMDMxMTAvBgNV
BAMTKEVEQzkyQkI4NEY5NzBDRkIzRUNCMEMwOTk5QTNBMDVDNzI0QUE1QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5UGJP99VmiqUFuLdqzd5XlyXm
IKLZAnscq3n9PTCaFnAQhhfYdeStVYaJDs7vLMHJ86zpgZiiB4IOCkA2Pav3zIuG
R75qjvnyAeVQ465UvxBWSSF+d7Nz6uJJI9vdOjttWaEbgiZuY13zyIV0cO0g5Vxz
u6cX/mNJI9ElVUP+/FWqBRnRp4aEH8A42+Hgz46PgpQsdAGts0+wGgzJ2unMxert
0+kTLO/M2W2e1TnKz42LrnvYTq18GfKNDF5PE/5sl9uJKR4w55eVaagEofPsxx2m
m2B5ENV7I+shgj9SXzgueBplyCf4maO/hvjygRiuXzmdxmJgzcnV9QAXmOYRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7ckruE+XDPs+ywwJmaOgXHJKpbwwHwYDVR0j
BBgwFoAUM0VDkJnHnBP1g9Ijjju30NYNaHcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNldMZFo1c0J3NjNIREV2Z1E3QUNKdGRZU1FZRkQ0MWJkYzFVZk5pTGZX
VzYvMC8zMzQ1NDM5MDk5Qzc5QzEzRjU4M0QyMjM4RTNCQjdEMEQ2MEQ2ODc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNDU0MzkwOTlDNzlDMTNG
NTgzRDIyMzhFM0JCN0QwRDYwRDY4NzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZXTGRaNXNCdzYzSERFdmdRN0FDSnRkWVNRWUZENDFiZGMxVWZOaUxmV1c2LzAv
MzEzNzM5MmUzMTMwMzkyZTMxMzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM3
MzYzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDs20QMA0GCSqGSIb3DQEBCwUAA4IBAQCE0Rkhh7+N
5qBtAVullPtpaY/NVDUI/vvgysSsyRMsS5EWpAFSOGZG/l2mGl8sTDdBlZ62gYS7
0D+5yXrug5jNMosqyxng3QT2EWLGu0BQZNP0zq4ZOcVlPj/w4sY99hgD73NXipno
gexN5E65qZ4WXxe3uroMLoVpdsS14bSeWAox5tuKRKPI2z+IMA0PymGO16BI78BL
42AJZLBDjnysLDHfn4lqZzmtykaQYZattnP6/37Y79cJTAuYffK8ritL3ghL7jLW
WYo5xG+UaoBd/QZXvFJ/vg7BQgP3x9PD9IgbLjQs2/Y/SdSbKcw66+BGhnhxYM0J
XniTwG/xO63m
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:48:35 2025 by rpki-client