Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32322d3232203d3e203237363933.roa
File:                     3138392e3132372e302e302f32322d3232203d3e203237363933.roa (raw, json)
Hash identifier:          zaXSGIwN2FQ9aaXNedRfaZ69wXRhcPsWJMTg/bBgdcA=
Subject key identifier:   FF:D7:7D:5B:4F:34:B1:10:F2:EF:66:15:D3:16:55:5F:C7:80:24:FD
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       77AD297DFFFEAD197E3C50765589A05C6C140C1B
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32322d3232203d3e203237363933.roa
Signing time:             Tue 23 Sep 2025 15:19:34 +0000
ROA not before:           Tue 23 Sep 2025 15:14:34 +0000
ROA not after:            Tue 22 Sep 2026 15:19:34 +0000
asID:                     27693
IP address blocks:        189.127.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ad:29:7d:ff:fe:ad:19:7e:3c:50:76:55:89:a0:5c:6c:14:0c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Sep 23 15:14:34 2025 GMT
            Not After : Sep 22 15:19:34 2026 GMT
        Subject: CN=FFD77D5B4F34B110F2EF6615D316555FC78024FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:25:ae:d1:c4:c0:9b:b1:22:bb:45:12:cd:6f:
                    26:1d:09:5a:a1:9c:ae:a3:5a:f3:ad:75:67:ae:ac:
                    24:f9:09:f7:29:ac:40:53:0c:8d:94:a7:b7:3d:9b:
                    4f:95:8c:a3:e9:a0:0f:e5:80:b6:27:40:83:6d:98:
                    dd:f3:4b:8f:9e:99:9a:19:08:4b:e3:4d:71:b2:ac:
                    9c:81:53:19:38:30:70:ac:71:56:6f:a0:9e:ce:9c:
                    12:e9:d6:0f:38:0f:a6:eb:81:19:8e:63:67:85:6d:
                    43:21:71:ca:00:7e:35:b8:bd:8b:a6:c9:ad:7d:db:
                    23:9d:b6:af:05:49:90:e9:fa:33:82:3d:dc:5c:60:
                    ad:9e:27:52:20:a1:4e:3c:5c:a4:03:07:ce:f2:25:
                    65:f0:62:1c:d7:72:c7:35:cb:c5:04:76:32:c8:41:
                    26:21:74:a5:67:f5:6e:3b:1b:73:2a:5d:06:93:45:
                    de:ee:d2:81:4f:f5:cd:bc:f0:74:1e:d2:d2:a0:32:
                    b3:b5:cb:95:65:3f:bf:23:23:d2:06:52:1a:6d:28:
                    34:4f:42:73:3c:53:2e:6f:71:04:dd:40:e9:35:5d:
                    1c:6b:c2:36:c2:72:a6:61:6c:73:fc:72:29:6c:be:
                    24:b4:b6:cc:63:6b:7a:70:47:a3:01:9d:cd:58:4c:
                    45:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D7:7D:5B:4F:34:B1:10:F2:EF:66:15:D3:16:55:5F:C7:80:24:FD
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32322d3232203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:b3:c7:d7:8a:da:ff:94:90:de:76:bc:db:55:8f:2b:eb:6d:
         5e:c5:84:15:7b:08:55:53:7e:b4:fd:8a:49:d6:70:e0:de:22:
         36:41:65:03:8a:5d:80:0d:d7:d9:c4:3a:2b:93:37:1a:8e:7c:
         90:37:4c:25:95:c3:ba:b0:ce:a7:d8:09:61:8c:dd:ea:00:f1:
         24:a5:c4:0d:bd:e2:bc:4f:d0:6d:2e:aa:de:9c:c5:32:b6:54:
         00:97:7d:f0:24:6d:46:8c:71:20:bc:87:79:40:ad:38:70:8d:
         aa:5d:69:d6:ac:1e:82:f0:a9:eb:c8:cb:90:8e:f7:1b:0e:f8:
         00:3c:da:e0:ed:3b:da:2d:47:33:c7:5a:35:bc:ef:aa:90:4f:
         dd:41:f5:94:a1:7c:3e:cd:50:31:10:ec:3e:85:ab:ea:29:1a:
         53:2e:d6:64:6d:d8:51:78:f8:be:61:0d:47:c8:c5:ff:83:42:
         4e:cf:b3:ea:91:e4:05:fa:ba:80:75:0e:cb:e6:9b:0c:21:ce:
         6e:66:8c:b0:8e:31:1b:35:84:fe:02:d3:5d:c0:50:97:ce:6f:
         c4:80:8e:ef:8f:be:c6:a5:d4:c6:74:2b:63:8a:40:ab:6b:f2:
         aa:4d:06:da:07:17:d7:ff:f5:57:dc:04:f4:55:e9:6a:5d:50:
         81:ca:82:da
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUd60pff/+rRl+PFB2VYmgXGwUDBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM0NTQzOTA5OUM3OUMxM0Y1ODNEMjIzOEUzQkI3RDBE
NjBENjg3NzAeFw0yNTA5MjMxNTE0MzRaFw0yNjA5MjIxNTE5MzRaMDMxMTAvBgNV
BAMTKEZGRDc3RDVCNEYzNEIxMTBGMkVGNjYxNUQzMTY1NTVGQzc4MDI0RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbJa7RxMCbsSK7RRLNbyYdCVqh
nK6jWvOtdWeurCT5CfcprEBTDI2Up7c9m0+VjKPpoA/lgLYnQINtmN3zS4+emZoZ
CEvjTXGyrJyBUxk4MHCscVZvoJ7OnBLp1g84D6brgRmOY2eFbUMhccoAfjW4vYum
ya192yOdtq8FSZDp+jOCPdxcYK2eJ1IgoU48XKQDB87yJWXwYhzXcsc1y8UEdjLI
QSYhdKVn9W47G3MqXQaTRd7u0oFP9c288HQe0tKgMrO1y5VlP78jI9IGUhptKDRP
QnM8Uy5vcQTdQOk1XRxrwjbCcqZhbHP8cilsviS0tsxja3pwR6MBnc1YTEXFAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU/9d9W080sRDy72YV0xZVX8eAJP0wHwYDVR0j
BBgwFoAUM0VDkJnHnBP1g9Ijjju30NYNaHcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNldMZFo1c0J3NjNIREV2Z1E3QUNKdGRZU1FZRkQ0MWJkYzFVZk5pTGZX
VzYvMC8zMzQ1NDM5MDk5Qzc5QzEzRjU4M0QyMjM4RTNCQjdEMEQ2MEQ2ODc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNDU0MzkwOTlDNzlDMTNG
NTgzRDIyMzhFM0JCN0QwRDYwRDY4NzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZXTGRaNXNCdzYzSERFdmdRN0FDSnRkWVNRWUZENDFiZGMxVWZOaUxmV1c2LzAv
MzEzODM5MmUzMTMyMzcyZTMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzM2
MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAr1/ADANBgkqhkiG9w0BAQsFAAOCAQEAa7PH14ra/5SQ
3na821WPK+ttXsWEFXsIVVN+tP2KSdZw4N4iNkFlA4pdgA3X2cQ6K5M3Go58kDdM
JZXDurDOp9gJYYzd6gDxJKXEDb3ivE/QbS6q3pzFMrZUAJd98CRtRoxxILyHeUCt
OHCNql1p1qwegvCp68jLkI73Gw74ADza4O072i1HM8daNbzvqpBP3UH1lKF8Ps1Q
MRDsPoWr6ikaUy7WZG3YUXj4vmENR8jF/4NCTs+z6pHkBfq6gHUOy+abDCHObmaM
sI4xGzWE/gLTXcBQl85vxICO74++xqXUxnQrY4pAq2vyqk0G2gcX1//1V9wE9FXp
al1QgcqC2g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:54:49 2025 by rpki-client