Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3137302e37382e3234382e302f32322d3332203d3e20323633353434.roa
File:                     3137302e37382e3234382e302f32322d3332203d3e20323633353434.roa (raw, json)
Hash identifier:          OQ/pRok0OswFFE5rlN39iYWlYOy/TFw/FhguzoVoeNQ=
Subject key identifier:   C0:B4:F8:19:A5:33:72:1B:FA:F2:AD:A9:91:AD:A0:B1:51:E6:D9:9C
Certificate issuer:       /CN=E1EF9203E12432F995B9B24544924C4BA28FEE51
Certificate serial:       725577B655A5162148B22E7FD3672619B9E2D7B7
Authority key identifier: E1:EF:92:03:E1:24:32:F9:95:B9:B2:45:44:92:4C:4B:A2:8F:EE:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3137302e37382e3234382e302f32322d3332203d3e20323633353434.roa
Signing time:             Fri 03 Oct 2025 12:10:58 +0000
ROA not before:           Fri 03 Oct 2025 12:05:58 +0000
ROA not after:            Fri 02 Oct 2026 12:10:58 +0000
asID:                     263544
IP address blocks:        170.78.248.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.crl
                          rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 20:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:55:77:b6:55:a5:16:21:48:b2:2e:7f:d3:67:26:19:b9:e2:d7:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1EF9203E12432F995B9B24544924C4BA28FEE51
        Validity
            Not Before: Oct  3 12:05:58 2025 GMT
            Not After : Oct  2 12:10:58 2026 GMT
        Subject: CN=C0B4F819A533721BFAF2ADA991ADA0B151E6D99C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cc:43:37:2c:9a:4b:f0:e9:1f:b5:1f:f1:c7:
                    d6:b7:22:d0:98:8c:9b:ce:91:ec:eb:7b:ef:e0:10:
                    2b:5b:59:69:fa:33:3f:91:6f:ed:7a:e4:5d:26:75:
                    06:e4:95:71:b5:e6:45:c1:be:77:9e:90:28:85:34:
                    29:b3:80:bf:04:29:80:72:6d:52:ea:c3:7d:e9:1f:
                    b1:b4:c4:1d:8e:dc:2e:7a:7e:73:16:b5:0b:f3:29:
                    3d:f5:2c:5a:bc:a6:57:50:4a:9f:d6:55:64:d1:55:
                    6a:c1:e3:d9:19:41:16:10:19:dd:b1:51:e1:61:d9:
                    95:2e:91:8e:25:cc:f6:f0:9e:35:f5:4d:98:25:1e:
                    20:b5:23:05:25:a8:ac:97:d1:f7:6f:92:5c:68:2d:
                    bc:83:53:f3:49:a2:e1:79:a1:14:e7:b6:1e:ac:e8:
                    ef:66:5b:50:bc:b0:1a:83:71:e0:aa:0d:a2:9c:0a:
                    87:29:ec:fa:e9:4c:ec:df:32:26:7c:91:fd:20:d2:
                    b1:06:36:68:75:f3:98:0c:e8:8f:24:1e:b9:1b:58:
                    b2:95:88:d4:2a:aa:ae:7d:03:d1:ba:8b:8c:73:2e:
                    62:f3:47:6f:4a:41:bb:c1:96:1d:ee:22:fb:3b:cd:
                    1e:87:40:98:df:f7:e4:5d:f3:91:41:f7:cf:29:10:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B4:F8:19:A5:33:72:1B:FA:F2:AD:A9:91:AD:A0:B1:51:E6:D9:9C
            X509v3 Authority Key Identifier:
                keyid:E1:EF:92:03:E1:24:32:F9:95:B9:B2:45:44:92:4C:4B:A2:8F:EE:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3137302e37382e3234382e302f32322d3332203d3e20323633353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:b1:e7:a8:be:25:cf:57:36:3e:24:57:04:d5:06:64:73:63:
         59:a3:74:8f:ac:9f:f9:87:89:e1:fa:72:09:b3:a9:90:63:20:
         df:c1:85:a5:ae:86:13:ba:25:e4:76:4f:df:8e:d0:30:63:f5:
         94:00:df:8d:bb:6a:c3:6c:34:99:21:85:60:ab:3d:42:c0:76:
         ad:d1:92:a4:05:2a:9e:d6:0d:be:e8:db:d7:f8:ec:93:2c:0e:
         f6:32:45:ec:72:93:20:aa:0d:4e:a0:e7:5e:f8:da:de:6c:ab:
         34:ba:9d:ad:33:16:96:8e:e0:cb:89:f6:eb:18:fb:12:16:f1:
         b8:44:d1:01:c7:f3:a6:e3:57:e4:e3:63:02:25:05:09:f2:0b:
         d2:c5:9b:b2:27:50:d5:59:14:8e:c6:8a:31:fb:20:c8:6f:3a:
         d7:df:30:93:46:50:ae:2e:1b:73:8d:87:09:27:dc:d1:27:4e:
         f5:01:27:f9:51:ec:35:05:51:c7:98:36:65:99:85:73:6e:08:
         19:2a:3b:dc:2f:fd:1f:89:db:3e:27:ee:e8:88:91:30:eb:49:
         b1:f2:0f:43:8a:3e:50:b6:5f:ce:20:d6:04:78:28:2a:e9:ae:
         00:6b:6a:f2:f0:03:a2:bc:05:c0:89:79:7d:e0:fe:1b:c0:16:
         87:d1:65:4f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUclV3tlWlFiFIsi5/02cmGbni17cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFFRjkyMDNFMTI0MzJGOTk1QjlCMjQ1NDQ5MjRDNEJB
MjhGRUU1MTAeFw0yNTEwMDMxMjA1NThaFw0yNjEwMDIxMjEwNThaMDMxMTAvBgNV
BAMTKEMwQjRGODE5QTUzMzcyMUJGQUYyQURBOTkxQURBMEIxNTFFNkQ5OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4zEM3LJpL8OkftR/xx9a3ItCY
jJvOkezre+/gECtbWWn6Mz+Rb+165F0mdQbklXG15kXBvneekCiFNCmzgL8EKYBy
bVLqw33pH7G0xB2O3C56fnMWtQvzKT31LFq8pldQSp/WVWTRVWrB49kZQRYQGd2x
UeFh2ZUukY4lzPbwnjX1TZglHiC1IwUlqKyX0fdvklxoLbyDU/NJouF5oRTnth6s
6O9mW1C8sBqDceCqDaKcCocp7PrpTOzfMiZ8kf0g0rEGNmh185gM6I8kHrkbWLKV
iNQqqq59A9G6i4xzLmLzR29KQbvBlh3uIvs7zR6HQJjf9+Rd85FB988pEEwZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwLT4GaUzchv68q2pka2gsVHm2ZwwHwYDVR0j
BBgwFoAU4e+SA+EkMvmVubJFRJJMS6KP7lEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEFGcWhQM3pSejJ4UjY5WUhvTXJ0WW5XczE1dnM2ZVgzTEZrRHkyNVJH
V3gvMC9FMUVGOTIwM0UxMjQzMkY5OTVCOUIyNDU0NDkyNEM0QkEyOEZFRTUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxRUY5MjAzRTEyNDMyRjk5
NUI5QjI0NTQ0OTI0QzRCQTI4RkVFNTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhBRnFoUDN6UnoyeFI2OVlIb01ydFluV3MxNXZzNmVYM0xGa0R5MjVSR1d4LzAv
MzEzNzMwMmUzNzM4MmUzMjM0MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzMzNTM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqTvgwDQYJKoZIhvcNAQELBQADggEBAJix56i+
Jc9XNj4kVwTVBmRzY1mjdI+sn/mHieH6cgmzqZBjIN/BhaWuhhO6JeR2T9+O0DBj
9ZQA3427asNsNJkhhWCrPULAdq3RkqQFKp7WDb7o29f47JMsDvYyRexykyCqDU6g
51742t5sqzS6na0zFpaO4MuJ9usY+xIW8bhE0QHH86bjV+TjYwIlBQnyC9LFm7In
UNVZFI7GijH7IMhvOtffMJNGUK4uG3ONhwkn3NEnTvUBJ/lR7DUFUceYNmWZhXNu
CBkqO9wv/R+J2z4n7uiIkTDrSbHyD0OKPlC2X84g1gR4KCrprgBravLwA6K8BcCJ
eX3g/hvAFofRZU8=
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:29:16 2025 by rpki-client