Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e36382e302f32322d3232203d3e20323633333535.roa
File:                     3139312e33372e36382e302f32322d3232203d3e20323633333535.roa (raw, json)
Hash identifier:          HfCOfoln6qcNVvudjZQn1kqOG612UiUHfntBR9tAmwQ=
Subject key identifier:   5A:23:C4:B5:50:54:C0:AC:6C:9E:94:29:AB:E8:6B:37:E1:9C:8A:7E
Certificate issuer:       /CN=2A6676986C812A17B00635484B147B51B75ADD4B
Certificate serial:       525EE860D64724495126FAAE6CBCEE5D9381FCFA
Authority key identifier: 2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e36382e302f32322d3232203d3e20323633333535.roa
Signing time:             Tue 23 Sep 2025 18:08:07 +0000
ROA not before:           Tue 23 Sep 2025 18:03:07 +0000
ROA not after:            Tue 22 Sep 2026 18:08:07 +0000
asID:                     263355
IP address blocks:        191.37.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl
                          rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5e:e8:60:d6:47:24:49:51:26:fa:ae:6c:bc:ee:5d:93:81:fc:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6676986C812A17B00635484B147B51B75ADD4B
        Validity
            Not Before: Sep 23 18:03:07 2025 GMT
            Not After : Sep 22 18:08:07 2026 GMT
        Subject: CN=5A23C4B55054C0AC6C9E9429ABE86B37E19C8A7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:d3:b6:39:0c:ef:97:9a:62:69:a0:9a:97:
                    52:c1:58:24:bc:8a:0b:a8:2e:ad:b8:8b:a3:ba:14:
                    38:b7:39:0e:10:52:b8:05:ee:d0:77:da:92:f1:ab:
                    e4:bb:a1:23:e1:6f:63:3b:8d:32:78:d1:57:e0:3e:
                    dd:b4:c4:82:60:8f:e1:db:1d:2a:a2:67:ae:17:47:
                    f5:c6:e7:61:e3:29:d6:01:32:0c:f8:06:c1:a8:8d:
                    98:bf:91:71:8c:9e:29:60:38:ec:bd:f5:ee:e0:1e:
                    f2:4e:4c:67:14:2c:b5:f7:b7:e6:47:42:d4:bd:83:
                    8c:54:13:d3:19:90:d4:41:c5:6c:ba:7d:1a:d3:ae:
                    8e:5b:c7:3c:94:82:f0:85:e3:a3:f9:36:b4:75:92:
                    1c:9b:e9:1e:10:10:c2:f8:35:59:4b:1e:44:bf:cb:
                    dc:2f:30:2b:a5:7e:ee:09:23:a4:79:11:70:a0:08:
                    fc:45:e1:68:31:b4:2f:44:42:be:1d:41:38:d6:03:
                    2e:43:c1:47:fb:45:2d:6e:0e:64:be:39:b6:3a:a2:
                    a9:9d:68:1b:36:cf:31:35:f4:d2:bc:c4:f9:ae:3a:
                    a9:65:e4:49:36:8b:80:d0:ff:d6:7e:2a:98:5e:20:
                    5d:a9:52:b2:f5:9c:fa:27:79:16:3a:f2:41:76:87:
                    c3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:23:C4:B5:50:54:C0:AC:6C:9E:94:29:AB:E8:6B:37:E1:9C:8A:7E
            X509v3 Authority Key Identifier:
                keyid:2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e36382e302f32322d3232203d3e20323633333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:ec:05:15:a0:ab:34:31:08:e8:bb:22:ad:bf:f2:19:a0:ae:
         40:1f:80:d6:73:9a:2a:12:14:c8:15:8b:75:5e:a1:77:db:7d:
         16:42:e8:8c:39:e7:ef:93:5d:ce:0b:46:0e:7a:c7:4d:89:dd:
         70:89:23:09:c5:31:81:0f:f6:47:ea:f5:7f:84:7c:56:30:67:
         65:a7:17:ce:63:aa:76:b5:20:0e:d0:3a:c5:32:e0:f4:52:f9:
         9d:09:18:83:08:a7:52:da:28:d4:55:de:d5:ac:27:c9:39:44:
         d9:96:52:ea:ec:4f:39:95:98:81:0d:ae:35:5e:38:3d:fd:15:
         b1:e7:2a:bd:8f:7b:9c:5f:a7:22:c3:b8:fb:68:ad:1e:df:ea:
         5e:c9:3d:0b:61:60:97:9e:c3:df:94:40:8b:e3:9d:03:e1:f1:
         28:39:75:ac:03:db:cf:e0:f5:a3:56:23:5e:a0:1f:4f:19:16:
         c4:4d:1a:93:06:45:21:f1:f9:19:11:ac:dd:2f:00:a7:00:28:
         84:cb:cd:d4:92:d6:22:c8:f8:e7:5a:6a:77:76:79:d4:ad:d0:
         25:58:4a:72:9b:f1:4d:67:94:80:25:32:08:b3:f2:3e:47:19:
         58:20:60:10:38:9a:a5:b1:e0:fa:c5:97:8a:ba:90:c0:7c:0d:
         ee:e7:7d:74
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUl7oYNZHJElRJvqubLzuXZOB/PowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2Njc2OTg2QzgxMkExN0IwMDYzNTQ4NEIxNDdCNTFC
NzVBREQ0QjAeFw0yNTA5MjMxODAzMDdaFw0yNjA5MjIxODA4MDdaMDMxMTAvBgNV
BAMTKDVBMjNDNEI1NTA1NEMwQUM2QzlFOTQyOUFCRTg2QjM3RTE5QzhBN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1zdO2OQzvl5piaaCal1LBWCS8
iguoLq24i6O6FDi3OQ4QUrgF7tB32pLxq+S7oSPhb2M7jTJ40VfgPt20xIJgj+Hb
HSqiZ64XR/XG52HjKdYBMgz4BsGojZi/kXGMnilgOOy99e7gHvJOTGcULLX3t+ZH
QtS9g4xUE9MZkNRBxWy6fRrTro5bxzyUgvCF46P5NrR1khyb6R4QEML4NVlLHkS/
y9wvMCulfu4JI6R5EXCgCPxF4WgxtC9EQr4dQTjWAy5DwUf7RS1uDmS+ObY6oqmd
aBs2zzE19NK8xPmuOqll5Ek2i4DQ/9Z+KpheIF2pUrL1nPoneRY68kF2h8MNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWiPEtVBUwKxsnpQpq+hrN+Gcin4wHwYDVR0j
BBgwFoAUKmZ2mGyBKhewBjVISxR7Ubda3UswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOERmQjhEV3V0d2dQaXNtcjJjdDJOTFJZU3F4c29BSEJyS0FaZUxSaGht
U3cvMC8yQTY2NzY5ODZDODEyQTE3QjAwNjM1NDg0QjE0N0I1MUI3NUFERDRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjY3Njk4NkM4MTJBMTdC
MDA2MzU0ODRCMTQ3QjUxQjc1QURENEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhEZkI4RFd1dHdnUGlzbXIyY3QyTkxSWVNxeHNvQUhCcktBWmVMUmhobVN3LzAv
MzEzOTMxMmUzMzM3MmUzNjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMz
MzMzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvyVEMA0GCSqGSIb3DQEBCwUAA4IBAQAV7AUVoKs0
MQjouyKtv/IZoK5AH4DWc5oqEhTIFYt1XqF3230WQuiMOefvk13OC0YOesdNid1w
iSMJxTGBD/ZH6vV/hHxWMGdlpxfOY6p2tSAO0DrFMuD0UvmdCRiDCKdS2ijUVd7V
rCfJOUTZllLq7E85lZiBDa41Xjg9/RWx5yq9j3ucX6ciw7j7aK0e3+peyT0LYWCX
nsPflECL450D4fEoOXWsA9vP4PWjViNeoB9PGRbETRqTBkUh8fkZEazdLwCnACiE
y83UktYiyPjnWmp3dnnUrdAlWEpym/FNZ5SAJTIIs/I+RxlYIGAQOJqlseD6xZeK
upDAfA3u5310
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:03:59 2025 by rpki-client