Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130302e302f32342d3234203d3e20323633333437.roa
File:                     3137372e32332e3130302e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          KfZGo3EPOp4axTz9dJRA67S0Ve359ZSzDO0JEuNfWqs=
Subject key identifier:   E9:7E:EB:D2:00:D8:73:C0:23:BD:1F:5D:6E:1D:70:51:7B:D0:AA:3A
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       3682EACF1B07B3598CF872EC28895FA292F87898
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130302e302f32342d3234203d3e20323633333437.roa
Signing time:             Sat 11 Oct 2025 14:03:04 +0000
ROA not before:           Sat 11 Oct 2025 13:58:04 +0000
ROA not after:            Sat 10 Oct 2026 14:03:04 +0000
asID:                     263347
IP address blocks:        177.23.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:82:ea:cf:1b:07:b3:59:8c:f8:72:ec:28:89:5f:a2:92:f8:78:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Oct 11 13:58:04 2025 GMT
            Not After : Oct 10 14:03:04 2026 GMT
        Subject: CN=E97EEBD200D873C023BD1F5D6E1D70517BD0AA3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9b:d0:6a:fa:b7:7c:df:ea:da:8f:a2:ca:db:
                    5e:b1:b5:17:66:1f:93:57:c2:81:ad:0d:30:43:ce:
                    7f:cd:12:d7:6b:b1:b6:4b:d2:d0:c4:ec:e8:1d:50:
                    25:f4:a3:82:2c:15:42:77:77:38:4b:fd:c3:3e:1a:
                    df:c7:b5:b4:df:7b:17:6f:44:99:6f:dd:00:30:02:
                    74:89:4e:b1:26:7a:f4:dc:60:30:c9:6c:74:e7:89:
                    ac:b9:bb:47:5e:73:4a:20:00:1b:d1:48:a4:74:b9:
                    c4:c4:d8:2b:c0:29:95:a0:f1:e2:48:48:5a:b6:3a:
                    89:b3:0d:6d:5c:3e:a6:84:71:57:2e:a4:28:22:ce:
                    8a:0d:fe:1e:49:4b:72:d8:5d:5f:ef:2d:1b:66:c9:
                    a9:ed:29:9d:8b:40:51:5d:76:57:82:46:68:96:1f:
                    ba:c2:ad:de:9b:08:f3:e3:f8:91:05:f6:eb:ef:82:
                    73:f1:c7:43:d7:02:e8:b2:74:85:90:44:13:d8:63:
                    e6:57:ce:be:66:0c:c6:55:63:87:33:13:00:3a:1a:
                    cc:bb:6b:55:5e:56:9c:ef:7a:90:84:08:5e:8d:81:
                    4f:90:a8:88:71:d2:5f:d4:79:59:ba:29:66:05:5f:
                    bb:f1:d2:40:05:93:24:be:6b:42:89:98:82:1e:c6:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7E:EB:D2:00:D8:73:C0:23:BD:1F:5D:6E:1D:70:51:7B:D0:AA:3A
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130302e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:1b:90:70:03:04:96:ee:92:f7:ab:66:e7:f8:b8:22:c5:a0:
         bb:18:98:cd:80:b7:4d:89:b5:c3:56:cd:94:f2:cf:8d:c0:1d:
         d6:d1:40:51:80:6a:0d:d7:50:6a:73:7a:51:0c:a0:d7:3e:f8:
         f5:0d:26:f0:df:8c:76:d8:58:35:21:07:2a:c7:fe:37:d3:fc:
         0b:50:c6:c4:f4:e2:e0:29:fd:5c:37:65:a1:6e:d6:e5:52:de:
         7a:57:02:eb:87:cf:9d:53:99:a5:9f:c4:6b:c3:d9:1a:43:5b:
         be:f5:1f:63:55:e9:d5:bf:32:71:c1:b9:10:56:6b:0f:30:bd:
         a5:da:83:b9:8b:41:f4:10:4a:20:30:61:38:dd:9e:1b:ca:97:
         f5:99:62:1c:70:02:99:8a:ab:c7:3d:d5:54:ee:62:ba:34:4b:
         cf:89:cd:c4:f5:f8:58:2f:c8:37:af:f5:65:26:d1:de:30:7b:
         99:96:b5:c1:42:3b:9c:36:98:6c:fe:06:53:05:49:6b:05:5a:
         cc:a1:2e:e0:25:11:c4:22:c9:8f:45:22:08:74:cc:7e:c7:25:
         d3:1c:55:18:c8:53:11:8c:06:d4:c5:2a:97:2d:0e:da:c3:d9:
         fd:31:b7:3c:64:3f:66:cc:bc:b3:65:03:73:b6:56:8d:4d:13:
         f4:63:38:43
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNoLqzxsHs1mM+HLsKIlfopL4eJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwOTE2Njk3Q0M3N0ExQTg3NkU0ODY1QkUwMkY1NUE4
RUZGOUJGMjAeFw0yNTEwMTExMzU4MDRaFw0yNjEwMTAxNDAzMDRaMDMxMTAvBgNV
BAMTKEU5N0VFQkQyMDBEODczQzAyM0JEMUY1RDZFMUQ3MDUxN0JEMEFBM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSm9Bq+rd83+raj6LK216xtRdm
H5NXwoGtDTBDzn/NEtdrsbZL0tDE7OgdUCX0o4IsFUJ3dzhL/cM+Gt/HtbTfexdv
RJlv3QAwAnSJTrEmevTcYDDJbHTniay5u0dec0ogABvRSKR0ucTE2CvAKZWg8eJI
SFq2OomzDW1cPqaEcVcupCgizooN/h5JS3LYXV/vLRtmyantKZ2LQFFddleCRmiW
H7rCrd6bCPPj+JEF9uvvgnPxx0PXAuiydIWQRBPYY+ZXzr5mDMZVY4czEwA6Gsy7
a1VeVpzvepCECF6NgU+QqIhx0l/UeVm6KWYFX7vx0kAFkyS+a0KJmIIexo+VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6X7r0gDYc8AjvR9dbh1wUXvQqjowHwYDVR0j
BBgwFoAUAwkWaXzHehqHbkhlvgL1Wo7/m/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMS8wMzA5MTY2OTdDQzc3QTFBODc2RTQ4NjVCRTAyRjU1QThFRkY5QkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMDkxNjY5N0NDNzdBMUE4
NzZFNDg2NUJFMDJGNTVBOEVGRjlCRjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzEv
MzEzNzM3MmUzMjMzMmUzMTMwMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxF2QwDQYJKoZIhvcNAQELBQADggEBAFYbkHAD
BJbukverZuf4uCLFoLsYmM2At02JtcNWzZTyz43AHdbRQFGAag3XUGpzelEMoNc+
+PUNJvDfjHbYWDUhByrH/jfT/AtQxsT04uAp/Vw3ZaFu1uVS3npXAuuHz51TmaWf
xGvD2RpDW771H2NV6dW/MnHBuRBWaw8wvaXag7mLQfQQSiAwYTjdnhvKl/WZYhxw
ApmKq8c91VTuYro0S8+JzcT1+FgvyDev9WUm0d4we5mWtcFCO5w2mGz+BlMFSWsF
WsyhLuAlEcQiyY9FIgh0zH7HJdMcVRjIUxGMBtTFKpctDtrD2f0xtzxkP2bMvLNl
A3O2Vo1NE/RjOEM=
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:53:30 2025 by rpki-client