Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130332e302f32342d3234203d3e20323633333437.roa
File:                     3137372e32332e3130332e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          gU2o+ppN9M4W3L/9LlPlIHs+TmH4U5A40wXVN8Wy9ys=
Subject key identifier:   A5:75:D7:48:8A:04:29:C0:49:50:45:4D:C2:F7:67:63:E3:4D:A7:10
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       158741B5A5D89C62406714FC0A25BEC6929269A5
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130332e302f32342d3234203d3e20323633333437.roa
Signing time:             Sat 11 Oct 2025 14:03:04 +0000
ROA not before:           Sat 11 Oct 2025 13:58:04 +0000
ROA not after:            Sat 10 Oct 2026 14:03:04 +0000
asID:                     263347
IP address blocks:        177.23.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:87:41:b5:a5:d8:9c:62:40:67:14:fc:0a:25:be:c6:92:92:69:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Oct 11 13:58:04 2025 GMT
            Not After : Oct 10 14:03:04 2026 GMT
        Subject: CN=A575D7488A0429C04950454DC2F76763E34DA710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2b:82:82:cb:b6:86:f5:bb:f3:81:be:b4:5d:
                    15:56:f0:f1:ba:c2:46:01:9f:be:d2:90:05:37:2a:
                    d1:35:55:da:46:77:90:0d:d6:b5:da:13:f7:75:04:
                    6c:b9:75:19:02:ba:d3:06:64:5a:e1:dd:0d:87:62:
                    07:8b:a7:f2:29:20:e2:c3:e4:27:4f:fc:2e:fe:eb:
                    3e:3e:c5:db:cf:e0:ff:e1:a7:09:d4:b8:f5:0a:23:
                    a7:db:a1:9e:21:86:44:f4:03:45:57:a1:a1:07:43:
                    5e:1d:6d:9b:67:fb:ce:44:b0:cb:f8:e2:26:22:fd:
                    18:90:11:ac:3b:6e:f9:85:0e:bb:1a:c8:cf:cb:45:
                    8b:15:b2:51:aa:b0:1d:27:67:f0:5a:6e:e8:83:a1:
                    25:cb:2a:78:b9:15:7e:e6:d2:c5:31:5a:04:00:f0:
                    c6:b3:cf:a7:03:1c:af:d1:71:60:62:65:c0:0e:4d:
                    a5:82:2f:2e:08:14:e3:b9:e3:33:ce:cf:19:0a:d2:
                    bc:47:28:ed:96:6c:92:5a:04:87:ea:f0:7e:e5:21:
                    9a:6d:96:83:38:a5:39:6f:e9:36:22:5c:94:a9:f7:
                    3b:3c:fa:08:4a:85:55:8d:b5:f0:3f:92:4b:eb:ab:
                    1b:63:70:9e:44:77:15:2c:23:74:bd:ca:20:9c:09:
                    80:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:75:D7:48:8A:04:29:C0:49:50:45:4D:C2:F7:67:63:E3:4D:A7:10
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130332e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:60:fc:b2:43:96:e9:b4:a8:7c:6e:e1:ca:37:aa:d2:8d:30:
         14:f4:78:7b:3c:6c:05:f3:7c:28:50:f3:7c:ef:b4:6b:06:92:
         68:45:f9:09:4a:3f:38:bb:9c:dc:bf:08:25:f3:0b:76:9b:6c:
         7c:d2:43:ad:7d:e2:fd:f8:6d:72:62:29:3b:db:3d:f4:48:20:
         f5:f0:08:54:17:fb:8f:e2:b2:89:97:98:d6:92:23:fe:5f:73:
         d3:ab:da:c6:8e:83:cc:d1:75:32:42:91:01:f5:3d:15:d0:7c:
         83:50:cc:d6:37:30:02:23:ad:f6:c5:97:e5:cb:c2:7f:2e:38:
         a8:16:1f:21:e8:c7:98:57:50:7b:6d:4f:58:8f:ea:06:1b:81:
         0a:39:c4:29:47:fc:a3:17:13:a5:cb:ce:5f:65:5a:c3:32:fb:
         86:dd:23:11:c3:e7:93:27:5b:19:19:2b:04:d6:2f:69:e7:cf:
         8c:73:ed:d7:15:27:61:b7:e1:7b:ea:e7:91:3d:02:4f:c8:1b:
         fa:ca:16:90:40:f9:ee:0d:6f:b0:0b:0e:2b:23:ce:f6:b2:0a:
         82:32:0b:5a:2e:01:55:6f:af:38:95:7d:0e:c4:fe:63:29:cc:
         56:7d:e8:59:75:c9:71:bd:ba:ed:44:fe:01:6d:46:3b:86:30:
         b9:43:91:62
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFYdBtaXYnGJAZxT8CiW+xpKSaaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwOTE2Njk3Q0M3N0ExQTg3NkU0ODY1QkUwMkY1NUE4
RUZGOUJGMjAeFw0yNTEwMTExMzU4MDRaFw0yNjEwMTAxNDAzMDRaMDMxMTAvBgNV
BAMTKEE1NzVENzQ4OEEwNDI5QzA0OTUwNDU0REMyRjc2NzYzRTM0REE3MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2K4KCy7aG9bvzgb60XRVW8PG6
wkYBn77SkAU3KtE1VdpGd5AN1rXaE/d1BGy5dRkCutMGZFrh3Q2HYgeLp/IpIOLD
5CdP/C7+6z4+xdvP4P/hpwnUuPUKI6fboZ4hhkT0A0VXoaEHQ14dbZtn+85EsMv4
4iYi/RiQEaw7bvmFDrsayM/LRYsVslGqsB0nZ/BabuiDoSXLKni5FX7m0sUxWgQA
8Mazz6cDHK/RcWBiZcAOTaWCLy4IFOO54zPOzxkK0rxHKO2WbJJaBIfq8H7lIZpt
loM4pTlv6TYiXJSp9zs8+ghKhVWNtfA/kkvrqxtjcJ5EdxUsI3S9yiCcCYBTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpXXXSIoEKcBJUEVNwvdnY+NNpxAwHwYDVR0j
BBgwFoAUAwkWaXzHehqHbkhlvgL1Wo7/m/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMS8wMzA5MTY2OTdDQzc3QTFBODc2RTQ4NjVCRTAyRjU1QThFRkY5QkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMDkxNjY5N0NDNzdBMUE4
NzZFNDg2NUJFMDJGNTVBOEVGRjlCRjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzEv
MzEzNzM3MmUzMjMzMmUzMTMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxF2cwDQYJKoZIhvcNAQELBQADggEBACpg/LJD
lum0qHxu4co3qtKNMBT0eHs8bAXzfChQ83zvtGsGkmhF+QlKPzi7nNy/CCXzC3ab
bHzSQ6194v34bXJiKTvbPfRIIPXwCFQX+4/isomXmNaSI/5fc9Or2saOg8zRdTJC
kQH1PRXQfINQzNY3MAIjrfbFl+XLwn8uOKgWHyHox5hXUHttT1iP6gYbgQo5xClH
/KMXE6XLzl9lWsMy+4bdIxHD55MnWxkZKwTWL2nnz4xz7dcVJ2G34Xvq55E9Ak/I
G/rKFpBA+e4Nb7ALDisjzvayCoIyC1ouAVVvrziVfQ7E/mMpzFZ96Fl1yXG9uu1E
/gFtRjuGMLlDkWI=
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:55:09 2025 by rpki-client