Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33342e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e33342e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          wuH5uEFss1nuCXsEHmZH/ly9b+LxfvBN+/CdGrSZ4fs=
Subject key identifier:   5C:9D:BB:7B:76:8F:8A:5B:00:27:F3:1D:50:D7:F3:23:44:73:9E:7A
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       533F21CAAC871D095D3B97BABFF17696693103E5
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33342e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 10 Oct 2025 13:56:09 +0000
ROA not before:           Fri 10 Oct 2025 13:51:09 +0000
ROA not after:            Fri 09 Oct 2026 13:56:09 +0000
asID:                     263347
IP address blocks:        191.37.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3f:21:ca:ac:87:1d:09:5d:3b:97:ba:bf:f1:76:96:69:31:03:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Oct 10 13:51:09 2025 GMT
            Not After : Oct  9 13:56:09 2026 GMT
        Subject: CN=5C9DBB7B768F8A5B0027F31D50D7F32344739E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bc:c2:7f:d0:10:05:21:c9:3f:4c:53:23:c7:
                    99:98:ce:de:b6:8c:fa:4e:9d:f3:b2:ab:f0:ea:69:
                    d7:8d:f0:56:d3:cd:2a:c8:75:ed:3b:23:5f:e8:65:
                    d8:19:3b:8a:d6:bd:65:3e:1c:0e:e3:b6:fa:36:cb:
                    0a:1c:95:95:25:11:d8:72:24:b2:fa:39:22:ac:ea:
                    a8:fe:82:a0:05:20:0a:07:eb:d4:99:61:ce:f0:d0:
                    22:c1:e2:e7:39:54:c5:de:59:50:9d:a9:12:f1:08:
                    fa:f9:ab:3c:fe:6d:85:4d:4e:81:26:c5:d2:b6:df:
                    b5:49:5c:6e:1d:7a:b7:cd:60:0c:49:a8:23:72:15:
                    33:54:d8:03:15:ff:3a:b2:c3:10:50:4e:ab:46:3e:
                    c6:25:fe:48:2d:11:3b:7b:f9:45:80:a3:a7:49:a4:
                    98:28:27:56:23:c6:4b:7e:d6:a1:bb:49:0c:b6:76:
                    15:b1:fa:8d:8a:63:6b:18:7b:86:d8:da:c2:d0:16:
                    c0:fd:94:fc:8d:b5:38:d1:4e:90:57:3f:cd:75:e0:
                    b5:a1:b4:c0:5f:41:d9:47:a8:2c:20:47:c8:59:93:
                    db:a8:b2:a0:b0:0d:19:33:2e:9f:54:c9:ae:88:8c:
                    53:90:eb:0d:ea:c4:c7:54:39:71:c3:fc:1c:36:2b:
                    fc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9D:BB:7B:76:8F:8A:5B:00:27:F3:1D:50:D7:F3:23:44:73:9E:7A
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33342e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:5d:79:b5:e9:3c:8a:82:a5:af:03:93:b1:93:90:61:1c:a3:
         b9:b8:dc:3c:38:33:e3:88:94:2f:99:ab:f1:9f:e3:fb:37:0d:
         f3:4e:5c:59:44:5a:53:52:0b:3e:ee:e2:94:00:ef:96:63:a1:
         97:aa:03:7d:f6:4c:a1:fd:a1:3d:f0:f8:18:a0:28:21:fa:6f:
         2c:18:94:4b:e4:37:11:20:9a:2e:c4:a2:e9:cd:94:76:6d:a7:
         58:95:f1:1d:7f:4e:c3:ca:df:ee:e3:f8:dd:bd:49:e5:13:e5:
         9f:ae:34:fb:97:75:64:5a:77:f7:7f:81:05:04:ba:b1:10:21:
         70:be:47:f0:c4:ed:01:38:03:d8:96:89:40:f4:f2:2c:42:cc:
         61:e0:e6:68:28:ee:91:05:65:6b:21:fe:b7:fe:28:ef:78:d2:
         d2:ac:3a:73:d6:60:fe:4f:1a:fc:4a:13:86:81:00:4c:5b:b1:
         06:15:93:cc:48:a7:fa:bf:31:3a:9c:c7:12:43:36:22:7d:0c:
         fa:b9:ad:0e:d4:45:dd:f6:8b:a1:2b:e0:b6:34:05:9a:c7:4f:
         f3:89:b3:9b:b2:be:db:a2:a3:27:91:f5:c9:1b:03:63:21:1a:
         85:c0:6d:48:46:e6:8d:5e:21:06:89:13:8c:d4:74:2a:0a:28:
         c9:91:07:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:35:34 2025 by rpki-client