Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33352e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e33352e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          BFcZxhB5Su6/ZGexlR6Pwik/kEUIBz0q9YDt6IjEECo=
Subject key identifier:   39:21:7C:03:B7:89:E2:99:2A:C0:23:85:E5:6B:55:54:1B:E7:45:7B
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       583C03FF18B05DC54C885B3D7979D4BD2BCD511D
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33352e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 10 Oct 2025 13:56:07 +0000
ROA not before:           Fri 10 Oct 2025 13:51:07 +0000
ROA not after:            Fri 09 Oct 2026 13:56:07 +0000
asID:                     263347
IP address blocks:        191.37.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3c:03:ff:18:b0:5d:c5:4c:88:5b:3d:79:79:d4:bd:2b:cd:51:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Oct 10 13:51:07 2025 GMT
            Not After : Oct  9 13:56:07 2026 GMT
        Subject: CN=39217C03B789E2992AC02385E56B55541BE7457B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:86:62:2b:7d:35:04:9a:eb:f6:67:cc:1e:b3:
                    6b:5d:a3:7a:df:74:a4:f3:da:a2:ce:13:35:2f:69:
                    d2:70:60:7f:8d:83:f5:be:28:c8:70:17:78:1e:fd:
                    43:bf:6e:09:91:c2:4e:e9:ad:9e:bc:16:e9:37:13:
                    04:e1:12:8d:5e:a2:d1:ed:61:3a:37:31:21:a0:f6:
                    d0:85:d2:66:33:33:43:44:a8:f8:03:c8:d7:fc:70:
                    a2:b2:3c:52:45:40:a1:a4:8a:91:e0:24:f5:26:11:
                    b3:76:a8:5a:43:80:a2:73:45:60:1d:ed:0a:93:80:
                    46:c6:b8:e4:11:e8:44:d4:60:2d:e6:e4:89:dd:09:
                    34:2b:3b:c9:7e:19:06:e8:24:97:b1:c6:cf:c9:3a:
                    f4:01:31:6a:52:bd:06:18:19:4b:29:cf:4d:6e:d6:
                    ea:93:9a:36:3b:bc:0c:cc:04:5e:0c:59:34:76:7c:
                    e8:f9:2b:a4:ba:85:de:f2:20:ad:12:c1:ce:98:f1:
                    0e:df:10:f5:45:d7:15:d9:3c:71:f5:78:90:de:5f:
                    63:52:66:f7:14:73:38:d3:14:56:d8:d6:a6:de:24:
                    ba:56:e6:c5:4f:ff:64:3c:08:f5:02:2a:94:31:27:
                    cf:f4:0b:a3:0d:5c:4c:59:94:89:70:cf:a7:5a:6f:
                    e8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:21:7C:03:B7:89:E2:99:2A:C0:23:85:E5:6B:55:54:1B:E7:45:7B
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33352e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:58:f1:c1:b7:4a:2c:3d:bc:4c:4b:bb:da:b0:32:ad:fe:82:
         da:2a:dd:8e:4c:0e:33:0d:c2:d9:e9:37:4b:e0:64:c1:08:dd:
         91:08:8f:8d:47:c3:f3:2f:a8:c0:67:f1:b9:fe:d7:5a:90:3b:
         81:af:c2:31:2e:13:bc:fd:a1:3d:82:ab:ed:0a:d4:f8:ce:0f:
         fc:96:6a:04:b8:7c:ac:d6:bb:c7:3e:cf:8a:3e:61:34:4f:e6:
         6a:1b:84:5e:49:62:00:e5:9e:7a:9b:a2:9b:ff:b3:de:26:cd:
         1b:89:39:c4:15:7c:8b:2a:be:7d:7d:d7:06:1b:72:78:44:df:
         1a:59:e7:e6:75:d8:1f:59:24:0c:e2:84:00:d9:ff:4e:25:37:
         09:4f:50:36:11:d0:1d:3d:a3:04:77:4c:53:81:3e:11:3c:71:
         f8:6e:4e:22:6f:4a:48:82:0a:91:f8:7b:32:0c:d2:62:32:5a:
         0c:58:f9:d2:f6:ec:cc:a5:8a:5a:bf:ee:53:fd:d8:61:61:20:
         08:0f:73:02:69:34:d6:a8:0f:43:72:18:50:2e:a7:de:1e:5b:
         41:f4:99:e7:08:fc:b6:09:fe:bb:d5:ba:68:05:a9:9e:0d:59:
         ed:39:a5:78:65:56:4f:3a:cc:36:f3:c4:57:98:53:8b:b1:8b:
         c9:7a:9b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:01:25 2025 by rpki-client