Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33382e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e33382e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          tE1ecHsxW/biEKZRR+KxoSxF7Gcj1Td0LlrsJQ5r+gI=
Subject key identifier:   A0:62:7C:C2:A0:84:80:DF:1E:EB:7F:73:9F:3F:FD:A0:79:75:14:EA
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       72DDBEBBB85AEF804943084787CA4612FC57165F
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33382e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 10 Oct 2025 11:56:02 +0000
ROA not before:           Fri 10 Oct 2025 11:51:02 +0000
ROA not after:            Fri 09 Oct 2026 11:56:02 +0000
asID:                     263347
IP address blocks:        191.37.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:dd:be:bb:b8:5a:ef:80:49:43:08:47:87:ca:46:12:fc:57:16:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Oct 10 11:51:02 2025 GMT
            Not After : Oct  9 11:56:02 2026 GMT
        Subject: CN=A0627CC2A08480DF1EEB7F739F3FFDA0797514EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:4a:8a:43:8c:5c:fb:26:4b:f9:5d:13:19:
                    72:48:c2:4f:73:c9:46:65:58:60:92:c6:25:f1:92:
                    27:60:85:f6:91:44:d9:fb:61:2b:b8:cc:6f:eb:14:
                    ab:eb:cc:af:49:eb:34:dd:75:1a:c2:af:08:50:1b:
                    94:8b:8f:36:93:9e:b4:6f:ab:e0:05:56:e8:05:be:
                    a0:65:2a:28:c2:32:0e:a3:51:f7:93:fc:d5:1c:86:
                    df:5f:3f:57:b2:bb:9f:a5:ec:e9:47:e0:e1:8d:4a:
                    40:1f:3d:91:24:c4:c2:35:84:f7:81:0c:fd:ae:7b:
                    d6:ac:61:da:2c:82:63:6a:ea:5a:8c:4d:59:4a:5b:
                    7a:7c:a7:28:cf:11:4e:36:84:92:98:82:f4:d7:de:
                    57:fa:03:78:e1:55:c0:9b:1d:0b:e8:f0:19:68:d8:
                    31:c2:f3:ad:53:28:d3:ad:f1:71:94:f9:8d:81:fd:
                    1b:82:01:f3:35:1d:e3:0e:76:93:56:3a:10:53:c3:
                    41:a7:a8:97:2d:7b:60:1e:60:14:ea:e8:e3:3b:9f:
                    fe:d5:53:0d:a2:7f:00:d7:16:00:62:c4:46:e6:6e:
                    3c:8e:05:20:c1:cc:a9:22:a2:a5:97:ff:0d:82:bd:
                    5e:a5:14:4a:80:00:4c:6b:12:ae:33:90:74:43:20:
                    3f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:62:7C:C2:A0:84:80:DF:1E:EB:7F:73:9F:3F:FD:A0:79:75:14:EA
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33382e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:91:7c:fb:52:bf:05:f6:ce:9a:35:b7:b4:5c:62:c9:39:50:
         77:93:33:5c:ee:ed:3b:ea:c5:48:e8:8e:eb:4c:49:21:e1:ba:
         fd:81:a0:04:75:6f:7b:cc:f6:b9:e1:81:d6:b6:97:f6:91:02:
         df:e2:17:b6:3e:f7:f2:eb:53:9d:fc:6d:70:c9:a5:d4:53:b4:
         ee:85:7e:f5:a1:cf:f5:67:98:10:cf:3d:ef:28:5b:ce:2b:d9:
         8c:4d:1c:ab:0e:2d:ef:c3:42:81:e9:32:f9:4b:59:b1:91:ca:
         02:70:d9:c2:65:8b:89:bc:f2:6c:cf:e9:fb:26:be:af:69:3a:
         c9:ba:04:0f:7f:d9:02:dd:91:cd:a0:c6:db:ef:c9:78:53:8e:
         72:84:f6:3c:a9:f9:11:1f:ab:37:4f:12:70:6d:ec:de:78:fb:
         e4:18:52:d9:df:94:a9:43:10:74:f6:2a:98:bd:29:b9:a0:76:
         8b:88:1a:aa:d9:0b:86:9b:55:9e:3c:93:37:12:0c:0c:9c:cf:
         e5:b6:6c:8e:40:35:f5:8f:c8:a4:8a:d3:16:0b:39:30:02:e9:
         11:b6:b2:f3:11:6b:10:3c:50:ae:64:7e:bf:b9:1d:0e:53:fe:
         56:be:d2:c5:54:59:a4:24:22:d3:59:9d:99:ee:46:68:c9:36:
         58:b9:40:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:53:30 2025 by rpki-client