Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34342e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e34342e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          WlaoCOH7un53cXGbOaEfONKl3dL7d6TWLCNiCAih4TM=
Subject key identifier:   E4:E9:F0:05:71:F5:23:A0:82:EB:B7:80:CC:65:C4:83:8C:AA:E8:9C
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       4A7B5F679B83D448B5CEDA6D5504029433731221
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34342e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 09 Oct 2025 15:51:31 +0000
ROA not before:           Thu 09 Oct 2025 15:46:31 +0000
ROA not after:            Thu 08 Oct 2026 15:51:31 +0000
asID:                     263347
IP address blocks:        191.37.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7b:5f:67:9b:83:d4:48:b5:ce:da:6d:55:04:02:94:33:73:12:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Oct  9 15:46:31 2025 GMT
            Not After : Oct  8 15:51:31 2026 GMT
        Subject: CN=E4E9F00571F523A082EBB780CC65C4838CAAE89C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:19:44:ab:00:ef:38:07:60:13:6a:b1:cb:
                    38:54:73:d3:4e:95:ff:93:7e:04:14:84:a8:a6:8d:
                    b0:ca:f1:a3:6b:f0:27:a2:fb:a0:94:c5:58:55:c4:
                    24:7e:69:6e:8f:94:f9:0c:87:de:13:89:9c:78:29:
                    44:3a:64:db:d3:cb:2b:4c:4e:d8:4c:3a:a5:1f:d7:
                    37:27:ae:27:29:4e:26:c5:f9:d4:42:8e:c7:f8:7f:
                    0c:3b:25:cb:ac:c2:22:c7:b8:f4:79:e0:cb:9f:46:
                    d2:18:3e:48:83:2c:70:c6:4d:47:ec:e9:57:85:f0:
                    ec:ad:1b:5e:9b:04:e8:f7:ce:c8:c4:b4:08:3f:91:
                    ac:e6:c9:7d:d8:6a:9a:40:f1:ec:53:86:21:14:49:
                    4b:12:a5:e3:a0:10:ea:64:0c:2f:72:86:75:25:ad:
                    a6:1d:3d:45:60:c0:69:36:fb:af:c1:f1:bd:74:07:
                    e3:f4:12:0e:c1:3b:9b:e7:1a:a5:b5:ee:b1:55:91:
                    37:fc:90:36:6a:46:ec:ff:84:68:1c:e7:ce:c6:27:
                    8a:2d:76:89:88:48:9b:9e:ab:25:7f:61:14:1e:a2:
                    19:d0:95:17:7c:ec:ab:78:b1:fb:43:7a:4c:88:94:
                    9d:da:ab:d2:e6:1b:84:41:be:75:03:7e:39:7b:9c:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E9:F0:05:71:F5:23:A0:82:EB:B7:80:CC:65:C4:83:8C:AA:E8:9C
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34342e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:08:1c:00:20:80:f6:a9:40:c9:f5:bf:98:43:e3:97:9a:ba:
         d8:1f:c9:45:47:db:f8:ed:7e:58:a6:42:a1:25:0e:af:a1:6a:
         50:9e:8d:21:c2:4f:f8:cf:35:6f:15:21:43:36:04:4c:0f:d6:
         bc:d3:11:4b:94:70:f5:0b:f6:29:0b:c6:b8:d6:a3:af:b4:c9:
         ed:80:8c:7f:22:2d:bb:9c:2e:8b:7b:fc:1b:08:53:1d:25:f7:
         89:18:66:04:73:9e:05:b7:e6:46:b4:95:2b:49:a6:7b:d1:32:
         18:7e:1d:0a:16:42:37:c4:a3:6f:11:61:13:5e:13:41:9f:11:
         75:2b:f4:84:30:2c:35:76:81:9a:53:53:aa:8e:67:ac:81:12:
         ad:34:c2:e8:2d:01:8a:e0:c2:12:d4:b6:01:2c:c3:65:54:ba:
         20:16:d5:8a:bd:40:3b:d3:73:36:8f:c1:4b:ab:18:62:4c:ec:
         6b:25:0b:a4:8d:e5:69:fe:24:94:c8:83:43:5f:64:27:b9:9b:
         51:c0:d2:fb:46:1f:65:19:86:7e:71:7c:be:1f:23:34:95:dd:
         69:ad:8a:6f:ea:f9:20:6e:b8:b1:16:f9:82:15:ca:b8:4e:8c:
         2c:07:35:ba:27:81:11:cf:e9:d3:34:a1:49:c2:54:bc:f4:bb:
         46:bc:33:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:35:43 2025 by rpki-client