Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35352e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e35352e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          ZUZtiGzkaT5UFyT9usCuSd5leo7BZ62E2+lVFe9bU6k=
Subject key identifier:   DF:03:19:6F:BB:6A:83:C4:CC:A8:38:9A:6B:84:7F:2F:9E:E2:A8:BB
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       758D508F630A20ACD39AA6A3C5041118EA4B91DE
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35352e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 10 Oct 2025 20:58:19 +0000
ROA not before:           Fri 10 Oct 2025 20:53:19 +0000
ROA not after:            Fri 09 Oct 2026 20:58:19 +0000
asID:                     263347
IP address blocks:        191.37.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8d:50:8f:63:0a:20:ac:d3:9a:a6:a3:c5:04:11:18:ea:4b:91:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Oct 10 20:53:19 2025 GMT
            Not After : Oct  9 20:58:19 2026 GMT
        Subject: CN=DF03196FBB6A83C4CCA8389A6B847F2F9EE2A8BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:07:8f:38:25:e2:97:1e:1c:91:3a:dd:52:
                    aa:98:cd:28:01:b7:5c:4a:26:6e:95:bb:24:dd:d2:
                    bd:20:ae:b1:82:38:44:1b:e3:65:6c:bd:a9:d3:4a:
                    a1:b9:f8:c5:da:ba:5d:9d:04:85:ce:3c:14:84:38:
                    a5:f1:3f:f7:d2:b2:10:37:93:0a:aa:0d:ed:c1:a4:
                    12:92:2e:b4:6a:79:e6:2f:3b:86:80:b7:9d:b7:a1:
                    aa:7d:1b:47:22:80:8f:a8:69:4d:5a:82:28:ed:f3:
                    4c:25:ff:1c:48:e4:a8:11:85:1b:f2:e5:05:93:7c:
                    c6:37:82:83:92:00:58:de:89:bb:fe:54:ff:56:59:
                    4e:17:ad:b8:bf:0a:d8:0d:c8:0e:bf:a8:88:85:6e:
                    2c:37:df:dd:8d:10:a7:91:e8:75:30:3c:48:76:e1:
                    25:f7:06:5f:50:88:5a:a9:e1:ad:b1:e4:12:35:a4:
                    b3:9b:1b:e6:7a:51:b3:80:8a:9a:2c:4f:c0:f3:58:
                    ae:52:6c:dd:6e:bb:5f:b0:e2:79:a2:75:03:07:33:
                    58:8f:6b:56:96:9c:ba:71:79:a8:4f:97:68:e9:61:
                    37:59:ca:65:cc:c7:e7:ce:6a:06:18:d3:0c:d9:29:
                    ea:ce:f3:ee:1f:31:59:9c:75:6d:e1:2e:1d:09:55:
                    20:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:03:19:6F:BB:6A:83:C4:CC:A8:38:9A:6B:84:7F:2F:9E:E2:A8:BB
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35352e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:b7:e4:ca:89:18:f2:1a:79:89:29:5c:e6:78:90:12:49:ce:
         3a:e4:13:94:fe:69:2d:c5:4d:a7:84:d3:8a:c2:6a:a9:f4:47:
         55:19:ff:d2:43:34:2a:84:28:ae:8e:f8:26:80:22:4a:07:af:
         e2:9e:4f:24:66:b1:3a:5b:df:05:81:a3:0d:c2:3c:0d:b9:34:
         9a:60:cc:d0:a3:18:10:f5:10:fc:8d:03:bd:78:ce:6c:7a:49:
         f0:82:af:ae:5b:87:33:7e:c6:9f:56:6e:f2:c7:e3:97:52:0e:
         35:ff:79:90:bc:f1:70:9f:a7:66:1d:f5:c6:98:e4:7a:7f:24:
         af:3b:73:db:d7:34:11:97:0c:56:47:f6:78:bd:57:6a:ab:a6:
         21:a5:99:c9:0b:6d:fc:3e:01:6d:3d:9c:08:1a:51:ee:49:d5:
         e5:5a:8b:b2:a8:6a:a8:34:70:ad:0c:85:99:d0:73:15:9b:5e:
         05:cd:dd:8f:70:33:32:9f:66:7a:2f:98:93:b3:e5:a1:ff:67:
         74:d5:b0:70:e4:46:26:ba:64:26:b7:f6:42:c4:be:62:87:4b:
         cb:96:1a:c7:39:b3:24:d6:01:75:6e:1e:b1:b8:85:34:03:b8:
         c3:5d:d2:a6:6f:8b:1b:a7:b7:d7:31:e2:13:37:6f:9e:01:d0:
         50:7b:98:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:25:01 2025 by rpki-client