Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35372e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e35372e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          VZJOlRvdUTc87jZAyLdJUMusuOUKH7/8Z/soifRw9QM=
Subject key identifier:   83:59:C2:8C:B0:2E:2A:FB:E9:3E:15:FB:B7:CD:EC:25:FF:2B:3C:95
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       21529CDF87FADF208145E56BC3C91B2C0429AB35
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35372e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 10 Oct 2025 20:58:18 +0000
ROA not before:           Fri 10 Oct 2025 20:53:18 +0000
ROA not after:            Fri 09 Oct 2026 20:58:18 +0000
asID:                     263347
IP address blocks:        191.37.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:52:9c:df:87:fa:df:20:81:45:e5:6b:c3:c9:1b:2c:04:29:ab:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Oct 10 20:53:18 2025 GMT
            Not After : Oct  9 20:58:18 2026 GMT
        Subject: CN=8359C28CB02E2AFBE93E15FBB7CDEC25FF2B3C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:97:91:3e:36:d4:07:77:a2:ce:21:12:7f:53:
                    df:a0:ac:16:14:f8:6b:65:f5:d5:c9:3b:bc:e2:22:
                    73:e4:d7:98:d6:29:d5:7a:d6:2d:97:df:b4:e2:68:
                    3b:7e:c2:f0:69:97:90:f6:d8:28:d8:fa:14:1a:3d:
                    5f:40:fe:08:fd:9e:90:bd:31:0d:8f:16:4a:66:dd:
                    b0:a4:71:84:56:44:01:09:f4:52:86:1b:87:4c:92:
                    0d:cf:77:b7:39:69:bd:2b:57:8c:f9:41:c6:c6:ba:
                    ba:64:31:b2:e7:f1:2d:fd:73:2c:d9:87:26:3b:1f:
                    22:25:71:14:b1:2c:f5:47:e7:eb:7b:7e:ca:1e:22:
                    47:56:37:a4:e9:7c:ee:c2:25:ea:d6:a5:06:82:4e:
                    10:fb:1a:3e:d8:f2:1d:d4:03:82:c0:3c:68:94:05:
                    45:44:30:44:99:35:fa:5c:af:a7:83:6d:26:76:8a:
                    3f:39:09:6f:1c:48:84:50:c0:b4:21:19:70:91:45:
                    06:1d:21:c6:0b:4c:c7:74:ac:d9:bd:87:89:89:e1:
                    26:40:05:d1:73:82:29:2a:5c:21:fc:38:6a:cd:29:
                    97:af:2f:0b:e9:3d:c3:ea:2f:f4:46:39:04:15:00:
                    f2:ed:de:b7:37:64:b0:c9:5c:03:1d:ab:c5:49:61:
                    fc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:59:C2:8C:B0:2E:2A:FB:E9:3E:15:FB:B7:CD:EC:25:FF:2B:3C:95
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35372e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:cf:5c:b5:2b:94:5e:11:6d:82:6a:bd:16:85:76:38:5f:6e:
         fd:cc:92:07:84:16:f6:20:d5:d5:29:20:dc:47:68:03:9c:c4:
         19:55:49:d8:2d:5d:20:58:28:0a:89:9f:a8:b9:df:8e:8d:0e:
         c5:4e:08:46:62:b3:b7:ff:b3:c9:f1:4f:31:81:de:68:bb:e5:
         00:29:e9:3a:15:35:f8:ac:b0:16:ee:52:88:3c:f6:c2:74:b2:
         b3:a4:69:1d:0b:9c:b8:91:69:52:f1:6b:f1:38:2b:1c:d9:34:
         6d:d4:cb:58:a5:b2:27:dc:cf:e3:af:cf:1e:ba:2b:9a:42:77:
         a6:9f:75:76:0a:3f:65:f5:dd:66:99:f6:84:e0:ec:c5:3b:a6:
         a9:4c:8f:9e:9e:82:e7:a2:0b:39:42:fb:b0:1d:56:ac:5f:55:
         a3:cc:5a:d5:f4:34:9d:a4:46:97:31:30:10:20:f7:30:aa:53:
         35:5a:41:c9:4f:2f:e5:31:bb:5b:c3:be:36:35:1a:22:f8:7a:
         d9:2f:0a:2e:f4:ce:6d:f6:e8:e2:92:db:52:66:45:29:5a:37:
         49:49:ab:f3:16:2d:92:f5:0c:1a:01:b8:53:5a:68:ae:c4:97:
         58:c2:b6:39:af:9e:6c:ff:9e:b3:d4:71:be:39:e1:b1:5d:b5:
         4b:58:11:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:35:08 2025 by rpki-client