Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e36302e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e36302e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          mZashoiNGEI/yD4SNMQjROp2mZ9EXzeAHojrQLMM7jc=
Subject key identifier:   4A:B7:07:BE:E6:94:E2:EC:14:CC:A8:60:CE:5E:BB:E3:3D:7F:6B:9D
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       47B6B95E0591E03B3E675BBAABD32A9ED8C6013C
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e36302e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 10 Oct 2025 20:58:19 +0000
ROA not before:           Fri 10 Oct 2025 20:53:19 +0000
ROA not after:            Fri 09 Oct 2026 20:58:19 +0000
asID:                     263347
IP address blocks:        191.37.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b6:b9:5e:05:91:e0:3b:3e:67:5b:ba:ab:d3:2a:9e:d8:c6:01:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Oct 10 20:53:19 2025 GMT
            Not After : Oct  9 20:58:19 2026 GMT
        Subject: CN=4AB707BEE694E2EC14CCA860CE5EBBE33D7F6B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:65:29:25:f9:0b:4a:14:e2:e8:5f:06:58:ed:
                    e4:db:d6:38:bd:00:a7:95:6e:e6:e4:1a:be:d2:d3:
                    72:73:62:ad:c5:23:56:4e:0d:8b:35:e8:7d:cf:6f:
                    b4:21:dd:c2:0c:20:ff:8f:79:ce:2a:cf:d5:e6:fc:
                    78:a8:8d:0f:e3:81:4f:3f:27:39:8f:66:8d:c7:38:
                    a1:19:93:14:51:d8:14:dc:9f:da:f2:02:7e:40:88:
                    4f:1b:e3:eb:cc:70:e3:8b:92:5f:4c:b0:57:2d:23:
                    31:ef:f3:4f:a9:94:25:cf:30:e0:68:9b:5e:4e:bb:
                    88:74:ff:db:d9:6a:ae:18:9a:ce:3b:e8:7f:71:a1:
                    b0:c5:de:0f:a0:88:ba:69:cb:6b:a5:25:db:da:87:
                    7c:56:04:f6:12:49:0a:fa:f1:fb:34:6b:da:a1:35:
                    34:61:3c:6b:16:29:08:b0:a2:f8:6f:a3:ef:af:57:
                    41:fe:88:c6:aa:25:4d:28:d0:a8:47:52:c9:e9:d3:
                    3e:72:3f:52:10:12:94:68:a0:20:48:e8:a5:bf:a3:
                    9c:ec:9d:b4:4b:bd:e8:21:a6:5d:0f:85:50:c4:26:
                    43:be:e7:40:12:4d:f2:d9:ba:1b:a8:74:38:c3:37:
                    6f:4f:8a:cd:4d:80:a5:9d:71:b9:aa:9f:ac:89:c2:
                    6e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B7:07:BE:E6:94:E2:EC:14:CC:A8:60:CE:5E:BB:E3:3D:7F:6B:9D
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e36302e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:b8:bc:44:85:85:36:80:cb:7e:dd:d3:e6:79:16:33:66:fe:
         6e:13:c1:a7:11:15:a5:9a:6b:35:5f:d5:60:36:12:af:de:b2:
         81:56:29:5f:4f:76:4d:c9:0d:19:79:ba:3e:1b:4d:c6:93:0f:
         32:98:6c:10:cf:b2:75:1c:cc:6d:a6:13:a2:b1:03:71:9e:8f:
         66:96:f3:9a:58:17:a4:87:c5:e0:46:b5:f6:1a:25:4c:98:f1:
         0d:23:f7:61:12:9f:ce:fc:43:94:13:0d:0a:5a:0d:03:03:4d:
         3f:79:e5:4c:7f:5b:76:ae:fe:d0:a8:ef:b4:dc:cf:e7:29:7d:
         95:ce:5c:c8:4b:19:12:c0:e1:4f:0b:7d:32:a7:e0:e1:ae:27:
         b1:84:e3:d2:3d:cb:14:d9:4a:a6:96:82:96:2d:b6:72:3d:d0:
         b4:05:e9:b4:fa:1e:23:70:09:69:09:d5:31:31:d1:0f:db:bd:
         9f:41:12:97:c7:82:7e:d3:3d:55:b4:b8:82:77:8f:70:8a:7a:
         d9:0b:ff:a8:72:73:d4:9a:9b:b5:3b:c6:75:56:2a:e1:05:75:
         77:61:98:df:4c:61:ea:9a:9b:1a:49:4a:01:ae:ed:2c:42:e6:
         41:71:81:7a:32:95:23:33:af:f5:1b:f8:8f:83:7d:8f:10:4a:
         da:04:42:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:09:39 2025 by rpki-client