Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e36312e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e36312e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          WTwIWG89T12yQObnRkRHJPAkQiZZ+wAQUZmgVBoijw8=
Subject key identifier:   C8:67:0D:6A:3F:D9:BD:A9:CD:88:E9:78:25:F6:FA:A6:F9:1F:F1:78
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       17E4BF2500B496E0A2443BED125E1D2DDA3DCE6A
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e36312e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 10 Oct 2025 20:58:18 +0000
ROA not before:           Fri 10 Oct 2025 20:53:18 +0000
ROA not after:            Fri 09 Oct 2026 20:58:18 +0000
asID:                     263347
IP address blocks:        191.37.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e4:bf:25:00:b4:96:e0:a2:44:3b:ed:12:5e:1d:2d:da:3d:ce:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Oct 10 20:53:18 2025 GMT
            Not After : Oct  9 20:58:18 2026 GMT
        Subject: CN=C8670D6A3FD9BDA9CD88E97825F6FAA6F91FF178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:21:3f:13:bc:ac:f3:1e:b4:81:21:38:bf:
                    9e:30:91:53:36:12:75:86:35:38:cb:33:b3:3a:0a:
                    6c:75:11:a0:93:b2:6b:d3:34:b8:41:35:4c:4c:68:
                    e1:ba:f4:1a:d4:98:c9:f8:b8:c3:fb:e5:88:bd:b9:
                    af:dc:a9:f0:03:0b:54:75:02:54:ab:fb:61:b5:40:
                    94:0d:4f:2d:5b:1c:6a:cf:45:15:e6:42:94:7f:91:
                    34:20:c0:86:35:11:75:67:f6:02:cd:05:fd:8e:0c:
                    d7:48:9f:d6:c1:64:2a:c7:da:d0:51:81:44:d8:a8:
                    dc:37:ad:08:78:fc:7d:56:b5:27:7e:a9:fc:b1:c8:
                    77:47:61:fa:aa:2d:c1:a2:6d:6e:30:50:e1:d6:12:
                    b2:69:f4:77:5c:66:5b:5c:e6:6d:ae:fa:0b:a8:b8:
                    22:67:ac:80:60:b9:d3:ef:e0:30:05:2a:59:d9:ae:
                    9c:80:5d:70:f4:54:ea:3f:e7:53:7b:90:ff:05:6b:
                    7d:08:1c:4f:09:bc:e8:f6:eb:ee:d4:0f:51:89:9b:
                    0d:94:2c:2c:b8:71:a6:e0:6e:ef:6c:90:94:84:d7:
                    a3:8c:57:86:86:41:7a:f4:a4:27:f0:c8:42:8b:ae:
                    aa:79:26:57:23:f0:bf:62:8b:e0:c5:9e:1c:33:a9:
                    f3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:67:0D:6A:3F:D9:BD:A9:CD:88:E9:78:25:F6:FA:A6:F9:1F:F1:78
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e36312e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:fc:a2:7a:27:8e:e2:d8:5b:a7:03:fc:51:4e:4b:5f:37:27:
         d1:05:47:b4:f7:40:8c:dc:14:e6:b0:2b:48:d1:53:f0:1f:2e:
         da:65:32:b7:72:b1:24:ea:cc:81:40:64:77:d4:42:1e:37:97:
         80:58:61:c0:25:8a:d4:e2:53:bf:9d:94:4f:c7:60:73:72:e6:
         80:8e:47:4e:a8:cf:5a:35:49:a0:75:95:90:d9:bf:0a:7c:f9:
         b1:13:47:7c:da:e8:8f:33:70:1a:6e:81:af:4b:ef:ae:b1:b4:
         59:04:83:ea:0c:47:b6:24:81:88:b0:d8:93:a9:36:31:c1:7e:
         b9:46:5e:34:03:b7:f7:9d:3d:c5:dd:17:c6:83:a5:d1:97:59:
         0e:f7:f5:a3:e8:f1:12:05:9c:65:f3:f4:4f:43:a9:7c:ed:e3:
         76:08:1e:a9:9a:07:55:d0:b2:eb:41:17:be:a2:96:6f:f9:03:
         50:cb:30:91:2b:20:01:de:f9:77:63:16:0b:9d:5a:73:03:e2:
         75:0d:7e:26:76:9a:1a:15:94:ca:76:35:e5:63:75:64:e6:6c:
         53:7f:3c:75:da:e4:ed:ba:21:da:39:47:2e:58:07:b8:de:6e:
         81:07:14:bf:08:b0:9f:53:88:4f:9b:12:50:d5:af:c1:86:89:
         b5:8d:69:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:01:25 2025 by rpki-client