Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e36322e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e36322e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          eOjnHv7Nk6tAwIpP51papSY/tW4YxDVPzHWaBHf6uLI=
Subject key identifier:   D2:D8:08:B6:19:93:A2:91:95:0A:4D:F5:0E:5D:A4:2F:38:AE:40:8B
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       712E8C2C3223222A73FD9F98BF3E59082D93C0BA
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e36322e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 10 Oct 2025 20:58:17 +0000
ROA not before:           Fri 10 Oct 2025 20:53:17 +0000
ROA not after:            Fri 09 Oct 2026 20:58:17 +0000
asID:                     263347
IP address blocks:        191.37.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2e:8c:2c:32:23:22:2a:73:fd:9f:98:bf:3e:59:08:2d:93:c0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Oct 10 20:53:17 2025 GMT
            Not After : Oct  9 20:58:17 2026 GMT
        Subject: CN=D2D808B61993A291950A4DF50E5DA42F38AE408B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:1b:a7:34:04:a8:5e:73:5a:f6:a8:c2:28:
                    6d:8d:9c:15:63:72:ac:20:f3:61:a8:7c:86:8d:91:
                    72:4b:5b:b5:00:fb:65:f4:15:a1:ed:5f:44:0c:86:
                    2f:c2:11:2e:e2:5e:0a:a3:08:92:bc:28:da:47:21:
                    92:03:fb:62:c5:ba:fa:2c:5d:3e:90:a8:a5:08:2f:
                    70:71:86:d8:b9:9a:fb:00:c1:fd:d4:dc:ca:b8:0e:
                    2e:1a:14:98:75:58:b2:88:eb:4c:4b:85:91:43:10:
                    ea:21:3f:a2:1b:32:28:00:a3:0d:43:07:98:02:de:
                    ee:a1:6b:07:9c:0c:86:81:09:87:d7:a2:1a:49:39:
                    a8:b1:ad:31:97:5d:12:5f:31:e9:a4:e3:b1:f2:56:
                    a0:4a:31:9b:bf:ce:5d:e2:17:9b:43:85:00:b0:24:
                    a8:3f:5a:a1:4a:e1:36:7a:b6:71:e6:c9:fc:a0:98:
                    01:bb:c9:d2:1d:3f:0d:d7:1c:48:9e:0a:d8:44:1f:
                    65:df:81:c1:ed:19:e7:84:4a:98:5d:a3:cd:3d:aa:
                    f3:b8:68:0f:b5:d9:d4:bf:e8:ca:64:21:87:e1:f4:
                    9c:58:01:78:7a:a0:fe:9f:e5:c6:12:86:fc:b3:d7:
                    d0:59:1a:fe:20:1f:c1:f6:5a:45:fb:3c:60:c0:81:
                    12:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D8:08:B6:19:93:A2:91:95:0A:4D:F5:0E:5D:A4:2F:38:AE:40:8B
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e36322e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:e9:e3:9c:b9:bd:be:83:4d:8a:df:86:b3:79:8e:97:b1:53:
         97:8a:49:6b:1e:9d:a9:29:18:13:6e:a6:0f:d4:17:cf:d6:96:
         c2:03:55:e1:91:0f:0b:dd:23:f9:a4:12:77:d0:c5:c0:39:4a:
         b7:a5:20:f4:8f:aa:7b:f9:69:c2:9e:d0:09:95:df:5d:54:f8:
         5b:28:9f:c2:19:61:a8:36:94:77:23:e2:af:c6:5a:5a:5e:a4:
         67:9e:9e:22:ab:f8:42:2c:56:62:de:ca:3f:cc:96:0d:85:ae:
         44:d4:11:ac:25:52:44:a0:50:f9:c5:d1:76:b4:a4:3d:1f:bf:
         32:dc:05:48:d2:82:91:2a:f5:a7:10:75:4a:29:8e:d2:7e:22:
         48:93:20:e4:92:fe:ad:87:d1:a8:f1:da:65:1a:92:ba:7c:53:
         d1:55:74:df:c5:a6:d6:29:60:73:b3:84:fa:75:09:d3:9b:72:
         3a:d9:bc:88:f0:e1:e6:d0:da:d8:7e:58:e8:4a:90:13:58:24:
         24:6e:4e:e1:36:0c:28:c4:c4:55:90:79:9d:62:11:a1:e8:1f:
         ef:31:e1:d6:54:03:4a:f4:d2:20:8c:8a:be:63:95:96:69:98:
         24:25:7a:f0:45:45:b7:ae:4c:da:e3:a2:b4:da:34:98:27:ad:
         c3:10:b3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:53:17 2025 by rpki-client