Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3137372e36362e33322e302f32312d3234203d3e203532393939.roa
File:                     3137372e36362e33322e302f32312d3234203d3e203532393939.roa (raw, json)
Hash identifier:          npQO42+08CTJp3KYyIyirEqZJUDgnxI3c+1BtLKZdh4=
Subject key identifier:   2C:8C:CF:03:DF:7C:AC:18:2E:B0:9A:A4:36:36:D8:FC:56:55:BC:01
Certificate issuer:       /CN=6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF
Certificate serial:       05C74A749BB417A7A7797BA4703A395948795581
Authority key identifier: 6F:6A:82:1A:1D:5F:FC:AF:75:0D:DC:AB:46:26:E1:A4:1F:4E:0C:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3137372e36362e33322e302f32312d3234203d3e203532393939.roa
Signing time:             Mon 13 Oct 2025 17:59:20 +0000
ROA not before:           Mon 13 Oct 2025 17:54:20 +0000
ROA not after:            Mon 12 Oct 2026 17:59:20 +0000
asID:                     52999
IP address blocks:        177.66.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.crl
                          rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c7:4a:74:9b:b4:17:a7:a7:79:7b:a4:70:3a:39:59:48:79:55:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF
        Validity
            Not Before: Oct 13 17:54:20 2025 GMT
            Not After : Oct 12 17:59:20 2026 GMT
        Subject: CN=2C8CCF03DF7CAC182EB09AA43636D8FC5655BC01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2c:94:41:12:41:c2:50:5d:54:c6:33:5f:e3:
                    87:1d:38:a0:6e:47:9f:0a:ae:c9:7c:21:49:24:9a:
                    db:d1:d6:54:3f:93:6f:c7:c3:21:9f:df:e6:e1:1c:
                    c4:aa:82:a6:f4:b4:c2:f9:8c:25:53:b7:23:14:6a:
                    07:5d:ec:ea:ca:a6:73:16:8b:13:50:6c:28:c1:db:
                    59:6d:ee:ea:b5:63:5d:b3:22:86:ce:29:10:28:a2:
                    8c:23:e8:59:ed:0d:ef:98:6e:19:58:9d:74:f4:d9:
                    ca:1b:ff:82:4c:43:fe:8b:e2:05:d5:e3:8e:71:a4:
                    a8:53:e5:21:d0:65:c9:a7:2d:de:9d:6a:f7:0d:3d:
                    53:63:83:1f:86:f9:7f:c0:24:30:83:da:6d:67:e6:
                    51:4e:c3:3d:cc:49:bf:6e:52:54:89:2c:62:5a:78:
                    57:b3:3c:64:98:c1:23:8b:ad:ed:e2:a2:a9:47:e2:
                    31:d4:1e:ba:61:4e:58:2b:ba:ae:54:69:83:3c:b7:
                    4b:ff:3c:25:fc:e4:b9:eb:c9:91:5d:6e:4d:c4:40:
                    c2:64:25:f2:81:55:5a:e9:f4:ae:d1:21:03:35:59:
                    39:09:61:5c:93:75:0f:98:50:b1:42:b0:04:88:58:
                    07:28:0d:fa:c8:f9:f3:3f:f8:43:de:04:48:c6:0a:
                    24:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8C:CF:03:DF:7C:AC:18:2E:B0:9A:A4:36:36:D8:FC:56:55:BC:01
            X509v3 Authority Key Identifier:
                keyid:6F:6A:82:1A:1D:5F:FC:AF:75:0D:DC:AB:46:26:E1:A4:1F:4E:0C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3137372e36362e33322e302f32312d3234203d3e203532393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:47:90:2d:52:e4:4b:ea:f2:06:1a:79:bd:a1:94:30:8c:78:
         15:03:29:58:eb:83:63:b6:ac:4a:d0:72:66:f1:38:cb:66:cc:
         59:a1:fb:60:8e:56:f3:29:e8:e4:2b:d4:2e:6a:5c:64:3a:74:
         7c:a3:aa:d2:e1:6d:5d:4f:6f:b0:06:f1:62:78:97:df:b6:b1:
         2a:d5:5d:79:55:8b:25:31:d1:d2:85:e4:8e:e1:18:ab:d0:47:
         4c:78:46:4c:22:34:36:86:77:b5:e0:27:47:2a:58:e1:6e:f6:
         6a:5c:5a:72:d1:4e:13:20:d7:53:21:29:ca:75:f9:7c:78:c8:
         77:26:d5:17:4b:32:e2:8f:fe:ee:ac:0e:85:3b:1a:df:24:43:
         8e:2a:a3:da:f5:d6:2c:14:f1:24:ad:07:1b:94:e7:80:83:de:
         74:74:e2:3d:23:4d:3f:04:1a:dd:61:4c:61:6a:29:34:ca:9b:
         d0:68:4e:38:b0:3a:b0:b4:c1:c6:48:a3:23:97:d6:d7:99:ad:
         cb:27:cb:62:09:c7:24:3e:6c:71:b5:14:42:4a:b3:c0:18:0a:
         80:df:2c:f7:c8:65:c9:fa:57:96:a7:e4:9c:5b:b1:ee:25:9b:
         40:3c:48:19:1f:52:d7:d8:97:58:eb:e4:71:75:f8:2b:d3:3e:
         ee:93:de:84
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUBcdKdJu0F6eneXukcDo5WUh5VYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY2QTgyMUExRDVGRkNBRjc1MEREQ0FCNDYyNkUxQTQx
RjRFMENCRjAeFw0yNTEwMTMxNzU0MjBaFw0yNjEwMTIxNzU5MjBaMDMxMTAvBgNV
BAMTKDJDOENDRjAzREY3Q0FDMTgyRUIwOUFBNDM2MzZEOEZDNTY1NUJDMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjLJRBEkHCUF1UxjNf44cdOKBu
R58Krsl8IUkkmtvR1lQ/k2/HwyGf3+bhHMSqgqb0tML5jCVTtyMUagdd7OrKpnMW
ixNQbCjB21lt7uq1Y12zIobOKRAooowj6FntDe+YbhlYnXT02cob/4JMQ/6L4gXV
445xpKhT5SHQZcmnLd6davcNPVNjgx+G+X/AJDCD2m1n5lFOwz3MSb9uUlSJLGJa
eFezPGSYwSOLre3ioqlH4jHUHrphTlgruq5UaYM8t0v/PCX85LnryZFdbk3EQMJk
JfKBVVrp9K7RIQM1WTkJYVyTdQ+YULFCsASIWAcoDfrI+fM/+EPeBEjGCiS3AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQULIzPA998rBgusJqkNjbY/FZVvAEwHwYDVR0j
BBgwFoAUb2qCGh1f/K91DdyrRibhpB9ODL8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTdybzJoUXdFbnY2blV0eWpTR3NBR1FvdEpHMmJUQWpQVW55OEZKd0pT
Y3EvMC82RjZBODIxQTFENUZGQ0FGNzUwRERDQUI0NjI2RTFBNDFGNEUwQ0JGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGNkE4MjFBMUQ1RkZDQUY3
NTBERENBQjQ2MjZFMUE0MUY0RTBDQkYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk3cm8yaFF3RW52Nm5VdHlqU0dzQUdRb3RKRzJiVEFqUFVueThGSndKU2NxLzAv
MzEzNzM3MmUzNjM2MmUzMzMyMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzMjM5
MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7FCIDANBgkqhkiG9w0BAQsFAAOCAQEAQ0eQLVLkS+ry
Bhp5vaGUMIx4FQMpWOuDY7asStByZvE4y2bMWaH7YI5W8yno5CvULmpcZDp0fKOq
0uFtXU9vsAbxYniX37axKtVdeVWLJTHR0oXkjuEYq9BHTHhGTCI0NoZ3teAnRypY
4W72alxactFOEyDXUyEpynX5fHjIdybVF0sy4o/+7qwOhTsa3yRDjiqj2vXWLBTx
JK0HG5TngIPedHTiPSNNPwQa3WFMYWopNMqb0GhOOLA6sLTBxkijI5fW15mtyyfL
YgnHJD5scbUUQkqzwBgKgN8s98hlyfpXlqfknFux7iWbQDxIGR9S19iXWOvkcXX4
K9M+7pPehA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:53:05 2025 by rpki-client