Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/3137392e3130392e33322e302f32302d3332203d3e20323633353637.roa
File:                     3137392e3130392e33322e302f32302d3332203d3e20323633353637.roa (raw, json)
Hash identifier:          JcmfPmpVMYSjiABXB2wmedmpymwinDaIZJseON+XBkg=
Subject key identifier:   33:97:6C:E6:1D:BA:C1:1E:56:49:35:A6:5A:44:B7:6A:A6:D3:8C:EA
Certificate issuer:       /CN=67BBA36ACEF55FA34077F9335084CB97EB51FEE3
Certificate serial:       56236827B80C1C75E18C2E2621BA45B620DC2CCA
Authority key identifier: 67:BB:A3:6A:CE:F5:5F:A3:40:77:F9:33:50:84:CB:97:EB:51:FE:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/3137392e3130392e33322e302f32302d3332203d3e20323633353637.roa
Signing time:             Wed 02 Jul 2025 17:00:45 +0000
ROA not before:           Wed 02 Jul 2025 16:55:45 +0000
ROA not after:            Wed 01 Jul 2026 17:00:45 +0000
asID:                     263567
IP address blocks:        179.109.32.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.crl
                          rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 04:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:23:68:27:b8:0c:1c:75:e1:8c:2e:26:21:ba:45:b6:20:dc:2c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67BBA36ACEF55FA34077F9335084CB97EB51FEE3
        Validity
            Not Before: Jul  2 16:55:45 2025 GMT
            Not After : Jul  1 17:00:45 2026 GMT
        Subject: CN=33976CE61DBAC11E564935A65A44B76AA6D38CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:75:64:f8:5e:86:9b:04:77:0c:3c:a0:37:1b:
                    da:cc:a9:77:bb:79:c6:98:f0:6d:7d:b3:64:14:f0:
                    e0:68:88:06:27:19:cf:d3:b6:cf:fe:08:03:45:84:
                    b5:f7:68:b6:2c:87:e6:e3:f2:25:c8:02:90:dd:43:
                    8c:20:3d:f7:87:ee:df:e3:53:91:cd:02:55:e1:81:
                    26:a0:27:5b:f8:b9:a4:ba:58:46:8d:b4:61:67:3b:
                    4e:f6:fa:cb:bd:39:5c:dd:eb:3d:0b:88:cf:86:41:
                    08:b7:18:6e:ce:97:ca:d1:11:c3:c9:f5:e1:10:13:
                    aa:08:6c:79:55:23:19:0a:03:c5:64:8d:c8:85:eb:
                    f2:5f:a1:bc:dc:95:2b:13:9a:52:65:1f:a2:1f:48:
                    44:63:f3:e1:d2:ba:d3:ed:4b:bc:14:1e:fb:cf:33:
                    e9:c0:4a:e3:f8:af:c6:f1:33:0b:97:60:4a:4a:48:
                    8a:06:e6:84:dd:13:08:98:fc:84:37:41:82:29:78:
                    c2:6b:4b:e2:24:df:0f:f7:a7:01:08:72:dc:de:6a:
                    6f:1f:9e:d9:c8:65:e7:9b:33:78:ec:e2:c7:13:84:
                    4c:8f:3c:76:58:fa:d7:5b:b8:63:4a:0a:6c:93:cc:
                    76:6b:93:b3:87:76:76:7f:13:59:26:67:c2:1a:79:
                    ec:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:97:6C:E6:1D:BA:C1:1E:56:49:35:A6:5A:44:B7:6A:A6:D3:8C:EA
            X509v3 Authority Key Identifier:
                keyid:67:BB:A3:6A:CE:F5:5F:A3:40:77:F9:33:50:84:CB:97:EB:51:FE:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/3137392e3130392e33322e302f32302d3332203d3e20323633353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:e5:9f:8b:92:dc:bc:b0:ab:fc:ec:da:ec:da:24:53:a5:14:
         f5:91:b8:34:a1:13:81:bf:e6:3c:4d:ef:bc:75:59:11:9f:31:
         93:34:9a:79:4c:6d:43:51:4b:a6:35:ff:81:5a:6d:a1:3a:b2:
         7f:dd:0e:b6:09:11:16:bc:89:67:2e:5b:31:e1:25:15:04:b1:
         69:ef:f8:11:c1:06:ec:1b:a1:c7:e1:cc:91:9e:1c:1e:b7:46:
         51:7d:ec:4e:ff:6e:96:2f:aa:d6:83:46:04:71:f8:56:2e:5a:
         85:5b:2c:c8:b2:67:47:b7:e8:70:8f:ac:f2:e7:f1:d9:74:34:
         46:1f:0f:07:7f:bd:0b:f7:7d:85:7b:9e:f1:e3:81:2a:bc:fb:
         bb:90:b4:b1:89:97:28:b1:2f:f9:b2:5a:ad:bc:4f:d9:18:e8:
         75:fb:66:87:b5:b8:49:01:09:ba:25:47:cb:bb:76:5c:6d:23:
         61:51:4a:1f:48:b5:aa:2f:11:8b:c1:9b:58:d1:0c:d0:75:3f:
         9b:23:40:9a:8f:c6:5e:56:ba:fb:5e:9f:97:c6:f7:91:1d:3e:
         e3:17:a8:e4:f0:be:c9:ed:14:4d:39:3d:2e:60:dd:99:39:b1:
         50:91:1e:10:ca:73:b5:36:4a:df:42:f6:c2:1b:58:13:9e:6e:
         11:d7:2d:49
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUViNoJ7gMHHXhjC4mIbpFtiDcLMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdCQkEzNkFDRUY1NUZBMzQwNzdGOTMzNTA4NENCOTdF
QjUxRkVFMzAeFw0yNTA3MDIxNjU1NDVaFw0yNjA3MDExNzAwNDVaMDMxMTAvBgNV
BAMTKDMzOTc2Q0U2MURCQUMxMUU1NjQ5MzVBNjVBNDRCNzZBQTZEMzhDRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxdWT4XoabBHcMPKA3G9rMqXe7
ecaY8G19s2QU8OBoiAYnGc/Tts/+CANFhLX3aLYsh+bj8iXIApDdQ4wgPfeH7t/j
U5HNAlXhgSagJ1v4uaS6WEaNtGFnO072+su9OVzd6z0LiM+GQQi3GG7Ol8rREcPJ
9eEQE6oIbHlVIxkKA8VkjciF6/JfobzclSsTmlJlH6IfSERj8+HSutPtS7wUHvvP
M+nASuP4r8bxMwuXYEpKSIoG5oTdEwiY/IQ3QYIpeMJrS+Ik3w/3pwEIctzeam8f
ntnIZeebM3js4scThEyPPHZY+tdbuGNKCmyTzHZrk7OHdnZ/E1kmZ8IaeeypAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUM5ds5h26wR5WSTWmWkS3aqbTjOowHwYDVR0j
BBgwFoAUZ7ujas71X6NAd/kzUITLl+tR/uMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVhwZ3VOQmdDdlpWSnBWM2VZYVFoTGNvY0tpMVZjbkpwMkF6SGdpNk5Z
ckEvMC82N0JCQTM2QUNFRjU1RkEzNDA3N0Y5MzM1MDg0Q0I5N0VCNTFGRUUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3QkJBMzZBQ0VGNTVGQTM0
MDc3RjkzMzUwODRDQjk3RUI1MUZFRTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlYcGd1TkJnQ3ZaVkpwVjNlWWFRaExjb2NLaTFWY25KcDJBekhnaTZOWXJBLzAv
MzEzNzM5MmUzMTMwMzkyZTMzMzIyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMjM2
MzMzNTM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASzbSAwDQYJKoZIhvcNAQELBQADggEBACXln4uS
3Lywq/zs2uzaJFOlFPWRuDShE4G/5jxN77x1WRGfMZM0mnlMbUNRS6Y1/4FabaE6
sn/dDrYJERa8iWcuWzHhJRUEsWnv+BHBBuwbocfhzJGeHB63RlF97E7/bpYvqtaD
RgRx+FYuWoVbLMiyZ0e36HCPrPLn8dl0NEYfDwd/vQv3fYV7nvHjgSq8+7uQtLGJ
lyixL/myWq28T9kY6HX7Zoe1uEkBCbolR8u7dlxtI2FRSh9ItaovEYvBm1jRDNB1
P5sjQJqPxl5Wuvten5fG95EdPuMXqOTwvsntFE05PS5g3Zk5sVCRHhDKc7U2St9C
9sIbWBOebhHXLUk=
-----END CERTIFICATE-----
Generated at Sat Jul 12 14:34:23 2025 by rpki-client