Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tP1A7R3GcgXDj9qapWZuKLbjiFHDJESe2g2RMpYHy6Z/0/3136372e3234392e36382e302f32322d3332203d3e20323731363436.roa
File:                     3136372e3234392e36382e302f32322d3332203d3e20323731363436.roa (raw, json)
Hash identifier:          bRR/3P3s545U9wPh4flDdE8B6mtwGsI+qipwWwuuQis=
Subject key identifier:   E6:C0:01:AE:52:C9:E0:12:0D:27:C3:9A:9A:5C:EF:02:D4:91:33:41
Certificate issuer:       /CN=E08F58359B92AEBC78B2E58F65CF8F457C7C0D3F
Certificate serial:       371FA881BDCB88AB43CF79C561B2ADBA338DF25F
Authority key identifier: E0:8F:58:35:9B:92:AE:BC:78:B2:E5:8F:65:CF:8F:45:7C:7C:0D:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E08F58359B92AEBC78B2E58F65CF8F457C7C0D3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tP1A7R3GcgXDj9qapWZuKLbjiFHDJESe2g2RMpYHy6Z/0/3136372e3234392e36382e302f32322d3332203d3e20323731363436.roa
Signing time:             Fri 19 Sep 2025 18:46:31 +0000
ROA not before:           Fri 19 Sep 2025 18:41:31 +0000
ROA not after:            Fri 18 Sep 2026 18:46:31 +0000
asID:                     271646
IP address blocks:        167.249.68.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tP1A7R3GcgXDj9qapWZuKLbjiFHDJESe2g2RMpYHy6Z/0/E08F58359B92AEBC78B2E58F65CF8F457C7C0D3F.crl
                          rsync://rpki-repo.registro.br/repo/9tP1A7R3GcgXDj9qapWZuKLbjiFHDJESe2g2RMpYHy6Z/0/E08F58359B92AEBC78B2E58F65CF8F457C7C0D3F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E08F58359B92AEBC78B2E58F65CF8F457C7C0D3F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:1f:a8:81:bd:cb:88:ab:43:cf:79:c5:61:b2:ad:ba:33:8d:f2:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E08F58359B92AEBC78B2E58F65CF8F457C7C0D3F
        Validity
            Not Before: Sep 19 18:41:31 2025 GMT
            Not After : Sep 18 18:46:31 2026 GMT
        Subject: CN=E6C001AE52C9E0120D27C39A9A5CEF02D4913341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:d2:fc:28:c0:86:ac:1e:ac:d7:4a:ff:44:
                    31:8c:b9:cf:17:8c:f5:09:f0:89:a1:ce:67:8e:d2:
                    3f:fa:7a:ec:51:22:e3:76:9b:fb:a6:93:9f:6b:f8:
                    a3:96:77:a4:d7:5e:b0:5c:e9:e9:a2:80:d7:14:77:
                    45:44:0b:90:f7:40:89:df:c0:4c:65:67:df:6b:06:
                    3c:3e:be:e0:5a:b0:1b:bf:4d:65:c6:ee:8a:79:68:
                    d2:d2:cb:94:d1:a7:1e:c4:99:8c:1f:1c:c3:71:a4:
                    4b:bb:69:d6:6d:f4:f2:c8:ad:3f:f3:76:46:60:27:
                    36:bb:8d:6a:4f:7c:b8:7d:27:3e:97:b1:fa:a9:a4:
                    39:1c:59:70:3c:95:7e:85:87:a5:c2:15:3f:d7:e2:
                    b6:f4:a8:b8:ef:35:c9:28:a5:1e:49:f0:ca:8e:41:
                    43:7f:9a:08:66:d7:30:24:9f:11:e6:df:49:72:a4:
                    f4:f5:b0:3f:33:65:d3:7d:09:ea:70:b9:03:40:8f:
                    c5:37:94:73:5d:f0:89:85:51:6b:ca:22:4f:d8:15:
                    8c:58:28:eb:6e:19:fe:3a:a3:2e:45:ba:c5:50:b2:
                    92:38:0e:17:30:8a:e8:f5:2f:f5:50:08:9d:2b:cc:
                    27:bb:1f:0a:3b:1d:43:38:f8:e6:0d:e4:e0:b1:f2:
                    c4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C0:01:AE:52:C9:E0:12:0D:27:C3:9A:9A:5C:EF:02:D4:91:33:41
            X509v3 Authority Key Identifier:
                keyid:E0:8F:58:35:9B:92:AE:BC:78:B2:E5:8F:65:CF:8F:45:7C:7C:0D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tP1A7R3GcgXDj9qapWZuKLbjiFHDJESe2g2RMpYHy6Z/0/E08F58359B92AEBC78B2E58F65CF8F457C7C0D3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E08F58359B92AEBC78B2E58F65CF8F457C7C0D3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tP1A7R3GcgXDj9qapWZuKLbjiFHDJESe2g2RMpYHy6Z/0/3136372e3234392e36382e302f32322d3332203d3e20323731363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:2b:30:dc:b9:25:6a:1a:2d:69:be:b0:6b:05:2b:05:8e:74:
         86:16:dd:26:a4:15:cd:e1:b7:7b:41:b2:30:d9:61:73:dd:5f:
         3e:50:8b:59:01:1c:fd:8a:14:80:1c:0a:ab:f5:ea:7a:3a:cd:
         0b:75:7b:f9:f8:de:8e:b1:8d:eb:da:44:8d:18:c4:cb:dd:21:
         9a:9e:23:7d:4d:fa:a5:ad:96:dc:9f:d5:8b:6d:1f:5f:aa:fb:
         95:79:11:48:af:33:a7:93:1d:18:57:35:38:e7:29:16:58:37:
         48:8a:78:35:ec:a1:19:03:6e:28:a3:6a:a0:84:8b:e0:78:76:
         36:d0:3c:ed:e9:ac:cb:ce:ca:34:1d:85:45:84:e6:8b:a8:00:
         e8:59:e5:e0:5b:20:77:c8:ae:92:cf:24:aa:05:92:68:c9:7b:
         3f:db:cc:94:73:dd:b6:e2:55:4a:fb:5c:e0:3f:21:de:5b:92:
         0d:c3:37:c6:fd:75:50:02:71:89:32:9a:08:61:20:10:b4:58:
         79:22:b2:f9:3a:40:55:28:f6:01:2b:70:e1:7e:46:6d:f5:72:
         97:92:ec:87:f5:f3:7b:e0:90:c3:af:82:b8:47:24:5e:2e:58:
         97:cb:64:02:18:6e:e1:7c:5b:a0:04:62:6a:47:ae:ff:16:7d:
         43:d1:a7:7d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNx+ogb3LiKtDz3nFYbKtujON8l8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA4RjU4MzU5QjkyQUVCQzc4QjJFNThGNjVDRjhGNDU3
QzdDMEQzRjAeFw0yNTA5MTkxODQxMzFaFw0yNjA5MTgxODQ2MzFaMDMxMTAvBgNV
BAMTKEU2QzAwMUFFNTJDOUUwMTIwRDI3QzM5QTlBNUNFRjAyRDQ5MTMzNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtsdL8KMCGrB6s10r/RDGMuc8X
jPUJ8ImhzmeO0j/6euxRIuN2m/umk59r+KOWd6TXXrBc6emigNcUd0VEC5D3QInf
wExlZ99rBjw+vuBasBu/TWXG7op5aNLSy5TRpx7EmYwfHMNxpEu7adZt9PLIrT/z
dkZgJza7jWpPfLh9Jz6XsfqppDkcWXA8lX6Fh6XCFT/X4rb0qLjvNckopR5J8MqO
QUN/mghm1zAknxHm30lypPT1sD8zZdN9CepwuQNAj8U3lHNd8ImFUWvKIk/YFYxY
KOtuGf46oy5FusVQspI4Dhcwiuj1L/VQCJ0rzCe7Hwo7HUM4+OYN5OCx8sQ/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5sABrlLJ4BINJ8OamlzvAtSRM0EwHwYDVR0j
BBgwFoAU4I9YNZuSrrx4suWPZc+PRXx8DT8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRQMUE3UjNHY2dYRGo5cWFwV1p1S0xiamlGSERKRVNlMmcyUk1wWUh5
NlovMC9FMDhGNTgzNTlCOTJBRUJDNzhCMkU1OEY2NUNGOEY0NTdDN0MwRDNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwOEY1ODM1OUI5MkFFQkM3
OEIyRTU4RjY1Q0Y4RjQ1N0M3QzBEM0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0UDFBN1IzR2NnWERqOXFhcFdadUtMYmppRkhESkVTZTJnMlJNcFlIeTZaLzAv
MzEzNjM3MmUzMjM0MzkyZTM2MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzEzNjM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKn+UQwDQYJKoZIhvcNAQELBQADggEBAEIrMNy5
JWoaLWm+sGsFKwWOdIYW3SakFc3ht3tBsjDZYXPdXz5Qi1kBHP2KFIAcCqv16no6
zQt1e/n43o6xjevaRI0YxMvdIZqeI31N+qWtltyf1YttH1+q+5V5EUivM6eTHRhX
NTjnKRZYN0iKeDXsoRkDbiijaqCEi+B4djbQPO3prMvOyjQdhUWE5ouoAOhZ5eBb
IHfIrpLPJKoFkmjJez/bzJRz3bbiVUr7XOA/Id5bkg3DN8b9dVACcYkymghhIBC0
WHkisvk6QFUo9gErcOF+Rm31cpeS7If183vgkMOvgrhHJF4uWJfLZAIYbuF8W6AE
YmpHrv8WfUPRp30=
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:45:35 2025 by rpki-client