Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/3138312e3139312e3234322e302f32332d3233203d3e20323637343536.roa
File:                     3138312e3139312e3234322e302f32332d3233203d3e20323637343536.roa (raw, json)
Hash identifier:          Koxe2E0B7fWF7Mei+AZ4Hq/lDQtgRhnY7C6OyB/4WOs=
Subject key identifier:   1B:57:A1:BA:72:53:E9:5E:64:24:3B:93:C8:DD:01:8F:C3:61:E2:4F
Certificate issuer:       /CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
Certificate serial:       1A71E791470A1C8B44C276B6D3D8426B32895FB4
Authority key identifier: 76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/3138312e3139312e3234322e302f32332d3233203d3e20323637343536.roa
Signing time:             Thu 16 Oct 2025 03:46:11 +0000
ROA not before:           Thu 16 Oct 2025 03:41:11 +0000
ROA not after:            Thu 15 Oct 2026 03:46:11 +0000
asID:                     267456
IP address blocks:        181.191.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl
                          rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:71:e7:91:47:0a:1c:8b:44:c2:76:b6:d3:d8:42:6b:32:89:5f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
        Validity
            Not Before: Oct 16 03:41:11 2025 GMT
            Not After : Oct 15 03:46:11 2026 GMT
        Subject: CN=1B57A1BA7253E95E64243B93C8DD018FC361E24F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e7:39:00:f1:a2:f0:6b:4f:cf:67:68:05:37:
                    af:31:c2:43:bc:20:c5:d5:f9:cf:2e:c9:0d:ff:02:
                    d1:61:4e:6a:7f:2f:f5:c4:86:62:bd:b4:e9:0c:35:
                    75:4b:41:37:6b:6f:d4:e2:ff:e2:7e:2f:69:6c:01:
                    bf:44:89:34:ed:bf:cf:33:0b:59:13:d5:21:5d:3f:
                    f7:d1:4b:93:03:61:bb:90:c1:54:b7:47:c2:70:00:
                    fb:52:aa:a1:6b:2d:e4:1e:a0:8d:a4:27:0b:23:0a:
                    20:f8:86:92:e6:78:f5:07:a7:a5:bd:a2:f3:70:8e:
                    26:cc:b6:31:a3:be:b2:61:17:a0:db:dd:a9:fd:f8:
                    3c:ec:f1:59:c2:ce:4d:86:0e:1f:48:60:50:06:77:
                    31:5b:06:ca:bd:d6:65:dc:f9:46:ec:fb:bd:84:67:
                    77:e0:2f:9e:93:85:34:5f:18:82:84:f3:ec:f0:5e:
                    ad:13:a9:db:2c:4e:68:ca:46:69:1d:7f:4b:d7:cf:
                    3b:f5:16:58:dd:8a:f4:22:c0:2d:0e:90:86:1f:3a:
                    6e:a5:f4:5c:d7:ab:1a:c3:57:32:c3:06:80:1a:eb:
                    82:58:b3:89:28:a4:c1:4c:e5:20:96:9c:ba:33:92:
                    6f:f0:b8:a2:fe:ae:51:a1:b9:44:18:bc:74:45:4f:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:57:A1:BA:72:53:E9:5E:64:24:3B:93:C8:DD:01:8F:C3:61:E2:4F
            X509v3 Authority Key Identifier:
                keyid:76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/3138312e3139312e3234322e302f32332d3233203d3e20323637343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:cb:72:7e:79:94:be:9e:c8:bb:90:24:38:35:c3:6b:db:0c:
         c4:24:cd:15:75:54:81:04:fa:9c:4c:ad:55:1b:47:20:f8:5d:
         bf:55:c5:49:65:8f:ab:e8:b5:e3:90:8c:6a:02:0d:f9:55:6c:
         d8:02:36:c7:73:be:7c:c9:ea:06:84:a3:1e:2a:ca:cc:1a:54:
         85:66:da:29:84:1f:68:11:29:23:e8:98:a5:fd:ed:6f:30:b6:
         70:af:ec:93:6e:88:b4:40:2f:70:31:df:02:c5:33:1f:49:40:
         ee:3a:a1:45:69:b8:19:c6:e8:64:3b:87:ac:b7:52:50:9d:c6:
         46:1c:d5:dd:7e:65:32:f5:41:a0:41:b2:38:ef:2a:b0:30:17:
         41:81:f9:26:dd:d2:88:1b:74:4c:45:2f:3b:75:78:30:31:92:
         44:7c:92:95:1e:91:8d:de:8e:fc:2a:0f:07:45:1c:8a:ef:c3:
         53:5c:60:e2:09:15:44:57:d7:90:63:48:7f:b8:5d:ed:22:d1:
         69:2a:2c:2a:00:03:35:be:61:ad:86:10:b3:6e:8a:39:b5:ec:
         28:e1:48:1d:b6:bc:4d:52:7d:fc:88:f9:d2:2f:45:7e:4d:66:
         88:4a:30:21:be:8e:a6:87:24:a4:47:ac:b3:42:c2:aa:df:89:
         3c:3e:8d:c5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGnHnkUcKHItEwna209hCazKJX7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZFMTg0OENEQTU3MkIzN0ZDRjVEOUZDMkYzMjA3MkJB
QjkwNzJCMjAeFw0yNTEwMTYwMzQxMTFaFw0yNjEwMTUwMzQ2MTFaMDMxMTAvBgNV
BAMTKDFCNTdBMUJBNzI1M0U5NUU2NDI0M0I5M0M4REQwMThGQzM2MUUyNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75zkA8aLwa0/PZ2gFN68xwkO8
IMXV+c8uyQ3/AtFhTmp/L/XEhmK9tOkMNXVLQTdrb9Ti/+J+L2lsAb9EiTTtv88z
C1kT1SFdP/fRS5MDYbuQwVS3R8JwAPtSqqFrLeQeoI2kJwsjCiD4hpLmePUHp6W9
ovNwjibMtjGjvrJhF6Db3an9+Dzs8VnCzk2GDh9IYFAGdzFbBsq91mXc+Ubs+72E
Z3fgL56ThTRfGIKE8+zwXq0TqdssTmjKRmkdf0vXzzv1FljdivQiwC0OkIYfOm6l
9FzXqxrDVzLDBoAa64JYs4kopMFM5SCWnLozkm/wuKL+rlGhuUQYvHRFTzJ5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUG1ehunJT6V5kJDuTyN0Bj8Nh4k8wHwYDVR0j
BBgwFoAUduGEjNpXKzf89dn8LzIHK6uQcrIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXVCZGI1eDhFYWpRVDlMTmExeUd4MUpmNWszbjZ2emI1blBZOW93cDFz
ZUIvMC83NkUxODQ4Q0RBNTcyQjM3RkNGNUQ5RkMyRjMyMDcyQkFCOTA3MkIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2RTE4NDhDREE1NzJCMzdG
Q0Y1RDlGQzJGMzIwNzJCQUI5MDcyQjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl1QmRiNXg4RWFqUVQ5TE5hMXlHeDFKZjVrM242dnpiNW5QWTlvd3Axc2VCLzAv
MzEzODMxMmUzMTM5MzEyZTMyMzQzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNzM0MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbW/8jANBgkqhkiG9w0BAQsFAAOCAQEAmcty
fnmUvp7Iu5AkODXDa9sMxCTNFXVUgQT6nEytVRtHIPhdv1XFSWWPq+i145CMagIN
+VVs2AI2x3O+fMnqBoSjHirKzBpUhWbaKYQfaBEpI+iYpf3tbzC2cK/sk26ItEAv
cDHfAsUzH0lA7jqhRWm4GcboZDuHrLdSUJ3GRhzV3X5lMvVBoEGyOO8qsDAXQYH5
Jt3SiBt0TEUvO3V4MDGSRHySlR6Rjd6O/CoPB0Uciu/DU1xg4gkVRFfXkGNIf7hd
7SLRaSosKgADNb5hrYYQs26KObXsKOFIHba8TVJ9/Ij50i9Ffk1miEowIb6Opock
pEess0LCqt+JPD6NxQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:37:26 2025 by rpki-client