Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/3137392e34382e302e302f32322d3234203d3e20323731303639.roa
File:                     3137392e34382e302e302f32322d3234203d3e20323731303639.roa (raw, json)
Hash identifier:          X4nrJr4UYddNsoQxjbFmuxeLGXTbSgiTE1t7Ql3XwX4=
Subject key identifier:   31:07:65:C0:0E:53:32:24:85:24:F7:FD:7E:7B:E2:3D:96:67:F8:67
Certificate issuer:       /CN=F93F3D20BD13BC9C3A76829F4CD19CF5BE1A2237
Certificate serial:       45A3C5CD40B86ABFAC49A949C0A43FCBB80ABC0E
Authority key identifier: F9:3F:3D:20:BD:13:BC:9C:3A:76:82:9F:4C:D1:9C:F5:BE:1A:22:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F93F3D20BD13BC9C3A76829F4CD19CF5BE1A2237.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/3137392e34382e302e302f32322d3234203d3e20323731303639.roa
Signing time:             Mon 13 Oct 2025 12:22:00 +0000
ROA not before:           Mon 13 Oct 2025 12:17:00 +0000
ROA not after:            Mon 12 Oct 2026 12:22:00 +0000
asID:                     271069
IP address blocks:        179.48.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/F93F3D20BD13BC9C3A76829F4CD19CF5BE1A2237.crl
                          rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/F93F3D20BD13BC9C3A76829F4CD19CF5BE1A2237.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F93F3D20BD13BC9C3A76829F4CD19CF5BE1A2237.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a3:c5:cd:40:b8:6a:bf:ac:49:a9:49:c0:a4:3f:cb:b8:0a:bc:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F93F3D20BD13BC9C3A76829F4CD19CF5BE1A2237
        Validity
            Not Before: Oct 13 12:17:00 2025 GMT
            Not After : Oct 12 12:22:00 2026 GMT
        Subject: CN=310765C00E5332248524F7FD7E7BE23D9667F867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:87:ee:1c:c1:1e:2e:8e:cc:f0:0b:ba:3d:69:
                    d0:4c:95:65:af:a2:bb:d6:31:85:56:ab:8b:39:bf:
                    a9:31:ac:50:99:cb:84:72:d8:e3:fb:7d:17:bb:e4:
                    c7:74:f6:3f:4f:1d:26:8b:ab:da:73:0c:82:00:fd:
                    e7:05:fa:23:2d:87:63:1a:32:94:05:eb:5e:36:d5:
                    c5:5f:b9:1e:d9:59:b9:e4:b7:10:8f:25:d9:ab:78:
                    3c:75:90:92:8d:7e:a4:55:20:53:7a:f8:94:03:6c:
                    6e:02:02:f8:2c:06:94:f0:46:ac:d3:d2:3e:17:69:
                    09:b8:4e:fb:27:8b:8e:88:03:02:d2:ec:c0:50:b0:
                    22:12:44:b2:a2:10:6d:34:56:4d:db:33:52:a4:18:
                    58:fb:5a:06:c7:ff:13:14:f5:29:c9:ae:b7:91:d8:
                    38:21:76:7d:6f:80:27:f5:9a:37:34:eb:4a:1f:28:
                    d4:2a:bb:b8:69:f0:8d:82:d4:c2:97:ea:dc:50:e1:
                    03:ed:c6:70:b6:7d:cd:32:db:e8:4c:90:bb:77:93:
                    32:e8:44:80:98:a5:99:2b:7a:05:65:f8:f7:c7:fa:
                    95:7d:0b:0c:e7:6e:d6:42:6f:23:b7:39:7e:01:69:
                    68:ce:27:52:0a:57:ee:84:b9:6a:1a:22:63:c2:69:
                    a6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:07:65:C0:0E:53:32:24:85:24:F7:FD:7E:7B:E2:3D:96:67:F8:67
            X509v3 Authority Key Identifier:
                keyid:F9:3F:3D:20:BD:13:BC:9C:3A:76:82:9F:4C:D1:9C:F5:BE:1A:22:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/F93F3D20BD13BC9C3A76829F4CD19CF5BE1A2237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F93F3D20BD13BC9C3A76829F4CD19CF5BE1A2237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/3137392e34382e302e302f32322d3234203d3e20323731303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:65:0c:02:84:3a:04:07:4b:4d:d1:20:08:02:4a:b7:2b:1f:
         39:c8:b2:cc:d3:3a:54:c0:54:38:4c:dd:2d:85:b6:b5:d9:5d:
         e4:c0:13:0b:51:93:46:98:6e:7f:4b:f4:f5:cc:2e:27:1f:7d:
         62:bc:31:46:de:da:8d:b9:be:82:39:27:b9:9d:eb:65:f6:64:
         d0:9e:33:26:f2:28:20:58:71:09:22:56:22:b2:30:27:d0:44:
         1c:09:08:75:ce:b6:39:80:8a:7d:ab:69:66:6e:24:c9:22:88:
         87:62:17:a7:0b:c5:41:fc:53:4e:e1:2f:48:bb:14:ca:d0:68:
         2c:b4:c8:6a:c1:27:24:a0:ed:fa:f3:09:01:e6:86:9b:7e:80:
         ab:77:a5:0f:98:91:62:b9:24:6c:34:e7:12:b5:ef:3e:09:67:
         cd:a7:1a:5c:aa:80:3b:b9:43:94:67:7f:0b:0b:1a:bd:60:4e:
         74:9d:91:18:d6:96:dd:62:92:35:22:e3:29:59:4f:5c:ab:38:
         e2:fb:4a:e6:e0:f9:d7:d2:5f:37:7c:31:b3:ab:bf:e9:71:bb:
         5e:f1:46:8a:93:a6:7c:63:ea:60:c0:31:5f:6c:fe:de:2a:63:
         c1:d8:8b:93:8f:e3:0e:77:73:43:38:bd:53:a6:f5:d8:4e:f7:
         40:ab:62:3b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIURaPFzUC4ar+sSalJwKQ/y7gKvA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkzRjNEMjBCRDEzQkM5QzNBNzY4MjlGNENEMTlDRjVC
RTFBMjIzNzAeFw0yNTEwMTMxMjE3MDBaFw0yNjEwMTIxMjIyMDBaMDMxMTAvBgNV
BAMTKDMxMDc2NUMwMEU1MzMyMjQ4NTI0RjdGRDdFN0JFMjNEOTY2N0Y4NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLh+4cwR4ujszwC7o9adBMlWWv
orvWMYVWq4s5v6kxrFCZy4Ry2OP7fRe75Md09j9PHSaLq9pzDIIA/ecF+iMth2Ma
MpQF61421cVfuR7ZWbnktxCPJdmreDx1kJKNfqRVIFN6+JQDbG4CAvgsBpTwRqzT
0j4XaQm4Tvsni46IAwLS7MBQsCISRLKiEG00Vk3bM1KkGFj7WgbH/xMU9SnJrreR
2Dghdn1vgCf1mjc060ofKNQqu7hp8I2C1MKX6txQ4QPtxnC2fc0y2+hMkLt3kzLo
RICYpZkregVl+PfH+pV9CwznbtZCbyO3OX4BaWjOJ1IKV+6EuWoaImPCaaYdAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUMQdlwA5TMiSFJPf9fnviPZZn+GcwHwYDVR0j
BBgwFoAU+T89IL0TvJw6doKfTNGc9b4aIjcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk5GSGMxY2VITHlkb0xtVkhxY2ZFQkJCNHdoWHc5djd4WmtaN2ZxOVZp
NTYvMC9GOTNGM0QyMEJEMTNCQzlDM0E3NjgyOUY0Q0QxOUNGNUJFMUEyMjM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5M0YzRDIwQkQxM0JDOUMz
QTc2ODI5RjRDRDE5Q0Y1QkUxQTIyMzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JORkhjMWNlSEx5ZG9MbVZIcWNmRUJCQjR3aFh3OXY3eFprWjdmcTlWaTU2LzAv
MzEzNzM5MmUzNDM4MmUzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczMTMw
MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArMwADANBgkqhkiG9w0BAQsFAAOCAQEAZmUMAoQ6BAdL
TdEgCAJKtysfOciyzNM6VMBUOEzdLYW2tdld5MATC1GTRphuf0v09cwuJx99Yrwx
Rt7ajbm+gjknuZ3rZfZk0J4zJvIoIFhxCSJWIrIwJ9BEHAkIdc62OYCKfatpZm4k
ySKIh2IXpwvFQfxTTuEvSLsUytBoLLTIasEnJKDt+vMJAeaGm36Aq3elD5iRYrkk
bDTnErXvPglnzacaXKqAO7lDlGd/CwsavWBOdJ2RGNaW3WKSNSLjKVlPXKs44vtK
5uD519JfN3wxs6u/6XG7XvFGipOmfGPqYMAxX2z+3ipjwdiLk4/jDndzQzi9U6b1
2E73QKtiOw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:03 2025 by rpki-client