Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/3137372e31322e3232302e302f32322d3234203d3e20323730373531.roa
File:                     3137372e31322e3232302e302f32322d3234203d3e20323730373531.roa (raw, json)
Hash identifier:          b8uK8SK9lypoIfDWw1v0evX0i9JkB2JRA3ywki39qhU=
Subject key identifier:   1F:37:09:DE:DA:A3:EF:52:19:06:10:B0:69:8A:F6:B0:7F:09:06:C6
Certificate issuer:       /CN=C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8
Certificate serial:       18016D6946CDADF04CBB73C27C2F1A0784580016
Authority key identifier: C1:EB:54:5F:26:E5:2D:C8:9E:77:A7:72:F1:AD:8A:6B:70:57:B2:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/3137372e31322e3232302e302f32322d3234203d3e20323730373531.roa
Signing time:             Fri 03 Oct 2025 19:35:56 +0000
ROA not before:           Fri 03 Oct 2025 19:30:56 +0000
ROA not after:            Fri 02 Oct 2026 19:35:56 +0000
asID:                     270751
IP address blocks:        177.12.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.crl
                          rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:01:6d:69:46:cd:ad:f0:4c:bb:73:c2:7c:2f:1a:07:84:58:00:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8
        Validity
            Not Before: Oct  3 19:30:56 2025 GMT
            Not After : Oct  2 19:35:56 2026 GMT
        Subject: CN=1F3709DEDAA3EF52190610B0698AF6B07F0906C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0f:18:c0:22:05:32:6b:d8:1c:56:cc:ec:cc:
                    ca:5e:5c:ab:b1:71:ae:98:20:a7:d8:b1:44:36:a8:
                    5f:d8:ba:2e:90:79:1f:ae:8a:b6:3e:d5:f8:63:88:
                    be:47:a1:40:c4:7f:96:7b:80:f0:b5:31:df:21:5c:
                    77:46:e7:5a:bd:73:c7:3c:cb:ac:66:aa:9a:ea:fa:
                    1c:3f:53:21:f4:50:46:3a:f4:0b:81:a0:46:16:18:
                    d1:7d:9b:71:18:55:dc:cd:50:e2:7f:19:16:95:19:
                    76:8a:69:69:e7:e5:4e:3e:f5:34:27:b1:e4:34:23:
                    1a:44:54:03:c0:d1:d4:61:9a:84:f5:86:98:0f:f0:
                    0d:de:d4:ca:13:a2:dc:a8:15:24:e1:e4:bb:a3:aa:
                    fb:e6:6f:a3:a7:44:69:18:a6:9c:72:0d:7b:23:94:
                    5a:60:5d:64:3d:6b:c7:c4:bd:2b:9b:45:2b:fe:66:
                    23:0f:c9:99:af:5b:6a:f0:2c:7d:76:ee:1f:61:77:
                    7c:3a:c1:62:88:c8:18:8e:62:e5:61:ad:1b:9d:ba:
                    d7:e2:78:9c:42:4c:b1:9a:59:47:69:83:ed:17:20:
                    fb:e9:c5:9e:4b:44:dd:b9:8d:dc:bb:34:cb:15:ad:
                    5f:56:e1:58:5a:9d:9f:8d:db:8e:c9:59:2c:60:b3:
                    72:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:37:09:DE:DA:A3:EF:52:19:06:10:B0:69:8A:F6:B0:7F:09:06:C6
            X509v3 Authority Key Identifier:
                keyid:C1:EB:54:5F:26:E5:2D:C8:9E:77:A7:72:F1:AD:8A:6B:70:57:B2:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1EB545F26E52DC89E77A772F1AD8A6B7057B2D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/3137372e31322e3232302e302f32322d3234203d3e20323730373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:60:12:23:63:46:76:c8:5d:05:25:c0:42:a5:1e:59:76:bf:
         e3:80:ca:2e:35:89:2e:5b:46:06:62:b0:62:f0:01:bc:dc:31:
         f3:a8:b4:52:24:1e:69:ba:31:4e:7d:89:ea:52:d3:cb:b3:ad:
         ab:53:bc:85:25:d1:af:d0:4f:b1:94:da:0f:7e:d3:f8:a0:75:
         ce:00:d6:7a:6c:83:c4:59:e2:b9:bd:e6:7d:93:2c:f4:88:6f:
         ec:4a:e7:87:5b:96:58:07:16:1f:de:e7:e1:21:d2:8f:ac:30:
         40:77:b3:ca:c9:d1:f6:06:5a:95:79:b1:70:ec:c4:68:0c:72:
         e1:4d:10:73:d4:33:e0:d7:6f:41:0f:f1:67:21:2a:28:20:84:
         06:6b:60:1a:ef:51:9b:23:28:0d:27:a8:ba:61:1f:8e:61:80:
         15:5a:8c:cf:9e:b9:1a:3e:cc:13:c9:04:67:15:51:02:2e:2f:
         c4:ae:ea:70:ff:b3:2b:c4:da:fb:5c:67:72:54:7d:d2:ae:5b:
         29:c5:e5:a5:5d:0c:da:7e:ea:63:2c:16:53:f3:f9:56:3a:7a:
         8d:a7:81:e9:d6:ff:b2:92:ab:4f:47:2e:3f:2a:67:d8:29:64:
         44:71:12:44:60:ff:7f:6b:dc:72:f6:b7:8f:84:4f:af:13:78:
         32:79:89:e3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGAFtaUbNrfBMu3PCfC8aB4RYABYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFFQjU0NUYyNkU1MkRDODlFNzdBNzcyRjFBRDhBNkI3
MDU3QjJEODAeFw0yNTEwMDMxOTMwNTZaFw0yNjEwMDIxOTM1NTZaMDMxMTAvBgNV
BAMTKDFGMzcwOURFREFBM0VGNTIxOTA2MTBCMDY5OEFGNkIwN0YwOTA2QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRDxjAIgUya9gcVszszMpeXKux
ca6YIKfYsUQ2qF/Yui6QeR+uirY+1fhjiL5HoUDEf5Z7gPC1Md8hXHdG51q9c8c8
y6xmqprq+hw/UyH0UEY69AuBoEYWGNF9m3EYVdzNUOJ/GRaVGXaKaWnn5U4+9TQn
seQ0IxpEVAPA0dRhmoT1hpgP8A3e1MoTotyoFSTh5Lujqvvmb6OnRGkYppxyDXsj
lFpgXWQ9a8fEvSubRSv+ZiMPyZmvW2rwLH127h9hd3w6wWKIyBiOYuVhrRudutfi
eJxCTLGaWUdpg+0XIPvpxZ5LRN25jdy7NMsVrV9W4VhanZ+N247JWSxgs3KbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHzcJ3tqj71IZBhCwaYr2sH8JBsYwHwYDVR0j
BBgwFoAUwetUXyblLcied6dy8a2Ka3BXstgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlJuRFlCUTZFcHVkSExEbTF4MjI2dWluc1Q5cG81NHh6SGZDeWo0RzNM
dGovMC9DMUVCNTQ1RjI2RTUyREM4OUU3N0E3NzJGMUFEOEE2QjcwNTdCMkQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxRUI1NDVGMjZFNTJEQzg5
RTc3QTc3MkYxQUQ4QTZCNzA1N0IyRDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JSbkRZQlE2RXB1ZEhMRG0xeDIyNnVpbnNUOXBvNTR4ekhmQ3lqNEczTHRqLzAv
MzEzNzM3MmUzMTMyMmUzMjMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNzM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxDNwwDQYJKoZIhvcNAQELBQADggEBACZgEiNj
RnbIXQUlwEKlHll2v+OAyi41iS5bRgZisGLwAbzcMfOotFIkHmm6MU59iepS08uz
ratTvIUl0a/QT7GU2g9+0/igdc4A1npsg8RZ4rm95n2TLPSIb+xK54dbllgHFh/e
5+Eh0o+sMEB3s8rJ0fYGWpV5sXDsxGgMcuFNEHPUM+DXb0EP8WchKigghAZrYBrv
UZsjKA0nqLphH45hgBVajM+euRo+zBPJBGcVUQIuL8Su6nD/syvE2vtcZ3JUfdKu
WynF5aVdDNp+6mMsFlPz+VY6eo2ngenW/7KSq09HLj8qZ9gpZERxEkRg/39r3HL2
t4+ET68TeDJ5ieM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:21:11 2025 by rpki-client