Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3234302e302f32302d3232203d3e20323633343231.roa
File:                     3137392e3139312e3234302e302f32302d3232203d3e20323633343231.roa (raw, json)
Hash identifier:          c2QNapocpHRBYIyt71CalLMxLfVtxoEAL4p+rwgMQqc=
Subject key identifier:   42:BC:26:FB:FA:86:89:F5:CA:A6:8C:2B:36:BD:85:05:61:F1:4D:81
Certificate issuer:       /CN=6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9
Certificate serial:       19A0192E4FD135996C4F989077A5E065469B71B0
Authority key identifier: 6C:DA:1E:DF:DE:47:10:5B:DF:F6:61:EE:6D:2E:89:A6:1B:39:1E:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3234302e302f32302d3232203d3e20323633343231.roa
Signing time:             Fri 17 Oct 2025 14:32:35 +0000
ROA not before:           Fri 17 Oct 2025 14:27:35 +0000
ROA not after:            Fri 16 Oct 2026 14:32:35 +0000
asID:                     263421
IP address blocks:        179.191.240.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9.crl
                          rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a0:19:2e:4f:d1:35:99:6c:4f:98:90:77:a5:e0:65:46:9b:71:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9
        Validity
            Not Before: Oct 17 14:27:35 2025 GMT
            Not After : Oct 16 14:32:35 2026 GMT
        Subject: CN=42BC26FBFA8689F5CAA68C2B36BD850561F14D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b2:90:e4:2e:d5:c7:6f:95:dd:5c:86:76:2c:
                    51:a1:59:8f:67:85:30:07:c6:b3:31:19:d2:c6:bb:
                    7a:dc:34:35:b4:53:ed:b4:79:e3:e0:18:6d:14:cd:
                    21:01:a8:1f:7f:ee:30:85:2c:31:9a:a8:d0:01:4b:
                    b6:a3:f7:5e:1e:10:04:d9:51:d0:94:b9:e0:14:b1:
                    2d:c1:cb:c7:08:f5:04:d0:01:89:6f:a6:48:0d:e3:
                    d0:f5:24:61:7b:c7:7a:b5:f7:92:c2:82:b0:8e:30:
                    07:e8:de:18:8b:bf:03:f9:86:1c:04:74:57:e5:b2:
                    d4:3b:83:d0:ad:03:a5:60:ba:3a:70:79:90:f1:6a:
                    15:57:1b:2d:7d:06:47:71:44:13:fb:b5:b0:58:0a:
                    cf:2b:19:61:58:ce:aa:1f:a1:a8:57:ed:dc:11:26:
                    0e:14:ea:87:7d:32:71:fc:ae:6d:e9:ee:9c:ae:b3:
                    cb:e2:b9:4f:38:06:f6:c2:b5:ae:5a:24:ea:8b:f1:
                    1e:4f:9b:11:9b:b3:a3:54:68:7f:62:05:e1:45:24:
                    48:21:da:dd:ef:d1:c4:ed:18:f7:f2:cc:84:4e:55:
                    6a:c9:f5:16:f8:57:0a:2c:0a:5a:8c:0d:b4:c1:a6:
                    26:bd:0f:de:88:97:5d:c5:79:96:3b:29:a9:e7:9d:
                    31:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BC:26:FB:FA:86:89:F5:CA:A6:8C:2B:36:BD:85:05:61:F1:4D:81
            X509v3 Authority Key Identifier:
                keyid:6C:DA:1E:DF:DE:47:10:5B:DF:F6:61:EE:6D:2E:89:A6:1B:39:1E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3234302e302f32302d3232203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:a6:2d:f0:82:12:7e:ad:ea:92:05:2a:0d:ab:e8:ad:e4:99:
         9f:94:0a:ab:9f:8f:50:18:68:ae:cf:48:d2:e7:fd:6e:7b:08:
         c5:75:0d:f8:28:fc:42:5c:a9:c8:b1:11:b7:d5:43:32:5f:b0:
         20:26:3b:7d:2d:90:4c:05:9a:50:05:9f:5e:cb:4d:40:2e:89:
         ee:9a:a1:f1:e5:d0:f5:7c:68:06:c4:60:75:00:71:6c:ba:ba:
         b0:bf:d1:0c:b9:85:a7:e3:56:bb:2a:12:3f:d7:85:57:06:8b:
         85:00:6a:17:3f:c5:3c:04:be:a3:66:63:f7:f0:f1:85:fc:ad:
         b4:a3:81:a1:26:20:ea:d0:83:9c:3e:94:cc:73:04:b0:b8:ec:
         49:db:fa:c7:ce:70:54:b8:35:5f:b8:9d:b8:d4:af:d1:72:d9:
         ee:52:c2:8d:fd:70:32:be:15:aa:09:63:04:ff:77:2e:d9:ca:
         3b:a7:52:04:02:c2:86:60:53:ec:38:a1:f2:46:95:a4:28:a2:
         d3:a0:39:bb:80:2a:ba:fa:a2:1a:d5:15:17:81:35:36:e7:e6:
         43:4a:87:90:d5:7f:7d:66:3b:fa:ea:cd:32:84:27:32:18:b7:
         4c:e4:1d:5f:a7:85:0d:08:ed:7e:9a:80:6e:dc:cf:bb:10:a2:
         e1:3b:7b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:55:36 2025 by rpki-client