Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3133382e39372e3132302e302f32322d3232203d3e20323639303733.roa
File:                     3133382e39372e3132302e302f32322d3232203d3e20323639303733.roa (raw, json)
Hash identifier:          VbziN+JO6/eD2Kg3qRVaWrJGjJUjyjYE/zwRm1hUtTI=
Subject key identifier:   AD:A3:83:7F:D3:B6:A2:5D:53:B2:81:DB:80:0D:8D:B8:2C:74:41:56
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       39D2190030C2ECAE67623985A9932D5FFB856C7B
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3133382e39372e3132302e302f32322d3232203d3e20323639303733.roa
Signing time:             Tue 23 Sep 2025 15:19:31 +0000
ROA not before:           Tue 23 Sep 2025 15:14:31 +0000
ROA not after:            Tue 22 Sep 2026 15:19:31 +0000
asID:                     269073
IP address blocks:        138.97.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d2:19:00:30:c2:ec:ae:67:62:39:85:a9:93:2d:5f:fb:85:6c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Sep 23 15:14:31 2025 GMT
            Not After : Sep 22 15:19:31 2026 GMT
        Subject: CN=ADA3837FD3B6A25D53B281DB800D8DB82C744156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b2:1d:ec:63:8e:ae:09:ba:a6:1d:8b:1f:be:
                    8c:b8:62:8f:66:3c:4a:e6:d0:2c:43:03:a1:52:dc:
                    e1:d7:1c:c6:ac:7d:98:a0:83:e6:e5:81:0c:5d:68:
                    2b:ae:e0:8b:0c:a4:f1:ce:36:f4:45:8d:98:fd:1c:
                    19:43:c2:10:ea:80:92:77:db:a3:e3:50:e4:5f:cf:
                    52:78:62:fb:6d:9d:5f:04:0d:c0:03:be:8c:be:73:
                    45:21:6e:d2:8d:da:79:0e:3a:81:23:37:98:b5:c9:
                    ce:38:28:1d:62:16:fe:7c:f1:f4:de:40:69:b1:b4:
                    93:bc:88:73:3f:d9:92:c7:5b:9b:a3:58:ab:a1:ed:
                    b8:02:e8:94:cf:6e:46:3d:5c:ac:8f:b1:03:1e:b7:
                    1d:4b:17:cc:3e:7d:99:5f:c9:b3:64:30:85:36:7d:
                    d4:37:a3:aa:ea:0f:1a:b6:61:c9:32:d1:54:69:1e:
                    f4:76:fa:97:f3:0a:7b:78:6f:93:f9:ae:b1:7b:72:
                    54:ce:2f:d5:a1:33:06:24:a8:b5:62:c8:da:13:8f:
                    15:15:ad:3c:5e:ea:bf:27:63:7e:6c:e1:38:a6:ff:
                    74:3b:20:f8:36:7c:1b:57:fd:5c:f3:18:ac:d0:e6:
                    f1:28:6d:dd:d0:6d:6c:c6:3f:93:9f:1d:07:ff:23:
                    c3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A3:83:7F:D3:B6:A2:5D:53:B2:81:DB:80:0D:8D:B8:2C:74:41:56
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3133382e39372e3132302e302f32322d3232203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:e6:26:76:5b:4e:04:72:39:24:a6:d7:39:97:4b:83:ac:85:
         81:40:2e:8c:44:94:fa:15:04:6d:95:9e:53:5a:73:47:8c:bf:
         d6:c7:55:49:8b:3e:c9:1b:1b:ba:b2:b8:6e:7a:90:52:35:46:
         bf:3c:f4:0c:e7:05:1c:f1:84:81:df:be:48:af:e6:a7:c3:ab:
         ae:ce:88:20:2f:d6:6c:66:77:ac:c5:7d:39:ca:da:22:79:08:
         2a:04:96:28:c4:3a:f6:61:6c:a5:ca:ad:a6:5f:8c:27:b8:8c:
         a8:de:98:72:2c:da:9d:01:23:6e:d8:0c:c2:a9:82:36:76:88:
         98:18:18:05:41:63:44:8e:42:4e:5d:9a:c1:89:0d:fa:13:d6:
         25:52:da:5b:d6:ab:91:c6:38:2d:9b:eb:f4:4f:e6:60:7e:7d:
         c9:ad:9a:4c:8a:be:aa:75:b1:b8:a0:9e:25:02:f8:34:bd:fe:
         7d:88:a1:89:f2:1b:31:c2:ac:3e:7c:ee:1b:d3:8b:b0:c2:1e:
         6f:29:a6:19:fc:e9:06:d4:c2:5b:db:0d:ea:65:fa:a7:f1:58:
         a4:88:9e:d9:14:0c:61:4a:61:13:34:5f:b3:1a:82:72:a5:68:
         1d:b7:bd:70:9e:f3:0e:5c:7d:ed:69:97:07:a7:2b:ff:cb:c9:
         f5:39:6b:36
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOdIZADDC7K5nYjmFqZMtX/uFbHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGOTY4MjAxOTVFNkE2NkUzOEY5MTAyQjRCNTZGMEU0
RUIzMTgzMTAeFw0yNTA5MjMxNTE0MzFaFw0yNjA5MjIxNTE5MzFaMDMxMTAvBgNV
BAMTKEFEQTM4MzdGRDNCNkEyNUQ1M0IyODFEQjgwMEQ4REI4MkM3NDQxNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgsh3sY46uCbqmHYsfvoy4Yo9m
PErm0CxDA6FS3OHXHMasfZigg+blgQxdaCuu4IsMpPHONvRFjZj9HBlDwhDqgJJ3
26PjUORfz1J4YvttnV8EDcADvoy+c0UhbtKN2nkOOoEjN5i1yc44KB1iFv588fTe
QGmxtJO8iHM/2ZLHW5ujWKuh7bgC6JTPbkY9XKyPsQMetx1LF8w+fZlfybNkMIU2
fdQ3o6rqDxq2Ycky0VRpHvR2+pfzCnt4b5P5rrF7clTOL9WhMwYkqLViyNoTjxUV
rTxe6r8nY35s4Tim/3Q7IPg2fBtX/VzzGKzQ5vEobd3QbWzGP5OfHQf/I8NtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUraODf9O2ol1TsoHbgA2NuCx0QVYwHwYDVR0j
BBgwFoAUP/loIBleambjj5ECtLVvDk6zGDEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnZHekg2UHFkNzlwMzM5RzNlRDIyczlSVEtVeWdMb05YTkVodk5acXp2
OTMvMC8zRkY5NjgyMDE5NUU2QTY2RTM4RjkxMDJCNEI1NkYwRTRFQjMxODMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGRjk2ODIwMTk1RTZBNjZF
MzhGOTEwMkI0QjU2RjBFNEVCMzE4MzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J2R3pINlBxZDc5cDMzOUczZUQyMnM5UlRLVXlnTG9OWE5FaHZOWnF6djkzLzAv
MzEzMzM4MmUzOTM3MmUzMTMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzMDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKYXgwDQYJKoZIhvcNAQELBQADggEBAK/mJnZb
TgRyOSSm1zmXS4OshYFALoxElPoVBG2VnlNac0eMv9bHVUmLPskbG7qyuG56kFI1
Rr889AznBRzxhIHfvkiv5qfDq67OiCAv1mxmd6zFfTnK2iJ5CCoElijEOvZhbKXK
raZfjCe4jKjemHIs2p0BI27YDMKpgjZ2iJgYGAVBY0SOQk5dmsGJDfoT1iVS2lvW
q5HGOC2b6/RP5mB+fcmtmkyKvqp1sbigniUC+DS9/n2IoYnyGzHCrD587hvTi7DC
Hm8pphn86QbUwlvbDepl+qfxWKSIntkUDGFKYRM0X7MagnKlaB23vXCe8w5cfe1p
lwenK//LyfU5azY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:04:57 2025 by rpki-client