Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e3131302e3134342e302f32322d3232203d3e20323639303733.roa
File:                     3138372e3131302e3134342e302f32322d3232203d3e20323639303733.roa (raw, json)
Hash identifier:          E7W7kxgTAjDK6y94RL8vGRNSybT1UCArzsP+rSZqRvE=
Subject key identifier:   C9:09:C0:F2:79:57:05:40:17:2D:6E:6F:F1:4A:11:FF:A5:16:41:1C
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       37D8127F4A48805D4E6FEB45CB73B9F27ABD44B0
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e3131302e3134342e302f32322d3232203d3e20323639303733.roa
Signing time:             Tue 23 Sep 2025 15:19:31 +0000
ROA not before:           Tue 23 Sep 2025 15:14:31 +0000
ROA not after:            Tue 22 Sep 2026 15:19:31 +0000
asID:                     269073
IP address blocks:        187.110.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d8:12:7f:4a:48:80:5d:4e:6f:eb:45:cb:73:b9:f2:7a:bd:44:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Sep 23 15:14:31 2025 GMT
            Not After : Sep 22 15:19:31 2026 GMT
        Subject: CN=C909C0F279570540172D6E6FF14A11FFA516411C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f0:7e:5b:b7:ab:26:52:ef:fd:21:ce:f4:b9:
                    bd:00:67:0f:3a:9a:a2:dc:52:5d:ea:fd:d3:ef:20:
                    65:07:e4:73:8e:18:9c:83:06:19:49:1f:dd:a7:e8:
                    14:a1:d2:b9:45:b6:9e:a2:2a:fb:80:a7:51:0d:7b:
                    78:5f:e4:3d:7b:51:cf:f6:64:37:5e:8a:26:0a:e0:
                    68:23:8c:a4:5e:d2:e3:f9:0d:f4:ad:84:1d:e3:ef:
                    b1:b6:ff:be:94:a9:35:f3:42:37:2d:8a:d8:cd:22:
                    25:14:da:08:d2:88:42:8f:bc:c4:e0:6c:fb:98:cc:
                    10:0e:7c:a0:a4:ef:03:b5:ad:c4:94:0e:8b:3a:a6:
                    9c:7c:81:de:14:77:82:bd:02:f5:fc:bf:db:a2:95:
                    ee:b7:bb:94:f9:d0:64:b5:9c:91:5a:95:0b:5e:75:
                    7b:59:98:5a:f5:c3:94:6e:44:3b:af:89:96:3e:55:
                    39:28:24:9f:15:15:e3:c4:a6:d5:55:1c:bb:11:49:
                    e8:f4:6e:b0:3a:da:dd:89:f6:e2:b9:4b:a8:55:c7:
                    fb:33:d3:bb:ab:28:be:12:fb:06:92:73:df:27:0f:
                    01:88:cf:f3:00:cf:a3:e7:ea:74:79:a4:c1:5a:4b:
                    1a:bb:02:7e:26:f7:16:60:5b:07:80:81:f7:69:9d:
                    55:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:09:C0:F2:79:57:05:40:17:2D:6E:6F:F1:4A:11:FF:A5:16:41:1C
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e3131302e3134342e302f32322d3232203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:4e:ea:8a:d1:08:7c:c8:ed:ab:3d:83:e3:74:05:7b:f5:66:
         b7:89:21:e1:5f:63:7f:39:55:0b:9d:80:f3:a4:b6:78:76:b6:
         da:54:97:4e:73:a7:0b:49:99:d1:82:57:b3:b4:fb:0c:bb:72:
         8d:18:e2:dc:8f:e6:bd:0a:05:64:45:7b:00:cd:78:a1:6b:bc:
         d3:0b:1c:81:9d:fd:c9:bf:79:10:b1:57:46:be:38:bf:72:06:
         46:69:e7:22:cf:5b:06:7f:f3:57:c5:8e:6e:20:69:bb:bb:e9:
         3d:20:72:54:86:d8:1d:25:8b:b0:35:71:59:4a:e8:dc:3f:80:
         21:0a:a3:ca:03:0d:9d:2f:14:8d:ae:00:23:c1:5a:33:8a:0e:
         39:30:07:be:dd:6b:20:2b:6c:e2:1f:50:70:da:ff:1c:28:61:
         43:79:09:64:57:bd:c6:c8:fb:90:79:d8:41:94:45:4f:97:27:
         99:7e:42:53:34:6a:d9:a1:63:3d:ae:d0:f2:09:8e:ab:3b:e7:
         47:77:c0:3e:8c:f1:e4:7e:e1:51:2b:b3:3d:62:e8:29:0b:f1:
         28:6d:38:0c:08:78:8d:6e:37:a8:14:84:25:96:d5:4b:29:ee:
         1c:68:57:18:7e:24:27:17:70:90:f8:b1:2a:5e:27:4a:68:ec:
         63:c1:4a:ca
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUN9gSf0pIgF1Ob+tFy3O58nq9RLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGOTY4MjAxOTVFNkE2NkUzOEY5MTAyQjRCNTZGMEU0
RUIzMTgzMTAeFw0yNTA5MjMxNTE0MzFaFw0yNjA5MjIxNTE5MzFaMDMxMTAvBgNV
BAMTKEM5MDlDMEYyNzk1NzA1NDAxNzJENkU2RkYxNEExMUZGQTUxNjQxMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ8H5bt6smUu/9Ic70ub0AZw86
mqLcUl3q/dPvIGUH5HOOGJyDBhlJH92n6BSh0rlFtp6iKvuAp1ENe3hf5D17Uc/2
ZDdeiiYK4GgjjKRe0uP5DfSthB3j77G2/76UqTXzQjctitjNIiUU2gjSiEKPvMTg
bPuYzBAOfKCk7wO1rcSUDos6ppx8gd4Ud4K9AvX8v9uile63u5T50GS1nJFalQte
dXtZmFr1w5RuRDuviZY+VTkoJJ8VFePEptVVHLsRSej0brA62t2J9uK5S6hVx/sz
07urKL4S+waSc98nDwGIz/MAz6Pn6nR5pMFaSxq7An4m9xZgWweAgfdpnVVdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUyQnA8nlXBUAXLW5v8UoR/6UWQRwwHwYDVR0j
BBgwFoAUP/loIBleambjj5ECtLVvDk6zGDEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnZHekg2UHFkNzlwMzM5RzNlRDIyczlSVEtVeWdMb05YTkVodk5acXp2
OTMvMC8zRkY5NjgyMDE5NUU2QTY2RTM4RjkxMDJCNEI1NkYwRTRFQjMxODMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGRjk2ODIwMTk1RTZBNjZF
MzhGOTEwMkI0QjU2RjBFNEVCMzE4MzEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J2R3pINlBxZDc5cDMzOUczZUQyMnM5UlRLVXlnTG9OWE5FaHZOWnF6djkzLzAv
MzEzODM3MmUzMTMxMzAyZTMxMzQzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzOTMwMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArtukDANBgkqhkiG9w0BAQsFAAOCAQEApk7q
itEIfMjtqz2D43QFe/Vmt4kh4V9jfzlVC52A86S2eHa22lSXTnOnC0mZ0YJXs7T7
DLtyjRji3I/mvQoFZEV7AM14oWu80wscgZ39yb95ELFXRr44v3IGRmnnIs9bBn/z
V8WObiBpu7vpPSByVIbYHSWLsDVxWUro3D+AIQqjygMNnS8Uja4AI8FaM4oOOTAH
vt1rICts4h9QcNr/HChhQ3kJZFe9xsj7kHnYQZRFT5cnmX5CUzRq2aFjPa7Q8gmO
qzvnR3fAPozx5H7hUSuzPWLoKQvxKG04DAh4jW43qBSEJZbVSynuHGhXGH4kJxdw
kPixKl4nSmjsY8FKyg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:03:53 2025 by rpki-client