Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32332d3233203d3e20323731363037.roa
File:                     3139302e392e3130342e302f32332d3233203d3e20323731363037.roa (raw, json)
Hash identifier:          Q4gatQHmvouqKXKWkc4KYIDIi6b8S+UXYDlHbMIK07E=
Subject key identifier:   2B:EF:15:81:C6:0E:1A:3F:D9:4D:86:D0:E1:7D:36:A2:EB:F3:4A:F9
Certificate issuer:       /CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9
Certificate serial:       4DF254914028961356FF855FDFAB735DAACD9522
Authority key identifier: 23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32332d3233203d3e20323731363037.roa
Signing time:             Wed 01 Oct 2025 18:07:18 +0000
ROA not before:           Wed 01 Oct 2025 18:02:18 +0000
ROA not after:            Wed 30 Sep 2026 18:07:18 +0000
asID:                     271607
IP address blocks:        190.9.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.crl
                          rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f2:54:91:40:28:96:13:56:ff:85:5f:df:ab:73:5d:aa:cd:95:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9
        Validity
            Not Before: Oct  1 18:02:18 2025 GMT
            Not After : Sep 30 18:07:18 2026 GMT
        Subject: CN=2BEF1581C60E1A3FD94D86D0E17D36A2EBF34AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e3:38:f1:55:43:4c:82:9f:27:9c:c4:c9:94:
                    4c:67:b4:91:c8:73:c8:b1:72:dc:5d:3a:91:8a:74:
                    62:77:55:81:f4:2d:21:36:ec:1a:a4:f0:f9:3e:ee:
                    36:53:c0:b8:02:0f:9d:2f:f9:41:07:65:fd:ee:3e:
                    f3:c9:9b:12:b8:3f:98:4f:74:bf:b2:31:04:16:ab:
                    b9:f7:a1:0c:46:25:46:3e:e3:10:11:ae:34:57:e9:
                    af:45:da:34:34:b6:e8:2f:ba:1e:bf:bf:75:c0:d7:
                    a1:ff:81:db:06:55:76:1b:42:4a:0f:73:f6:16:61:
                    a4:ae:29:d0:ac:2c:b4:89:de:e9:f1:06:1f:2a:d9:
                    06:b7:9f:17:f6:d3:dd:98:8c:4d:28:c4:0c:27:f5:
                    2c:5f:3a:4c:54:0d:b8:50:8d:e5:d6:ab:d1:9d:be:
                    f9:f5:18:cc:fa:dd:25:20:aa:e5:56:0e:27:5a:51:
                    a1:c8:84:72:b2:66:53:e4:1c:19:67:6e:b3:70:a3:
                    2b:8c:54:2c:b3:b9:ee:46:c4:16:6d:8c:6f:f5:1f:
                    d1:94:d5:da:cc:0c:30:2c:40:e1:ae:47:3a:4f:eb:
                    5d:84:68:a3:17:78:28:e2:7a:3a:90:37:57:ae:56:
                    ae:5e:d6:21:ce:99:bc:04:70:94:d8:b8:69:aa:c0:
                    23:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EF:15:81:C6:0E:1A:3F:D9:4D:86:D0:E1:7D:36:A2:EB:F3:4A:F9
            X509v3 Authority Key Identifier:
                keyid:23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32332d3233203d3e20323731363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:a6:38:2f:72:df:29:94:c2:a1:34:d5:10:ff:bd:94:12:02:
         f8:c2:45:f1:4b:1b:03:94:c4:00:cc:f5:3b:d2:0f:4b:c3:5f:
         f1:ef:6c:23:92:77:36:93:58:89:1c:99:9a:23:d5:51:cd:bd:
         29:43:a8:ca:05:ad:9a:81:da:29:a2:e5:4f:4c:f2:8c:4a:96:
         54:01:55:d6:e8:be:ac:bb:be:c4:d8:00:07:ef:fa:c6:f0:98:
         fd:4f:9e:cd:56:6d:d6:bc:48:53:3a:a2:e1:ef:31:69:e7:82:
         20:1f:6c:d8:cf:45:d1:18:68:e5:1a:e2:da:de:2d:25:9f:ec:
         84:63:c0:82:91:2e:41:25:23:07:cc:40:0f:56:74:4c:32:dc:
         f7:57:87:ab:f2:7b:67:6f:0d:b0:d8:a6:f8:83:03:02:ae:5f:
         f0:85:1e:ae:1b:b1:2a:8a:51:bf:08:bc:42:22:9a:d1:bd:34:
         24:d0:32:48:bc:a5:f9:72:25:bb:75:69:81:43:d4:27:ab:c3:
         8d:ff:4c:83:93:bf:b2:4e:b7:a8:58:e0:b9:4a:86:74:fa:45:
         5a:aa:12:2a:f0:af:65:9b:b2:27:14:3b:7a:dc:48:a3:df:04:
         e5:b9:08:26:27:cc:11:d3:75:74:60:a8:52:25:14:ac:a3:68:
         90:85:87:e8
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUTfJUkUAolhNW/4Vf36tzXarNlSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM3Q0I3RjFDRDQ1QUVERDYxQzkzNDlGNDExQjlDOUNB
RjBDMURFOTAeFw0yNTEwMDExODAyMThaFw0yNjA5MzAxODA3MThaMDMxMTAvBgNV
BAMTKDJCRUYxNTgxQzYwRTFBM0ZEOTREODZEMEUxN0QzNkEyRUJGMzRBRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY4zjxVUNMgp8nnMTJlExntJHI
c8ixctxdOpGKdGJ3VYH0LSE27Bqk8Pk+7jZTwLgCD50v+UEHZf3uPvPJmxK4P5hP
dL+yMQQWq7n3oQxGJUY+4xARrjRX6a9F2jQ0tugvuh6/v3XA16H/gdsGVXYbQkoP
c/YWYaSuKdCsLLSJ3unxBh8q2Qa3nxf2092YjE0oxAwn9SxfOkxUDbhQjeXWq9Gd
vvn1GMz63SUgquVWDidaUaHIhHKyZlPkHBlnbrNwoyuMVCyzue5GxBZtjG/1H9GU
1drMDDAsQOGuRzpP612EaKMXeCjiejqQN1euVq5e1iHOmbwEcJTYuGmqwCMfAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUK+8VgcYOGj/ZTYbQ4X02ouvzSvkwHwYDVR0j
BBgwFoAUI3y38c1Frt1hyTSfQRucnK8MHekwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DaTJhc1A5MmVxTGN3cmRMRUJudGJlRmVwY21KVlR4N2pVc1pKZGNjWlNH
LzAvMjM3Q0I3RjFDRDQ1QUVERDYxQzkzNDlGNDExQjlDOUNBRjBDMURFOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yMzdDQjdGMUNENDVBRURENjFD
OTM0OUY0MTFCOUM5Q0FGMEMxREU5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9D
aTJhc1A5MmVxTGN3cmRMRUJudGJlRmVwY21KVlR4N2pVc1pKZGNjWlNHLzAvMzEz
OTMwMmUzOTJlMzEzMDM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMxMzYz
MDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBvgloMA0GCSqGSIb3DQEBCwUAA4IBAQCDpjgvct8plMKh
NNUQ/72UEgL4wkXxSxsDlMQAzPU70g9Lw1/x72wjknc2k1iJHJmaI9VRzb0pQ6jK
Ba2agdopouVPTPKMSpZUAVXW6L6su77E2AAH7/rG8Jj9T57NVm3WvEhTOqLh7zFp
54IgH2zYz0XRGGjlGuLa3i0ln+yEY8CCkS5BJSMHzEAPVnRMMtz3V4er8ntnbw2w
2Kb4gwMCrl/whR6uG7EqilG/CLxCIprRvTQk0DJIvKX5ciW7dWmBQ9Qnq8ON/0yD
k7+yTreoWOC5SoZ0+kVaqhIq8K9lm7InFDt63Eij3wTluQgmJ8wR03V0YKhSJRSs
o2iQhYfo
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:38:19 2025 by rpki-client