Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/3137372e38342e33312e302f32342d3234203d3e20323733373034.roa
File:                     3137372e38342e33312e302f32342d3234203d3e20323733373034.roa (raw, json)
Hash identifier:          YTpdZsMpLF8I+1J7/jW48bSzCvcUNVp1vm4xp3Q7+BU=
Subject key identifier:   34:78:2E:7B:40:F4:91:2A:82:14:E0:AC:CB:05:90:F0:1C:90:0A:2D
Certificate issuer:       /CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6
Certificate serial:       255D1AFE302135998A65F80ED037260F80DE24AB
Authority key identifier: 23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/3137372e38342e33312e302f32342d3234203d3e20323733373034.roa
Signing time:             Tue 14 Oct 2025 00:01:51 +0000
ROA not before:           Mon 13 Oct 2025 23:56:51 +0000
ROA not after:            Tue 13 Oct 2026 00:01:51 +0000
asID:                     273704
IP address blocks:        177.84.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl
                          rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 01:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5d:1a:fe:30:21:35:99:8a:65:f8:0e:d0:37:26:0f:80:de:24:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6
        Validity
            Not Before: Oct 13 23:56:51 2025 GMT
            Not After : Oct 13 00:01:51 2026 GMT
        Subject: CN=34782E7B40F4912A8214E0ACCB0590F01C900A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0c:39:23:fe:54:ef:75:fb:d0:0f:d4:dd:84:
                    f2:9a:1e:28:ea:13:0a:b8:6d:8d:bc:1a:bc:3d:24:
                    7b:a9:40:eb:c9:cf:0a:4e:1e:95:99:7b:5b:49:d7:
                    59:02:ab:b5:7e:b8:40:59:77:1f:3c:d9:21:cf:28:
                    fa:ec:7d:ac:21:1a:b6:31:3a:65:12:c5:e2:d4:a6:
                    04:6d:65:d8:2e:ca:2e:50:d7:fe:ea:c2:e8:68:a3:
                    02:b3:42:02:e9:d4:24:6e:fd:51:d3:e3:e8:0c:37:
                    3b:0a:df:23:12:77:e0:2a:f2:41:48:22:25:c2:a1:
                    f0:0a:8c:d4:01:14:82:09:3b:2b:a7:f1:33:98:83:
                    19:ac:0a:64:0d:0f:bc:8f:ff:ca:dd:58:15:b9:cc:
                    ad:d6:53:d4:1a:59:61:c2:d4:0e:d2:df:b9:4e:9d:
                    1c:36:05:ff:1b:e8:6d:c6:2f:c9:b6:18:7c:3d:5c:
                    bd:15:9f:2b:97:63:2a:32:4b:66:7b:e7:81:47:14:
                    01:e6:fb:a1:54:a6:55:d8:6f:d9:2d:1f:6a:35:7e:
                    fc:c0:0b:15:ea:9c:9f:30:21:71:a1:36:5b:44:91:
                    7e:4c:dc:28:aa:46:b2:8b:18:15:15:c7:1d:c2:fe:
                    fa:88:98:3b:cf:c9:fe:a2:3b:3c:80:2f:1c:8a:65:
                    fa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:78:2E:7B:40:F4:91:2A:82:14:E0:AC:CB:05:90:F0:1C:90:0A:2D
            X509v3 Authority Key Identifier:
                keyid:23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/3137372e38342e33312e302f32342d3234203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:e9:be:f9:2f:24:5f:de:91:61:54:e1:4f:70:9e:6a:ba:be:
         e7:76:a4:b1:6f:82:2e:c6:fe:77:42:e6:bf:02:01:63:47:4c:
         25:0b:6a:b5:3e:6c:69:79:41:09:de:ed:5b:87:08:c9:b6:9d:
         fe:30:79:93:2a:fd:53:f2:d7:2a:61:85:1e:bc:73:a5:ce:16:
         9a:87:66:83:8d:86:f7:6f:83:96:ea:14:c9:c3:12:74:d9:0c:
         5f:4d:93:fd:8c:d1:2c:6a:8a:5a:b0:ae:6f:c6:ea:a9:85:c7:
         f8:54:58:0a:cf:ad:88:46:80:18:2b:45:67:d2:d4:0f:ff:28:
         d5:f8:ad:11:48:ac:8b:4d:fd:2b:d4:10:7c:42:65:35:c1:93:
         aa:82:cb:b3:ac:18:c9:f9:94:16:cf:8d:d8:5c:0b:36:03:fd:
         ff:11:65:a8:d0:fa:82:46:73:90:e5:d4:a8:c9:27:95:1a:bc:
         db:8d:42:62:b0:d5:8c:8f:ed:2a:17:ce:59:3e:a5:d9:4b:9d:
         95:49:b2:d0:14:bc:c7:fe:54:4a:f6:c1:fd:5f:88:b8:84:ea:
         de:cc:f7:8c:24:9d:d9:16:14:8f:6b:82:63:cc:ee:fd:b2:b8:
         20:97:1e:70:13:7c:ab:70:fa:4e:fa:eb:da:98:23:3f:15:33:
         5a:1f:eb:20
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJV0a/jAhNZmKZfgO0DcmD4DeJKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjNBMjJFNjdDOUZFOUI1ODkyNzVENUMxNDkwMkZGN0M1
MURBREJGNjAeFw0yNTEwMTMyMzU2NTFaFw0yNjEwMTMwMDAxNTFaMDMxMTAvBgNV
BAMTKDM0NzgyRTdCNDBGNDkxMkE4MjE0RTBBQ0NCMDU5MEYwMUM5MDBBMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpDDkj/lTvdfvQD9TdhPKaHijq
Ewq4bY28Grw9JHupQOvJzwpOHpWZe1tJ11kCq7V+uEBZdx882SHPKPrsfawhGrYx
OmUSxeLUpgRtZdguyi5Q1/7qwuhoowKzQgLp1CRu/VHT4+gMNzsK3yMSd+Aq8kFI
IiXCofAKjNQBFIIJOyun8TOYgxmsCmQND7yP/8rdWBW5zK3WU9QaWWHC1A7S37lO
nRw2Bf8b6G3GL8m2GHw9XL0VnyuXYyoyS2Z754FHFAHm+6FUplXYb9ktH2o1fvzA
CxXqnJ8wIXGhNltEkX5M3CiqRrKLGBUVxx3C/vqImDvPyf6iOzyALxyKZfp5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUNHgue0D0kSqCFOCsywWQ8ByQCi0wHwYDVR0j
BBgwFoAUI6IuZ8n+m1iSddXBSQL/fFHa2/YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2o5WW5jSkZtb3hqNVBLeEpDMURueHNzS1dKOEFoWUpZM0xaa0VLQkdW
WGovMC8yM0EyMkU2N0M5RkU5QjU4OTI3NUQ1QzE0OTAyRkY3QzUxREFEQkY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQTIyRTY3QzlGRTlCNTg5
Mjc1RDVDMTQ5MDJGRjdDNTFEQURCRjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NqOVluY0pGbW94ajVQS3hKQzFEbnhzc0tXSjhBaFlKWTNMWmtFS0JHVlhqLzAv
MzEzNzM3MmUzODM0MmUzMzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMz
MzczMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVQfMA0GCSqGSIb3DQEBCwUAA4IBAQA56b75LyRf
3pFhVOFPcJ5qur7ndqSxb4Iuxv53Qua/AgFjR0wlC2q1PmxpeUEJ3u1bhwjJtp3+
MHmTKv1T8tcqYYUevHOlzhaah2aDjYb3b4OW6hTJwxJ02QxfTZP9jNEsaopasK5v
xuqphcf4VFgKz62IRoAYK0Vn0tQP/yjV+K0RSKyLTf0r1BB8QmU1wZOqgsuzrBjJ
+ZQWz43YXAs2A/3/EWWo0PqCRnOQ5dSoySeVGrzbjUJisNWMj+0qF85ZPqXZS52V
SbLQFLzH/lRK9sH9X4i4hOrezPeMJJ3ZFhSPa4JjzO79srgglx5wE3yrcPpO+uva
mCM/FTNaH+sg
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:04:56 2025 by rpki-client