Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134362e302f32342d3234203d3e20323730373538.roa
File:                     3230302e33392e3134362e302f32342d3234203d3e20323730373538.roa (raw, json)
Hash identifier:          JX7Pdu25r7dXEE2keGtmwFR/OPLJBJ7iFLNr57lypDg=
Subject key identifier:   77:B3:7F:84:1C:24:86:95:F4:E5:09:D8:77:F1:8F:F0:6E:FC:C5:3B
Certificate issuer:       /CN=687A6048EF56F775209873731BED7BB7E087AB69
Certificate serial:       1D36541C211396DDDD487B6C708533F65EBE678B
Authority key identifier: 68:7A:60:48:EF:56:F7:75:20:98:73:73:1B:ED:7B:B7:E0:87:AB:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687A6048EF56F775209873731BED7BB7E087AB69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134362e302f32342d3234203d3e20323730373538.roa
Signing time:             Wed 15 Oct 2025 15:48:15 +0000
ROA not before:           Wed 15 Oct 2025 15:43:15 +0000
ROA not after:            Wed 14 Oct 2026 15:48:15 +0000
asID:                     270758
IP address blocks:        200.39.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.crl
                          rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687A6048EF56F775209873731BED7BB7E087AB69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:36:54:1c:21:13:96:dd:dd:48:7b:6c:70:85:33:f6:5e:be:67:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687A6048EF56F775209873731BED7BB7E087AB69
        Validity
            Not Before: Oct 15 15:43:15 2025 GMT
            Not After : Oct 14 15:48:15 2026 GMT
        Subject: CN=77B37F841C248695F4E509D877F18FF06EFCC53B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:13:fa:76:ca:6b:45:4e:a1:79:e0:bf:39:d4:
                    5d:0b:25:ec:62:b8:f9:b7:11:fa:6d:28:db:54:d9:
                    38:80:1c:6e:86:ad:43:39:0e:a2:62:ed:93:48:7c:
                    6f:af:48:15:02:18:79:78:ed:7a:d0:d8:9a:95:37:
                    16:b5:79:53:53:33:08:c8:bc:bc:b4:e7:e0:fe:2c:
                    81:7e:37:dd:12:21:d8:9f:ec:9b:d7:27:f3:c4:ea:
                    f6:c5:64:05:e6:b1:14:d8:4e:27:25:1f:97:18:1b:
                    9f:56:b6:d4:31:59:f0:75:ee:29:1f:99:1e:c0:84:
                    31:16:5c:29:bc:30:af:2f:e2:80:c4:ed:81:5f:a8:
                    0c:39:30:e9:a3:a1:95:7f:40:88:b3:1e:ca:44:39:
                    8b:35:44:7d:2d:0e:ac:fd:3b:95:9c:80:32:5f:b4:
                    fb:19:30:53:e9:0b:0b:a5:24:2c:58:e0:1f:f1:99:
                    7a:3a:9e:cf:a3:01:a5:28:f4:41:38:3c:b9:7e:24:
                    97:06:00:ab:7a:6f:ef:e4:9f:25:7c:26:d5:64:16:
                    68:33:b0:10:2f:59:4c:0d:b8:df:4c:56:2c:0b:87:
                    1c:ad:8e:c6:2d:13:03:62:d6:9f:1e:09:ba:fc:7d:
                    b1:b7:b5:5e:ec:30:5b:e8:75:8b:ca:91:ee:58:e2:
                    1a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B3:7F:84:1C:24:86:95:F4:E5:09:D8:77:F1:8F:F0:6E:FC:C5:3B
            X509v3 Authority Key Identifier:
                keyid:68:7A:60:48:EF:56:F7:75:20:98:73:73:1B:ED:7B:B7:E0:87:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687A6048EF56F775209873731BED7BB7E087AB69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134362e302f32342d3234203d3e20323730373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:04:48:79:9f:2e:25:ae:9a:97:93:5c:b6:a3:06:2b:37:39:
         36:9f:7f:ae:ff:72:da:f7:23:27:4f:7d:11:09:03:85:aa:7d:
         ad:be:94:31:cc:a3:14:7c:17:c8:52:49:33:27:d6:bc:e6:e5:
         e7:6b:51:c8:7b:9b:f0:de:bd:22:9d:b5:a3:a1:96:c0:ad:73:
         66:c2:7f:5b:af:b7:81:a6:98:59:49:45:08:16:c9:32:07:ab:
         68:6b:d4:c9:79:70:ab:28:85:45:11:3b:1b:a5:34:16:9e:39:
         92:17:b3:24:84:eb:1f:dc:38:c7:aa:73:6a:75:dc:62:3e:20:
         c9:c7:74:54:f2:8c:e0:68:21:ec:78:32:0f:83:19:e8:78:73:
         cd:0d:35:14:c7:10:f1:99:b1:ee:09:9c:89:58:76:12:a7:6a:
         4c:c4:26:46:8e:0f:4e:f4:0d:08:0e:1f:45:76:03:1b:3e:f3:
         af:5f:4d:d9:0d:6c:77:e6:92:0f:05:30:a5:31:2c:78:42:51:
         c3:1c:82:c0:00:23:71:d2:5c:d7:ad:b8:24:0e:2f:ee:9b:ff:
         30:20:58:46:d5:b7:75:d5:02:f9:9d:f8:45:39:cb:08:3d:86:
         7e:fe:07:90:ff:94:93:a2:c6:0d:65:ed:24:5f:f7:b0:de:5e:
         ec:c0:ca:3b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHTZUHCETlt3dSHtscIUz9l6+Z4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg3QTYwNDhFRjU2Rjc3NTIwOTg3MzczMUJFRDdCQjdF
MDg3QUI2OTAeFw0yNTEwMTUxNTQzMTVaFw0yNjEwMTQxNTQ4MTVaMDMxMTAvBgNV
BAMTKDc3QjM3Rjg0MUMyNDg2OTVGNEU1MDlEODc3RjE4RkYwNkVGQ0M1M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZE/p2ymtFTqF54L851F0LJexi
uPm3EfptKNtU2TiAHG6GrUM5DqJi7ZNIfG+vSBUCGHl47XrQ2JqVNxa1eVNTMwjI
vLy05+D+LIF+N90SIdif7JvXJ/PE6vbFZAXmsRTYTiclH5cYG59WttQxWfB17ikf
mR7AhDEWXCm8MK8v4oDE7YFfqAw5MOmjoZV/QIizHspEOYs1RH0tDqz9O5WcgDJf
tPsZMFPpCwulJCxY4B/xmXo6ns+jAaUo9EE4PLl+JJcGAKt6b+/knyV8JtVkFmgz
sBAvWUwNuN9MViwLhxytjsYtEwNi1p8eCbr8fbG3tV7sMFvodYvKke5Y4hqJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUd7N/hBwkhpX05QnYd/GP8G78xTswHwYDVR0j
BBgwFoAUaHpgSO9W93UgmHNzG+17t+CHq2kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0V4WnFiZzRzNWtucnNjNlZLS3piaGFmS1pEMWhlUkR1S2VmeGFqa3E0
cEUvMC82ODdBNjA0OEVGNTZGNzc1MjA5ODczNzMxQkVEN0JCN0UwODdBQjY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4N0E2MDQ4RUY1NkY3NzUy
MDk4NzM3MzFCRUQ3QkI3RTA4N0FCNjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFeFpxYmc0czVrbnJzYzZWS0t6YmhhZktaRDFoZVJEdUtlZnhhamtxNHBFLzAv
MzIzMDMwMmUzMzM5MmUzMTM0MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIJ5IwDQYJKoZIhvcNAQELBQADggEBAJUESHmf
LiWumpeTXLajBis3OTaff67/ctr3IydPfREJA4Wqfa2+lDHMoxR8F8hSSTMn1rzm
5edrUch7m/DevSKdtaOhlsCtc2bCf1uvt4GmmFlJRQgWyTIHq2hr1Ml5cKsohUUR
OxulNBaeOZIXsySE6x/cOMeqc2p13GI+IMnHdFTyjOBoIex4Mg+DGeh4c80NNRTH
EPGZse4JnIlYdhKnakzEJkaOD070DQgOH0V2Axs+869fTdkNbHfmkg8FMKUxLHhC
UcMcgsAAI3HSXNetuCQOL+6b/zAgWEbVt3XVAvmd+EU5ywg9hn7+B5D/lJOixg1l
7SRf97DeXuzAyjs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:17 2025 by rpki-client