Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzmPeA18ZcSPaKJvGcxCRyfpFXdC6FmnpZY4gsZDVgdQ/0/3139302e38392e3138302e302f32322d3234203d3e20323730333839.roa
File:                     3139302e38392e3138302e302f32322d3234203d3e20323730333839.roa (raw, json)
Hash identifier:          8fzIhmsMLqxJH++6X1y5R9mAIGdWEMPO5RnkFGIrax4=
Subject key identifier:   9B:0E:61:F8:C5:85:DA:38:9A:93:92:E4:FC:0F:87:47:55:9E:DF:0F
Certificate issuer:       /CN=C102077C6FF730228C02F1F6C6797A5CC1C2A5C1
Certificate serial:       15BD3450F5D9FA820082A23F7F9BE23B09685DEB
Authority key identifier: C1:02:07:7C:6F:F7:30:22:8C:02:F1:F6:C6:79:7A:5C:C1:C2:A5:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C102077C6FF730228C02F1F6C6797A5CC1C2A5C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzmPeA18ZcSPaKJvGcxCRyfpFXdC6FmnpZY4gsZDVgdQ/0/3139302e38392e3138302e302f32322d3234203d3e20323730333839.roa
Signing time:             Sun 12 Oct 2025 22:04:38 +0000
ROA not before:           Sun 12 Oct 2025 21:59:38 +0000
ROA not after:            Sun 11 Oct 2026 22:04:38 +0000
asID:                     270389
IP address blocks:        190.89.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GzmPeA18ZcSPaKJvGcxCRyfpFXdC6FmnpZY4gsZDVgdQ/0/C102077C6FF730228C02F1F6C6797A5CC1C2A5C1.crl
                          rsync://rpki-repo.registro.br/repo/GzmPeA18ZcSPaKJvGcxCRyfpFXdC6FmnpZY4gsZDVgdQ/0/C102077C6FF730228C02F1F6C6797A5CC1C2A5C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C102077C6FF730228C02F1F6C6797A5CC1C2A5C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bd:34:50:f5:d9:fa:82:00:82:a2:3f:7f:9b:e2:3b:09:68:5d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C102077C6FF730228C02F1F6C6797A5CC1C2A5C1
        Validity
            Not Before: Oct 12 21:59:38 2025 GMT
            Not After : Oct 11 22:04:38 2026 GMT
        Subject: CN=9B0E61F8C585DA389A9392E4FC0F8747559EDF0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b1:d5:15:37:b5:9d:98:81:70:d4:3a:4d:8c:
                    39:ff:87:a3:99:3a:18:be:6e:04:a2:ab:be:43:c6:
                    80:96:ab:42:82:92:c4:e2:66:fa:12:1d:d6:30:53:
                    ec:d8:46:18:3d:2b:84:d5:ac:9b:c0:e3:97:a3:22:
                    c4:62:69:1b:4d:0e:24:f4:76:ba:7a:7b:c6:19:a7:
                    93:da:97:73:a8:6c:33:e8:b6:7c:d1:76:2a:58:06:
                    c3:f4:af:37:8f:ca:c4:ba:31:65:17:5a:79:c3:ca:
                    58:d1:3f:98:d6:c2:68:2e:0c:b8:30:b6:39:5b:03:
                    7c:2b:9d:9a:8b:02:ba:a4:9c:3a:6c:11:80:9b:65:
                    25:7d:ca:da:db:6d:10:ff:1f:35:7b:3c:46:c8:38:
                    c3:54:61:ea:79:36:8a:85:08:aa:8e:49:4b:64:1f:
                    c7:a7:b3:9b:14:c8:23:b9:d9:af:fc:1c:e6:de:3b:
                    45:64:5d:f1:bb:68:5e:85:07:a0:c0:71:4f:84:68:
                    67:e2:8d:d6:34:6b:4e:1a:0b:bd:da:a4:15:bb:7a:
                    be:d2:e9:1f:6f:b4:0c:d3:31:26:9a:d1:05:88:c2:
                    b5:91:b3:ff:3f:d1:e4:92:89:25:ae:29:b4:6f:af:
                    0e:ab:b3:5c:2d:4e:30:68:50:fe:78:be:3e:9e:3a:
                    f0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0E:61:F8:C5:85:DA:38:9A:93:92:E4:FC:0F:87:47:55:9E:DF:0F
            X509v3 Authority Key Identifier:
                keyid:C1:02:07:7C:6F:F7:30:22:8C:02:F1:F6:C6:79:7A:5C:C1:C2:A5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzmPeA18ZcSPaKJvGcxCRyfpFXdC6FmnpZY4gsZDVgdQ/0/C102077C6FF730228C02F1F6C6797A5CC1C2A5C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C102077C6FF730228C02F1F6C6797A5CC1C2A5C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzmPeA18ZcSPaKJvGcxCRyfpFXdC6FmnpZY4gsZDVgdQ/0/3139302e38392e3138302e302f32322d3234203d3e20323730333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:a6:f8:2c:72:58:8b:66:95:e5:bf:9d:d6:61:90:de:07:0a:
         ef:d0:cd:ff:01:81:41:a2:2b:54:ca:a2:f5:41:06:f2:27:cb:
         dc:55:51:84:12:4b:28:b5:02:d0:b6:91:dc:2c:9f:9e:a6:8e:
         71:f5:94:0e:af:4a:45:aa:f5:7c:2c:56:d6:a6:7c:22:49:45:
         1c:ac:46:a6:c8:f6:fe:a5:38:0f:5e:5a:2a:d0:63:5c:90:d7:
         94:fa:a4:81:0d:8b:1e:3b:58:76:ee:be:3b:39:96:38:cf:49:
         0a:61:04:bc:2e:6f:9e:75:dd:ba:41:78:cf:6e:6d:c3:de:3b:
         2d:a2:2a:72:e6:6e:6f:da:c2:63:d5:45:45:4e:96:0f:72:29:
         31:d8:b6:04:c5:d3:2e:90:0b:67:ec:56:f2:fa:03:14:70:6c:
         f3:c3:70:f9:cb:34:4e:bd:db:8e:20:8e:b9:2c:e0:c5:85:85:
         c9:2f:7f:d1:97:ae:ca:91:00:77:53:28:8e:6c:68:e0:05:db:
         95:d5:38:6f:ff:e7:ef:f8:4c:c6:b1:84:ff:5d:e1:ef:b6:7c:
         f8:08:2c:6c:1f:fd:38:22:6f:cd:18:5f:4c:95:d4:6b:07:3c:
         42:d3:4c:75:88:4a:73:f6:d5:05:89:93:b0:9e:7c:ce:fb:e6:
         e8:41:de:da
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFb00UPXZ+oIAgqI/f5viOwloXeswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEwMjA3N0M2RkY3MzAyMjhDMDJGMUY2QzY3OTdBNUND
MUMyQTVDMTAeFw0yNTEwMTIyMTU5MzhaFw0yNjEwMTEyMjA0MzhaMDMxMTAvBgNV
BAMTKDlCMEU2MUY4QzU4NURBMzg5QTkzOTJFNEZDMEY4NzQ3NTU5RURGMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgsdUVN7WdmIFw1DpNjDn/h6OZ
Ohi+bgSiq75DxoCWq0KCksTiZvoSHdYwU+zYRhg9K4TVrJvA45ejIsRiaRtNDiT0
drp6e8YZp5Pal3OobDPotnzRdipYBsP0rzePysS6MWUXWnnDyljRP5jWwmguDLgw
tjlbA3wrnZqLArqknDpsEYCbZSV9ytrbbRD/HzV7PEbIOMNUYep5NoqFCKqOSUtk
H8ens5sUyCO52a/8HObeO0VkXfG7aF6FB6DAcU+EaGfijdY0a04aC73apBW7er7S
6R9vtAzTMSaa0QWIwrWRs/8/0eSSiSWuKbRvrw6rs1wtTjBoUP54vj6eOvCRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmw5h+MWF2jiak5Lk/A+HR1We3w8wHwYDVR0j
BBgwFoAUwQIHfG/3MCKMAvH2xnl6XMHCpcEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ptUGVBMThaY1NQYUtKdkdjeENSeWZwRlhkQzZGbW5wWlk0Z3NaRFZn
ZFEvMC9DMTAyMDc3QzZGRjczMDIyOEMwMkYxRjZDNjc5N0E1Q0MxQzJBNUMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMDIwNzdDNkZGNzMwMjI4
QzAyRjFGNkM2Nzk3QTVDQzFDMkE1QzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d6bVBlQTE4WmNTUGFLSnZHY3hDUnlmcEZYZEM2Rm1ucFpZNGdzWkRWZ2RRLzAv
MzEzOTMwMmUzODM5MmUzMTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzMzM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK+WbQwDQYJKoZIhvcNAQELBQADggEBAC+m+Cxy
WItmleW/ndZhkN4HCu/Qzf8BgUGiK1TKovVBBvIny9xVUYQSSyi1AtC2kdwsn56m
jnH1lA6vSkWq9XwsVtamfCJJRRysRqbI9v6lOA9eWirQY1yQ15T6pIENix47WHbu
vjs5ljjPSQphBLwub5513bpBeM9ubcPeOy2iKnLmbm/awmPVRUVOlg9yKTHYtgTF
0y6QC2fsVvL6AxRwbPPDcPnLNE69244gjrks4MWFhckvf9GXrsqRAHdTKI5saOAF
25XVOG//5+/4TMaxhP9d4e+2fPgILGwf/Tgib80YX0yV1GsHPELTTHWISnP21QWJ
k7CefM775uhB3to=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:43 2025 by rpki-client