Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38352e302f32342d3234203d3e20323633353138.roa
File:                     3136382e3139372e38352e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          x55SpsTbhRO2daFVNIXIglPrG9XF69SlblaNORLKyVU=
Subject key identifier:   32:D1:A7:E7:A1:0C:FA:CA:5F:24:CC:A7:26:68:40:2E:2F:78:9D:19
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       6DBABF68C36A09C1ABBA5FAA0E9A987682A34D6E
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38352e302f32342d3234203d3e20323633353138.roa
Signing time:             Fri 26 Sep 2025 13:29:20 +0000
ROA not before:           Fri 26 Sep 2025 13:24:20 +0000
ROA not after:            Fri 25 Sep 2026 13:29:20 +0000
asID:                     263518
IP address blocks:        168.197.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ba:bf:68:c3:6a:09:c1:ab:ba:5f:aa:0e:9a:98:76:82:a3:4d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Sep 26 13:24:20 2025 GMT
            Not After : Sep 25 13:29:20 2026 GMT
        Subject: CN=32D1A7E7A10CFACA5F24CCA72668402E2F789D19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:95:be:1b:b9:23:bf:6c:d0:4a:61:dd:d9:
                    3b:6b:4c:d8:91:0a:38:3e:4e:94:05:68:1f:68:6b:
                    e7:9e:3a:88:af:d5:6f:9e:ba:c9:a7:26:40:76:b2:
                    ab:dd:1e:0e:aa:b9:1c:58:10:1a:57:25:db:8d:6f:
                    ea:df:b7:b9:b8:fc:3d:64:da:f5:4e:c6:e2:39:c1:
                    7d:17:bf:f0:6e:7c:eb:4b:09:dd:65:7a:79:de:05:
                    ab:2f:e4:7a:06:68:5a:9c:7f:2e:5d:23:1f:25:e9:
                    69:08:a1:45:e2:dc:1c:a7:f7:f0:e5:aa:c5:7f:af:
                    47:70:4e:9f:65:d4:18:d1:e8:59:92:23:1b:7f:cb:
                    90:7c:5d:47:a8:3c:11:04:dd:d2:c7:c0:c9:bf:9c:
                    93:82:25:69:7d:a6:42:fc:75:b2:45:4f:30:66:be:
                    11:00:b2:88:97:c1:24:cb:ba:b5:fb:23:d7:2c:1e:
                    3e:6e:25:ac:b4:32:52:82:1a:2c:24:f2:ee:7d:43:
                    50:47:41:eb:c4:fd:87:80:8a:f9:c8:45:3b:39:16:
                    84:4d:02:ea:eb:8f:81:ab:36:ed:75:54:5e:61:87:
                    2c:85:48:a8:7a:9e:03:8b:3c:b5:89:84:c5:de:b3:
                    65:c7:cd:4a:d7:99:37:af:eb:b7:d8:43:79:cc:1b:
                    a5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D1:A7:E7:A1:0C:FA:CA:5F:24:CC:A7:26:68:40:2E:2F:78:9D:19
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38352e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:f3:fb:9c:e9:19:8a:57:8d:e5:58:4b:a2:3e:ff:86:4c:fc:
         4f:dc:d1:39:09:cd:cf:41:64:c3:1f:16:dd:29:fb:43:b1:da:
         1d:d4:9e:8d:f8:10:da:34:3e:5f:c9:5e:20:2b:11:49:ea:16:
         cf:88:37:33:ab:c8:88:9a:51:40:9e:7c:9c:c8:30:85:08:af:
         75:e4:8e:8e:5d:4d:70:ca:8f:02:cf:5f:9c:64:83:3f:e2:c4:
         5e:4f:30:a6:c2:20:86:18:0c:71:12:e3:57:9e:05:0b:b7:42:
         1c:5c:4a:e4:00:14:bb:3f:ed:a6:2b:99:7e:18:e1:44:8e:a6:
         38:d0:c8:75:f5:b6:0c:2f:c1:04:13:0e:26:c9:ea:73:56:8d:
         fa:9e:9c:6d:d9:25:16:e6:a5:65:b0:bb:f0:99:85:02:53:98:
         e0:ca:02:52:a3:79:e1:5f:f3:40:c9:e5:28:0b:6c:42:7e:8e:
         70:9d:c0:e0:0c:98:e7:15:25:6b:9e:e5:b9:fc:a8:bf:5c:0b:
         e7:d8:d2:c0:a6:c6:90:62:ae:63:2b:af:b5:60:55:15:9a:6e:
         b0:41:6e:f1:5e:33:87:c3:8a:82:da:ad:9f:a0:b1:79:11:a4:
         37:8a:74:32:a2:e9:36:40:f9:ff:86:f3:9f:13:b4:3f:39:24:
         5f:3a:91:07
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbbq/aMNqCcGrul+qDpqYdoKjTW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY0OTE2QzBFQzVGMUU2QkZGMUE2NERDOTYwNDQ1NDcz
ODc3NUUyNzAeFw0yNTA5MjYxMzI0MjBaFw0yNjA5MjUxMzI5MjBaMDMxMTAvBgNV
BAMTKDMyRDFBN0U3QTEwQ0ZBQ0E1RjI0Q0NBNzI2Njg0MDJFMkY3ODlEMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxpW+G7kjv2zQSmHd2TtrTNiR
Cjg+TpQFaB9oa+eeOoiv1W+eusmnJkB2sqvdHg6quRxYEBpXJduNb+rft7m4/D1k
2vVOxuI5wX0Xv/BufOtLCd1lenneBasv5HoGaFqcfy5dIx8l6WkIoUXi3Byn9/Dl
qsV/r0dwTp9l1BjR6FmSIxt/y5B8XUeoPBEE3dLHwMm/nJOCJWl9pkL8dbJFTzBm
vhEAsoiXwSTLurX7I9csHj5uJay0MlKCGiwk8u59Q1BHQevE/YeAivnIRTs5FoRN
Aurrj4GrNu11VF5hhyyFSKh6ngOLPLWJhMXes2XHzUrXmTev67fYQ3nMG6VjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMtGn56EM+spfJMynJmhALi94nRkwHwYDVR0j
BBgwFoAUL0kWwOxfHmv/GmTclgRFRzh3XicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG05OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZp
VG4vMC8yRjQ5MTZDMEVDNUYxRTZCRkYxQTY0REM5NjA0NDU0NzM4Nzc1RTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNDkxNkMwRUM1RjFFNkJG
RjFBNjREQzk2MDQ0NTQ3Mzg3NzVFMjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htOTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAv
MzEzNjM4MmUzMTM5MzcyZTM4MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoxVUwDQYJKoZIhvcNAQELBQADggEBAAvz+5zp
GYpXjeVYS6I+/4ZM/E/c0TkJzc9BZMMfFt0p+0Ox2h3Uno34ENo0Pl/JXiArEUnq
Fs+INzOryIiaUUCefJzIMIUIr3Xkjo5dTXDKjwLPX5xkgz/ixF5PMKbCIIYYDHES
41eeBQu3QhxcSuQAFLs/7aYrmX4Y4USOpjjQyHX1tgwvwQQTDibJ6nNWjfqenG3Z
JRbmpWWwu/CZhQJTmODKAlKjeeFf80DJ5SgLbEJ+jnCdwOAMmOcVJWue5bn8qL9c
C+fY0sCmxpBirmMrr7VgVRWabrBBbvFeM4fDioLarZ+gsXkRpDeKdDKi6TZA+f+G
858TtD85JF86kQc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:41:27 2025 by rpki-client