Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e37332e3131322e302f32312d3332203d3e20323632373733.roa
File:                     3137372e37332e3131322e302f32312d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          7eSVWLnjT2AOQaYqtbjmnxKD9+Ib1sKkICJA/ogRqoM=
Subject key identifier:   D7:9B:AB:B1:7A:AB:A1:F2:F0:B4:60:C5:CB:D0:1B:06:3C:52:7E:91
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       4730F7B4C7D49C1F8B505BE1E0FB1A32C1F848FD
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e37332e3131322e302f32312d3332203d3e20323632373733.roa
Signing time:             Sun 19 Oct 2025 17:06:06 +0000
ROA not before:           Sun 19 Oct 2025 17:01:06 +0000
ROA not after:            Sun 18 Oct 2026 17:06:06 +0000
asID:                     262773
IP address blocks:        177.73.112.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:30:f7:b4:c7:d4:9c:1f:8b:50:5b:e1:e0:fb:1a:32:c1:f8:48:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Oct 19 17:01:06 2025 GMT
            Not After : Oct 18 17:06:06 2026 GMT
        Subject: CN=D79BABB17AABA1F2F0B460C5CBD01B063C527E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:82:ef:1e:7e:d4:d3:fb:71:1e:ee:16:18:99:
                    54:f0:27:7c:24:f2:ee:bc:4c:99:28:a4:4e:9a:cf:
                    e7:38:3b:80:9d:cb:d3:33:9c:bc:c3:29:fe:4e:9c:
                    68:18:32:5d:79:5c:52:66:34:fd:54:ba:c4:68:97:
                    b4:32:e3:52:0e:f6:a7:6b:c5:cc:cc:41:31:b0:ca:
                    0d:3d:ee:a6:54:37:75:02:24:e1:a2:2d:13:7d:87:
                    08:52:ae:46:e1:d6:28:27:fd:00:36:3a:29:9d:f2:
                    d4:b9:ad:c1:9a:c7:34:c8:57:e3:b6:66:0f:72:c6:
                    ae:79:8e:e9:ce:1b:78:c5:54:14:e8:6e:51:5e:b2:
                    2d:4a:c8:85:db:bb:bc:98:83:d1:d5:32:f0:38:26:
                    11:0c:9c:d5:1f:af:0c:67:9e:ce:e4:e2:e7:60:65:
                    aa:bc:e5:a2:68:df:13:44:ac:8e:a4:8d:40:eb:03:
                    ce:fd:39:83:36:9b:f6:46:a9:9e:df:8b:87:36:87:
                    b3:a1:7b:fc:9c:94:d1:58:98:c4:03:ce:8f:8f:69:
                    c0:a5:63:29:f4:93:9f:5b:c3:05:27:dc:2f:33:f1:
                    45:0b:d3:a5:56:5b:ff:78:a6:24:b4:5d:7b:85:6c:
                    8e:d1:4d:ce:50:13:af:d9:1a:7c:d1:16:f8:e3:7a:
                    95:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9B:AB:B1:7A:AB:A1:F2:F0:B4:60:C5:CB:D0:1B:06:3C:52:7E:91
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e37332e3131322e302f32312d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:84:77:fb:e4:de:1d:22:be:6e:ad:ac:ab:9e:53:41:c7:91:
         df:28:1b:da:7f:47:e0:81:15:09:fc:d9:e1:2b:8c:3d:dd:dc:
         fc:d5:5b:d7:ae:0b:a9:ae:f0:03:81:85:bf:3a:fb:dc:a0:23:
         73:27:55:1f:1f:81:8c:14:ff:41:ea:8d:0b:7f:25:51:4f:09:
         c6:31:79:4c:de:92:3c:44:70:e0:cf:87:e7:93:d4:85:6b:46:
         2d:98:5b:fc:0a:97:05:c4:28:4b:49:81:67:61:37:03:fe:00:
         88:1a:8b:24:63:27:58:56:72:03:0e:46:f7:dc:c3:5f:ef:1b:
         df:85:c2:c0:4f:80:6d:53:65:8d:bd:b4:d9:c2:d0:c8:22:b6:
         00:1f:42:b8:54:93:35:42:26:fd:01:66:a2:66:16:82:64:f7:
         2e:0f:f9:5c:8a:90:13:fb:0d:db:d5:07:bd:00:b5:d6:bb:63:
         5f:b2:95:0c:73:a8:30:98:f4:f6:93:a1:91:ba:0a:ba:6f:73:
         e7:e2:cf:fa:8d:af:db:bc:8e:24:62:30:98:ae:fe:86:fd:7a:
         ac:89:60:0f:53:51:d0:01:dd:55:8d:47:e7:50:e3:d8:a2:03:
         54:17:35:b0:0f:e9:13:c5:8b:87:57:76:ff:5c:e3:45:cc:7b:
         a0:8a:85:8f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURzD3tMfUnB+LUFvh4PsaMsH4SP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNTEwMTkxNzAxMDZaFw0yNjEwMTgxNzA2MDZaMDMxMTAvBgNV
BAMTKEQ3OUJBQkIxN0FBQkExRjJGMEI0NjBDNUNCRDAxQjA2M0M1MjdFOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtgu8eftTT+3Ee7hYYmVTwJ3wk
8u68TJkopE6az+c4O4Cdy9MznLzDKf5OnGgYMl15XFJmNP1UusRol7Qy41IO9qdr
xczMQTGwyg097qZUN3UCJOGiLRN9hwhSrkbh1ign/QA2Oimd8tS5rcGaxzTIV+O2
Zg9yxq55junOG3jFVBToblFesi1KyIXbu7yYg9HVMvA4JhEMnNUfrwxnns7k4udg
Zaq85aJo3xNErI6kjUDrA879OYM2m/ZGqZ7fi4c2h7Ohe/yclNFYmMQDzo+PacCl
Yyn0k59bwwUn3C8z8UUL06VWW/94piS0XXuFbI7RTc5QE6/ZGnzRFvjjepXnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU15ursXqrofLwtGDFy9AbBjxSfpEwHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzNzM3MmUzNzMzMmUzMTMxMzIyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxSXAwDQYJKoZIhvcNAQELBQADggEBAJOEd/vk
3h0ivm6trKueU0HHkd8oG9p/R+CBFQn82eErjD3d3PzVW9euC6mu8AOBhb86+9yg
I3MnVR8fgYwU/0HqjQt/JVFPCcYxeUzekjxEcODPh+eT1IVrRi2YW/wKlwXEKEtJ
gWdhNwP+AIgaiyRjJ1hWcgMORvfcw1/vG9+FwsBPgG1TZY29tNnC0MgitgAfQrhU
kzVCJv0BZqJmFoJk9y4P+VyKkBP7DdvVB70Atda7Y1+ylQxzqDCY9PaToZG6Crpv
c+fiz/qNr9u8jiRiMJiu/ob9eqyJYA9TUdAB3VWNR+dQ49iiA1QXNbAP6RPFi4dX
dv9c40XMe6CKhY8=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:01:29 2025 by rpki-client