Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa
File:                     3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (raw, json)
Hash identifier:          XRhfslxEoTNm+hxIZ2x4tmw31Lm059fbAltLDLKYMTE=
Subject key identifier:   CB:29:69:41:D7:26:BD:18:3E:84:73:B7:78:32:9B:2E:B3:15:D8:AB
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       2FC98A7F0FB0F861E24CC8818A95F9B682559609
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa
Signing time:             Thu 09 Oct 2025 14:32:38 +0000
ROA not before:           Thu 09 Oct 2025 14:27:38 +0000
ROA not after:            Thu 08 Oct 2026 14:32:38 +0000
asID:                     263087
IP address blocks:        179.109.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
                          rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c9:8a:7f:0f:b0:f8:61:e2:4c:c8:81:8a:95:f9:b6:82:55:96:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: Oct  9 14:27:38 2025 GMT
            Not After : Oct  8 14:32:38 2026 GMT
        Subject: CN=CB296941D726BD183E8473B778329B2EB315D8AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:74:4f:52:91:32:54:8b:96:76:a8:cb:06:cf:
                    50:eb:f1:c9:5b:2c:a0:05:33:fa:35:c1:75:b0:5b:
                    b3:69:1d:d4:7a:c3:05:a9:77:26:6e:c2:eb:b8:b0:
                    6a:64:d2:e8:4f:c5:dc:57:b9:57:c0:68:97:a5:28:
                    0a:f3:21:8c:4a:02:3a:d5:15:be:21:80:76:58:98:
                    ec:68:91:10:9d:0c:e8:82:b1:cf:84:0b:6e:c4:8b:
                    81:80:ca:68:0d:75:18:e9:60:c3:a2:55:59:b8:15:
                    28:b5:a3:35:68:39:ff:18:81:52:80:75:98:5a:11:
                    41:f7:3d:4f:91:b5:f0:61:c2:f8:44:2e:7c:8e:b6:
                    4c:02:fe:49:d6:f6:82:0a:17:64:fd:b2:3c:d0:db:
                    95:6b:f2:ae:e5:8e:e0:05:6b:90:3b:4f:1c:28:6a:
                    f5:28:1b:88:ad:b2:9a:35:72:57:13:9c:e3:1d:f5:
                    24:e8:f2:55:53:6f:74:e9:62:e4:9c:79:51:52:ef:
                    5c:b8:27:3c:cb:a8:da:3a:30:2b:e5:35:00:53:5b:
                    9e:04:30:9b:26:5a:26:aa:af:91:35:87:5e:7b:cf:
                    22:af:89:fa:09:25:73:a5:52:cd:cc:2f:16:87:a7:
                    0f:bf:16:23:cc:e1:0a:36:92:43:38:7b:1f:1b:74:
                    70:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:29:69:41:D7:26:BD:18:3E:84:73:B7:78:32:9B:2E:B3:15:D8:AB
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:b2:6f:84:47:87:48:2c:f1:2b:6b:46:db:3a:7f:05:52:50:
         60:8c:30:25:fa:6e:d9:63:68:48:00:ac:83:3c:ec:99:4c:72:
         88:93:f3:0b:0b:a9:1c:b4:94:bb:4d:56:13:16:89:9c:cc:62:
         88:9c:b2:78:61:57:4b:58:d1:32:62:05:15:bd:39:c1:16:bc:
         bd:8d:c1:f8:aa:40:77:1a:1b:6a:13:d7:41:5e:48:f4:88:8e:
         e3:af:56:e8:9a:82:90:8b:a1:1a:7c:24:a9:d3:14:21:1d:d4:
         20:f5:58:f2:49:02:03:60:73:5b:85:37:5d:99:9f:ed:15:e6:
         4d:5c:93:86:16:ee:0d:cb:97:b4:2b:58:4f:9c:c3:73:8e:a7:
         4f:de:d8:03:d0:32:1f:ac:3d:ed:f6:a2:14:d6:a9:d7:8b:38:
         15:f0:fe:61:cc:2b:c1:bf:37:f6:5a:dd:83:60:75:81:56:a7:
         77:e1:73:cc:59:e8:58:ee:42:1f:f5:bf:71:e9:81:a3:e5:47:
         e2:3d:23:92:98:99:58:a8:c5:a5:0e:55:41:d3:46:1d:9b:11:
         b3:3b:55:51:3f:e4:a5:cd:f2:4e:f9:4c:0b:88:59:c9:a2:37:
         99:48:0c:11:f5:5c:fd:6a:51:30:e8:27:94:cd:81:4a:85:7d:
         55:af:00:fb
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUL8mKfw+w+GHiTMiBipX5toJVlgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFB
MzY0M0Y5NDAeFw0yNTEwMDkxNDI3MzhaFw0yNjEwMDgxNDMyMzhaMDMxMTAvBgNV
BAMTKENCMjk2OTQxRDcyNkJEMTgzRTg0NzNCNzc4MzI5QjJFQjMxNUQ4QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCndE9SkTJUi5Z2qMsGz1Dr8clb
LKAFM/o1wXWwW7NpHdR6wwWpdyZuwuu4sGpk0uhPxdxXuVfAaJelKArzIYxKAjrV
Fb4hgHZYmOxokRCdDOiCsc+EC27Ei4GAymgNdRjpYMOiVVm4FSi1ozVoOf8YgVKA
dZhaEUH3PU+RtfBhwvhELnyOtkwC/knW9oIKF2T9sjzQ25Vr8q7ljuAFa5A7Txwo
avUoG4itspo1clcTnOMd9STo8lVTb3TpYuSceVFS71y4JzzLqNo6MCvlNQBTW54E
MJsmWiaqr5E1h157zyKvifoJJXOlUs3MLxaHpw+/FiPM4Qo2kkM4ex8bdHDXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUyylpQdcmvRg+hHO3eDKbLrMV2KswHwYDVR0j
BBgwFoAULQ0Ui98u1Pvb64DbHrN36qNkP5QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C
LzAvMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFBMzY0M0Y5NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRDBEMTQ4QkRGMkVENEZCREJF
QjgwREIxRUIzNzdFQUEzNjQzRjk0LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9L
RmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1CLzAvMzEz
NzM5MmUzMTMwMzkyZTMxMzYzMDJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMyMzYz
MzMwMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEBLNtoDANBgkqhkiG9w0BAQsFAAOCAQEAjbJvhEeH
SCzxK2tG2zp/BVJQYIwwJfpu2WNoSACsgzzsmUxyiJPzCwupHLSUu01WExaJnMxi
iJyyeGFXS1jRMmIFFb05wRa8vY3B+KpAdxobahPXQV5I9IiO469W6JqCkIuhGnwk
qdMUIR3UIPVY8kkCA2BzW4U3XZmf7RXmTVyThhbuDcuXtCtYT5zDc46nT97YA9Ay
H6w97faiFNap14s4FfD+Ycwrwb839lrdg2B1gVand+FzzFnoWO5CH/W/cemBo+VH
4j0jkpiZWKjFpQ5VQdNGHZsRsztVUT/kpc3yTvlMC4hZyaI3mUgMEfVc/WpRMOgn
lM2BSoV9Va8A+w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:26:32 2025 by rpki-client