Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3134362e302f32342d3234203d3e203238363135.roa
File:                     3230312e34362e3134362e302f32342d3234203d3e203238363135.roa (raw, json)
Hash identifier:          Fex6VJWIQyd069y15bpgOZ0L8iA/gx6mubELayuPVg4=
Subject key identifier:   0E:9B:09:6E:D9:31:EC:F0:D0:C6:B6:4A:13:62:64:22:2A:1A:83:7B
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       115AF6B0CB111DFAFF3218425FF8965C72AEC139
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3134362e302f32342d3234203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:49:02 +0000
ROA not before:           Thu 30 Oct 2025 02:44:02 +0000
ROA not after:            Thu 29 Oct 2026 02:49:02 +0000
asID:                     28615
IP address blocks:        201.46.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5a:f6:b0:cb:11:1d:fa:ff:32:18:42:5f:f8:96:5c:72:ae:c1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:44:02 2025 GMT
            Not After : Oct 29 02:49:02 2026 GMT
        Subject: CN=0E9B096ED931ECF0D0C6B64A136264222A1A837B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bc:05:99:f7:7b:1d:f9:a3:92:eb:a2:3f:cb:
                    bd:8e:81:dd:0a:11:1f:e7:0f:60:09:df:cf:32:59:
                    05:03:b2:98:cd:c5:d4:0b:f5:03:11:ed:fc:e6:2f:
                    48:ef:1c:a8:47:4a:56:03:fa:73:c5:2f:16:84:c8:
                    f6:0d:b4:03:c1:78:23:ea:64:6d:c2:d6:3e:4f:b4:
                    e6:d9:3e:b4:96:22:a4:55:4d:32:ca:26:28:92:1a:
                    bf:58:8e:c8:7e:ff:dd:9a:0a:f7:c8:12:5a:4f:f7:
                    01:85:cb:10:4f:36:6a:03:a9:9c:ab:55:48:43:ac:
                    98:a3:54:c1:a8:31:1e:fb:e3:02:19:9d:a5:46:0b:
                    6d:f7:90:8d:fa:0d:a8:86:9f:79:0d:fd:a5:a0:23:
                    2c:66:ad:b3:5c:97:5e:a8:da:3f:be:9d:4b:41:ec:
                    88:6d:80:1c:75:68:09:f4:e5:1f:db:91:e4:87:fc:
                    9a:b2:f9:11:07:2d:56:8f:05:3d:a1:f1:d2:2c:ef:
                    15:0f:a9:48:bf:d5:82:ce:42:56:56:cd:10:47:c9:
                    66:a0:4b:28:11:4d:be:ca:e1:11:19:73:5a:80:f0:
                    ee:49:7d:41:ed:15:a4:9a:d7:c7:46:a0:94:a0:87:
                    ec:80:99:95:ef:0f:4c:af:2a:6b:51:a9:18:28:10:
                    3c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9B:09:6E:D9:31:EC:F0:D0:C6:B6:4A:13:62:64:22:2A:1A:83:7B
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3134362e302f32342d3234203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:94:6d:f8:64:6f:11:85:40:29:1b:5b:d3:79:47:72:08:13:
         3a:10:be:48:d1:32:00:6f:1f:29:43:a4:b9:a5:8a:56:75:6c:
         a0:4e:2b:a7:c5:75:19:e5:6b:b1:e0:06:52:5b:32:37:6b:9b:
         b7:1c:ed:f8:81:ea:5c:55:5d:91:a5:3e:28:70:4f:7f:4b:f4:
         41:e5:a2:49:e0:40:b0:3a:0e:ad:1e:4b:78:56:b9:2d:3e:72:
         51:86:fd:71:18:8c:9b:1d:f0:a3:74:bc:f6:9b:5d:eb:8d:ff:
         2e:8b:50:5f:0c:05:d3:3f:8a:50:06:85:48:e7:05:9d:fc:23:
         a2:87:77:81:40:fd:6c:3d:ef:b7:e8:f7:ef:14:62:3e:be:37:
         33:02:af:ba:dc:16:d2:7c:09:be:96:00:ea:85:bc:b0:5b:3a:
         a0:0d:bb:15:c7:c0:96:15:e4:d9:54:8d:2e:d7:81:1a:22:3d:
         94:f7:30:be:45:c7:0e:47:83:cd:da:fe:de:98:c1:19:ad:ea:
         06:e9:84:33:af:03:8a:1c:d2:df:db:7b:73:0a:28:4b:21:33:
         9b:4f:9d:8c:33:f6:d3:a3:0e:67:30:1b:75:e5:bb:19:26:3e:
         01:f1:ac:ff:87:ee:fe:2c:05:cc:12:c5:f2:71:52:e1:e1:eb:
         4c:27:65:e9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEVr2sMsRHfr/MhhCX/iWXHKuwTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlERkVEMDA5NzNBNkYzQjJBNENGODY3NDcxOERFNjI3
QTcwN0EwNDAeFw0yNTEwMzAwMjQ0MDJaFw0yNjEwMjkwMjQ5MDJaMDMxMTAvBgNV
BAMTKDBFOUIwOTZFRDkzMUVDRjBEMEM2QjY0QTEzNjI2NDIyMkExQTgzN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkvAWZ93sd+aOS66I/y72Ogd0K
ER/nD2AJ388yWQUDspjNxdQL9QMR7fzmL0jvHKhHSlYD+nPFLxaEyPYNtAPBeCPq
ZG3C1j5PtObZPrSWIqRVTTLKJiiSGr9Yjsh+/92aCvfIElpP9wGFyxBPNmoDqZyr
VUhDrJijVMGoMR774wIZnaVGC233kI36DaiGn3kN/aWgIyxmrbNcl16o2j++nUtB
7IhtgBx1aAn05R/bkeSH/Jqy+REHLVaPBT2h8dIs7xUPqUi/1YLOQlZWzRBHyWag
SygRTb7K4REZc1qA8O5JfUHtFaSa18dGoJSgh+yAmZXvD0yvKmtRqRgoEDyxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDpsJbtkx7PDQxrZKE2JkIioag3swHwYDVR0j
BBgwFoAUyd/tAJc6bzsqTPhnRxjeYnpwegQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1FYa3VTZ054QjdKQUxFank0S1ZDc0xSRjl2Sk5UNG5xQk1xdGNZTjJq
SjIvMC9DOURGRUQwMDk3M0E2RjNCMkE0Q0Y4Njc0NzE4REU2MjdBNzA3QTA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5REZFRDAwOTczQTZGM0Iy
QTRDRjg2NzQ3MThERTYyN0E3MDdBMDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdRWGt1U2dOeEI3SkFMRWp5NEtWQ3NMUkY5dkpOVDRucUJNcXRjWU4yakoyLzAv
MzIzMDMxMmUzNDM2MmUzMTM0MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzYzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyS6SMA0GCSqGSIb3DQEBCwUAA4IBAQCtlG34ZG8R
hUApG1vTeUdyCBM6EL5I0TIAbx8pQ6S5pYpWdWygTiunxXUZ5Wux4AZSWzI3a5u3
HO34gepcVV2RpT4ocE9/S/RB5aJJ4ECwOg6tHkt4VrktPnJRhv1xGIybHfCjdLz2
m13rjf8ui1BfDAXTP4pQBoVI5wWd/COih3eBQP1sPe+36PfvFGI+vjczAq+63BbS
fAm+lgDqhbywWzqgDbsVx8CWFeTZVI0u14EaIj2U9zC+RccOR4PN2v7emMEZreoG
6YQzrwOKHNLf23tzCihLITObT52MM/bTow5nMBt15bsZJj4B8az/h+7+LAXMEsXy
cVLh4etMJ2Xp
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:06:49 2025 by rpki-client