Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32342d3234203d3e20323632353033.roa
File:                     3137372e36362e3139322e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          JBrg5s+uiey4gAbHrHz5RnrQp7O/PFDJTjvXOVkf74U=
Subject key identifier:   96:CE:AE:8C:4D:D0:E8:83:AA:96:33:64:70:34:6D:C8:C4:AB:EB:09
Certificate issuer:       /CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
Certificate serial:       480926DDF3C687D5700E82A8AA5121DFCBE41E08
Authority key identifier: 12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 19 Aug 2025 20:06:22 +0000
ROA not before:           Tue 19 Aug 2025 20:01:22 +0000
ROA not after:            Tue 18 Aug 2026 20:06:22 +0000
asID:                     262503
IP address blocks:        177.66.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 16:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:09:26:dd:f3:c6:87:d5:70:0e:82:a8:aa:51:21:df:cb:e4:1e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
        Validity
            Not Before: Aug 19 20:01:22 2025 GMT
            Not After : Aug 18 20:06:22 2026 GMT
        Subject: CN=96CEAE8C4DD0E883AA96336470346DC8C4ABEB09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f3:58:67:e2:18:6a:b0:1e:79:5b:8b:9e:a8:
                    39:a1:f8:7c:f9:e1:6f:b0:2c:42:a8:1b:56:7f:b3:
                    f6:dd:25:b5:53:29:bf:a1:13:2f:db:d9:85:19:ab:
                    07:4e:26:6d:3e:14:67:1a:0e:19:23:00:6d:81:9d:
                    ef:06:20:ec:45:b4:ea:e4:6b:78:0f:17:63:a4:39:
                    05:fd:33:b3:c9:67:07:9a:42:ef:c3:4a:e0:2e:e7:
                    9b:2f:e2:5c:ee:2d:2f:e1:2c:ba:0e:a5:93:30:38:
                    6a:84:c1:d1:16:04:98:5a:97:55:2a:d7:23:a4:8a:
                    2c:d3:33:d5:cc:56:6f:5c:9b:fc:e4:a7:bc:ae:5c:
                    49:3b:80:85:56:5a:fe:02:97:5f:03:33:2f:c6:6e:
                    a6:07:c7:d6:e8:18:38:7f:4c:dc:23:76:ba:32:55:
                    3a:4c:45:56:52:94:8d:63:66:12:b4:4f:e0:2a:f0:
                    e5:30:d0:48:b0:b5:65:33:be:78:61:93:7e:e9:f7:
                    53:9a:ca:28:62:7f:5b:57:ca:68:24:b6:f5:a4:53:
                    e7:db:bc:8a:34:52:f7:44:05:dd:92:7e:1d:b5:87:
                    fd:de:91:4b:c6:e8:26:64:0f:02:3a:8e:fd:56:30:
                    98:e7:51:e7:3a:00:ce:22:fb:ab:ae:6b:79:a3:eb:
                    42:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CE:AE:8C:4D:D0:E8:83:AA:96:33:64:70:34:6D:C8:C4:AB:EB:09
            X509v3 Authority Key Identifier:
                keyid:12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:b2:4c:7a:11:d9:18:8a:e8:0f:b6:96:50:d9:f1:cf:b1:5e:
         9f:ea:22:e4:52:9e:71:36:e5:15:27:f7:96:0e:42:03:57:04:
         e5:b9:76:a4:18:38:8c:f4:d8:fa:39:2e:3b:79:33:eb:52:98:
         c7:a5:90:da:44:f1:1b:b1:01:cb:c4:d3:3e:a3:99:4f:d0:5a:
         b0:2b:59:04:c0:89:ee:1f:af:25:b4:07:7f:4c:ae:5a:18:82:
         4f:6d:15:5e:24:e5:a7:6a:2f:be:9c:6e:ac:5d:53:5c:47:81:
         1c:75:59:e2:5e:73:84:f7:d1:81:51:1e:16:39:18:28:50:48:
         2e:05:fe:0a:5a:58:10:b9:a1:88:8d:18:50:01:ad:a9:48:9b:
         2c:8d:1b:2c:bb:a4:be:b5:5a:b2:e8:59:92:22:92:c5:61:90:
         84:c9:4e:e6:6a:44:67:af:0c:1a:d5:f9:99:4c:84:1e:1f:df:
         f5:a6:01:4a:1b:80:a4:54:46:59:19:6f:06:2f:cc:2c:08:f9:
         b4:1c:9c:fb:e1:9c:6d:a4:6b:f0:e9:1d:f7:03:39:fb:e9:a6:
         f2:78:dd:99:bf:2e:52:21:77:ea:08:80:05:7b:6b:2d:5b:34:
         d8:93:a2:60:6a:16:c3:b0:68:8a:1e:d8:ae:9a:80:b8:63:6f:
         cc:e8:35:e7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSAkm3fPGh9VwDoKoqlEh38vkHggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIzQjAzRDQ2NjYwREVFOUIzMkUyNzEyMzQyRUI0RjQ4
NTkxQzdCNjAeFw0yNTA4MTkyMDAxMjJaFw0yNjA4MTgyMDA2MjJaMDMxMTAvBgNV
BAMTKDk2Q0VBRThDNEREMEU4ODNBQTk2MzM2NDcwMzQ2REM4QzRBQkVCMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR81hn4hhqsB55W4ueqDmh+Hz5
4W+wLEKoG1Z/s/bdJbVTKb+hEy/b2YUZqwdOJm0+FGcaDhkjAG2Bne8GIOxFtOrk
a3gPF2OkOQX9M7PJZweaQu/DSuAu55sv4lzuLS/hLLoOpZMwOGqEwdEWBJhal1Uq
1yOkiizTM9XMVm9cm/zkp7yuXEk7gIVWWv4Cl18DMy/GbqYHx9boGDh/TNwjdroy
VTpMRVZSlI1jZhK0T+Aq8OUw0EiwtWUzvnhhk37p91Oayihif1tXymgktvWkU+fb
vIo0UvdEBd2Sfh21h/3ekUvG6CZkDwI6jv1WMJjnUec6AM4i+6uua3mj60KTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUls6ujE3Q6IOqljNkcDRtyMSr6wkwHwYDVR0j
BBgwFoAUEjsD1GZg3umzLicSNC609IWRx7YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEVvNVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1G
a0YvMC8xMjNCMDNENDY2NjBERUU5QjMyRTI3MTIzNDJFQjRGNDg1OTFDN0I2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyM0IwM0Q0NjY2MERFRTlC
MzJFMjcxMjM0MkVCNEY0ODU5MUM3QjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFbzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAv
MzEzNzM3MmUzNjM2MmUzMTM5MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxQsAwDQYJKoZIhvcNAQELBQADggEBABSyTHoR
2RiK6A+2llDZ8c+xXp/qIuRSnnE25RUn95YOQgNXBOW5dqQYOIz02Po5Ljt5M+tS
mMelkNpE8RuxAcvE0z6jmU/QWrArWQTAie4fryW0B39MrloYgk9tFV4k5adqL76c
bqxdU1xHgRx1WeJec4T30YFRHhY5GChQSC4F/gpaWBC5oYiNGFABralImyyNGyy7
pL61WrLoWZIiksVhkITJTuZqRGevDBrV+ZlMhB4f3/WmAUobgKRURlkZbwYvzCwI
+bQcnPvhnG2ka/DpHfcDOfvppvJ43Zm/LlIhd+oIgAV7ay1bNNiTomBqFsOwaIoe
2K6agLhjb8zoNec=
-----END CERTIFICATE-----
Generated at Thu Aug 21 07:23:15 2025 by rpki-client