Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3137372e37332e3132302e302f32322d3234203d3e203532363839.roa
File:                     3137372e37332e3132302e302f32322d3234203d3e203532363839.roa (raw, json)
Hash identifier:          utX5ioO2cPns0cxZEfLieO2e9q5W9uxLiTqjFYeSaaY=
Subject key identifier:   9B:18:7B:E7:ED:6C:F2:B0:49:1D:12:18:3A:F6:7B:08:F9:58:74:8D
Certificate issuer:       /CN=D4F7947FFA165065796964648407CC7868D8C807
Certificate serial:       225399188A0CC5E6AF96D658C9F5437280A24EA8
Authority key identifier: D4:F7:94:7F:FA:16:50:65:79:69:64:64:84:07:CC:78:68:D8:C8:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F7947FFA165065796964648407CC7868D8C807.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3137372e37332e3132302e302f32322d3234203d3e203532363839.roa
Signing time:             Mon 15 Sep 2025 00:26:52 +0000
ROA not before:           Mon 15 Sep 2025 00:21:52 +0000
ROA not after:            Mon 14 Sep 2026 00:26:52 +0000
asID:                     52689
IP address blocks:        177.73.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/D4F7947FFA165065796964648407CC7868D8C807.crl
                          rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/D4F7947FFA165065796964648407CC7868D8C807.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F7947FFA165065796964648407CC7868D8C807.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 00:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:53:99:18:8a:0c:c5:e6:af:96:d6:58:c9:f5:43:72:80:a2:4e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F7947FFA165065796964648407CC7868D8C807
        Validity
            Not Before: Sep 15 00:21:52 2025 GMT
            Not After : Sep 14 00:26:52 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:d6:16:7b:f2:34:af:2d:95:0e:ee:4e:d6:
                    f3:5b:36:a7:5b:7a:ae:4e:7b:0f:38:a6:be:89:d4:
                    24:82:18:ea:79:5b:4f:0d:8a:19:e9:cc:f3:49:59:
                    21:de:53:da:af:c3:37:33:e7:38:34:4d:4c:0d:12:
                    06:30:49:c1:cf:1e:ff:d0:a3:72:2c:b6:79:08:7c:
                    7f:ca:60:0c:c2:de:56:a0:df:fc:62:4c:16:ee:ad:
                    04:19:84:37:09:4a:a5:17:62:87:cd:d2:05:10:8a:
                    22:a5:5d:b5:a6:22:5e:f1:b2:32:33:a0:1f:0a:a0:
                    31:3e:61:e9:ee:84:6d:a2:61:09:0c:f5:30:29:0b:
                    ae:7f:12:ce:10:da:09:12:c3:01:7f:9b:0f:cd:42:
                    0f:ef:11:ec:7d:79:14:ae:91:37:53:53:cc:18:9d:
                    3e:b5:c4:e8:fb:eb:ac:7d:5a:8d:82:1a:1d:5f:62:
                    da:77:26:4e:93:85:43:c4:7b:06:06:7f:5e:28:b4:
                    45:92:c8:4d:8e:a7:32:a4:fe:1a:1e:24:7e:68:18:
                    65:96:f8:21:0f:ad:af:e8:d5:4f:ed:63:1f:2c:60:
                    f4:20:da:83:dd:a8:c5:43:1e:8b:dd:bf:5e:a6:f5:
                    87:0e:a0:70:3f:a7:59:2b:f7:18:43:f7:f8:d0:11:
                    04:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:18:7B:E7:ED:6C:F2:B0:49:1D:12:18:3A:F6:7B:08:F9:58:74:8D
            X509v3 Authority Key Identifier:
                keyid:D4:F7:94:7F:FA:16:50:65:79:69:64:64:84:07:CC:78:68:D8:C8:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/D4F7947FFA165065796964648407CC7868D8C807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F7947FFA165065796964648407CC7868D8C807.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3137372e37332e3132302e302f32322d3234203d3e203532363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:4d:a5:a7:4d:59:ce:f4:80:30:1a:38:20:b2:0d:0a:f9:85:
         2f:99:f0:fe:ad:52:a9:00:6f:e1:57:26:43:24:30:e9:1a:05:
         dc:b3:58:a2:50:6a:55:a4:4b:74:a2:80:f8:9c:99:3d:01:3c:
         8e:a8:0b:29:0d:7c:fd:38:ff:21:22:90:7a:5e:34:50:a1:04:
         82:bd:d0:4c:6e:ec:94:8a:c5:a7:c2:76:fc:5f:b1:e6:e7:4d:
         70:21:41:68:30:d4:2d:ad:a1:be:67:ee:7a:74:2d:f2:6a:e8:
         9c:6e:72:ac:bb:f6:82:46:22:c3:e0:92:1c:8a:c8:f5:76:2b:
         46:1a:71:58:6e:50:b6:57:09:3b:35:de:76:2d:9e:1a:12:90:
         e9:db:05:28:fb:d0:5a:ee:d6:ea:32:4b:0c:89:3f:9c:8c:6c:
         da:d2:69:82:35:bc:9d:d2:6f:4d:12:eb:9d:a7:53:8f:f2:55:
         51:ff:8e:2c:2c:e5:b6:14:51:e0:0c:9e:31:7e:55:ad:f7:cc:
         7a:2b:6e:5a:4b:58:66:95:ee:6c:29:00:77:06:17:f7:6b:6f:
         f0:99:1f:81:ba:f7:69:e8:a8:cf:76:45:ac:71:8f:f9:84:d7:
         7e:7c:a5:e1:14:00:77:f8:b1:3b:4e:45:da:d6:26:01:da:23:
         cf:83:3c:70
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUIlOZGIoMxeavltZYyfVDcoCiTqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRGNzk0N0ZGQTE2NTA2NTc5Njk2NDY0ODQwN0NDNzg2
OEQ4QzgwNzAeFw0yNTA5MTUwMDIxNTJaFw0yNjA5MTQwMDI2NTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzY5M0Q2MTY3QkYyMzRBRjJE
OTUwRUVFNEVENkYzNUIzNkE3NUI3QUFFNEU3QjBGMzhBNkJFODlENDI0ODIxOEVB
Nzk1QjRGMEQ4QTE5RTlDQ0YzNDk1OTIxREU1M0RBQUZDMzM3MzNFNzM4MzQ0RDRD
MEQxMjA2MzA0OUMxQ0YxRUZGRDBBMzcyMkNCNjc5MDg3QzdGQ0E2MDBDQzJERTU2
QTBERkZDNjI0QzE2RUVBRDA0MTk4NDM3MDk0QUE1MTc2Mjg3Q0REMjA1MTA4QTIy
QTU1REI1QTYyMjVFRjFCMjMyMzNBMDFGMEFBMDMxM0U2MUU5RUU4NDZEQTI2MTA5
MENGNTMwMjkwQkFFN0YxMkNFMTBEQTA5MTJDMzAxN0Y5QjBGQ0Q0MjBGRUYxMUVD
N0Q3OTE0QUU5MTM3NTM1M0NDMTg5RDNFQjVDNEU4RkJFQkFDN0Q1QThEODIxQTFE
NUY2MkRBNzcyNjRFOTM4NTQzQzQ3QjA2MDY3RjVFMjhCNDQ1OTJDODREOEVBNzMy
QTRGRTFBMUUyNDdFNjgxODY1OTZGODIxMEZBREFGRThENTRGRUQ2MzFGMkM2MEY0
MjBEQTgzRERBOEM1NDMxRThCRERCRjVFQTZGNTg3MEVBMDcwM0ZBNzU5MkJGNzE4
NDNGN0Y4RDAxMTA0QzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxpPWFnvyNK8tlQ7uTtbzWzanW3quTnsPOKa+idQkghjqeVtPDYoZ
6czzSVkh3lPar8M3M+c4NE1MDRIGMEnBzx7/0KNyLLZ5CHx/ymAMwt5WoN/8YkwW
7q0EGYQ3CUqlF2KHzdIFEIoipV21piJe8bIyM6AfCqAxPmHp7oRtomEJDPUwKQuu
fxLOENoJEsMBf5sPzUIP7xHsfXkUrpE3U1PMGJ0+tcTo++usfVqNghodX2LadyZO
k4VDxHsGBn9eKLRFkshNjqcypP4aHiR+aBhllvghD62v6NVP7WMfLGD0INqD3ajF
Qx6L3b9epvWHDqBwP6dZK/cYQ/f40BEExwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FJsYe+ftbPKwSR0SGDr2ewj5WHSNMB8GA1UdIwQYMBaAFNT3lH/6FlBleWlkZIQH
zHho2MgHMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzk0OGlEMmg4WHZ3a2lC
TkNDVE14VzcxTENTVUVIbVlQNDFIOHFkQjk0M3RpLzAvRDRGNzk0N0ZGQTE2NTA2
NTc5Njk2NDY0ODQwN0NDNzg2OEQ4QzgwNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ENEY3OTQ3RkZBMTY1MDY1Nzk2OTY0NjQ4NDA3Q0M3ODY4RDhD
ODA3LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85NDhpRDJoOFh2d2tpQk5DQ1RN
eFc3MUxDU1VFSG1ZUDQxSDhxZEI5NDN0aS8wLzMxMzczNzJlMzczMzJlMzEzMjMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM2MzgzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArFJ
eDANBgkqhkiG9w0BAQsFAAOCAQEAeE2lp01ZzvSAMBo4ILINCvmFL5nw/q1SqQBv
4VcmQyQw6RoF3LNYolBqVaRLdKKA+JyZPQE8jqgLKQ18/Tj/ISKQel40UKEEgr3Q
TG7slIrFp8J2/F+x5udNcCFBaDDULa2hvmfuenQt8mronG5yrLv2gkYiw+CSHIrI
9XYrRhpxWG5QtlcJOzXedi2eGhKQ6dsFKPvQWu7W6jJLDIk/nIxs2tJpgjW8ndJv
TRLrnadTj/JVUf+OLCzlthRR4AyeMX5VrffMeituWktYZpXubCkAdwYX92tv8Jkf
gbr3aeioz3ZFrHGP+YTXfnyl4RQAd/ixO05F2tYmAdojz4M8cA==
-----END CERTIFICATE-----
Generated at Fri Sep 19 11:36:44 2025 by rpki-client