Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137302e37382e3233322e302f32322d3332203d3e203232333831.roa
File:                     3137302e37382e3233322e302f32322d3332203d3e203232333831.roa (raw, json)
Hash identifier:          0/j9vwACI6tKXUx7z1ep0XvIdqoSWEPt/8J8dgBMDJ8=
Subject key identifier:   63:CD:53:1B:60:65:01:F7:64:1F:98:AA:CF:2C:DC:07:29:1D:00:16
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       5A15DB45ACA7022665D479F7B3C6A2FB14417D6A
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137302e37382e3233322e302f32322d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:55:21 +0000
ROA not before:           Thu 28 Aug 2025 14:50:21 +0000
ROA not after:            Thu 27 Aug 2026 14:55:21 +0000
asID:                     22381
IP address blocks:        170.78.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:15:db:45:ac:a7:02:26:65:d4:79:f7:b3:c6:a2:fb:14:41:7d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:21 2025 GMT
            Not After : Aug 27 14:55:21 2026 GMT
        Subject: CN=63CD531B606501F7641F98AACF2CDC07291D0016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:28:72:65:8f:24:66:0f:cd:91:e7:e4:85:fa:
                    d1:6c:5e:40:b3:b3:09:d8:58:09:fe:84:8b:c7:08:
                    0b:94:17:a8:ca:0f:c3:05:80:a3:9c:7d:bf:01:67:
                    f4:da:d6:98:83:42:49:6d:f7:20:c3:d5:e4:9d:7c:
                    9d:99:68:5d:3b:cb:ca:67:5d:6f:4b:2b:78:4a:82:
                    78:49:d5:61:52:5c:bd:3c:bd:92:e7:b6:75:02:37:
                    2e:87:eb:8c:74:bc:30:b8:17:87:2b:f8:78:41:a4:
                    f1:e4:7d:d5:a4:61:5b:be:9f:09:66:c0:1e:f7:a6:
                    53:f8:63:a1:8f:97:5d:c1:74:e9:af:58:f5:b9:32:
                    fd:64:3c:65:4f:10:d7:bd:79:f1:19:11:32:42:33:
                    be:9f:86:7c:45:cc:d5:95:d4:65:b4:c6:ad:b3:5a:
                    6b:ac:28:0f:2e:56:bb:fc:ca:30:c8:ab:c9:74:dd:
                    2d:83:ab:cd:ee:9f:4c:6f:3b:be:1b:c6:97:d2:5a:
                    4e:79:f1:9c:78:19:13:1e:76:e4:78:62:d5:9a:1b:
                    23:2f:d4:b3:aa:12:a6:31:c0:5c:f2:1b:e4:64:bc:
                    c1:fb:81:01:ca:cb:67:28:96:bc:53:22:dc:80:13:
                    27:ab:77:26:ae:e1:5b:54:34:e1:92:09:13:6e:cd:
                    f4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CD:53:1B:60:65:01:F7:64:1F:98:AA:CF:2C:DC:07:29:1D:00:16
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137302e37382e3233322e302f32322d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:fa:ad:1a:90:d2:29:98:b2:7f:c2:6c:2d:e1:88:3c:3f:df:
         a3:d4:3b:6e:98:32:07:dd:5f:df:41:d5:35:a5:90:89:e0:0f:
         bd:31:f2:b9:22:07:5b:d3:46:7e:f4:4e:41:82:2d:aa:d5:14:
         84:41:3a:46:ce:23:21:27:30:b5:0f:d6:40:87:25:61:f9:b2:
         0d:dd:94:03:99:ea:14:97:d3:a9:a1:80:c4:c5:8e:be:d3:f0:
         5f:a0:dd:c2:2c:10:84:44:84:49:26:f8:b3:26:f8:d7:77:c9:
         72:ed:84:9b:f9:ac:ec:8d:b9:27:15:a7:14:10:2f:c4:97:80:
         79:bb:c6:5f:f4:72:14:4d:dc:ca:f1:6e:a6:2e:10:5c:a0:36:
         54:94:79:03:79:6a:b6:94:a8:39:ef:44:36:5c:de:94:52:cd:
         f2:9a:70:98:da:d1:39:a0:71:6a:55:fe:9d:17:0a:75:c8:d8:
         8b:d5:6b:23:75:6d:ac:a1:e7:bc:31:d9:5b:d3:d7:7b:68:62:
         f6:86:ab:fd:a2:94:ba:4c:69:5e:93:6e:3f:6a:28:7c:e2:f5:
         2c:77:85:e8:af:80:aa:be:a6:8e:c8:d5:d8:88:74:20:8f:72:
         98:46:56:c8:e3:a2:29:6f:5d:93:97:6d:e8:7f:59:1b:50:b8:
         91:5f:48:78
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWhXbRaynAiZl1Hn3s8ai+xRBfWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk0OUY5MDNGODk2NDM3MkYyN0U2MEZFQzRDMDNFREVD
MEI0N0EyQzAeFw0yNTA4MjgxNDUwMjFaFw0yNjA4MjcxNDU1MjFaMDMxMTAvBgNV
BAMTKDYzQ0Q1MzFCNjA2NTAxRjc2NDFGOThBQUNGMkNEQzA3MjkxRDAwMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKHJljyRmD82R5+SF+tFsXkCz
swnYWAn+hIvHCAuUF6jKD8MFgKOcfb8BZ/Ta1piDQklt9yDD1eSdfJ2ZaF07y8pn
XW9LK3hKgnhJ1WFSXL08vZLntnUCNy6H64x0vDC4F4cr+HhBpPHkfdWkYVu+nwlm
wB73plP4Y6GPl13BdOmvWPW5Mv1kPGVPENe9efEZETJCM76fhnxFzNWV1GW0xq2z
WmusKA8uVrv8yjDIq8l03S2Dq83un0xvO74bxpfSWk558Zx4GRMeduR4YtWaGyMv
1LOqEqYxwFzyG+RkvMH7gQHKy2colrxTItyAEyerdyau4VtUNOGSCRNuzfTVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUY81TG2BlAfdkH5iqzyzcBykdABYwHwYDVR0j
BBgwFoAU+Un5A/iWQ3LyfmD+xMA+3sC0eiwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJCZzF2ckZOWkVaQWtxcGNlZVU3ZVlXdDJmMkRQN1hvajc0RUtoRDVy
VHgvMS9GOTQ5RjkwM0Y4OTY0MzcyRjI3RTYwRkVDNEMwM0VERUMwQjQ3QTJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5NDlGOTAzRjg5NjQzNzJG
MjdFNjBGRUM0QzAzRURFQzBCNDdBMkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliQmcxdnJGTlpFWkFrcXBjZWVVN2VZV3QyZjJEUDdYb2o3NEVLaEQ1clR4LzEv
MzEzNzMwMmUzNzM4MmUzMjMzMzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjMy
MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqk7oMA0GCSqGSIb3DQEBCwUAA4IBAQAh+q0akNIp
mLJ/wmwt4Yg8P9+j1DtumDIH3V/fQdU1pZCJ4A+9MfK5Igdb00Z+9E5Bgi2q1RSE
QTpGziMhJzC1D9ZAhyVh+bIN3ZQDmeoUl9OpoYDExY6+0/BfoN3CLBCERIRJJviz
JvjXd8ly7YSb+azsjbknFacUEC/El4B5u8Zf9HIUTdzK8W6mLhBcoDZUlHkDeWq2
lKg570Q2XN6UUs3ymnCY2tE5oHFqVf6dFwp1yNiL1WsjdW2soee8Mdlb09d7aGL2
hqv9opS6TGlek24/aih84vUsd4Xor4CqvqaOyNXYiHQgj3KYRlbI46Ipb12Tl23o
f1kbULiRX0h4
-----END CERTIFICATE-----
Generated at Mon Sep 15 16:13:39 2025 by rpki-client