Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137372e3130372e33322e302f31392d3332203d3e203238333239.roa
File:                     3137372e3130372e33322e302f31392d3332203d3e203238333239.roa (raw, json)
Hash identifier:          JO0OhuWBvdH1biOvTATcrrlGE0G5+wDy2gtY/v02Wjk=
Subject key identifier:   00:25:13:6D:70:28:5E:39:0F:2D:1A:5A:25:EF:3F:A0:13:F4:09:E6
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       42BB0ACE381B0240E2D6192E1B1962D9EE1F6D05
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137372e3130372e33322e302f31392d3332203d3e203238333239.roa
Signing time:             Thu 28 Aug 2025 14:55:22 +0000
ROA not before:           Thu 28 Aug 2025 14:50:22 +0000
ROA not after:            Thu 27 Aug 2026 14:55:22 +0000
asID:                     28329
IP address blocks:        177.107.32.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:bb:0a:ce:38:1b:02:40:e2:d6:19:2e:1b:19:62:d9:ee:1f:6d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:22 2025 GMT
            Not After : Aug 27 14:55:22 2026 GMT
        Subject: CN=0025136D70285E390F2D1A5A25EF3FA013F409E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1a:55:1c:f4:1b:be:f9:cc:ee:40:f7:d8:fe:
                    07:b0:bd:f1:2e:bb:55:1c:f3:19:6e:0c:f5:a2:69:
                    00:67:76:dc:0b:ea:98:01:cf:0a:52:48:ed:23:b8:
                    a8:61:3b:fb:8e:b6:72:7a:ed:e3:e1:ad:6d:e3:b4:
                    74:6c:60:aa:86:61:c1:3e:42:7f:ad:5b:b5:3e:8c:
                    b0:a6:7b:73:cf:59:c0:26:e1:fc:8e:a5:ec:26:66:
                    1b:d9:5c:57:66:82:ae:32:e3:92:96:3f:46:8e:f9:
                    84:9e:46:f6:ce:25:ad:5e:46:f0:7b:88:ae:3f:19:
                    fc:dd:8a:73:13:47:f7:a8:b2:40:0e:c7:2c:7f:d5:
                    2b:e8:92:76:a0:02:e7:18:d0:95:25:9b:e0:07:86:
                    cf:56:41:e3:d6:f9:cc:fd:ff:f6:1e:3c:36:89:60:
                    49:8e:3a:3d:6b:43:20:2d:c2:03:64:f6:2f:93:13:
                    1a:ea:64:a0:70:72:17:f0:a3:28:a7:1c:3c:e0:3c:
                    e8:f0:17:01:5c:f3:6f:38:6b:43:e7:31:cf:02:e1:
                    15:38:e8:38:5a:67:86:45:c5:9f:97:62:d9:3d:5c:
                    b9:4f:dd:ff:72:dc:c5:92:c6:bf:d6:2e:85:29:8d:
                    43:be:39:6f:be:fb:57:93:cc:cf:8a:72:c4:0a:80:
                    31:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:25:13:6D:70:28:5E:39:0F:2D:1A:5A:25:EF:3F:A0:13:F4:09:E6
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3137372e3130372e33322e302f31392d3332203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         66:ac:02:16:09:39:b2:72:90:08:38:1d:7b:4c:33:35:6a:7d:
         1c:80:01:dd:1f:39:eb:10:8e:ea:0f:cc:db:13:db:3b:fc:e4:
         a4:50:97:aa:21:4a:e0:7b:80:f0:0d:63:5b:6c:9a:5a:84:98:
         0c:60:6b:ae:84:fb:56:f6:fd:90:7d:9d:7f:0c:3b:e9:ee:d1:
         9b:3d:13:4b:36:39:c8:d1:02:40:53:1d:27:d1:d9:02:74:8f:
         e7:32:59:ad:8b:ff:d0:f1:99:87:02:8e:fe:5a:bf:b0:59:69:
         e8:bb:5e:f1:cd:73:55:a0:4a:41:3b:df:34:f7:ce:f5:4e:b6:
         93:62:c3:28:20:09:20:70:1f:bd:22:75:fa:3c:4b:bb:bf:13:
         0b:ea:4f:5a:4f:6d:29:4d:b1:06:44:bb:c9:c2:70:c0:ee:fc:
         c3:8f:99:68:bd:71:fe:ac:ee:96:04:bb:af:c3:8f:18:f7:37:
         8b:e5:43:83:38:e5:00:11:1e:73:47:10:4a:b4:29:f4:6b:3f:
         6b:e1:58:97:6a:c4:4e:f0:92:7d:47:42:d0:59:72:a6:48:91:
         3a:1f:b6:af:c8:fd:9c:a4:70:40:1d:c7:13:4e:c6:3a:62:53:
         fb:7d:8b:0e:1d:15:c1:8a:a4:7e:80:41:ac:72:a5:9c:e7:08:
         b2:9b:a6:ee
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQrsKzjgbAkDi1hkuGxli2e4fbQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk0OUY5MDNGODk2NDM3MkYyN0U2MEZFQzRDMDNFREVD
MEI0N0EyQzAeFw0yNTA4MjgxNDUwMjJaFw0yNjA4MjcxNDU1MjJaMDMxMTAvBgNV
BAMTKDAwMjUxMzZENzAyODVFMzkwRjJEMUE1QTI1RUYzRkEwMTNGNDA5RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtGlUc9Bu++czuQPfY/gewvfEu
u1Uc8xluDPWiaQBndtwL6pgBzwpSSO0juKhhO/uOtnJ67ePhrW3jtHRsYKqGYcE+
Qn+tW7U+jLCme3PPWcAm4fyOpewmZhvZXFdmgq4y45KWP0aO+YSeRvbOJa1eRvB7
iK4/GfzdinMTR/eoskAOxyx/1SvoknagAucY0JUlm+AHhs9WQePW+cz9//YePDaJ
YEmOOj1rQyAtwgNk9i+TExrqZKBwchfwoyinHDzgPOjwFwFc8284a0PnMc8C4RU4
6DhaZ4ZFxZ+XYtk9XLlP3f9y3MWSxr/WLoUpjUO+OW+++1eTzM+KcsQKgDF7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUACUTbXAoXjkPLRpaJe8/oBP0CeYwHwYDVR0j
BBgwFoAU+Un5A/iWQ3LyfmD+xMA+3sC0eiwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJCZzF2ckZOWkVaQWtxcGNlZVU3ZVlXdDJmMkRQN1hvajc0RUtoRDVy
VHgvMS9GOTQ5RjkwM0Y4OTY0MzcyRjI3RTYwRkVDNEMwM0VERUMwQjQ3QTJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5NDlGOTAzRjg5NjQzNzJG
MjdFNjBGRUM0QzAzRURFQzBCNDdBMkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliQmcxdnJGTlpFWkFrcXBjZWVVN2VZV3QyZjJEUDdYb2o3NEVLaEQ1clR4LzEv
MzEzNzM3MmUzMTMwMzcyZTMzMzIyZTMwMmYzMTM5MmQzMzMyMjAzZDNlMjAzMjM4
MzMzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQFsWsgMA0GCSqGSIb3DQEBCwUAA4IBAQBmrAIWCTmy
cpAIOB17TDM1an0cgAHdHznrEI7qD8zbE9s7/OSkUJeqIUrge4DwDWNbbJpahJgM
YGuuhPtW9v2QfZ1/DDvp7tGbPRNLNjnI0QJAUx0n0dkCdI/nMlmti//Q8ZmHAo7+
Wr+wWWnou17xzXNVoEpBO9809871TraTYsMoIAkgcB+9InX6PEu7vxML6k9aT20p
TbEGRLvJwnDA7vzDj5lovXH+rO6WBLuvw48Y9zeL5UODOOUAER5zRxBKtCn0az9r
4ViXasRO8JJ9R0LQWXKmSJE6H7avyP2cpHBAHccTTsY6YlP7fYsOHRXBiqR+gEGs
cqWc5wiym6bu
-----END CERTIFICATE-----
Generated at Mon Sep 15 16:12:16 2025 by rpki-client