Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa
File:                     3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          kF/CGSP5uj7Jst4QB8wp23EtDC5rmZ5NdTgB6tA+bf4=
Subject key identifier:   35:2C:0D:9B:8E:05:4E:B3:1E:9E:E7:D3:8D:BF:71:BD:CB:5C:F5:42
Certificate issuer:       /CN=A1F7A6E00CF11337DDA447B5C0FC185FD9253FDF
Certificate serial:       5340D7F7B96009122A3253DE84DF39AFBBDDE82C
Authority key identifier: A1:F7:A6:E0:0C:F1:13:37:DD:A4:47:B5:C0:FC:18:5F:D9:25:3F:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1F7A6E00CF11337DDA447B5C0FC185FD9253FDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa
Signing time:             Thu 18 Sep 2025 00:29:09 +0000
ROA not before:           Thu 18 Sep 2025 00:24:09 +0000
ROA not after:            Thu 17 Sep 2026 00:29:09 +0000
asID:                     263444
IP address blocks:        177.91.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/A1F7A6E00CF11337DDA447B5C0FC185FD9253FDF.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/A1F7A6E00CF11337DDA447B5C0FC185FD9253FDF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1F7A6E00CF11337DDA447B5C0FC185FD9253FDF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 04:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:40:d7:f7:b9:60:09:12:2a:32:53:de:84:df:39:af:bb:dd:e8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1F7A6E00CF11337DDA447B5C0FC185FD9253FDF
        Validity
            Not Before: Sep 18 00:24:09 2025 GMT
            Not After : Sep 17 00:29:09 2026 GMT
        Subject: CN=352C0D9B8E054EB31E9EE7D38DBF71BDCB5CF542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:9a:b0:40:1a:43:fc:a7:d1:76:d9:3a:6a:
                    5e:7d:13:c0:ef:7c:54:ae:85:05:db:e9:67:35:3b:
                    32:7c:4c:a1:ac:f1:aa:f4:5c:38:78:36:ce:5d:85:
                    ce:23:4a:24:6b:2e:f7:fc:cb:d4:88:46:53:71:44:
                    52:e4:1b:53:5c:e6:86:75:69:fd:35:79:de:51:7f:
                    12:96:64:bb:5a:1c:0a:4c:a2:aa:08:96:a4:3a:6c:
                    e1:9d:4b:de:86:de:e7:e9:1b:1f:72:f5:8d:a1:36:
                    6e:76:09:be:8f:e8:b0:56:d1:44:ea:13:84:38:40:
                    39:f7:ec:d4:8a:02:37:01:bf:4d:d7:6f:9d:58:d7:
                    ef:19:19:28:f9:59:94:07:e5:82:26:51:47:f2:97:
                    35:22:64:de:29:31:62:67:07:94:3e:44:3f:1b:f4:
                    a3:09:a7:a2:02:94:fd:8d:c3:71:f8:1d:cc:00:c3:
                    aa:fe:c2:d3:77:4e:39:73:92:c4:74:ea:3e:49:fe:
                    b2:b9:f5:7c:2a:2b:54:37:21:3e:92:99:f2:ae:ef:
                    2f:1a:9b:78:a2:fb:eb:97:69:e5:e5:10:d6:50:48:
                    4a:45:76:a0:01:52:6b:f7:5c:44:8a:6b:5d:4f:f5:
                    d1:cf:15:b4:a4:e4:73:ee:05:0b:5c:2f:f6:75:2c:
                    22:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2C:0D:9B:8E:05:4E:B3:1E:9E:E7:D3:8D:BF:71:BD:CB:5C:F5:42
            X509v3 Authority Key Identifier:
                keyid:A1:F7:A6:E0:0C:F1:13:37:DD:A4:47:B5:C0:FC:18:5F:D9:25:3F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/A1F7A6E00CF11337DDA447B5C0FC185FD9253FDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1F7A6E00CF11337DDA447B5C0FC185FD9253FDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:d3:07:63:ee:3a:6b:5a:fe:94:d7:ba:5c:6e:87:9e:ad:53:
         43:82:43:e0:ec:90:f2:bf:9d:5c:01:36:53:85:f5:75:c5:e7:
         92:3e:4a:bd:1f:6b:49:0c:e5:0d:81:d0:43:c9:4f:0c:65:2c:
         d1:6a:92:e6:31:90:4b:d6:4a:70:59:01:91:c4:23:34:73:d7:
         fb:cc:85:47:f2:da:8f:60:77:ea:c1:9f:6d:86:c2:4f:67:c4:
         ed:fc:58:f3:76:d9:2d:be:2f:80:50:b9:ca:21:e7:75:74:1d:
         b7:e5:f4:9f:55:e9:bf:71:62:18:e8:f0:e6:5c:31:8b:d7:66:
         c5:5e:e1:05:02:c0:73:38:6f:a8:e4:e3:a8:e2:61:92:7f:45:
         ba:a7:d4:b1:a0:fc:08:0d:1d:84:4e:86:ae:ac:0e:c1:d3:bd:
         85:45:f7:c0:41:be:c5:d1:65:0c:81:01:6b:16:0a:8f:29:7a:
         09:26:1c:4b:06:65:25:ab:76:e7:d3:c1:c5:10:f2:76:83:51:
         f0:83:9e:a8:6d:97:c3:3e:d6:8e:84:22:a8:33:14:36:84:cb:
         a1:56:fe:95:7f:d3:19:94:b6:92:93:36:cb:17:2f:26:eb:8e:
         70:83:fd:b1:5e:bf:52:ea:99:ef:dc:f7:fd:2c:d4:1c:e0:e5:
         83:85:1b:77
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUU0DX97lgCRIqMlPehN85r7vd6CwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFGN0E2RTAwQ0YxMTMzN0REQTQ0N0I1QzBGQzE4NUZE
OTI1M0ZERjAeFw0yNTA5MTgwMDI0MDlaFw0yNjA5MTcwMDI5MDlaMDMxMTAvBgNV
BAMTKDM1MkMwRDlCOEUwNTRFQjMxRTlFRTdEMzhEQkY3MUJEQ0I1Q0Y1NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgdZqwQBpD/KfRdtk6al59E8Dv
fFSuhQXb6Wc1OzJ8TKGs8ar0XDh4Ns5dhc4jSiRrLvf8y9SIRlNxRFLkG1Nc5oZ1
af01ed5RfxKWZLtaHApMoqoIlqQ6bOGdS96G3ufpGx9y9Y2hNm52Cb6P6LBW0UTq
E4Q4QDn37NSKAjcBv03Xb51Y1+8ZGSj5WZQH5YImUUfylzUiZN4pMWJnB5Q+RD8b
9KMJp6IClP2Nw3H4HcwAw6r+wtN3TjlzksR06j5J/rK59XwqK1Q3IT6SmfKu7y8a
m3ii++uXaeXlENZQSEpFdqABUmv3XESKa11P9dHPFbSk5HPuBQtcL/Z1LCLjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNSwNm44FTrMenufTjb9xvctc9UIwHwYDVR0j
BBgwFoAUofem4AzxEzfdpEe1wPwYX9klP98wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtO
dUMvMC9BMUY3QTZFMDBDRjExMzM3RERBNDQ3QjVDMEZDMTg1RkQ5MjUzRkRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExRjdBNkUwMENGMTEzMzdE
REE0NDdCNUMwRkMxODVGRDkyNTNGREYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl6TTlyemhvTGlkWXR3VXNUR3d3WEx5MkYzYUZRZVlGc0RINDlZTHBrTnVDLzAv
MzEzNzM3MmUzOTMxMmUzMTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxW6AwDQYJKoZIhvcNAQELBQADggEBAHnTB2Pu
Omta/pTXulxuh56tU0OCQ+DskPK/nVwBNlOF9XXF55I+Sr0fa0kM5Q2B0EPJTwxl
LNFqkuYxkEvWSnBZAZHEIzRz1/vMhUfy2o9gd+rBn22Gwk9nxO38WPN22S2+L4BQ
ucoh53V0Hbfl9J9V6b9xYhjo8OZcMYvXZsVe4QUCwHM4b6jk46jiYZJ/Rbqn1LGg
/AgNHYROhq6sDsHTvYVF98BBvsXRZQyBAWsWCo8pegkmHEsGZSWrdufTwcUQ8naD
UfCDnqhtl8M+1o6EIqgzFDaEy6FW/pV/0xmUtpKTNssXLybrjnCD/bFev1Lqme/c
9/0s1Bzg5YOFG3c=
-----END CERTIFICATE-----
Generated at Thu Sep 18 14:26:44 2025 by rpki-client