Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/0/3137392e36332e35362e302f32322d3332203d3e20323731353736.roa
File:                     3137392e36332e35362e302f32322d3332203d3e20323731353736.roa (raw, json)
Hash identifier:          vwA2j1Y81F24utI6NpR4hV/fFJUDtmsROo6ZDxc7EzY=
Subject key identifier:   8D:F6:89:FE:49:D4:AF:5A:95:DD:96:D8:F0:FB:D9:A5:36:61:0E:20
Certificate issuer:       /CN=CE735620C8E0310CA4E3BDABAE878981E7FEE645
Certificate serial:       4701BD6F578E21AB5C18017E0B7260F253EDCCD1
Authority key identifier: CE:73:56:20:C8:E0:31:0C:A4:E3:BD:AB:AE:87:89:81:E7:FE:E6:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE735620C8E0310CA4E3BDABAE878981E7FEE645.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/0/3137392e36332e35362e302f32322d3332203d3e20323731353736.roa
Signing time:             Wed 22 Oct 2025 19:04:45 +0000
ROA not before:           Wed 22 Oct 2025 18:59:45 +0000
ROA not after:            Wed 21 Oct 2026 19:04:45 +0000
asID:                     271576
IP address blocks:        179.63.56.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/0/CE735620C8E0310CA4E3BDABAE878981E7FEE645.crl
                          rsync://rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/0/CE735620C8E0310CA4E3BDABAE878981E7FEE645.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE735620C8E0310CA4E3BDABAE878981E7FEE645.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 04:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:01:bd:6f:57:8e:21:ab:5c:18:01:7e:0b:72:60:f2:53:ed:cc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE735620C8E0310CA4E3BDABAE878981E7FEE645
        Validity
            Not Before: Oct 22 18:59:45 2025 GMT
            Not After : Oct 21 19:04:45 2026 GMT
        Subject: CN=8DF689FE49D4AF5A95DD96D8F0FBD9A536610E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:03:ad:33:88:e4:22:12:c3:87:7e:0c:36:
                    fc:5f:be:ae:5a:21:f7:c4:b4:17:8f:95:cf:ac:bc:
                    52:3e:db:03:31:0c:6b:38:49:03:fa:a3:b8:a1:07:
                    33:38:34:3c:ee:d4:fb:70:da:dd:37:39:81:8e:9f:
                    79:a6:2c:69:d7:52:3e:81:d5:b2:10:09:b3:07:24:
                    dc:e9:0a:bb:54:56:d9:87:7d:c7:5a:12:d4:36:17:
                    86:37:95:78:7a:fa:0a:a7:b5:a8:7f:cc:95:89:57:
                    4a:eb:d0:34:ce:9a:e9:8c:af:94:af:99:a8:18:78:
                    c5:29:2c:f2:f8:4c:fe:00:c5:8c:0e:75:42:fd:8c:
                    c6:96:f8:c8:e6:c4:db:f2:16:69:84:6c:a9:57:a7:
                    89:b3:d4:33:fa:8a:d4:7c:a8:21:10:6b:45:f7:6d:
                    3f:92:4c:bb:51:ce:b8:b1:84:2a:22:b2:c5:a0:08:
                    bf:41:81:a4:ff:b4:19:97:6e:7f:e3:48:83:f5:c3:
                    6d:39:f3:ef:82:60:71:de:b9:72:77:4e:97:90:ef:
                    fd:fa:3b:34:f7:70:c7:82:5f:c9:96:f0:04:82:06:
                    a5:89:6a:d1:72:37:e3:a2:fa:34:37:2e:91:8b:c2:
                    20:5a:fc:aa:f4:1b:5c:95:1c:9e:67:ce:28:35:f0:
                    8b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F6:89:FE:49:D4:AF:5A:95:DD:96:D8:F0:FB:D9:A5:36:61:0E:20
            X509v3 Authority Key Identifier:
                keyid:CE:73:56:20:C8:E0:31:0C:A4:E3:BD:AB:AE:87:89:81:E7:FE:E6:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/0/CE735620C8E0310CA4E3BDABAE878981E7FEE645.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE735620C8E0310CA4E3BDABAE878981E7FEE645.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/0/3137392e36332e35362e302f32322d3332203d3e20323731353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:42:9d:de:ca:7a:f9:95:40:03:54:81:15:37:f5:b8:77:b8:
         97:fe:88:15:46:51:36:04:11:17:ac:b3:a6:3e:28:32:ed:35:
         9a:a0:19:80:85:90:39:8c:3b:ec:79:c2:24:f8:0a:27:3e:81:
         ea:64:ee:3e:2a:3b:a1:97:ae:ef:96:e2:9a:7b:80:ff:b9:54:
         b4:60:99:88:8a:8a:cb:f8:a7:cb:d7:0e:2b:d8:6f:6a:99:a8:
         50:ee:38:2f:88:eb:09:6f:20:c0:e4:3b:56:02:7c:a1:64:58:
         d1:41:da:96:6f:76:0e:18:70:00:6a:b9:c5:05:75:c4:6b:55:
         72:01:c8:f7:24:f6:5b:fc:19:88:3b:ec:fa:f8:48:05:6c:39:
         96:0c:09:65:1c:c2:56:50:9b:01:ca:89:c7:91:d1:1b:75:88:
         1f:d3:3c:ff:3b:f8:b0:30:07:5f:f0:a1:e9:00:59:96:e3:03:
         88:38:6e:41:10:75:37:eb:85:a3:85:d0:d3:64:2b:d0:0d:85:
         dc:6b:6e:4c:c8:12:a3:1c:3f:3d:f8:8b:31:80:34:05:1c:35:
         11:e4:51:83:45:bb:44:6d:ae:a1:05:76:5c:df:0b:a4:31:8a:
         b5:6c:b0:34:44:64:bf:13:2d:3e:29:f0:71:bb:90:37:15:db:
         c4:e0:6c:04
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURwG9b1eOIatcGAF+C3Jg8lPtzNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U3MzU2MjBDOEUwMzEwQ0E0RTNCREFCQUU4Nzg5ODFF
N0ZFRTY0NTAeFw0yNTEwMjIxODU5NDVaFw0yNjEwMjExOTA0NDVaMDMxMTAvBgNV
BAMTKDhERjY4OUZFNDlENEFGNUE5NUREOTZEOEYwRkJEOUE1MzY2MTBFMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZAOtM4jkIhLDh34MNvxfvq5a
IffEtBePlc+svFI+2wMxDGs4SQP6o7ihBzM4NDzu1Ptw2t03OYGOn3mmLGnXUj6B
1bIQCbMHJNzpCrtUVtmHfcdaEtQ2F4Y3lXh6+gqntah/zJWJV0rr0DTOmumMr5Sv
magYeMUpLPL4TP4AxYwOdUL9jMaW+MjmxNvyFmmEbKlXp4mz1DP6itR8qCEQa0X3
bT+STLtRzrixhCoissWgCL9BgaT/tBmXbn/jSIP1w2058++CYHHeuXJ3TpeQ7/36
OzT3cMeCX8mW8ASCBqWJatFyN+Oi+jQ3LpGLwiBa/Kr0G1yVHJ5nzig18Iv5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjfaJ/knUr1qV3ZbY8PvZpTZhDiAwHwYDVR0j
BBgwFoAUznNWIMjgMQyk472rroeJgef+5kUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkV2akxGWkNvVHFFZldMQmVmcWM4UHVpQkttWFhBODFzSjZYVzVzb0Nl
NW8vMC9DRTczNTYyMEM4RTAzMTBDQTRFM0JEQUJBRTg3ODk4MUU3RkVFNjQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNzM1NjIwQzhFMDMxMENB
NEUzQkRBQkFFODc4OTgxRTdGRUU2NDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JFdmpMRlpDb1RxRWZXTEJlZnFjOFB1aUJLbVhYQTgxc0o2WFc1c29DZTVvLzAv
MzEzNzM5MmUzNjMzMmUzNTM2MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzUzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsz84MA0GCSqGSIb3DQEBCwUAA4IBAQBjQp3eynr5
lUADVIEVN/W4d7iX/ogVRlE2BBEXrLOmPigy7TWaoBmAhZA5jDvsecIk+AonPoHq
ZO4+Kjuhl67vluKae4D/uVS0YJmIiorL+KfL1w4r2G9qmahQ7jgviOsJbyDA5DtW
AnyhZFjRQdqWb3YOGHAAarnFBXXEa1VyAcj3JPZb/BmIO+z6+EgFbDmWDAllHMJW
UJsByonHkdEbdYgf0zz/O/iwMAdf8KHpAFmW4wOIOG5BEHU364WjhdDTZCvQDYXc
a25MyBKjHD89+IsxgDQFHDUR5FGDRbtEba6hBXZc3wukMYq1bLA0RGS/Ey0+KfBx
u5A3FdvE4GwE
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:15:39 2025 by rpki-client