Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32322d3332203d3e20323633393133.roa
File:                     3137302e3233312e3231362e302f32322d3332203d3e20323633393133.roa (raw, json)
Hash identifier:          LGJFtoJ/5f7kUhBbqipv9aqZxJXmU86VDJYfKYZzSGE=
Subject key identifier:   E2:1A:06:C9:E1:08:CE:A6:27:A9:F8:F0:6B:E5:2A:61:EA:A9:42:CA
Certificate issuer:       /CN=EC28538427BF2A4CA218209DB9A2008B4E587ABA
Certificate serial:       570AB4BC2AD752BBB793B039F36FE86C67401351
Authority key identifier: EC:28:53:84:27:BF:2A:4C:A2:18:20:9D:B9:A2:00:8B:4E:58:7A:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32322d3332203d3e20323633393133.roa
Signing time:             Wed 22 Oct 2025 17:29:50 +0000
ROA not before:           Wed 22 Oct 2025 17:24:50 +0000
ROA not after:            Wed 21 Oct 2026 17:29:50 +0000
asID:                     263913
IP address blocks:        170.231.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.crl
                          rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:46:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:0a:b4:bc:2a:d7:52:bb:b7:93:b0:39:f3:6f:e8:6c:67:40:13:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC28538427BF2A4CA218209DB9A2008B4E587ABA
        Validity
            Not Before: Oct 22 17:24:50 2025 GMT
            Not After : Oct 21 17:29:50 2026 GMT
        Subject: CN=E21A06C9E108CEA627A9F8F06BE52A61EAA942CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:55:46:de:71:b1:40:84:ab:61:08:0e:18:6e:
                    43:4b:81:e6:1e:71:97:f9:bf:52:7c:01:84:2b:0c:
                    17:db:52:4a:75:29:97:72:ac:49:a0:2b:df:cd:fc:
                    e2:12:1c:f9:55:08:f2:b4:a8:ba:61:7d:80:14:a5:
                    66:bf:ff:5c:f4:96:de:cc:eb:bf:cc:c9:3b:99:1d:
                    ce:c4:87:c8:f5:38:7a:fd:18:eb:cb:0a:3c:89:25:
                    f4:09:60:c5:7d:e3:ea:6e:02:21:ba:59:57:2f:19:
                    d0:4a:86:68:d1:ab:89:91:45:0e:c1:d6:a2:01:8a:
                    d9:88:b1:a1:8f:a4:a1:e0:af:41:db:7f:f7:e7:e1:
                    f5:8e:e9:3f:e8:7b:79:99:cc:5c:df:20:dd:3a:05:
                    83:79:31:e6:2f:c1:09:d5:2e:e0:f9:5b:91:0f:15:
                    07:02:ce:52:7e:f4:48:ce:00:71:58:4b:eb:4a:c0:
                    90:20:67:f0:4d:ff:8f:b6:05:9e:d2:36:0d:f5:d0:
                    99:a6:46:f9:28:a2:77:e0:e6:15:e5:a6:f7:a6:63:
                    e1:b4:a5:45:ea:70:d5:b9:63:d9:c5:07:d6:96:ec:
                    22:24:50:59:3e:28:c6:e5:d4:22:cc:7b:0c:47:fa:
                    2c:9a:c4:22:dc:af:99:89:b0:b0:38:ad:63:f9:08:
                    46:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1A:06:C9:E1:08:CE:A6:27:A9:F8:F0:6B:E5:2A:61:EA:A9:42:CA
            X509v3 Authority Key Identifier:
                keyid:EC:28:53:84:27:BF:2A:4C:A2:18:20:9D:B9:A2:00:8B:4E:58:7A:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32322d3332203d3e20323633393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:91:cb:6b:dc:1c:34:b1:07:67:65:64:f0:9e:0a:f0:58:9a:
         7d:ba:ee:ff:59:c7:18:5f:08:3f:7b:09:51:9d:e6:38:e6:7b:
         f2:28:2d:08:32:b7:d0:e7:b8:6d:89:03:3d:c9:7c:ad:27:2d:
         ef:12:91:1b:a9:21:0b:f0:a3:b8:b6:68:e9:3a:85:5c:5e:04:
         dd:8b:d6:b2:e5:f0:03:c4:0b:c0:aa:a9:2a:14:14:dc:bf:66:
         7a:b5:d8:b5:e2:65:d6:00:bd:c6:d4:0e:a7:76:fa:fa:40:11:
         f9:e3:34:2a:2a:de:cb:7e:0a:ed:6b:4a:73:61:25:8b:27:56:
         53:2d:8f:d5:f7:f7:1f:15:2c:f5:d9:54:44:af:47:ab:a9:18:
         cb:d7:2a:7e:5f:e0:69:3e:b0:0c:4a:c3:85:db:44:06:63:00:
         97:0e:2d:68:a7:c2:11:45:2c:cb:a2:10:eb:a5:96:20:a0:5f:
         e3:83:1b:04:49:b5:e6:ef:0c:de:20:0b:74:f4:f8:99:fc:35:
         0c:51:a3:a5:d0:53:3d:63:f2:44:79:92:3b:2b:94:17:4d:c4:
         33:25:7d:ff:8d:ac:e9:59:22:b9:39:51:49:ad:c8:dd:04:59:
         ff:50:89:00:c4:d7:25:e9:1a:fa:77:69:30:78:e6:29:8d:49:
         40:7d:e9:c4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVwq0vCrXUru3k7A582/obGdAE1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyODUzODQyN0JGMkE0Q0EyMTgyMDlEQjlBMjAwOEI0
RTU4N0FCQTAeFw0yNTEwMjIxNzI0NTBaFw0yNjEwMjExNzI5NTBaMDMxMTAvBgNV
BAMTKEUyMUEwNkM5RTEwOENFQTYyN0E5RjhGMDZCRTUyQTYxRUFBOTQyQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwVUbecbFAhKthCA4YbkNLgeYe
cZf5v1J8AYQrDBfbUkp1KZdyrEmgK9/N/OISHPlVCPK0qLphfYAUpWa//1z0lt7M
67/MyTuZHc7Eh8j1OHr9GOvLCjyJJfQJYMV94+puAiG6WVcvGdBKhmjRq4mRRQ7B
1qIBitmIsaGPpKHgr0Hbf/fn4fWO6T/oe3mZzFzfIN06BYN5MeYvwQnVLuD5W5EP
FQcCzlJ+9EjOAHFYS+tKwJAgZ/BN/4+2BZ7SNg310JmmRvkoonfg5hXlpvemY+G0
pUXqcNW5Y9nFB9aW7CIkUFk+KMbl1CLMewxH+iyaxCLcr5mJsLA4rWP5CEahAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU4hoGyeEIzqYnqfjwa+UqYeqpQsowHwYDVR0j
BBgwFoAU7ChThCe/KkyiGCCduaIAi05YerowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1dUOWlvM3JtTVBOTWVVdURTdW9kaDR6UWM2V282cktXeDZ4OHFzSGh3
aFcvMC9FQzI4NTM4NDI3QkYyQTRDQTIxODIwOURCOUEyMDA4QjRFNTg3QUJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDMjg1Mzg0MjdCRjJBNENB
MjE4MjA5REI5QTIwMDhCNEU1ODdBQkEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NXVDlpbzNybU1QTk1lVXVEU3VvZGg0elFjNldvNnJLV3g2eDhxc0hod2hXLzAv
MzEzNzMwMmUzMjMzMzEyZTMyMzEzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMzM5MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrn2DANBgkqhkiG9w0BAQsFAAOCAQEAzJHL
a9wcNLEHZ2Vk8J4K8Fiafbru/1nHGF8IP3sJUZ3mOOZ78igtCDK30Oe4bYkDPcl8
rSct7xKRG6khC/CjuLZo6TqFXF4E3YvWsuXwA8QLwKqpKhQU3L9merXYteJl1gC9
xtQOp3b6+kAR+eM0Kirey34K7WtKc2EliydWUy2P1ff3HxUs9dlURK9Hq6kYy9cq
fl/gaT6wDErDhdtEBmMAlw4taKfCEUUsy6IQ66WWIKBf44MbBEm15u8M3iALdPT4
mfw1DFGjpdBTPWPyRHmSOyuUF03EMyV9/42s6VkiuTlRSa3I3QRZ/1CJAMTXJeka
+ndpMHjmKY1JQH3pxA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:26:41 2025 by rpki-client