Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3133312e37322e39342e302f32342d3234203d3e20323632373937.roa
File:                     3133312e37322e39342e302f32342d3234203d3e20323632373937.roa (raw, json)
Hash identifier:          M7bhTZhk1M8I9h8nkj1WPDDP/s9sXPW9bKXL7N4CQ9M=
Subject key identifier:   DA:F1:C9:86:7D:24:73:28:97:94:01:91:BA:48:1E:DF:31:C6:DB:C0
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       45C531914602D63875251B46DF0D84D45BD4A2D8
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3133312e37322e39342e302f32342d3234203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:17 +0000
ROA not before:           Thu 23 Oct 2025 14:08:17 +0000
ROA not after:            Thu 22 Oct 2026 14:13:17 +0000
asID:                     262797
IP address blocks:        131.72.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c5:31:91:46:02:d6:38:75:25:1b:46:df:0d:84:d4:5b:d4:a2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:17 2025 GMT
            Not After : Oct 22 14:13:17 2026 GMT
        Subject: CN=DAF1C9867D24732897940191BA481EDF31C6DBC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d4:2c:2a:00:b9:70:62:a0:c6:29:fc:09:8c:
                    44:cc:15:f5:23:e3:8d:20:73:ec:45:58:9c:92:13:
                    0c:7e:2d:ba:ce:e0:3d:17:18:9e:6e:3e:d4:b4:ca:
                    38:6d:b0:f5:a3:68:d2:18:b3:f3:aa:cc:4b:7c:3f:
                    b2:fe:43:20:19:ad:3f:e8:9c:e9:05:4e:fb:2a:52:
                    f1:5c:04:23:ca:f6:11:9e:7b:2c:ed:7a:1b:e1:bd:
                    ac:9e:e6:23:4e:30:bc:34:5e:62:d5:f4:22:f8:9e:
                    e5:f3:b7:8d:7d:65:f4:3b:ae:64:38:76:da:5d:a8:
                    71:9d:c7:5d:6a:19:8c:13:71:44:91:bb:4b:56:5e:
                    0f:2a:c1:28:c1:01:29:e0:bd:ad:2d:53:fd:32:71:
                    ce:9f:e8:92:e1:ca:0d:7c:f6:4a:49:eb:d2:70:e2:
                    4d:c9:79:fb:82:76:0b:68:24:9e:18:6b:02:22:8e:
                    e1:e2:2d:03:02:8a:9c:ab:91:f9:56:53:75:a2:17:
                    80:45:92:57:b6:de:26:35:7f:da:f0:aa:f8:c4:95:
                    cc:66:f9:e5:de:18:58:b9:21:e7:82:71:b2:4c:02:
                    a4:93:2e:b4:88:1a:60:f2:e4:cb:d4:a9:54:6e:40:
                    0a:8d:6d:17:a6:67:43:fd:b9:32:e8:ec:e7:76:5b:
                    57:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F1:C9:86:7D:24:73:28:97:94:01:91:BA:48:1E:DF:31:C6:DB:C0
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3133312e37322e39342e302f32342d3234203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:94:b0:bc:68:7b:d3:92:88:3f:c8:ee:ca:12:46:5d:33:2e:
         0d:e3:fc:42:e9:bd:3d:5d:43:c6:ec:11:cc:33:2e:de:4d:a0:
         f2:74:16:b7:8d:de:15:b5:ce:37:1f:4f:4f:91:fd:d6:3d:e8:
         3d:cf:96:47:4c:05:78:94:b8:9e:d9:ff:17:58:ee:94:0e:fd:
         8d:1d:8f:72:a6:d6:c9:da:b8:08:a6:45:d9:96:3e:01:e3:c4:
         47:ec:a3:c5:e0:d3:cd:58:03:b3:e8:ec:4e:0f:bd:8b:90:c7:
         47:28:92:da:9d:e8:58:f8:5b:38:6f:f5:16:71:96:84:79:f6:
         fb:9d:6c:f7:83:c2:ec:47:e4:83:42:a8:01:f7:ba:ab:d9:03:
         97:06:2d:52:1f:62:9d:32:e6:3f:9f:bb:46:48:3d:1f:1f:ab:
         7c:c1:6f:85:59:f7:2c:a2:f4:f3:3a:ea:08:68:62:c9:da:e4:
         2b:8b:b1:08:4b:49:a2:1c:4a:47:53:47:46:65:23:cb:a4:48:
         33:91:3f:3e:67:78:d5:99:14:0f:3e:58:e5:85:fc:6c:b3:1b:
         73:87:26:82:dd:26:6e:4a:4d:35:de:20:4e:b5:46:31:d5:70:
         d4:71:2c:f5:12:82:8d:0a:44:e7:d9:2e:e8:87:cc:4b:6d:36:
         96:d7:d7:60
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURcUxkUYC1jh1JRtG3w2E1FvUotgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYyQ0RBNEFFNEI1Q0FENzNCMDY4Q0Y2MUQyRUU4MkNC
RTkwQzIwQjAeFw0yNTEwMjMxNDA4MTdaFw0yNjEwMjIxNDEzMTdaMDMxMTAvBgNV
BAMTKERBRjFDOTg2N0QyNDczMjg5Nzk0MDE5MUJBNDgxRURGMzFDNkRCQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL1CwqALlwYqDGKfwJjETMFfUj
440gc+xFWJySEwx+LbrO4D0XGJ5uPtS0yjhtsPWjaNIYs/OqzEt8P7L+QyAZrT/o
nOkFTvsqUvFcBCPK9hGeeyztehvhvaye5iNOMLw0XmLV9CL4nuXzt419ZfQ7rmQ4
dtpdqHGdx11qGYwTcUSRu0tWXg8qwSjBASngva0tU/0ycc6f6JLhyg189kpJ69Jw
4k3JefuCdgtoJJ4YawIijuHiLQMCipyrkflWU3WiF4BFkle23iY1f9rwqvjElcxm
+eXeGFi5IeeCcbJMAqSTLrSIGmDy5MvUqVRuQAqNbRemZ0P9uTLo7Od2W1eXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2vHJhn0kcyiXlAGRukge3zHG28AwHwYDVR0j
BBgwFoAUpizaSuS1ytc7Boz2HS7oLL6QwgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1lwUHNCdEV0YTlKTDhTMlNnb1Ruejl2Mnk0QzU2Rkg4OWJXZ1ZCRlRO
UFMvMi9BNjJDREE0QUU0QjVDQUQ3M0IwNjhDRjYxRDJFRTgyQ0JFOTBDMjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MkNEQTRBRTRCNUNBRDcz
QjA2OENGNjFEMkVFODJDQkU5MEMyMEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NZcFBzQnRFdGE5Skw4UzJTZ29Ubno5djJ5NEM1NkZIODliV2dWQkZUTlBTLzIv
MzEzMzMxMmUzNzMyMmUzOTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzczOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAg0heMA0GCSqGSIb3DQEBCwUAA4IBAQAZlLC8aHvT
kog/yO7KEkZdMy4N4/xC6b09XUPG7BHMMy7eTaDydBa3jd4Vtc43H09Pkf3WPeg9
z5ZHTAV4lLie2f8XWO6UDv2NHY9yptbJ2rgIpkXZlj4B48RH7KPF4NPNWAOz6OxO
D72LkMdHKJLanehY+Fs4b/UWcZaEefb7nWz3g8LsR+SDQqgB97qr2QOXBi1SH2Kd
MuY/n7tGSD0fH6t8wW+FWfcsovTzOuoIaGLJ2uQri7EIS0miHEpHU0dGZSPLpEgz
kT8+Z3jVmRQPPljlhfxssxtzhyaC3SZuSk013iBOtUYx1XDUcSz1EoKNCkTn2S7o
h8xLbTaW19dg
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:51 2025 by rpki-client