Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/3230312e3133312e39382e302f32332d3234203d3e203631363034.roa
File:                     3230312e3133312e39382e302f32332d3234203d3e203631363034.roa (raw, json)
Hash identifier:          XbnbZZGnym5IzTSf8ufNt1aSrzTYnxcKwRxn9dL/Hjk=
Subject key identifier:   78:4E:B1:35:7F:DB:80:CB:7B:ED:51:02:49:07:26:6C:92:1A:32:B3
Certificate issuer:       /CN=4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D
Certificate serial:       17F6B7303297FAB2B08CF168AC06E122CC34FCCF
Authority key identifier: 4C:59:5B:73:7E:C6:F6:BB:05:5D:A0:AA:92:C7:7B:32:CB:CA:5A:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/3230312e3133312e39382e302f32332d3234203d3e203631363034.roa
Signing time:             Thu 18 Sep 2025 02:06:55 +0000
ROA not before:           Thu 18 Sep 2025 02:01:55 +0000
ROA not after:            Thu 17 Sep 2026 02:06:55 +0000
asID:                     61604
IP address blocks:        201.131.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D.crl
                          rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 00:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f6:b7:30:32:97:fa:b2:b0:8c:f1:68:ac:06:e1:22:cc:34:fc:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D
        Validity
            Not Before: Sep 18 02:01:55 2025 GMT
            Not After : Sep 17 02:06:55 2026 GMT
        Subject: CN=784EB1357FDB80CB7BED51024907266C921A32B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:2e:f4:c2:c3:bd:16:ec:51:dd:bb:93:04:
                    fc:a3:bb:2f:67:29:17:a2:5c:5c:99:e9:19:f7:7c:
                    65:b8:d8:07:fa:45:50:2e:40:4c:df:f2:37:d6:53:
                    7d:d0:a7:00:3b:40:4f:b2:dd:7c:26:e2:97:1e:e5:
                    ed:cf:d7:cb:3c:4e:f0:6a:cf:f1:5e:6c:9d:54:eb:
                    f9:31:74:5e:3f:18:39:02:2e:76:70:e7:17:ce:18:
                    fe:d7:84:4f:ca:ee:5a:2b:40:35:17:32:c2:33:3f:
                    3a:5d:a1:1a:0f:59:f3:f4:ef:b6:6e:c5:9e:7d:43:
                    33:61:c4:e0:66:68:c4:ca:cd:1b:c8:b8:e2:ee:f3:
                    31:31:50:47:1a:cd:8d:3f:52:98:0b:d2:7a:25:f8:
                    e8:54:fb:62:e4:84:a5:46:80:34:e8:5e:96:80:8c:
                    35:bc:9a:e0:60:97:33:7f:61:7e:60:4c:21:72:35:
                    82:3a:a9:80:e5:e2:ed:24:f1:86:a7:66:bb:3d:3b:
                    45:20:e1:84:ed:1f:57:b7:a8:7d:96:fd:05:ef:e6:
                    d6:52:e6:58:54:48:61:67:13:7a:32:f5:de:60:e0:
                    08:f8:67:cd:28:08:58:2c:0c:56:10:4e:ea:40:d6:
                    9d:89:1f:cf:56:6c:d3:b6:0b:7d:f8:2d:1d:76:6f:
                    60:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4E:B1:35:7F:DB:80:CB:7B:ED:51:02:49:07:26:6C:92:1A:32:B3
            X509v3 Authority Key Identifier:
                keyid:4C:59:5B:73:7E:C6:F6:BB:05:5D:A0:AA:92:C7:7B:32:CB:CA:5A:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/3230312e3133312e39382e302f32332d3234203d3e203631363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:94:bc:d9:58:97:a7:6e:f3:40:e8:07:ed:fc:91:6b:45:fb:
         3e:98:ad:5e:92:63:6e:ec:1c:cb:20:a6:03:11:88:91:8a:80:
         1b:5b:28:f6:61:88:ae:0f:cf:66:3c:61:65:97:89:d4:80:f2:
         47:21:65:ec:a8:85:68:11:9a:87:32:4b:a5:a4:d2:de:d2:fb:
         aa:c7:02:d6:76:8a:fd:c8:a0:41:4a:93:58:95:77:d0:99:3c:
         91:9d:15:bf:f8:2b:b2:53:df:ca:76:4a:a9:01:c6:4d:e9:77:
         84:11:a9:64:98:c1:32:24:71:b6:f2:1b:aa:c9:e0:10:f4:bc:
         2d:e0:94:91:ab:44:65:96:c7:45:5b:8b:cb:6f:2c:10:d1:49:
         6a:7a:a0:d1:72:75:a9:5a:e6:d4:dd:32:cb:41:e4:bf:24:a7:
         ea:17:ef:4d:47:f6:22:b2:9a:05:06:f4:51:82:8b:35:43:98:
         83:58:5b:a0:d1:b2:c8:86:ad:dc:90:e4:48:c3:4a:2a:7e:16:
         70:d5:79:87:17:c3:34:c3:cf:29:62:a2:c2:c7:d7:9f:12:92:
         27:52:78:44:0c:ef:2a:a8:6c:09:74:00:e7:00:f5:a0:d2:c2:
         c6:3b:4a:e7:2d:74:4e:da:d6:69:4b:8b:01:88:97:4c:18:13:
         ed:b9:88:36
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUF/a3MDKX+rKwjPForAbhIsw0/M8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM1OTVCNzM3RUM2RjZCQjA1NURBMEFBOTJDNzdCMzJD
QkNBNUE4RDAeFw0yNTA5MTgwMjAxNTVaFw0yNjA5MTcwMjA2NTVaMDMxMTAvBgNV
BAMTKDc4NEVCMTM1N0ZEQjgwQ0I3QkVENTEwMjQ5MDcyNjZDOTIxQTMyQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrEy70wsO9FuxR3buTBPyjuy9n
KReiXFyZ6Rn3fGW42Af6RVAuQEzf8jfWU33QpwA7QE+y3Xwm4pce5e3P18s8TvBq
z/FebJ1U6/kxdF4/GDkCLnZw5xfOGP7XhE/K7lorQDUXMsIzPzpdoRoPWfP077Zu
xZ59QzNhxOBmaMTKzRvIuOLu8zExUEcazY0/UpgL0nol+OhU+2LkhKVGgDToXpaA
jDW8muBglzN/YX5gTCFyNYI6qYDl4u0k8YanZrs9O0Ug4YTtH1e3qH2W/QXv5tZS
5lhUSGFnE3oy9d5g4Aj4Z80oCFgsDFYQTupA1p2JH89WbNO2C334LR12b2AbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUeE6xNX/bgMt77VECSQcmbJIaMrMwHwYDVR0j
BBgwFoAUTFlbc37G9rsFXaCqksd7MsvKWo0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFFkNHE3QnBzdGNMTG1Ma2FyQ1lLYURXZXU5Q3BuU3dZV2JhQnNORVZS
TGcvMC80QzU5NUI3MzdFQzZGNkJCMDU1REEwQUE5MkM3N0IzMkNCQ0E1QThELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDNTk1QjczN0VDNkY2QkIw
NTVEQTBBQTkyQzc3QjMyQ0JDQTVBOEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RRZDRxN0Jwc3RjTExtTGthckNZS2FEV2V1OUNwblN3WVdiYUJzTkVWUkxnLzAv
MzIzMDMxMmUzMTMzMzEyZTM5MzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNjMx
MzYzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQByYNiMA0GCSqGSIb3DQEBCwUAA4IBAQB8lLzZWJen
bvNA6Aft/JFrRfs+mK1ekmNu7BzLIKYDEYiRioAbWyj2YYiuD89mPGFll4nUgPJH
IWXsqIVoEZqHMkulpNLe0vuqxwLWdor9yKBBSpNYlXfQmTyRnRW/+CuyU9/Kdkqp
AcZN6XeEEalkmMEyJHG28huqyeAQ9Lwt4JSRq0RllsdFW4vLbywQ0UlqeqDRcnWp
WubU3TLLQeS/JKfqF+9NR/YispoFBvRRgos1Q5iDWFug0bLIhq3ckORIw0oqfhZw
1XmHF8M0w88pYqLCx9efEpInUnhEDO8qqGwJdADnAPWg0sLGO0rnLXRO2tZpS4sB
iJdMGBPtuYg2
-----END CERTIFICATE-----
Generated at Fri Sep 19 09:43:20 2025 by rpki-client