Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/3137372e35342e3234302e302f32302d3234203d3e20323632323939.roa
File:                     3137372e35342e3234302e302f32302d3234203d3e20323632323939.roa (raw, json)
Hash identifier:          sJuPnLliL5BAll/ob66pS6k5uH1gd8zUIA6VXGteRg4=
Subject key identifier:   C7:D4:A2:16:FE:2F:D2:3F:2C:22:64:C0:7C:CD:85:99:69:EE:28:32
Certificate issuer:       /CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
Certificate serial:       686DC747929E47C3E05C6D0CF0DAC52DF61B5B6C
Authority key identifier: 20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/3137372e35342e3234302e302f32302d3234203d3e20323632323939.roa
Signing time:             Thu 23 Oct 2025 10:11:09 +0000
ROA not before:           Thu 23 Oct 2025 10:06:09 +0000
ROA not after:            Thu 22 Oct 2026 10:11:09 +0000
asID:                     262299
IP address blocks:        177.54.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl
                          rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6d:c7:47:92:9e:47:c3:e0:5c:6d:0c:f0:da:c5:2d:f6:1b:5b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
        Validity
            Not Before: Oct 23 10:06:09 2025 GMT
            Not After : Oct 22 10:11:09 2026 GMT
        Subject: CN=C7D4A216FE2FD23F2C2264C07CCD859969EE2832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:51:71:b2:53:40:fc:4c:05:d9:c3:fe:2b:2b:
                    20:7e:da:57:64:fa:d6:1a:cd:d6:7e:2f:6a:6d:ba:
                    10:f6:7a:36:42:bb:9f:e4:be:91:7b:b3:0e:1d:9a:
                    2d:0a:8c:85:c8:e7:e6:5a:05:bb:db:d2:bc:1a:d1:
                    de:92:9f:9b:a2:63:32:2f:83:d6:33:6f:2f:2a:ec:
                    e8:2d:c7:27:1c:87:4b:43:47:b3:cb:a6:17:6a:3a:
                    96:cc:a6:bc:5a:f0:d2:c7:20:37:8a:f8:7a:8b:54:
                    a8:81:24:4a:d5:e1:30:a9:1c:a5:20:33:8d:b5:4b:
                    c1:7e:7e:95:aa:f5:9a:a0:10:4f:ee:66:e8:b7:52:
                    08:78:6e:7b:97:8b:b3:bc:d0:a6:06:ba:8a:3a:e1:
                    9d:56:e8:32:99:b9:54:74:53:99:11:99:5e:26:66:
                    7a:1a:cd:6a:90:0f:f3:6b:c0:44:fe:dc:19:e1:fc:
                    67:20:aa:80:95:65:42:c7:2b:4c:fa:f7:1b:a7:28:
                    47:50:6d:61:cd:5b:81:a5:92:1b:29:a6:ac:a8:db:
                    69:c9:59:95:e4:ea:58:20:07:2e:ce:e4:57:94:78:
                    32:eb:76:69:9d:3f:92:39:bd:37:ed:bf:ec:ee:dd:
                    60:80:ef:ed:36:05:f9:1f:5e:85:71:91:dc:60:b9:
                    0c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D4:A2:16:FE:2F:D2:3F:2C:22:64:C0:7C:CD:85:99:69:EE:28:32
            X509v3 Authority Key Identifier:
                keyid:20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/3137372e35342e3234302e302f32302d3234203d3e20323632323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0a:ac:a7:9b:03:db:ad:d8:61:dc:22:e3:79:8f:bb:7b:96:f3:
         c7:6e:7f:86:04:d4:cc:6b:35:4d:6f:79:fe:a5:87:9b:80:2d:
         15:ed:ef:6d:7b:cd:b7:a1:c4:87:d2:5a:04:b7:03:13:41:c5:
         13:6c:45:08:71:31:a6:86:30:d7:c7:11:fc:38:d7:ba:da:d4:
         55:23:e5:2b:57:bb:c7:fc:1e:ef:67:06:d4:22:cc:f4:91:27:
         8d:c1:9a:09:c1:6d:27:d5:99:46:6a:db:ab:1b:42:52:27:f3:
         1d:96:06:c1:ac:fd:89:e8:06:8b:c5:bc:54:12:89:23:87:1e:
         df:f6:4d:11:ce:1e:12:0e:6c:7b:57:e9:77:58:bf:7b:a3:20:
         ad:50:fa:62:5b:a3:9f:60:db:71:d8:b7:46:e2:11:49:97:30:
         55:c4:d9:7f:98:8d:41:ea:57:70:38:77:53:c5:81:84:34:7a:
         56:ae:61:d7:69:94:84:60:74:d1:b9:ce:cc:ee:60:f3:6a:c3:
         e2:2a:2c:4e:c2:ce:88:98:03:e7:84:05:c9:47:50:ce:df:23:
         ef:88:10:15:f5:68:27:10:41:c1:e9:88:53:aa:4c:4d:4d:9d:
         22:a7:18:18:4b:3f:d7:d9:66:c4:55:da:93:09:1b:74:04:00:
         8b:48:aa:33
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaG3HR5KeR8PgXG0M8NrFLfYbW2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjAzRENDQTdERTc5QzhDNERBQkFBMTBBNkNBOUU5M0VB
N0QzOURGNzAeFw0yNTEwMjMxMDA2MDlaFw0yNjEwMjIxMDExMDlaMDMxMTAvBgNV
BAMTKEM3RDRBMjE2RkUyRkQyM0YyQzIyNjRDMDdDQ0Q4NTk5NjlFRTI4MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/UXGyU0D8TAXZw/4rKyB+2ldk
+tYazdZ+L2ptuhD2ejZCu5/kvpF7sw4dmi0KjIXI5+ZaBbvb0rwa0d6Sn5uiYzIv
g9Yzby8q7Ogtxycch0tDR7PLphdqOpbMprxa8NLHIDeK+HqLVKiBJErV4TCpHKUg
M421S8F+fpWq9ZqgEE/uZui3Ugh4bnuXi7O80KYGuoo64Z1W6DKZuVR0U5kRmV4m
ZnoazWqQD/NrwET+3Bnh/GcgqoCVZULHK0z69xunKEdQbWHNW4Glkhsppqyo22nJ
WZXk6lggBy7O5FeUeDLrdmmdP5I5vTftv+zu3WCA7+02BfkfXoVxkdxguQx5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUx9SiFv4v0j8sImTAfM2FmWnuKDIwHwYDVR0j
BBgwFoAUID3Mp955yMTauqEKbKnpPqfTnfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BH
U0UvMS8yMDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwM0RDQ0E3REU3OUM4QzRE
QUJBQTEwQTZDQTlFOTNFQTdEMzlERjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCeHVMcENmM3lhZTlNR2VCMmM2VEM5YXhCWkdaRFY1d2NRNXZmRm9wR1NFLzEv
MzEzNzM3MmUzNTM0MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMjM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxNvAwDQYJKoZIhvcNAQELBQADggEBAAqsp5sD
263YYdwi43mPu3uW88duf4YE1MxrNU1vef6lh5uALRXt7217zbehxIfSWgS3AxNB
xRNsRQhxMaaGMNfHEfw417ra1FUj5StXu8f8Hu9nBtQizPSRJ43BmgnBbSfVmUZq
26sbQlIn8x2WBsGs/YnoBovFvFQSiSOHHt/2TRHOHhIObHtX6XdYv3ujIK1Q+mJb
o59g23HYt0biEUmXMFXE2X+YjUHqV3A4d1PFgYQ0elauYddplIRgdNG5zszuYPNq
w+IqLE7CzoiYA+eEBclHUM7fI++IEBX1aCcQQcHpiFOqTE1NnSKnGBhLP9fZZsRV
2pMJG3QEAItIqjM=
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:21:52 2025 by rpki-client