Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/3139312e33372e3130322e302f32332d3233203d3e20323633333537.roa
File:                     3139312e33372e3130322e302f32332d3233203d3e20323633333537.roa (raw, json)
Hash identifier:          CdKiuJGsXfuPI7jbf3a+AOWrYtNjUPO4OxV+MhywfQQ=
Subject key identifier:   D6:BB:66:D9:95:9F:D1:A8:F2:68:84:2C:C7:BF:54:46:D8:8E:5F:BC
Certificate issuer:       /CN=666C4396BE3D615556D2074B0E613EAF065B2878
Certificate serial:       0FC4843A66138A610A7E22A9F15E26E5D8DA2FA0
Authority key identifier: 66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/3139312e33372e3130322e302f32332d3233203d3e20323633333537.roa
Signing time:             Thu 30 Oct 2025 12:10:12 +0000
ROA not before:           Thu 30 Oct 2025 12:05:12 +0000
ROA not after:            Thu 29 Oct 2026 12:10:12 +0000
asID:                     263357
IP address blocks:        191.37.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl
                          rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c4:84:3a:66:13:8a:61:0a:7e:22:a9:f1:5e:26:e5:d8:da:2f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666C4396BE3D615556D2074B0E613EAF065B2878
        Validity
            Not Before: Oct 30 12:05:12 2025 GMT
            Not After : Oct 29 12:10:12 2026 GMT
        Subject: CN=D6BB66D9959FD1A8F268842CC7BF5446D88E5FBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b8:9f:75:fe:da:0f:e9:d3:fd:9a:b1:ba:3b:
                    fd:9d:94:ab:16:81:9d:d3:74:6e:d7:70:77:68:b8:
                    4e:b4:59:23:85:a3:96:1d:e7:cc:cc:a0:bc:38:b4:
                    85:1a:03:63:b9:d7:b6:16:38:7a:cc:52:39:1e:08:
                    69:55:dd:3f:b2:17:b3:fd:ee:b0:e0:48:7d:e1:94:
                    47:f9:ea:f2:c4:1b:80:c0:07:4e:4c:59:df:8b:2c:
                    3e:65:72:b4:68:11:c3:86:c4:81:f6:3c:8b:dc:0d:
                    1e:03:f2:7e:9e:2d:39:96:a2:6f:67:a1:7b:e2:dc:
                    66:76:70:dd:59:58:44:b4:0e:a8:a4:1d:36:ea:54:
                    6d:80:e7:84:70:1f:ee:6c:3a:8e:36:75:bb:fc:80:
                    f1:b9:eb:10:c1:0d:66:61:0d:ed:95:00:eb:14:a8:
                    4d:48:d2:26:fe:a8:a2:a6:6b:c0:4c:9c:52:dc:98:
                    e5:7c:45:f0:a2:c1:ef:3a:56:27:67:d4:a1:cf:e9:
                    c9:87:77:72:44:1d:7b:dc:d4:08:dc:0d:0d:14:26:
                    14:14:f0:47:f2:16:05:d7:f1:d2:b7:3f:b6:99:e6:
                    68:34:a4:21:61:5a:b9:45:6a:aa:b2:6a:fe:9c:df:
                    e0:7f:67:3d:c3:34:d0:df:c6:32:a4:8a:8a:20:d8:
                    0c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BB:66:D9:95:9F:D1:A8:F2:68:84:2C:C7:BF:54:46:D8:8E:5F:BC
            X509v3 Authority Key Identifier:
                keyid:66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/3139312e33372e3130322e302f32332d3233203d3e20323633333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:8b:19:5c:40:f5:35:40:2f:fb:51:b3:25:c2:67:ac:6f:fd:
         5b:3d:a9:92:b0:ea:bb:e8:86:e6:2e:e1:39:68:bf:65:7b:fb:
         84:25:8a:4a:ae:6e:6a:37:6a:9b:70:d8:23:ed:21:08:80:35:
         f6:8f:fd:ea:89:7d:27:14:b9:1d:2e:20:f3:84:49:d8:31:3f:
         c7:fc:32:6d:18:56:e4:dc:7b:03:4c:aa:13:00:20:80:a8:10:
         0e:27:28:14:20:56:28:9b:fc:1a:02:39:f9:84:3b:dd:c0:b1:
         ab:97:e4:7e:1c:04:81:11:d8:7d:2a:83:8c:eb:7d:a0:7f:d8:
         d7:65:b6:26:32:ed:8d:6b:da:06:2e:12:d2:d6:16:24:b5:88:
         24:a9:ee:bf:8c:c8:2c:61:02:8c:1a:d6:c0:0e:13:7f:a4:bb:
         ef:ed:89:ca:f7:7b:96:99:60:06:54:32:c5:86:c6:51:1e:b4:
         c9:f5:34:05:98:22:35:fa:3b:9c:71:e3:87:a4:4e:f4:3b:de:
         6f:0e:73:2a:e0:19:17:7c:55:3b:5e:92:7c:c9:1d:02:bc:8b:
         dc:31:09:bb:8e:c5:96:37:5e:bd:a1:a5:66:af:cc:fd:eb:56:
         b1:cc:0c:e8:24:f7:25:12:3c:e9:3b:64:c3:fd:d3:a3:7e:bc:
         6e:c2:67:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:50 2025 by rpki-client