Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/3139312e33372e3132302e302f32312d3231203d3e20323633333537.roa
File:                     3139312e33372e3132302e302f32312d3231203d3e20323633333537.roa (raw, json)
Hash identifier:          qRo59ndhCjLDDHO12dmOyUYGhST5vtCrdKje+bGluHc=
Subject key identifier:   82:F6:31:02:3D:7D:9B:24:2B:53:BF:34:F9:9E:EB:98:E2:B9:11:16
Certificate issuer:       /CN=666C4396BE3D615556D2074B0E613EAF065B2878
Certificate serial:       60926D3BD2AC19084511A7D2B9D6D97702268D48
Authority key identifier: 66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/3139312e33372e3132302e302f32312d3231203d3e20323633333537.roa
Signing time:             Thu 30 Oct 2025 12:10:28 +0000
ROA not before:           Thu 30 Oct 2025 12:05:28 +0000
ROA not after:            Thu 29 Oct 2026 12:10:28 +0000
asID:                     263357
IP address blocks:        191.37.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl
                          rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:92:6d:3b:d2:ac:19:08:45:11:a7:d2:b9:d6:d9:77:02:26:8d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666C4396BE3D615556D2074B0E613EAF065B2878
        Validity
            Not Before: Oct 30 12:05:28 2025 GMT
            Not After : Oct 29 12:10:28 2026 GMT
        Subject: CN=82F631023D7D9B242B53BF34F99EEB98E2B91116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:2a:fd:cc:e6:05:dc:75:4d:ed:0b:fa:e0:
                    24:1a:1d:3c:ee:79:37:14:6b:cb:0a:76:e4:38:2a:
                    a3:bb:4b:86:55:14:c9:3a:51:2c:b0:e3:9f:0d:f7:
                    4d:65:d9:a6:be:3e:f6:6b:ce:f1:c7:c0:36:07:f0:
                    6f:d1:14:c1:32:70:29:8d:49:74:27:08:1c:28:ca:
                    da:ac:35:ff:9d:50:eb:6c:63:58:6a:5d:8e:ec:83:
                    66:d8:73:71:67:54:72:1c:bb:fb:1e:d8:f5:71:eb:
                    b2:04:24:f4:8d:3b:3b:64:21:c3:1d:8e:38:69:6e:
                    bd:d0:08:17:bf:04:ad:3a:c0:18:49:8f:77:5a:a4:
                    4d:3f:29:14:78:f2:8b:a9:c2:fc:42:6a:e8:91:49:
                    9a:b1:09:f3:eb:cd:64:15:70:7d:2d:b3:b1:d8:4a:
                    df:a6:54:b7:07:4a:42:95:67:52:0b:25:bf:e9:67:
                    30:c4:98:45:e4:05:82:4a:a7:ac:38:9a:3a:fb:a2:
                    16:2c:84:3e:53:08:24:11:42:22:9a:f0:80:8d:d5:
                    63:56:b6:7f:c0:90:03:4a:ae:a6:4b:67:ee:e9:ea:
                    47:49:dc:e8:12:6b:44:23:b7:51:44:de:ff:27:89:
                    59:e1:34:ca:18:9e:f2:f2:49:3e:8c:56:0a:0b:d1:
                    1d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F6:31:02:3D:7D:9B:24:2B:53:BF:34:F9:9E:EB:98:E2:B9:11:16
            X509v3 Authority Key Identifier:
                keyid:66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/3139312e33372e3132302e302f32312d3231203d3e20323633333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:45:e9:c0:02:5e:14:3d:43:36:a9:24:07:14:73:67:35:25:
         5e:b9:a7:8f:2e:c3:8b:ad:c2:05:23:1a:5b:d0:c8:2f:ee:2d:
         a3:0c:16:c0:04:02:b7:b8:bf:75:de:24:56:94:03:dc:30:e5:
         33:b7:47:80:ea:fe:49:ee:14:62:7b:1c:35:e5:39:67:73:bb:
         eb:a4:60:84:92:36:89:c3:d5:f8:12:70:03:91:f8:30:65:9c:
         ed:fa:1b:40:41:20:1f:fe:7a:e9:0c:73:0a:ee:26:43:79:b7:
         75:76:cd:3a:b9:ed:02:88:39:b7:a8:70:3d:d7:23:6e:18:7c:
         f9:4d:c5:97:f5:ea:8d:26:b3:bc:1d:cc:fb:b4:aa:a6:dc:e7:
         cf:aa:60:dc:84:7a:5b:b3:e7:75:db:36:e3:71:7e:ba:9f:a2:
         73:21:82:13:3c:96:c4:29:02:81:8c:8d:e9:85:0a:83:89:b9:
         4b:93:67:bb:23:fa:86:22:76:74:6c:86:0d:2c:53:91:91:94:
         22:3b:32:1a:7b:99:f0:a8:fe:49:e3:54:c0:8b:f5:10:9b:90:
         51:e3:53:f7:ea:c4:63:92:80:19:f0:48:6e:7a:5c:83:62:b0:
         37:a6:b2:a3:2f:ea:b7:08:a3:38:04:cb:16:d1:59:04:ea:4b:
         8c:7a:43:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:53 2025 by rpki-client