Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136322e302f32332d3233203d3e20323635393433.roa
File:                     3133312e3139362e3136322e302f32332d3233203d3e20323635393433.roa (raw, json)
Hash identifier:          JsiApGNpIYjEBhPzMmi5lEGqhZvworNrrORaJxMdLxY=
Subject key identifier:   B8:25:05:AF:5F:AC:3C:EE:17:C1:15:ED:D6:DD:C1:33:41:AF:48:FB
Certificate issuer:       /CN=797F09A2D6DB762EDDE06177F9BAE31812984A51
Certificate serial:       4B9A916BDEC5E4ABF634D5E8C2E24E28B81A18EE
Authority key identifier: 79:7F:09:A2:D6:DB:76:2E:DD:E0:61:77:F9:BA:E3:18:12:98:4A:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797F09A2D6DB762EDDE06177F9BAE31812984A51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136322e302f32332d3233203d3e20323635393433.roa
Signing time:             Mon 01 Sep 2025 15:18:35 +0000
ROA not before:           Mon 01 Sep 2025 15:13:35 +0000
ROA not after:            Mon 31 Aug 2026 15:18:35 +0000
asID:                     265943
IP address blocks:        131.196.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/797F09A2D6DB762EDDE06177F9BAE31812984A51.crl
                          rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/797F09A2D6DB762EDDE06177F9BAE31812984A51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797F09A2D6DB762EDDE06177F9BAE31812984A51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 00:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:9a:91:6b:de:c5:e4:ab:f6:34:d5:e8:c2:e2:4e:28:b8:1a:18:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797F09A2D6DB762EDDE06177F9BAE31812984A51
        Validity
            Not Before: Sep  1 15:13:35 2025 GMT
            Not After : Aug 31 15:18:35 2026 GMT
        Subject: CN=B82505AF5FAC3CEE17C115EDD6DDC13341AF48FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:e3:73:bb:8d:6e:90:de:8e:14:21:97:94:
                    ba:c9:f9:52:fe:6d:d4:29:fd:d5:a8:c2:5c:64:92:
                    14:1b:bf:46:82:8e:da:f0:da:d1:68:43:56:92:69:
                    27:ff:29:f8:d2:bf:2a:1a:0b:cf:8c:80:00:a1:53:
                    e8:eb:3a:96:14:47:2f:39:4d:22:ec:8f:de:d6:76:
                    0d:76:f1:fa:da:c3:4f:91:7a:00:c8:38:65:02:92:
                    ef:d8:74:39:16:fa:9e:09:6e:6a:d4:5d:9e:6a:9c:
                    ff:0b:ab:aa:88:92:c9:75:5b:84:fe:f2:aa:3a:fa:
                    60:79:dd:50:d2:cb:d1:19:81:19:f0:f5:c3:51:d7:
                    fc:b5:b8:16:f1:b7:12:5d:3a:93:53:a7:c1:4f:ea:
                    a7:f1:ae:16:12:c5:0a:0c:f5:48:2d:c6:d4:1b:2e:
                    80:c6:de:3f:4b:4b:4d:cf:33:e1:d5:42:4b:c7:0c:
                    b6:ee:64:b2:90:c3:58:1f:fa:ee:b5:8e:ab:ad:23:
                    a8:40:c4:21:59:5e:d3:49:70:ec:d2:43:e9:8b:36:
                    83:ae:7f:ca:6a:80:c9:2e:60:1e:3f:e2:da:7c:21:
                    71:58:4b:6d:21:26:7d:c9:e2:7b:78:63:5c:56:89:
                    99:3a:b8:1c:7a:95:e8:a1:5c:be:97:d7:fd:58:56:
                    29:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:25:05:AF:5F:AC:3C:EE:17:C1:15:ED:D6:DD:C1:33:41:AF:48:FB
            X509v3 Authority Key Identifier:
                keyid:79:7F:09:A2:D6:DB:76:2E:DD:E0:61:77:F9:BA:E3:18:12:98:4A:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/797F09A2D6DB762EDDE06177F9BAE31812984A51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797F09A2D6DB762EDDE06177F9BAE31812984A51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136322e302f32332d3233203d3e20323635393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:bb:58:9f:c5:87:80:11:ca:83:88:11:42:88:76:a5:45:ca:
         86:60:4b:9c:d2:45:34:2f:0e:2e:61:0f:8c:8c:49:1c:7f:4c:
         b9:6c:28:7d:c8:86:01:62:26:d3:3a:f4:80:6d:92:1c:3b:4e:
         18:da:f1:f3:fe:3b:4b:c3:fc:fb:d3:30:88:c1:7a:83:34:0f:
         e8:17:72:92:c7:dd:15:60:ea:8a:20:12:5e:12:48:71:fd:d4:
         21:a8:04:84:00:c8:28:12:dc:79:9a:c8:03:22:e0:59:cb:50:
         32:b6:ab:2b:2d:2a:f4:f1:3b:aa:cb:b6:a4:a4:e6:fc:c6:59:
         e2:19:77:53:6a:7b:e8:98:f6:64:f5:33:5f:79:98:f6:77:b1:
         07:84:fd:a1:6d:0f:13:6d:d1:4b:0e:16:24:cc:b2:ec:17:9b:
         3a:df:48:00:cb:61:f9:96:a7:cf:83:2e:02:bc:b6:19:b7:7a:
         b7:24:d4:07:e7:9a:bc:26:72:9b:ae:79:c4:ca:27:ca:19:1d:
         cd:0f:d9:de:ff:a2:f9:20:74:04:8a:b4:09:24:a6:13:3d:75:
         9a:48:c0:4e:06:72:d0:b2:b1:92:71:cd:b8:44:64:db:5a:4a:
         b6:9f:ca:25:05:74:3a:17:be:16:01:78:9e:5a:21:7d:a9:ec:
         73:8f:df:da
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUS5qRa97F5Kv2NNXowuJOKLgaGO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk3RjA5QTJENkRCNzYyRURERTA2MTc3RjlCQUUzMTgx
Mjk4NEE1MTAeFw0yNTA5MDExNTEzMzVaFw0yNjA4MzExNTE4MzVaMDMxMTAvBgNV
BAMTKEI4MjUwNUFGNUZBQzNDRUUxN0MxMTVFREQ2RERDMTMzNDFBRjQ4RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCknONzu41ukN6OFCGXlLrJ+VL+
bdQp/dWowlxkkhQbv0aCjtrw2tFoQ1aSaSf/KfjSvyoaC8+MgAChU+jrOpYURy85
TSLsj97Wdg128fraw0+RegDIOGUCku/YdDkW+p4JbmrUXZ5qnP8Lq6qIksl1W4T+
8qo6+mB53VDSy9EZgRnw9cNR1/y1uBbxtxJdOpNTp8FP6qfxrhYSxQoM9UgtxtQb
LoDG3j9LS03PM+HVQkvHDLbuZLKQw1gf+u61jqutI6hAxCFZXtNJcOzSQ+mLNoOu
f8pqgMkuYB4/4tp8IXFYS20hJn3J4nt4Y1xWiZk6uBx6leihXL6X1/1YVimJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUuCUFr1+sPO4XwRXt1t3BM0GvSPswHwYDVR0j
BBgwFoAUeX8Jotbbdi7d4GF3+brjGBKYSlEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1EydFUzOTZESFFlTGVlYlBZNVM3eFY2eUhZV3BaOFJyYjRHZE54aFZQ
ejQvMC83OTdGMDlBMkQ2REI3NjJFRERFMDYxNzdGOUJBRTMxODEyOTg0QTUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5N0YwOUEyRDZEQjc2MkVE
REUwNjE3N0Y5QkFFMzE4MTI5ODRBNTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dRMnRVMzk2REhRZUxlZWJQWTVTN3hWNnlIWVdwWjhScmI0R2ROeGhWUHo0LzAv
MzEzMzMxMmUzMTM5MzYyZTMxMzYzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTM5MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYPEojANBgkqhkiG9w0BAQsFAAOCAQEAPbtY
n8WHgBHKg4gRQoh2pUXKhmBLnNJFNC8OLmEPjIxJHH9MuWwofciGAWIm0zr0gG2S
HDtOGNrx8/47S8P8+9MwiMF6gzQP6BdyksfdFWDqiiASXhJIcf3UIagEhADIKBLc
eZrIAyLgWctQMrarKy0q9PE7qsu2pKTm/MZZ4hl3U2p76Jj2ZPUzX3mY9nexB4T9
oW0PE23RSw4WJMyy7BebOt9IAMth+Zanz4MuAry2Gbd6tyTUB+eavCZym655xMon
yhkdzQ/Z3v+i+SB0BIq0CSSmEz11mkjATgZy0LKxknHNuERk21pKtp/KJQV0Ohe+
FgF4nlohfansc4/f2g==
-----END CERTIFICATE-----
Generated at Thu Sep 18 07:33:44 2025 by rpki-client