Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/0/3137302e38342e342e302f32322d3234203d3e20323731303339.roa
File:                     3137302e38342e342e302f32322d3234203d3e20323731303339.roa (raw, json)
Hash identifier:          5tsMx80mIgzJRCCvpuyBIimpcTZsjrhBKbnbfPOIt64=
Subject key identifier:   04:DA:51:EA:B0:58:82:36:5A:8C:93:98:82:7C:02:2B:55:CF:4A:13
Certificate issuer:       /CN=E69C1938DC4591E0E1BCE579B636403418A33A42
Certificate serial:       4F0C3B5D3C84D762FB78521D8745899DA46907CD
Authority key identifier: E6:9C:19:38:DC:45:91:E0:E1:BC:E5:79:B6:36:40:34:18:A3:3A:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69C1938DC4591E0E1BCE579B636403418A33A42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/0/3137302e38342e342e302f32322d3234203d3e20323731303339.roa
Signing time:             Tue 21 Oct 2025 16:34:37 +0000
ROA not before:           Tue 21 Oct 2025 16:29:37 +0000
ROA not after:            Tue 20 Oct 2026 16:34:37 +0000
asID:                     271039
IP address blocks:        170.84.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/0/E69C1938DC4591E0E1BCE579B636403418A33A42.crl
                          rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/0/E69C1938DC4591E0E1BCE579B636403418A33A42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69C1938DC4591E0E1BCE579B636403418A33A42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0c:3b:5d:3c:84:d7:62:fb:78:52:1d:87:45:89:9d:a4:69:07:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E69C1938DC4591E0E1BCE579B636403418A33A42
        Validity
            Not Before: Oct 21 16:29:37 2025 GMT
            Not After : Oct 20 16:34:37 2026 GMT
        Subject: CN=04DA51EAB05882365A8C9398827C022B55CF4A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fc:9f:29:78:08:3e:8f:59:1a:c1:ce:24:aa:
                    59:99:ea:f5:e8:c3:eb:4f:e5:ef:b5:aa:27:b5:8d:
                    af:e2:4e:f2:1d:cf:38:a6:de:77:c1:73:14:e7:bc:
                    84:4e:50:6c:5b:e9:eb:48:0a:8e:4b:36:4a:a7:ad:
                    5e:61:30:70:c3:94:aa:cc:bb:8e:a4:43:5f:f0:a4:
                    9c:7d:ab:e6:ac:97:40:62:1c:15:00:a1:7a:e0:61:
                    76:94:fe:1a:d9:99:b4:1a:32:44:1e:d2:cc:22:5d:
                    27:2b:5b:84:a4:97:dd:13:b5:9e:17:de:f0:b7:50:
                    e3:6f:32:56:2d:22:11:3e:0e:1e:67:69:b5:55:86:
                    ac:9a:40:b5:c4:95:c8:35:41:8f:10:62:5e:e0:7d:
                    67:f5:09:c0:cf:6f:17:ee:84:e9:41:69:60:ab:02:
                    91:ff:27:49:b0:11:57:f4:87:11:93:28:1a:0c:b7:
                    a7:42:a4:e8:21:31:0d:04:d9:8a:46:11:35:b9:6a:
                    fb:46:a3:0f:45:c4:53:b3:fb:e5:ee:b2:6f:03:ad:
                    81:18:d0:9d:9d:62:90:7f:2a:89:21:a3:a7:1b:4b:
                    d6:d3:19:3b:7c:2a:a8:74:92:ab:35:2e:37:d7:fd:
                    f9:22:8b:c0:3c:4a:9b:a9:a8:e2:e9:0b:4d:56:97:
                    43:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DA:51:EA:B0:58:82:36:5A:8C:93:98:82:7C:02:2B:55:CF:4A:13
            X509v3 Authority Key Identifier:
                keyid:E6:9C:19:38:DC:45:91:E0:E1:BC:E5:79:B6:36:40:34:18:A3:3A:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/0/E69C1938DC4591E0E1BCE579B636403418A33A42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69C1938DC4591E0E1BCE579B636403418A33A42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/0/3137302e38342e342e302f32322d3234203d3e20323731303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:69:6e:0d:05:e1:72:5e:57:f3:7c:c5:ab:44:55:ae:d8:94:
         78:e0:b1:ef:95:26:b4:e3:3a:8d:7e:03:85:69:21:47:96:4f:
         39:4a:67:e9:8f:36:47:1e:73:66:85:99:0a:6e:79:a3:c2:d6:
         ff:84:76:27:e8:f7:f0:44:43:90:02:a5:33:29:83:fb:66:ec:
         ce:ca:e8:a1:99:c9:25:76:3f:14:23:a8:c9:be:36:04:19:e2:
         63:62:8b:0a:c7:d6:bc:f8:27:19:12:d2:f0:af:d3:b2:2f:2d:
         ba:85:ed:fb:62:ba:4c:66:c6:81:00:7b:fa:1c:b2:73:a1:cc:
         df:12:c7:e2:27:66:84:ea:6e:3d:7b:56:2f:b9:08:0e:9d:d0:
         38:bd:54:45:b2:cd:79:93:91:54:ac:9a:18:77:3b:60:0e:d0:
         e0:ac:70:64:c1:3d:d6:f8:15:ee:79:e6:ed:9d:e7:c7:2a:d2:
         35:07:30:f1:bd:a5:77:c4:20:c5:5d:9e:54:93:3a:d9:d0:69:
         03:71:be:ca:06:00:e5:b6:a1:15:e5:61:38:2a:46:c9:13:91:
         c2:b1:5f:36:f4:c6:2a:14:f6:ee:11:5e:32:6d:97:14:84:a4:
         3d:93:6d:7e:4e:67:a1:3c:bc:3e:6f:66:87:01:eb:45:55:c7:
         78:48:5f:ab
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUTww7XTyE12L7eFIdh0WJnaRpB80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY5QzE5MzhEQzQ1OTFFMEUxQkNFNTc5QjYzNjQwMzQx
OEEzM0E0MjAeFw0yNTEwMjExNjI5MzdaFw0yNjEwMjAxNjM0MzdaMDMxMTAvBgNV
BAMTKDA0REE1MUVBQjA1ODgyMzY1QThDOTM5ODgyN0MwMjJCNTVDRjRBMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd/J8peAg+j1kawc4kqlmZ6vXo
w+tP5e+1qie1ja/iTvIdzzim3nfBcxTnvIROUGxb6etICo5LNkqnrV5hMHDDlKrM
u46kQ1/wpJx9q+asl0BiHBUAoXrgYXaU/hrZmbQaMkQe0swiXScrW4Skl90TtZ4X
3vC3UONvMlYtIhE+Dh5nabVVhqyaQLXElcg1QY8QYl7gfWf1CcDPbxfuhOlBaWCr
ApH/J0mwEVf0hxGTKBoMt6dCpOghMQ0E2YpGETW5avtGow9FxFOz++Xusm8DrYEY
0J2dYpB/Kokho6cbS9bTGTt8Kqh0kqs1LjfX/fkii8A8SpupqOLpC01Wl0MVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUBNpR6rBYgjZajJOYgnwCK1XPShMwHwYDVR0j
BBgwFoAU5pwZONxFkeDhvOV5tjZANBijOkIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3FDaVp5VEZqcm5oeXVZRWZjRXpVOFNTZGc1cGtNeENoSzRLTHRRUXNi
QjIvMC9FNjlDMTkzOERDNDU5MUUwRTFCQ0U1NzlCNjM2NDAzNDE4QTMzQTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2OUMxOTM4REM0NTkxRTBF
MUJDRTU3OUI2MzY0MDM0MThBMzNBNDIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dxQ2laeVRGanJuaHl1WUVmY0V6VThTU2RnNXBrTXhDaEs0S0x0UVFzYkIyLzAv
MzEzNzMwMmUzODM0MmUzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczMTMw
MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqpUBDANBgkqhkiG9w0BAQsFAAOCAQEAUGluDQXhcl5X
83zFq0RVrtiUeOCx75UmtOM6jX4DhWkhR5ZPOUpn6Y82Rx5zZoWZCm55o8LW/4R2
J+j38ERDkAKlMymD+2bszsrooZnJJXY/FCOoyb42BBniY2KLCsfWvPgnGRLS8K/T
si8tuoXt+2K6TGbGgQB7+hyyc6HM3xLH4idmhOpuPXtWL7kIDp3QOL1URbLNeZOR
VKyaGHc7YA7Q4KxwZME91vgV7nnm7Z3nxyrSNQcw8b2ld8QgxV2eVJM62dBpA3G+
ygYA5bahFeVhOCpGyRORwrFfNvTGKhT27hFeMm2XFISkPZNtfk5noTy8Pm9mhwHr
RVXHeEhfqw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:57:40 2025 by rpki-client