Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/3137302e3235342e3231322e302f32322d3332203d3e20323731363930.roa
File:                     3137302e3235342e3231322e302f32322d3332203d3e20323731363930.roa (raw, json)
Hash identifier:          7FOAkQXkciXj4Pu1lTIf8oXl3wN0ce1jlUVzL3y3Z5M=
Subject key identifier:   4B:CF:64:DC:8E:52:8D:26:ED:E8:9A:17:92:7E:51:37:48:D1:54:80
Certificate issuer:       /CN=0C312F040028B1AFC1D20FE38B48BF2626D0250B
Certificate serial:       12C8405F6638FFB2EC14E9B9A246B2302F27581D
Authority key identifier: 0C:31:2F:04:00:28:B1:AF:C1:D2:0F:E3:8B:48:BF:26:26:D0:25:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C312F040028B1AFC1D20FE38B48BF2626D0250B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/3137302e3235342e3231322e302f32322d3332203d3e20323731363930.roa
Signing time:             Wed 22 Oct 2025 23:39:14 +0000
ROA not before:           Wed 22 Oct 2025 23:34:14 +0000
ROA not after:            Wed 21 Oct 2026 23:39:14 +0000
asID:                     271690
IP address blocks:        170.254.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/0C312F040028B1AFC1D20FE38B48BF2626D0250B.crl
                          rsync://rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/0C312F040028B1AFC1D20FE38B48BF2626D0250B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C312F040028B1AFC1D20FE38B48BF2626D0250B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 08:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c8:40:5f:66:38:ff:b2:ec:14:e9:b9:a2:46:b2:30:2f:27:58:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C312F040028B1AFC1D20FE38B48BF2626D0250B
        Validity
            Not Before: Oct 22 23:34:14 2025 GMT
            Not After : Oct 21 23:39:14 2026 GMT
        Subject: CN=4BCF64DC8E528D26EDE89A17927E513748D15480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ad:c9:e0:58:43:a8:b6:64:92:13:1b:ac:b2:
                    b1:2f:a7:b6:a9:36:8e:ac:cd:ff:25:f7:04:de:d2:
                    09:88:a0:ab:d3:f1:09:79:18:af:b2:72:5e:0f:ea:
                    7b:2e:b2:c9:cc:a4:15:2a:0e:40:36:13:eb:82:42:
                    aa:3a:64:d1:1d:78:2c:2d:cc:5c:ac:6d:bf:3d:b9:
                    68:97:fe:27:a4:70:c3:6c:31:8e:18:53:ef:a8:b3:
                    96:cb:cf:2a:2d:ea:b5:d3:a3:b2:48:6d:58:83:97:
                    1b:b6:83:40:a4:d7:f3:72:53:62:1a:f9:f8:94:66:
                    d8:1d:6a:4d:fb:6d:4a:08:54:03:63:02:7c:e6:13:
                    7f:23:3b:b6:76:f4:c6:bb:3a:4a:0d:da:b9:68:ba:
                    7d:80:31:97:b4:ba:02:fa:e5:fc:9a:15:07:38:67:
                    dd:81:98:c9:0d:e6:5a:42:e7:8a:24:ab:85:f1:72:
                    50:ad:4a:56:c9:79:e4:22:23:1f:9f:5f:88:2a:fe:
                    6b:a8:7b:6c:bf:85:e9:6f:5f:5a:d9:64:f8:5e:89:
                    92:e5:af:04:a8:46:44:5f:32:6c:e1:e3:88:b5:95:
                    dc:3e:42:e4:2c:49:e5:23:0e:96:7c:f7:9c:fb:62:
                    9b:3c:19:48:3e:03:e6:07:e1:d9:6c:c6:b5:42:e0:
                    f5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CF:64:DC:8E:52:8D:26:ED:E8:9A:17:92:7E:51:37:48:D1:54:80
            X509v3 Authority Key Identifier:
                keyid:0C:31:2F:04:00:28:B1:AF:C1:D2:0F:E3:8B:48:BF:26:26:D0:25:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/0C312F040028B1AFC1D20FE38B48BF2626D0250B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C312F040028B1AFC1D20FE38B48BF2626D0250B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4nbx9LwSyxMajjeL8VuyF5ZqTijJZV1nAZqyXnDdmjA/0/3137302e3235342e3231322e302f32322d3332203d3e20323731363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:0e:0e:67:c4:1d:d6:a4:bd:5b:37:1b:79:f0:ff:8e:a6:81:
         2c:0b:7d:20:ca:a0:57:ac:9b:7c:66:31:97:2b:ff:ba:e1:ec:
         c2:9b:56:de:e6:68:90:2b:16:ef:86:1c:5d:61:90:cf:30:d9:
         e8:66:67:20:d9:6a:08:d8:57:ff:60:c3:c4:65:17:42:50:58:
         65:98:14:fc:cc:31:51:bc:59:ba:5c:fc:8b:44:17:2f:f4:31:
         f5:f7:6c:b6:56:b4:bc:58:7c:27:03:2d:01:29:20:47:dd:b5:
         ec:f0:b3:4c:80:cf:c4:f9:f9:9f:59:d0:56:46:be:3f:51:3b:
         6b:a5:ff:6a:ba:ee:57:db:d2:0d:b1:6e:15:c1:9b:7b:69:f3:
         71:9e:b2:e2:00:e4:cc:23:89:00:8f:9e:dd:4a:42:93:8e:11:
         87:60:3c:db:61:7d:02:84:21:1b:ef:a3:31:5c:80:99:0f:17:
         c7:7e:f5:51:3f:d4:8d:6e:37:d6:0f:d2:ff:3c:c8:ce:ec:e8:
         fb:e2:75:65:63:fb:af:1d:81:01:36:42:56:8a:1a:14:e8:82:
         4e:bd:aa:bd:cb:08:42:6f:2d:be:b9:5a:60:26:75:c8:66:26:
         22:91:56:0c:76:e7:95:33:bf:78:3f:51:0c:22:82:70:ee:22:
         f9:bb:42:74
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEshAX2Y4/7LsFOm5okayMC8nWB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMzMTJGMDQwMDI4QjFBRkMxRDIwRkUzOEI0OEJGMjYy
NkQwMjUwQjAeFw0yNTEwMjIyMzM0MTRaFw0yNjEwMjEyMzM5MTRaMDMxMTAvBgNV
BAMTKDRCQ0Y2NERDOEU1MjhEMjZFREU4OUExNzkyN0U1MTM3NDhEMTU0ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVrcngWEOotmSSExussrEvp7ap
No6szf8l9wTe0gmIoKvT8Ql5GK+ycl4P6nsussnMpBUqDkA2E+uCQqo6ZNEdeCwt
zFysbb89uWiX/iekcMNsMY4YU++os5bLzyot6rXTo7JIbViDlxu2g0Ck1/NyU2Ia
+fiUZtgdak37bUoIVANjAnzmE38jO7Z29Ma7OkoN2rloun2AMZe0ugL65fyaFQc4
Z92BmMkN5lpC54okq4XxclCtSlbJeeQiIx+fX4gq/muoe2y/helvX1rZZPheiZLl
rwSoRkRfMmzh44i1ldw+QuQsSeUjDpZ895z7Yps8GUg+A+YH4dlsxrVC4PX9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUS89k3I5SjSbt6JoXkn5RN0jRVIAwHwYDVR0j
BBgwFoAUDDEvBAAosa/B0g/ji0i/JibQJQswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjRuYng5THdTeXhNYWpqZUw4VnV5RjVacVRpakpaVjFuQVpxeVhuRGRt
akEvMC8wQzMxMkYwNDAwMjhCMUFGQzFEMjBGRTM4QjQ4QkYyNjI2RDAyNTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDMzEyRjA0MDAyOEIxQUZD
MUQyMEZFMzhCNDhCRjI2MjZEMDI1MEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o0bmJ4OUx3U3l4TWFqamVMOFZ1eUY1WnFUaWpKWlYxbkFacXlYbkRkbWpBLzAv
MzEzNzMwMmUzMjM1MzQyZTMyMzEzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzczMTM2MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr+1DANBgkqhkiG9w0BAQsFAAOCAQEAPQ4O
Z8Qd1qS9WzcbefD/jqaBLAt9IMqgV6ybfGYxlyv/uuHswptW3uZokCsW74YcXWGQ
zzDZ6GZnINlqCNhX/2DDxGUXQlBYZZgU/MwxUbxZulz8i0QXL/Qx9fdstla0vFh8
JwMtASkgR9217PCzTIDPxPn5n1nQVka+P1E7a6X/arruV9vSDbFuFcGbe2nzcZ6y
4gDkzCOJAI+e3UpCk44Rh2A822F9AoQhG++jMVyAmQ8Xx371UT/UjW431g/S/zzI
zuzo++J1ZWP7rx2BATZCVooaFOiCTr2qvcsIQm8tvrlaYCZ1yGYmIpFWDHbnlTO/
eD9RDCKCcO4i+btCdA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:28:22 2025 by rpki-client