Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/3137302e3234352e36382e302f32322d3332203d3e20323634323535.roa
File:                     3137302e3234352e36382e302f32322d3332203d3e20323634323535.roa (raw, json)
Hash identifier:          b85VVprr7MM6aBLoI4nkHjGbTLxDjDhxUTjfT0BdTnQ=
Subject key identifier:   F5:EE:B4:A3:0B:DD:75:3F:4B:72:C8:41:66:5C:1F:03:95:59:AB:61
Certificate issuer:       /CN=DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47
Certificate serial:       232669E842CAB2EAE7F8D2572F362654622BCAC6
Authority key identifier: DE:DA:C8:0F:3C:5C:D2:67:DD:9C:CC:70:5E:AE:A7:F5:11:88:2C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/3137302e3234352e36382e302f32322d3332203d3e20323634323535.roa
Signing time:             Mon 27 Oct 2025 19:45:14 +0000
ROA not before:           Mon 27 Oct 2025 19:40:14 +0000
ROA not after:            Mon 26 Oct 2026 19:45:14 +0000
asID:                     264255
IP address blocks:        170.245.68.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.crl
                          rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 17:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:26:69:e8:42:ca:b2:ea:e7:f8:d2:57:2f:36:26:54:62:2b:ca:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47
        Validity
            Not Before: Oct 27 19:40:14 2025 GMT
            Not After : Oct 26 19:45:14 2026 GMT
        Subject: CN=F5EEB4A30BDD753F4B72C841665C1F039559AB61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:38:b7:d5:69:79:f1:45:fc:0c:85:c5:73:84:
                    5a:39:49:37:3a:ec:88:6f:87:8d:4b:1f:85:c9:db:
                    5e:cf:48:14:9c:8a:72:48:4f:d4:96:8d:7d:f5:f6:
                    6e:a0:bc:f5:ee:48:25:43:92:02:22:f0:7c:7d:5b:
                    ae:75:56:e1:bf:c7:09:11:b9:3f:df:b6:ef:f1:24:
                    c8:53:4c:28:d2:aa:4a:52:8e:a6:e0:21:0a:c5:80:
                    ab:71:21:62:bb:61:b5:c2:f6:45:16:8e:47:5e:e9:
                    fa:96:d4:20:fd:d9:0d:df:40:3f:f5:9e:cf:0e:9a:
                    69:86:44:6c:e0:f3:03:74:db:27:e8:cd:e0:72:7e:
                    ea:0f:bd:41:86:8b:9c:0f:26:ba:92:e7:69:20:80:
                    25:7e:3c:33:28:94:29:09:d3:7c:e8:4d:e0:70:60:
                    d4:85:a5:be:ba:f9:4e:6d:cd:cd:37:36:7b:bc:8a:
                    95:eb:45:a5:36:ab:9e:38:fd:ea:4a:7c:c4:f1:e9:
                    8d:16:67:9f:15:30:14:ea:c4:08:f3:85:3b:58:5b:
                    22:3b:42:d5:d2:b6:8d:36:ca:9d:d6:63:7c:86:29:
                    2a:e4:1a:1c:b2:9e:70:1e:cd:cb:66:98:3d:9a:03:
                    d9:84:e0:8b:0b:2c:b5:9d:d0:9f:42:57:0e:22:a3:
                    13:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EE:B4:A3:0B:DD:75:3F:4B:72:C8:41:66:5C:1F:03:95:59:AB:61
            X509v3 Authority Key Identifier:
                keyid:DE:DA:C8:0F:3C:5C:D2:67:DD:9C:CC:70:5E:AE:A7:F5:11:88:2C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/3137302e3234352e36382e302f32322d3332203d3e20323634323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:6d:f8:db:89:e9:85:06:17:7f:62:de:90:12:6d:d9:49:c5:
         bc:a6:86:ee:92:75:e8:50:08:db:56:15:9a:f1:32:7c:1e:a3:
         ed:40:05:b8:b4:63:03:b1:18:3c:c7:af:76:9a:e9:52:72:e9:
         13:04:a1:a4:62:51:66:96:ae:97:33:0f:2c:1f:ec:d5:91:82:
         6a:fa:2f:c9:3b:72:cb:c5:b8:b7:4a:33:63:fa:5b:40:b8:20:
         60:59:0f:28:4a:e2:00:b5:c3:0e:99:fb:84:a6:5b:aa:5d:e5:
         67:0e:be:61:29:8e:22:12:9f:42:29:24:00:d2:12:06:4e:c4:
         5a:3d:96:98:1d:e4:88:fb:58:b8:b2:32:a0:e9:be:01:8c:81:
         07:69:a6:02:07:59:8d:56:36:e7:cb:cd:0b:c5:c5:7c:cc:e4:
         a8:c5:c9:d7:65:96:39:16:62:52:06:65:96:8d:bc:8e:6b:f5:
         df:8d:4d:27:cc:c3:10:ea:4d:59:9d:64:e3:31:7d:42:9d:5b:
         be:63:0d:9c:14:55:bd:cc:a8:c6:7e:bd:8d:eb:ee:50:5d:34:
         e7:63:fa:02:0f:0d:8a:f9:41:d2:00:a1:f4:7d:7f:26:4b:93:
         d0:0c:64:34:99:ae:09:42:d3:57:74:1c:bc:f7:58:25:e0:76:
         22:4f:bb:77
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIyZp6ELKsurn+NJXLzYmVGIrysYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEQUM4MEYzQzVDRDI2N0REOUNDQzcwNUVBRUE3RjUx
MTg4MkM0NzAeFw0yNTEwMjcxOTQwMTRaFw0yNjEwMjYxOTQ1MTRaMDMxMTAvBgNV
BAMTKEY1RUVCNEEzMEJERDc1M0Y0QjcyQzg0MTY2NUMxRjAzOTU1OUFCNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtOLfVaXnxRfwMhcVzhFo5STc6
7Ihvh41LH4XJ217PSBScinJIT9SWjX319m6gvPXuSCVDkgIi8Hx9W651VuG/xwkR
uT/ftu/xJMhTTCjSqkpSjqbgIQrFgKtxIWK7YbXC9kUWjkde6fqW1CD92Q3fQD/1
ns8OmmmGRGzg8wN02yfozeByfuoPvUGGi5wPJrqS52kggCV+PDMolCkJ03zoTeBw
YNSFpb66+U5tzc03Nnu8ipXrRaU2q544/epKfMTx6Y0WZ58VMBTqxAjzhTtYWyI7
QtXSto02yp3WY3yGKSrkGhyynnAezctmmD2aA9mE4IsLLLWd0J9CVw4ioxP7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9e60owvddT9LcshBZlwfA5VZq2EwHwYDVR0j
BBgwFoAU3trIDzxc0mfdnMxwXq6n9RGILEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkVKWkhTYXBwcnVnbnkzdm52OUJjNFphdFJDZkZrU3k2SnM2OHlSb3VT
TkMvMC9ERURBQzgwRjNDNUNEMjY3REQ5Q0NDNzA1RUFFQTdGNTExODgyQzQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFREFDODBGM0M1Q0QyNjdE
RDlDQ0M3MDVFQUVBN0Y1MTE4ODJDNDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pFSlpIU2FwcHJ1Z255M3ZudjlCYzRaYXRSQ2ZGa1N5NkpzNjh5Um91U05DLzAv
MzEzNzMwMmUzMjM0MzUyZTM2MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzQzMjM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9UQwDQYJKoZIhvcNAQELBQADggEBABJt+NuJ
6YUGF39i3pASbdlJxbymhu6SdehQCNtWFZrxMnweo+1ABbi0YwOxGDzHr3aa6VJy
6RMEoaRiUWaWrpczDywf7NWRgmr6L8k7csvFuLdKM2P6W0C4IGBZDyhK4gC1ww6Z
+4SmW6pd5WcOvmEpjiISn0IpJADSEgZOxFo9lpgd5Ij7WLiyMqDpvgGMgQdppgIH
WY1WNufLzQvFxXzM5KjFyddlljkWYlIGZZaNvI5r9d+NTSfMwxDqTVmdZOMxfUKd
W75jDZwUVb3MqMZ+vY3r7lBdNOdj+gIPDYr5QdIAofR9fyZLk9AMZDSZrglC01d0
HLz3WCXgdiJPu3c=
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:42 2025 by rpki-client