Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3133312e3232312e35392e302f32342d3234203d3e20323632373635.roa
File:                     3133312e3232312e35392e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          9pk1l9hITkJdMbATd3z6p76AEHP/Io4oF6GFc4LTN/A=
Subject key identifier:   C1:27:5D:B4:0C:1F:82:97:26:4E:60:67:3B:F7:38:4B:D3:10:07:80
Certificate issuer:       /CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
Certificate serial:       47BD95C152A0DD04D258AF39EC987E9F3F024E4D
Authority key identifier: 77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3133312e3232312e35392e302f32342d3234203d3e20323632373635.roa
Signing time:             Wed 22 Oct 2025 20:48:27 +0000
ROA not before:           Wed 22 Oct 2025 20:43:27 +0000
ROA not after:            Wed 21 Oct 2026 20:48:27 +0000
asID:                     262765
IP address blocks:        131.221.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bd:95:c1:52:a0:dd:04:d2:58:af:39:ec:98:7e:9f:3f:02:4e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
        Validity
            Not Before: Oct 22 20:43:27 2025 GMT
            Not After : Oct 21 20:48:27 2026 GMT
        Subject: CN=C1275DB40C1F8297264E60673BF7384BD3100780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ec:c8:29:ac:43:65:34:f9:e5:a6:08:7c:3d:
                    b1:31:5b:45:60:be:bc:43:63:ee:25:55:89:af:c0:
                    65:78:06:7b:87:3c:0f:fe:ca:c9:11:3d:b1:70:56:
                    c9:07:7d:e4:b8:37:2f:1f:a5:0e:ad:71:4b:9a:cd:
                    6d:05:95:78:51:de:80:7a:f1:cf:73:b9:d8:b0:7a:
                    85:ad:08:9b:34:9d:37:73:67:b8:4e:bd:d5:e9:fe:
                    2a:34:e3:2e:9d:ce:6d:e4:0d:3b:b5:fe:61:c8:c8:
                    43:4a:bd:4f:f6:44:f9:a2:06:ca:51:c9:7e:4e:1b:
                    d4:78:2b:bd:66:ff:3b:8b:af:9a:b3:61:89:1d:38:
                    26:ad:15:b0:22:e9:d1:37:40:ea:c6:8c:66:ae:ae:
                    4d:0b:0f:cf:2a:cc:a0:dd:cb:5b:f6:54:c7:4e:4a:
                    ac:1e:2b:95:8e:54:9a:3c:94:4f:cf:63:0c:6f:96:
                    3c:9c:23:96:18:81:24:06:43:3d:1c:41:4a:ea:e7:
                    ee:85:50:48:cc:03:61:67:df:dd:f1:29:4d:4b:2b:
                    dd:e5:4d:5d:6a:f9:1b:86:c1:fc:48:d6:90:f0:97:
                    97:cb:42:f9:90:68:93:ce:2a:16:22:d5:08:75:64:
                    ae:73:2a:f1:e0:fb:10:01:26:42:2f:47:ee:ab:af:
                    a2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:27:5D:B4:0C:1F:82:97:26:4E:60:67:3B:F7:38:4B:D3:10:07:80
            X509v3 Authority Key Identifier:
                keyid:77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3133312e3232312e35392e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:0a:bc:87:69:dd:6b:f2:83:19:7f:54:86:e4:27:ae:51:e8:
         75:f5:f0:92:81:f9:69:a5:78:d8:95:aa:82:fd:8a:f8:be:a5:
         00:2d:9b:86:d9:b4:a9:e1:50:b9:ca:32:74:ef:ba:ba:a2:24:
         b7:2b:c9:95:e7:64:67:c7:52:02:55:81:34:eb:d9:2e:75:e6:
         2d:95:88:c2:b5:64:95:95:80:f0:f4:70:28:79:5a:97:25:a2:
         03:f9:01:52:76:78:1a:95:f7:1e:f1:52:71:99:58:f0:53:cd:
         25:42:19:21:0f:e5:6c:59:b6:f4:b3:07:1f:7b:ea:5a:37:df:
         72:e9:b9:bb:f4:ea:77:49:ab:9f:34:61:a2:5f:ce:df:30:63:
         fc:72:98:7f:bc:22:6b:93:d7:a4:15:a8:54:1c:28:ac:fd:bd:
         1d:93:a8:71:a8:11:19:6c:be:e3:38:fe:87:bb:45:44:2b:16:
         47:0d:d1:3c:db:76:78:da:39:47:17:08:3d:4d:a9:a7:f0:9d:
         9e:65:95:a2:aa:37:98:25:0e:a4:dc:84:df:30:c0:0e:fa:d9:
         70:c8:43:31:e7:21:5f:c5:3a:f5:a4:0b:48:45:09:68:1d:f9:
         90:2f:a0:fa:13:a6:53:36:fc:ac:65:b8:cb:f3:71:0a:c9:43:
         ba:9b:b0:ab
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUR72VwVKg3QTSWK857Jh+nz8CTk0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcxNjlDQUMzMUI0OUQ0ODBDRjEwRTU3MTlDQzNDN0I1
N0ZFN0JBMDAeFw0yNTEwMjIyMDQzMjdaFw0yNjEwMjEyMDQ4MjdaMDMxMTAvBgNV
BAMTKEMxMjc1REI0MEMxRjgyOTcyNjRFNjA2NzNCRjczODRCRDMxMDA3ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm7MgprENlNPnlpgh8PbExW0Vg
vrxDY+4lVYmvwGV4BnuHPA/+yskRPbFwVskHfeS4Ny8fpQ6tcUuazW0FlXhR3oB6
8c9zudiweoWtCJs0nTdzZ7hOvdXp/io04y6dzm3kDTu1/mHIyENKvU/2RPmiBspR
yX5OG9R4K71m/zuLr5qzYYkdOCatFbAi6dE3QOrGjGaurk0LD88qzKDdy1v2VMdO
SqweK5WOVJo8lE/PYwxvljycI5YYgSQGQz0cQUrq5+6FUEjMA2Fn393xKU1LK93l
TV1q+RuGwfxI1pDwl5fLQvmQaJPOKhYi1Qh1ZK5zKvHg+xABJkIvR+6rr6KZAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUwSddtAwfgpcmTmBnO/c4S9MQB4AwHwYDVR0j
BBgwFoAUdxacrDG0nUgM8Q5XGcw8e1f+e6AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY
LzIvNzcxNjlDQUMzMUI0OUQ0ODBDRjEwRTU3MTlDQzNDN0I1N0ZFN0JBMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83NzE2OUNBQzMxQjQ5RDQ4MENG
MTBFNTcxOUNDM0M3QjU3RkU3QkEwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q
cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzIvMzEz
MzMxMmUzMjMyMzEyZTM1MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIz
NzM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACD3TswDQYJKoZIhvcNAQELBQADggEBAHgKvIdp3Wvy
gxl/VIbkJ65R6HX18JKB+WmleNiVqoL9ivi+pQAtm4bZtKnhULnKMnTvurqiJLcr
yZXnZGfHUgJVgTTr2S515i2ViMK1ZJWVgPD0cCh5WpclogP5AVJ2eBqV9x7xUnGZ
WPBTzSVCGSEP5WxZtvSzBx976lo333Lpubv06ndJq580YaJfzt8wY/xymH+8ImuT
16QVqFQcKKz9vR2TqHGoERlsvuM4/oe7RUQrFkcN0TzbdnjaOUcXCD1NqafwnZ5l
laKqN5glDqTchN8wwA762XDIQzHnIV/FOvWkC0hFCWgd+ZAvoPoTplM2/KxluMvz
cQrJQ7qbsKs=
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:48 2025 by rpki-client