Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3137392e36332e38342e302f32342d3234203d3e20323732363737.roa
File:                     3137392e36332e38342e302f32342d3234203d3e20323732363737.roa (raw, json)
Hash identifier:          ixY83XvDBYZiG6O6HGJ3j6UGLPruZNbqMrd4eBjD/Oc=
Subject key identifier:   98:D6:0A:3D:CE:15:15:11:6B:E5:12:BA:A8:FE:BB:92:A8:49:E8:ED
Certificate issuer:       /CN=3C20D4743A457C18DB0FEAEA3025E1CCD51A4793
Certificate serial:       1913A50E6CECB730A0BCEBD10633BDBC272E2DC6
Authority key identifier: 3C:20:D4:74:3A:45:7C:18:DB:0F:EA:EA:30:25:E1:CC:D5:1A:47:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3137392e36332e38342e302f32342d3234203d3e20323732363737.roa
Signing time:             Fri 26 Sep 2025 00:02:09 +0000
ROA not before:           Thu 25 Sep 2025 23:57:09 +0000
ROA not after:            Fri 25 Sep 2026 00:02:09 +0000
asID:                     272677
IP address blocks:        179.63.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.crl
                          rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 03:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:13:a5:0e:6c:ec:b7:30:a0:bc:eb:d1:06:33:bd:bc:27:2e:2d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C20D4743A457C18DB0FEAEA3025E1CCD51A4793
        Validity
            Not Before: Sep 25 23:57:09 2025 GMT
            Not After : Sep 25 00:02:09 2026 GMT
        Subject: CN=98D60A3DCE1515116BE512BAA8FEBB92A849E8ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2d:ea:32:ea:40:e5:8e:7a:d4:b5:25:96:15:
                    42:fc:b2:e6:7d:02:1f:9a:6a:05:aa:07:c1:fa:73:
                    97:a2:de:37:7e:8b:b7:17:26:8e:02:d7:a2:42:76:
                    7e:41:27:63:44:3c:3a:9d:56:b5:fd:73:02:ae:2b:
                    02:8d:ea:b7:e0:dc:b7:a8:02:bd:cf:35:9a:29:bf:
                    1a:a4:d1:c8:82:0b:dc:76:16:8b:c8:6a:79:c5:7c:
                    33:20:90:bd:6a:21:e2:13:5f:fb:5a:58:08:35:aa:
                    08:d1:4f:60:e2:3a:49:e4:ae:fc:64:01:f4:50:6f:
                    76:c4:a8:11:23:fe:c8:f5:29:19:b2:da:3a:dd:2d:
                    8a:7c:9b:a4:ba:76:43:da:49:d4:10:bf:d1:c2:6d:
                    22:ae:2e:87:df:9b:8c:f0:15:db:3d:12:8b:3c:1b:
                    e8:ef:6f:21:17:82:7d:6a:6e:94:c4:c4:c0:7d:54:
                    65:55:20:bf:01:e0:44:ca:e8:3a:c5:e3:27:41:49:
                    8c:2b:78:0c:29:6a:14:ff:90:7d:05:46:72:16:20:
                    b9:05:a4:25:0a:b4:7a:59:18:25:7b:99:ce:26:17:
                    ea:a7:38:90:0f:56:d1:31:d1:98:7a:50:1a:82:9a:
                    79:42:c5:97:43:bc:3f:59:c8:d9:e5:da:26:cb:5f:
                    f1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D6:0A:3D:CE:15:15:11:6B:E5:12:BA:A8:FE:BB:92:A8:49:E8:ED
            X509v3 Authority Key Identifier:
                keyid:3C:20:D4:74:3A:45:7C:18:DB:0F:EA:EA:30:25:E1:CC:D5:1A:47:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3137392e36332e38342e302f32342d3234203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:9e:f1:b6:19:99:4f:dc:51:a0:33:8c:b6:58:ec:74:06:60:
         b8:89:51:e1:2c:ed:88:11:26:c9:1a:88:9d:2a:93:c1:80:ed:
         7f:90:a0:f0:84:14:94:0a:77:ae:e7:50:f0:68:6f:64:8d:aa:
         83:15:d5:e5:3c:d4:57:a5:64:df:a5:c5:3d:e0:89:dd:7f:98:
         0b:3f:11:21:4f:be:78:6f:48:cc:4a:57:ae:54:38:ce:57:83:
         63:7e:5d:c9:14:16:f2:52:3a:b1:56:4f:75:3e:1a:bc:4e:91:
         e8:4a:bf:e2:a2:70:d5:58:44:b0:76:82:6c:1f:51:66:13:e0:
         99:96:46:1a:5c:eb:5c:3e:7d:91:30:22:27:7c:2c:c0:60:1e:
         b4:55:ee:11:56:a3:a3:16:92:21:a1:6b:f0:ef:62:4c:cf:93:
         7f:78:b8:87:e0:08:98:bd:86:5b:7b:8c:b6:de:d6:3d:a2:d9:
         79:2c:97:2a:ca:b3:23:3e:b9:4e:b2:b4:d0:20:9b:7a:3b:65:
         57:74:06:54:22:17:9e:b5:43:d2:26:61:be:7d:5b:6d:8c:0c:
         2a:f6:18:44:3f:3b:2a:50:3b:ef:a1:a8:21:e9:60:5e:89:72:
         1f:4e:9c:4c:64:6c:34:d1:2b:f5:c1:2e:35:f2:86:e7:1f:a9:
         98:ef:f3:d3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGROlDmzstzCgvOvRBjO9vCcuLcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MyMEQ0NzQzQTQ1N0MxOERCMEZFQUVBMzAyNUUxQ0NE
NTFBNDc5MzAeFw0yNTA5MjUyMzU3MDlaFw0yNjA5MjUwMDAyMDlaMDMxMTAvBgNV
BAMTKDk4RDYwQTNEQ0UxNTE1MTE2QkU1MTJCQUE4RkVCQjkyQTg0OUU4RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVLeoy6kDljnrUtSWWFUL8suZ9
Ah+aagWqB8H6c5ei3jd+i7cXJo4C16JCdn5BJ2NEPDqdVrX9cwKuKwKN6rfg3Leo
Ar3PNZopvxqk0ciCC9x2FovIannFfDMgkL1qIeITX/taWAg1qgjRT2DiOknkrvxk
AfRQb3bEqBEj/sj1KRmy2jrdLYp8m6S6dkPaSdQQv9HCbSKuLoffm4zwFds9Eos8
G+jvbyEXgn1qbpTExMB9VGVVIL8B4ETK6DrF4ydBSYwreAwpahT/kH0FRnIWILkF
pCUKtHpZGCV7mc4mF+qnOJAPVtEx0Zh6UBqCmnlCxZdDvD9ZyNnl2ibLX/EhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmNYKPc4VFRFr5RK6qP67kqhJ6O0wHwYDVR0j
BBgwFoAUPCDUdDpFfBjbD+rqMCXhzNUaR5MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21KVzliM3l3VjJqTXNSTVg1UlYyUjkzQVZmNzI3TENnalVEc2poWnBK
UlQvMS8zQzIwRDQ3NDNBNDU3QzE4REIwRkVBRUEzMDI1RTFDQ0Q1MUE0NzkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDMjBENDc0M0E0NTdDMThE
QjBGRUFFQTMwMjVFMUNDRDUxQTQ3OTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtSlc5YjN5d1Yyak1zUk1YNVJWMlI5M0FWZjcyN0xDZ2pVRHNqaFpwSlJULzEv
MzEzNzM5MmUzNjMzMmUzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMy
MzYzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsz9UMA0GCSqGSIb3DQEBCwUAA4IBAQBGnvG2GZlP
3FGgM4y2WOx0BmC4iVHhLO2IESbJGoidKpPBgO1/kKDwhBSUCneu51DwaG9kjaqD
FdXlPNRXpWTfpcU94Indf5gLPxEhT754b0jMSleuVDjOV4Njfl3JFBbyUjqxVk91
Phq8TpHoSr/ionDVWESwdoJsH1FmE+CZlkYaXOtcPn2RMCInfCzAYB60Ve4RVqOj
FpIhoWvw72JMz5N/eLiH4AiYvYZbe4y23tY9otl5LJcqyrMjPrlOsrTQIJt6O2VX
dAZUIheetUPSJmG+fVttjAwq9hhEPzsqUDvvoagh6WBeiXIfTpxMZGw00Sv1wS41
8obnH6mY7/PT
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:37:52 2025 by rpki-client