Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/3137392e3130372e36342e302f32302d3332203d3e203532353433.roa
File:                     3137392e3130372e36342e302f32302d3332203d3e203532353433.roa (raw, json)
Hash identifier:          g/q7FQFoHnicJiVuYP3oNWxrnEX5GSiy23yRbTLn6sY=
Subject key identifier:   0E:B7:AB:70:C6:51:A5:F2:B3:25:C9:95:AC:83:3B:80:28:F8:5E:18
Certificate issuer:       /CN=BB0FAB401037F6EE8BF30D559ABDD44972C40995
Certificate serial:       3800A4B20714E8763A433C014E868218E456E370
Authority key identifier: BB:0F:AB:40:10:37:F6:EE:8B:F3:0D:55:9A:BD:D4:49:72:C4:09:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0FAB401037F6EE8BF30D559ABDD44972C40995.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/3137392e3130372e36342e302f32302d3332203d3e203532353433.roa
Signing time:             Sat 11 Oct 2025 20:07:02 +0000
ROA not before:           Sat 11 Oct 2025 20:02:02 +0000
ROA not after:            Sat 10 Oct 2026 20:07:02 +0000
asID:                     52543
IP address blocks:        179.107.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/BB0FAB401037F6EE8BF30D559ABDD44972C40995.crl
                          rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/BB0FAB401037F6EE8BF30D559ABDD44972C40995.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0FAB401037F6EE8BF30D559ABDD44972C40995.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 17:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:00:a4:b2:07:14:e8:76:3a:43:3c:01:4e:86:82:18:e4:56:e3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB0FAB401037F6EE8BF30D559ABDD44972C40995
        Validity
            Not Before: Oct 11 20:02:02 2025 GMT
            Not After : Oct 10 20:07:02 2026 GMT
        Subject: CN=0EB7AB70C651A5F2B325C995AC833B8028F85E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a7:97:58:2d:ea:65:84:27:ef:78:f4:b5:4a:
                    be:9a:c4:55:8d:3c:3c:26:71:d2:0a:d8:ae:de:b6:
                    54:55:26:7d:59:73:99:ae:77:65:c3:ae:af:cb:9c:
                    00:80:34:df:43:e2:71:6d:45:f2:e1:a5:fd:43:05:
                    ec:0a:1b:e0:b7:bc:4a:90:8e:1d:73:47:bf:11:7f:
                    dd:8d:61:a6:0d:0f:9b:ae:4f:12:54:b8:b3:2b:d5:
                    d4:61:5f:d5:91:82:af:91:46:85:1a:e1:f7:6f:ef:
                    27:ba:d6:65:95:94:3d:c0:5b:6d:51:17:12:84:2f:
                    2d:10:c0:ae:d4:ba:ca:0c:23:18:aa:49:0a:71:24:
                    de:df:a1:9c:f2:a2:3c:e9:6f:ef:7c:fb:89:b5:dd:
                    14:3c:6b:aa:2f:e7:f4:ae:0f:e8:87:e7:46:59:c3:
                    4e:3f:a5:ff:21:53:f6:f7:2c:18:d0:e0:07:3f:ed:
                    4f:32:62:eb:cb:4c:9b:e2:61:eb:64:37:13:8a:33:
                    ea:c7:8e:be:05:78:f9:d1:3b:41:15:ac:ca:54:99:
                    60:fb:e9:4f:a0:01:81:63:80:d3:6a:28:01:dd:f2:
                    7f:29:4a:b1:b4:f1:38:41:30:5c:8f:30:93:1a:05:
                    ac:e7:3c:f5:cb:33:53:32:cc:24:63:7d:45:36:29:
                    02:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B7:AB:70:C6:51:A5:F2:B3:25:C9:95:AC:83:3B:80:28:F8:5E:18
            X509v3 Authority Key Identifier:
                keyid:BB:0F:AB:40:10:37:F6:EE:8B:F3:0D:55:9A:BD:D4:49:72:C4:09:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/BB0FAB401037F6EE8BF30D559ABDD44972C40995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0FAB401037F6EE8BF30D559ABDD44972C40995.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/3137392e3130372e36342e302f32302d3332203d3e203532353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bd:a2:62:99:0e:bb:3b:57:b8:f2:bc:8d:3a:48:09:fe:cf:f9:
         0e:31:ad:f9:2d:24:a2:59:2e:fd:46:35:f1:c4:5a:01:db:d1:
         66:86:19:bc:de:35:84:61:79:51:c4:cf:7a:96:12:79:17:fa:
         7d:11:df:56:f6:f7:e3:de:61:6e:7e:52:d0:6a:b3:69:cd:1b:
         7a:94:c6:cf:f9:bd:c1:3c:33:52:75:cb:fc:c5:36:01:69:65:
         b2:91:bd:bd:b2:cd:fe:37:50:8b:b5:5a:26:3d:e8:ee:c9:e6:
         36:9e:21:6a:51:74:6c:95:90:10:14:b0:af:64:51:57:c5:66:
         76:38:ab:18:68:8a:08:03:94:d3:4b:8e:dd:db:1e:c6:51:ca:
         78:3f:4d:73:bc:2f:35:8b:4d:d6:4f:b8:48:11:a2:1e:0a:42:
         70:ff:2a:58:49:09:38:fb:b9:3a:82:ae:24:c3:5d:2b:42:a4:
         61:bb:cc:e5:98:b8:92:42:46:c3:ff:58:3e:11:3f:95:f0:be:
         07:3f:f7:23:2e:db:d5:75:05:b3:02:d6:a0:c3:8b:b6:0e:4a:
         33:b3:af:90:51:01:76:28:5e:0f:7d:28:80:fa:6a:d8:a0:f0:
         df:96:8c:3e:06:96:83:d5:7c:c5:1e:c4:17:5e:71:23:17:d5:
         b4:b8:a7:78
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOACksgcU6HY6QzwBToaCGORW43AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIwRkFCNDAxMDM3RjZFRThCRjMwRDU1OUFCREQ0NDk3
MkM0MDk5NTAeFw0yNTEwMTEyMDAyMDJaFw0yNjEwMTAyMDA3MDJaMDMxMTAvBgNV
BAMTKDBFQjdBQjcwQzY1MUE1RjJCMzI1Qzk5NUFDODMzQjgwMjhGODVFMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmp5dYLeplhCfvePS1Sr6axFWN
PDwmcdIK2K7etlRVJn1Zc5mud2XDrq/LnACANN9D4nFtRfLhpf1DBewKG+C3vEqQ
jh1zR78Rf92NYaYND5uuTxJUuLMr1dRhX9WRgq+RRoUa4fdv7ye61mWVlD3AW21R
FxKELy0QwK7UusoMIxiqSQpxJN7foZzyojzpb+98+4m13RQ8a6ov5/SuD+iH50ZZ
w04/pf8hU/b3LBjQ4Ac/7U8yYuvLTJviYetkNxOKM+rHjr4FePnRO0EVrMpUmWD7
6U+gAYFjgNNqKAHd8n8pSrG08ThBMFyPMJMaBaznPPXLM1MyzCRjfUU2KQLvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDrercMZRpfKzJcmVrIM7gCj4XhgwHwYDVR0j
BBgwFoAUuw+rQBA39u6L8w1Vmr3USXLECZUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTZIdG1RaTI5U3FRazh2dDdSNmhKOTc3VFBYQUNXbjRCdVhFY2FjRGpw
cTkvMC9CQjBGQUI0MDEwMzdGNkVFOEJGMzBENTU5QUJERDQ0OTcyQzQwOTk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCMEZBQjQwMTAzN0Y2RUU4
QkYzMEQ1NTlBQkRENDQ5NzJDNDA5OTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E2SHRtUWkyOVNxUWs4dnQ3UjZoSjk3N1RQWEFDV240QnVYRWNhY0RqcHE5LzAv
MzEzNzM5MmUzMTMwMzcyZTM2MzQyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzNTMy
MzUzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEs2tAMA0GCSqGSIb3DQEBCwUAA4IBAQC9omKZDrs7
V7jyvI06SAn+z/kOMa35LSSiWS79RjXxxFoB29Fmhhm83jWEYXlRxM96lhJ5F/p9
Ed9W9vfj3mFuflLQarNpzRt6lMbP+b3BPDNSdcv8xTYBaWWykb29ss3+N1CLtVom
PejuyeY2niFqUXRslZAQFLCvZFFXxWZ2OKsYaIoIA5TTS47d2x7GUcp4P01zvC81
i03WT7hIEaIeCkJw/ypYSQk4+7k6gq4kw10rQqRhu8zlmLiSQkbD/1g+ET+V8L4H
P/cjLtvVdQWzAtagw4u2Dkozs6+QUQF2KF4PfSiA+mrYoPDflow+BpaD1XzFHsQX
XnEjF9W0uKd4
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:20:35 2025 by rpki-client