Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e302e302f32332d3233203d3e203631373937.roa
File:                     3134332e3133372e302e302f32332d3233203d3e203631373937.roa (raw, json)
Hash identifier:          iay1c8id2NOUNM/9DXKmwm8M8ZlMvn/38uWayJ1jCMA=
Subject key identifier:   BB:F1:8E:87:54:76:5E:38:D9:AE:F2:7B:43:43:76:C2:7E:D3:45:D6
Certificate issuer:       /CN=698DD058CC44A7087C5B128356D10FB024C7D778
Certificate serial:       4BB5AE62425C989D26322DE2C48C2F3D738C9F25
Authority key identifier: 69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e302e302f32332d3233203d3e203631373937.roa
Signing time:             Mon 03 Nov 2025 15:07:26 +0000
ROA not before:           Mon 03 Nov 2025 15:02:26 +0000
ROA not after:            Mon 02 Nov 2026 15:07:26 +0000
asID:                     61797
IP address blocks:        143.137.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 05:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b5:ae:62:42:5c:98:9d:26:32:2d:e2:c4:8c:2f:3d:73:8c:9f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698DD058CC44A7087C5B128356D10FB024C7D778
        Validity
            Not Before: Nov  3 15:02:26 2025 GMT
            Not After : Nov  2 15:07:26 2026 GMT
        Subject: CN=BBF18E8754765E38D9AEF27B434376C27ED345D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ed:b9:76:72:96:2c:44:ef:53:96:a1:da:7f:
                    ba:3f:5e:a4:42:e9:a2:c8:bf:ea:64:f7:aa:26:87:
                    b8:11:2a:c5:63:bb:e1:88:1a:5c:7c:d5:73:12:68:
                    95:06:3b:6b:81:d7:11:2e:0b:41:f5:ea:f4:58:9a:
                    49:08:0f:15:21:62:16:3b:f0:aa:e9:e3:22:c4:2b:
                    2e:3d:e1:07:74:08:1a:c2:ea:36:a1:ff:7a:cc:fe:
                    e5:d4:a1:41:6b:c1:70:91:bc:bb:e9:c2:c6:a3:dc:
                    a7:59:e9:ec:b6:e7:d9:49:2d:af:48:70:56:c4:a8:
                    4e:12:73:3f:10:4d:73:f6:92:7a:31:0c:b3:f8:15:
                    6b:93:5f:de:6a:c9:49:b3:23:10:19:b8:11:6a:30:
                    06:b7:a6:30:98:7f:31:40:1a:58:09:c2:7b:79:c2:
                    47:c1:eb:1b:c2:f8:1f:f5:8d:d2:22:2d:a0:93:8a:
                    fd:00:88:91:c8:3d:7d:24:70:48:f7:6e:e6:83:18:
                    e0:c2:dd:ed:6b:6c:79:b2:32:31:31:e9:9e:43:48:
                    8c:40:b7:26:17:aa:7e:21:df:01:3f:e0:55:87:69:
                    f3:36:9b:bc:18:6f:9c:67:9a:1b:b7:f5:d9:ac:38:
                    e0:43:15:40:b0:19:fe:cc:3b:6c:04:0a:ad:11:32:
                    c1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F1:8E:87:54:76:5E:38:D9:AE:F2:7B:43:43:76:C2:7E:D3:45:D6
            X509v3 Authority Key Identifier:
                keyid:69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e302e302f32332d3233203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:a2:b0:18:3e:22:6d:51:18:b5:c6:3e:ee:4e:02:a5:be:30:
         68:14:6c:3e:11:fb:61:b3:b7:01:7b:06:55:db:40:39:84:df:
         63:56:a8:67:5a:2f:e4:d9:d9:71:94:45:72:08:e6:c7:23:99:
         2d:64:17:88:10:22:4d:e5:91:99:8a:9e:16:d9:58:df:74:d3:
         96:62:b8:bb:01:92:4d:a9:3e:83:6d:70:4b:0c:74:ec:8b:de:
         34:ad:63:d8:9f:73:8d:f5:fd:ba:80:ee:95:7a:98:e3:eb:64:
         49:c3:8f:3f:a0:7b:15:b2:52:da:15:e6:38:31:83:cc:c2:b3:
         41:e7:e5:a5:c9:82:30:7d:9d:43:1d:b4:93:80:55:58:55:1a:
         6a:eb:a3:5a:ef:06:8b:32:0a:ee:5d:74:35:bd:55:f0:f2:ec:
         5b:2a:9c:3d:32:e8:40:95:eb:b6:27:4e:82:e8:a8:67:0d:99:
         fd:56:f1:73:ba:a6:52:ce:2c:c8:8f:56:91:f1:99:84:63:f1:
         83:19:1b:db:81:b0:51:7c:d7:bc:75:2b:9a:34:a2:fe:83:df:
         6a:75:b7:94:52:0d:39:a2:04:2f:fc:e2:89:54:8f:d6:b8:37:
         05:12:ba:77:65:20:94:02:0d:91:6e:39:3d:1d:0d:00:ae:c8:
         e0:68:3d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:05:42 2025 by rpki-client