Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e35332e302e302f32312d3234203d3e20323730383134.roa
File:                     3137372e35332e302e302f32312d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          bCFD9IEKp68D9bnZJKif0Pf1NbwIA7vLddQbghOLkkk=
Subject key identifier:   46:00:8A:6B:FD:F2:56:A5:52:02:78:D6:7B:55:45:DD:C4:B8:4B:C1
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       7514E5AFB875AE9A4D3E2E77A2D2716D52D57FA8
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e35332e302e302f32312d3234203d3e20323730383134.roa
Signing time:             Mon 27 Oct 2025 17:06:44 +0000
ROA not before:           Mon 27 Oct 2025 17:01:44 +0000
ROA not after:            Mon 26 Oct 2026 17:06:44 +0000
asID:                     270814
IP address blocks:        177.53.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:14:e5:af:b8:75:ae:9a:4d:3e:2e:77:a2:d2:71:6d:52:d5:7f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Oct 27 17:01:44 2025 GMT
            Not After : Oct 26 17:06:44 2026 GMT
        Subject: CN=46008A6BFDF256A5520278D67B5545DDC4B84BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b6:56:c6:bc:b5:af:aa:38:9e:ee:38:26:e4:
                    c4:c5:61:ee:20:e8:6b:da:37:ec:a8:fa:23:a5:5b:
                    16:7d:18:b7:a2:a4:32:ef:77:2f:42:95:3a:38:33:
                    a5:d6:06:f1:2d:d9:fd:68:55:a5:02:c8:f0:0d:52:
                    cb:30:91:7f:ce:6f:20:9a:ed:87:4d:37:a1:0a:1e:
                    01:5b:d9:08:17:18:c0:7f:13:38:23:ed:da:16:05:
                    6a:d9:16:80:10:8f:d3:dd:17:a6:d4:12:8e:20:66:
                    a6:a1:9d:6a:82:f1:91:4f:79:66:88:e1:b8:d8:98:
                    b2:60:ef:cd:66:ad:de:89:89:55:03:a7:3f:a8:5f:
                    08:a4:3b:be:ab:74:d8:b2:aa:96:06:6e:c0:c5:7a:
                    7b:c4:34:ec:91:bd:c5:79:18:4b:54:81:ac:87:05:
                    6a:be:f1:91:ea:93:aa:29:e6:51:b3:a6:fc:4e:f8:
                    55:27:07:fa:fe:1e:2d:da:94:b6:52:9b:61:31:92:
                    98:1d:86:41:c4:4b:a6:2b:5e:19:aa:26:32:ee:3c:
                    1e:86:a2:4e:25:0d:6a:31:7f:12:51:ec:ba:73:26:
                    f6:52:b1:1b:30:7c:e2:7a:8d:6b:fd:31:01:5b:48:
                    ab:5a:f8:0a:c8:9c:e8:e4:df:8e:8b:be:ca:d3:8e:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:00:8A:6B:FD:F2:56:A5:52:02:78:D6:7B:55:45:DD:C4:B8:4B:C1
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e35332e302e302f32312d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:92:e1:59:77:9c:e4:8a:06:9b:75:d5:88:8b:8d:c9:6c:06:
         12:0a:74:08:bf:55:ef:59:f7:4b:4a:ef:2e:46:40:5f:a4:f1:
         f0:eb:58:71:a2:af:ea:cf:31:e6:f9:5f:5c:3e:b2:a0:d1:32:
         11:b1:76:c9:78:bf:fa:23:c1:68:91:92:33:cf:17:5d:c5:e5:
         6c:a7:09:7e:94:6e:ce:76:e7:cb:10:23:57:7e:25:58:f8:4b:
         b6:9c:01:55:27:76:5a:e0:8a:8a:0f:9d:6c:37:92:35:59:4d:
         df:f3:ed:6c:c0:96:64:36:dc:68:58:fe:97:f8:17:1a:91:1b:
         50:d0:b7:88:72:0d:c2:4b:1a:66:fb:d1:5e:4c:bc:19:68:f2:
         67:61:d1:97:b1:8c:6e:e6:d8:3f:ee:01:73:5c:b6:c4:fd:e1:
         8b:15:15:0c:f7:3c:ce:d1:96:8d:a5:28:fb:b0:f6:8d:8d:30:
         f0:05:c3:86:68:e3:e6:71:85:5f:f0:58:6c:00:12:5e:e4:de:
         66:08:5b:95:c5:b9:43:82:f3:2b:f9:14:3b:d3:25:e5:ec:60:
         83:01:c0:c3:0c:94:33:bc:09:65:a4:12:ea:25:7e:68:2f:7d:
         35:e9:ba:ca:46:b9:23:67:a1:80:6c:03:1b:dd:94:22:7f:ef:
         2d:f8:0e:80
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUdRTlr7h1rppNPi53otJxbVLVf6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZGNEQ4NEY1RUExODczOEIzOTgzODJCQjg2NjQ4NDAy
MjUwMDhGOTAeFw0yNTEwMjcxNzAxNDRaFw0yNjEwMjYxNzA2NDRaMDMxMTAvBgNV
BAMTKDQ2MDA4QTZCRkRGMjU2QTU1MjAyNzhENjdCNTU0NUREQzRCODRCQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDctlbGvLWvqjie7jgm5MTFYe4g
6GvaN+yo+iOlWxZ9GLeipDLvdy9ClTo4M6XWBvEt2f1oVaUCyPANUsswkX/ObyCa
7YdNN6EKHgFb2QgXGMB/Ezgj7doWBWrZFoAQj9PdF6bUEo4gZqahnWqC8ZFPeWaI
4bjYmLJg781mrd6JiVUDpz+oXwikO76rdNiyqpYGbsDFenvENOyRvcV5GEtUgayH
BWq+8ZHqk6op5lGzpvxO+FUnB/r+Hi3alLZSm2ExkpgdhkHES6YrXhmqJjLuPB6G
ok4lDWoxfxJR7LpzJvZSsRswfOJ6jWv9MQFbSKta+ArInOjk346LvsrTjtFrAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQURgCKa/3yVqVSAnjWe1VF3cS4S8EwHwYDVR0j
BBgwFoAUH/TYT16hhzizmDgruGZIQCJQCPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzRGdERucFlKa0NKc2R0U3FqWW9oM1JGd29DTDlQQVdDZEpLU3VteHhK
UWkvMC8xRkY0RDg0RjVFQTE4NzM4QjM5ODM4MkJCODY2NDg0MDIyNTAwOEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGRjREODRGNUVBMTg3MzhC
Mzk4MzgyQkI4NjY0ODQwMjI1MDA4RjkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0RnREbnBZSmtDSnNkdFNxallvaDNSRndvQ0w5UEFXQ2RKS1N1bXh4SlFpLzAv
MzEzNzM3MmUzNTMzMmUzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzczMDM4
MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7E1ADANBgkqhkiG9w0BAQsFAAOCAQEAGZLhWXec5IoG
m3XViIuNyWwGEgp0CL9V71n3S0rvLkZAX6Tx8OtYcaKv6s8x5vlfXD6yoNEyEbF2
yXi/+iPBaJGSM88XXcXlbKcJfpRuznbnyxAjV34lWPhLtpwBVSd2WuCKig+dbDeS
NVlN3/PtbMCWZDbcaFj+l/gXGpEbUNC3iHINwksaZvvRXky8GWjyZ2HRl7GMbubY
P+4Bc1y2xP3hixUVDPc8ztGWjaUo+7D2jY0w8AXDhmjj5nGFX/BYbAASXuTeZghb
lcW5Q4LzK/kUO9Ml5exggwHAwwyUM7wJZaQS6iV+aC99Nem6yka5I2ehgGwDG92U
In/vLfgOgA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:31:49 2025 by rpki-client