Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/3139312e362e3234392e302f32342d3234203d3e20323633333032.roa
File:                     3139312e362e3234392e302f32342d3234203d3e20323633333032.roa (raw, json)
Hash identifier:          kqlnnvvd5hKTCDxK70b66B+XPjsRCSwK9Uk6tCbPyTI=
Subject key identifier:   1B:B6:20:B6:6C:B9:BF:20:07:BE:D7:45:1B:13:88:6C:8B:A5:8D:CA
Certificate issuer:       /CN=1B07C34ADF8156B6635F6C7E1EA217E154F40A7F
Certificate serial:       6895132B45C6367D5B3A43FF940510A4CDDB4ADC
Authority key identifier: 1B:07:C3:4A:DF:81:56:B6:63:5F:6C:7E:1E:A2:17:E1:54:F4:0A:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/3139312e362e3234392e302f32342d3234203d3e20323633333032.roa
Signing time:             Mon 03 Nov 2025 18:31:46 +0000
ROA not before:           Mon 03 Nov 2025 18:26:46 +0000
ROA not after:            Mon 02 Nov 2026 18:31:46 +0000
asID:                     263302
IP address blocks:        191.6.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.crl
                          rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:95:13:2b:45:c6:36:7d:5b:3a:43:ff:94:05:10:a4:cd:db:4a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B07C34ADF8156B6635F6C7E1EA217E154F40A7F
        Validity
            Not Before: Nov  3 18:26:46 2025 GMT
            Not After : Nov  2 18:31:46 2026 GMT
        Subject: CN=1BB620B66CB9BF2007BED7451B13886C8BA58DCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:90:4c:20:91:af:74:53:eb:43:ff:c7:31:d3:
                    72:3b:61:35:de:a0:5c:c9:67:42:6c:f6:5a:16:a5:
                    88:64:c5:fa:94:9a:a9:96:87:48:99:c3:66:b4:3c:
                    1f:cf:91:b5:c1:41:43:a0:7e:97:55:d3:18:fc:d2:
                    1e:71:fd:f5:97:99:84:5f:38:6f:44:87:85:28:6f:
                    76:be:7f:83:c6:44:a5:61:d1:c4:29:90:6d:79:1f:
                    4e:0c:09:02:c8:ea:7e:b1:75:fd:a2:19:f9:9f:9f:
                    ee:f9:a5:d8:a4:65:63:f9:44:84:72:e3:7c:3d:b9:
                    08:67:d2:b7:a3:9a:19:4b:78:89:57:05:8c:db:f1:
                    15:51:3a:bf:a0:f9:97:47:19:ef:56:79:12:42:97:
                    b7:e5:cf:26:cd:b4:24:e4:65:e3:db:c4:f0:cb:03:
                    32:37:57:95:0b:1d:6e:f0:9a:f4:95:ac:2a:f6:90:
                    7a:8c:85:f2:a3:31:19:c9:58:1b:9a:7e:b0:ae:26:
                    b0:7c:8b:e4:2a:56:f6:80:22:15:a3:e8:55:52:00:
                    e7:1e:fe:a0:32:f4:a9:af:54:90:68:b0:0e:4a:1c:
                    86:51:08:03:8a:3a:33:6d:1e:3f:1b:36:c4:c8:9c:
                    18:bd:0c:9f:63:91:fd:7f:1d:a0:bb:b2:62:ce:5b:
                    2f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B6:20:B6:6C:B9:BF:20:07:BE:D7:45:1B:13:88:6C:8B:A5:8D:CA
            X509v3 Authority Key Identifier:
                keyid:1B:07:C3:4A:DF:81:56:B6:63:5F:6C:7E:1E:A2:17:E1:54:F4:0A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/3139312e362e3234392e302f32342d3234203d3e20323633333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:26:af:63:fe:e3:34:9c:29:ab:65:e7:6f:33:01:2e:79:a5:
         7e:fe:9a:43:2b:c8:19:81:8f:4c:a2:7b:a7:8c:f3:d0:ee:a0:
         f2:fb:3f:0d:74:cc:93:8d:55:40:67:a6:b9:00:bc:53:ed:58:
         bb:cf:c4:67:55:a4:c4:00:d6:79:b5:33:38:da:ed:d4:d1:28:
         b0:ae:ec:26:7d:02:01:81:a2:03:37:0f:1f:ad:d8:29:9b:e1:
         47:1e:7c:3e:23:d7:3c:f7:7b:3d:39:57:6e:5f:c5:8d:2d:b1:
         d5:8f:00:0d:b6:b2:17:04:b9:ac:ff:f2:a1:47:30:a9:aa:92:
         95:ef:78:6c:b5:3c:f3:35:08:b6:63:49:c1:ce:b0:e6:88:05:
         d9:da:35:8d:2b:57:b1:1e:e8:2d:65:85:cd:e4:e4:80:72:58:
         81:54:9e:f1:e4:01:5e:9b:3b:ca:de:97:a6:9c:63:db:0f:ab:
         e2:a9:ee:92:02:dd:3e:75:f1:e5:e2:bf:8c:48:b5:73:96:4c:
         be:e6:d4:88:7f:35:cf:5c:f9:6e:dd:9c:b5:21:a9:4b:86:94:
         32:ad:67:95:56:1b:cd:5f:e8:64:9e:47:45:74:9b:6f:7e:16:
         7d:75:b7:b9:91:fd:16:4d:e9:91:63:37:c0:7d:80:38:8b:4a:
         ae:39:eb:73
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaJUTK0XGNn1bOkP/lAUQpM3bStwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIwN0MzNEFERjgxNTZCNjYzNUY2QzdFMUVBMjE3RTE1
NEY0MEE3RjAeFw0yNTExMDMxODI2NDZaFw0yNjExMDIxODMxNDZaMDMxMTAvBgNV
BAMTKDFCQjYyMEI2NkNCOUJGMjAwN0JFRDc0NTFCMTM4ODZDOEJBNThEQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHkEwgka90U+tD/8cx03I7YTXe
oFzJZ0Js9loWpYhkxfqUmqmWh0iZw2a0PB/PkbXBQUOgfpdV0xj80h5x/fWXmYRf
OG9Eh4Uob3a+f4PGRKVh0cQpkG15H04MCQLI6n6xdf2iGfmfn+75pdikZWP5RIRy
43w9uQhn0rejmhlLeIlXBYzb8RVROr+g+ZdHGe9WeRJCl7flzybNtCTkZePbxPDL
AzI3V5ULHW7wmvSVrCr2kHqMhfKjMRnJWBuafrCuJrB8i+QqVvaAIhWj6FVSAOce
/qAy9KmvVJBosA5KHIZRCAOKOjNtHj8bNsTInBi9DJ9jkf1/HaC7smLOWy91AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUG7Ygtmy5vyAHvtdFGxOIbIuljcowHwYDVR0j
BBgwFoAUGwfDSt+BVrZjX2x+HqIX4VT0Cn8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2dndWhHdE12RTFoQVZ5Mk52cHpDdjNGTDJOa1ZiVkhMeWNVaXNjc0hw
Yk4vMS8xQjA3QzM0QURGODE1NkI2NjM1RjZDN0UxRUEyMTdFMTU0RjQwQTdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCMDdDMzRBREY4MTU2QjY2
MzVGNkM3RTFFQTIxN0UxNTRGNDBBN0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NnZ3VoR3RNdkUxaEFWeTJOdnB6Q3YzRkwyTmtWYlZITHljVWlzY3NIcGJOLzEv
MzEzOTMxMmUzNjJlMzIzNDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzMzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvwb5MA0GCSqGSIb3DQEBCwUAA4IBAQAIJq9j/uM0
nCmrZedvMwEueaV+/ppDK8gZgY9MonunjPPQ7qDy+z8NdMyTjVVAZ6a5ALxT7Vi7
z8RnVaTEANZ5tTM42u3U0SiwruwmfQIBgaIDNw8frdgpm+FHHnw+I9c893s9OVdu
X8WNLbHVjwANtrIXBLms//KhRzCpqpKV73hstTzzNQi2Y0nBzrDmiAXZ2jWNK1ex
HugtZYXN5OSAcliBVJ7x5AFemzvK3pemnGPbD6viqe6SAt0+dfHl4r+MSLVzlky+
5tSIfzXPXPlu3Zy1IalLhpQyrWeVVhvNX+hknkdFdJtvfhZ9dbe5kf0WTemRYzfA
fYA4i0quOetz
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:43:32 2025 by rpki-client