Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/3139312e362e3235322e302f32342d3234203d3e20323633333032.roa
File:                     3139312e362e3235322e302f32342d3234203d3e20323633333032.roa (raw, json)
Hash identifier:          FgJGfqKhAS8KvmUBN7zc3uAfEL7b2VTCuFDZmkRf/f8=
Subject key identifier:   E2:B5:9F:CF:58:DB:4D:95:9E:98:7E:CF:44:4F:5E:24:7B:28:F5:A8
Certificate issuer:       /CN=1B07C34ADF8156B6635F6C7E1EA217E154F40A7F
Certificate serial:       60E7794CD9ADCAC97BD094BBC9951268A7F4C938
Authority key identifier: 1B:07:C3:4A:DF:81:56:B6:63:5F:6C:7E:1E:A2:17:E1:54:F4:0A:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/3139312e362e3235322e302f32342d3234203d3e20323633333032.roa
Signing time:             Mon 03 Nov 2025 18:31:46 +0000
ROA not before:           Mon 03 Nov 2025 18:26:46 +0000
ROA not after:            Mon 02 Nov 2026 18:31:46 +0000
asID:                     263302
IP address blocks:        191.6.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.crl
                          rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e7:79:4c:d9:ad:ca:c9:7b:d0:94:bb:c9:95:12:68:a7:f4:c9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B07C34ADF8156B6635F6C7E1EA217E154F40A7F
        Validity
            Not Before: Nov  3 18:26:46 2025 GMT
            Not After : Nov  2 18:31:46 2026 GMT
        Subject: CN=E2B59FCF58DB4D959E987ECF444F5E247B28F5A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:36:69:49:c5:f3:ef:77:28:de:cd:bc:58:
                    50:c0:ab:b3:3a:f2:4c:5c:dc:5b:07:87:1a:1d:0b:
                    0b:0a:f2:84:c6:46:1b:5c:e6:bf:eb:d9:ef:e7:d7:
                    d5:26:e1:14:46:9a:5c:be:f5:bd:23:4c:5b:5f:d2:
                    e3:d9:46:4a:96:5b:04:0c:4e:6b:ca:a7:c5:fd:5a:
                    a2:b7:d0:3d:ee:0d:cf:00:16:d9:87:26:84:35:f8:
                    f4:56:42:c1:ab:b1:4b:8c:78:dd:e7:34:f1:db:98:
                    1a:f6:62:e7:1c:fa:65:50:49:05:4b:4d:7d:64:b1:
                    07:1c:bb:11:7c:79:46:cb:52:98:71:ee:ef:77:17:
                    2f:35:67:30:39:70:bb:8e:a9:11:9b:fa:9c:ee:27:
                    6d:df:02:c7:2b:97:55:0b:a6:ed:6f:e6:2d:4c:17:
                    4b:60:e3:8d:8c:1b:2d:5f:4a:93:10:02:c6:95:65:
                    2a:ab:28:b9:56:c1:80:0f:d6:ab:fd:33:9c:45:03:
                    c8:ac:c1:51:08:bf:da:8c:6c:67:ee:d6:84:45:d7:
                    ad:28:4a:ff:9f:cf:df:e3:32:9e:08:0c:8c:56:c9:
                    e2:4e:9a:59:f5:43:b3:07:d7:fb:27:08:12:65:b0:
                    2c:fd:1a:b1:9b:48:8e:81:d5:66:ab:66:bc:7c:8b:
                    c1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B5:9F:CF:58:DB:4D:95:9E:98:7E:CF:44:4F:5E:24:7B:28:F5:A8
            X509v3 Authority Key Identifier:
                keyid:1B:07:C3:4A:DF:81:56:B6:63:5F:6C:7E:1E:A2:17:E1:54:F4:0A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B07C34ADF8156B6635F6C7E1EA217E154F40A7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/1/3139312e362e3235322e302f32342d3234203d3e20323633333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:b7:6e:9c:b1:6f:ac:22:42:4a:a0:5e:de:1a:38:a3:84:6d:
         df:c7:f4:8f:3d:1b:d4:23:9a:22:0b:2f:d2:ef:f3:9b:6c:e0:
         a7:57:f4:07:e1:e7:e0:1e:bc:90:05:78:21:15:53:8b:e6:f9:
         d1:f1:c8:7d:1c:23:0a:fd:5a:20:49:13:34:b0:09:6f:96:79:
         1d:da:e5:31:d7:5f:86:b6:da:27:f5:af:f6:9e:3b:ae:37:d7:
         5a:e5:03:7b:8b:cd:66:23:1a:24:ea:01:b5:0b:4f:32:cb:d1:
         3f:04:ec:9d:47:a0:50:6b:91:d8:5c:13:31:cc:26:d3:65:c5:
         14:3a:37:42:19:ce:f6:9e:f2:6a:98:89:6e:8a:6b:6d:2e:0e:
         5c:40:b3:41:0d:04:c6:08:0c:86:ee:da:5f:c7:ee:e2:f0:ec:
         55:a6:ba:a0:77:60:47:97:cd:c2:30:84:35:6d:1f:37:c3:66:
         05:f3:81:56:6e:93:02:df:23:03:31:24:88:87:fa:7e:e9:7b:
         3e:69:8b:96:6e:ba:9c:f2:5c:41:02:8d:04:52:95:01:ae:18:
         fa:b4:97:15:71:9c:e6:13:ad:ef:d4:1b:44:a5:cf:40:6c:6f:
         da:f6:af:0d:64:8f:51:b8:9e:62:e5:92:88:1e:3e:d1:6e:5f:
         df:ad:2c:40
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYOd5TNmtysl70JS7yZUSaKf0yTgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIwN0MzNEFERjgxNTZCNjYzNUY2QzdFMUVBMjE3RTE1
NEY0MEE3RjAeFw0yNTExMDMxODI2NDZaFw0yNjExMDIxODMxNDZaMDMxMTAvBgNV
BAMTKEUyQjU5RkNGNThEQjREOTU5RTk4N0VDRjQ0NEY1RTI0N0IyOEY1QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6PjZpScXz73co3s28WFDAq7M6
8kxc3FsHhxodCwsK8oTGRhtc5r/r2e/n19Um4RRGmly+9b0jTFtf0uPZRkqWWwQM
TmvKp8X9WqK30D3uDc8AFtmHJoQ1+PRWQsGrsUuMeN3nNPHbmBr2Yucc+mVQSQVL
TX1ksQccuxF8eUbLUphx7u93Fy81ZzA5cLuOqRGb+pzuJ23fAscrl1ULpu1v5i1M
F0tg442MGy1fSpMQAsaVZSqrKLlWwYAP1qv9M5xFA8iswVEIv9qMbGfu1oRF160o
Sv+fz9/jMp4IDIxWyeJOmln1Q7MH1/snCBJlsCz9GrGbSI6B1WarZrx8i8GZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4rWfz1jbTZWemH7PRE9eJHso9agwHwYDVR0j
BBgwFoAUGwfDSt+BVrZjX2x+HqIX4VT0Cn8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2dndWhHdE12RTFoQVZ5Mk52cHpDdjNGTDJOa1ZiVkhMeWNVaXNjc0hw
Yk4vMS8xQjA3QzM0QURGODE1NkI2NjM1RjZDN0UxRUEyMTdFMTU0RjQwQTdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCMDdDMzRBREY4MTU2QjY2
MzVGNkM3RTFFQTIxN0UxNTRGNDBBN0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NnZ3VoR3RNdkUxaEFWeTJOdnB6Q3YzRkwyTmtWYlZITHljVWlzY3NIcGJOLzEv
MzEzOTMxMmUzNjJlMzIzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzMzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvwb8MA0GCSqGSIb3DQEBCwUAA4IBAQC2t26csW+s
IkJKoF7eGjijhG3fx/SPPRvUI5oiCy/S7/ObbOCnV/QH4efgHryQBXghFVOL5vnR
8ch9HCMK/VogSRM0sAlvlnkd2uUx11+Gtton9a/2njuuN9da5QN7i81mIxok6gG1
C08yy9E/BOydR6BQa5HYXBMxzCbTZcUUOjdCGc72nvJqmIluimttLg5cQLNBDQTG
CAyG7tpfx+7i8OxVprqgd2BHl83CMIQ1bR83w2YF84FWbpMC3yMDMSSIh/p+6Xs+
aYuWbrqc8lxBAo0EUpUBrhj6tJcVcZzmE63v1BtEpc9AbG/a9q8NZI9RuJ5i5ZKI
Hj7Rbl/frSxA
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:32:41 2025 by rpki-client