Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/3134332e302e3230382e302f32322d3232203d3e20323634303732.roa
File:                     3134332e302e3230382e302f32322d3232203d3e20323634303732.roa (raw, json)
Hash identifier:          0DsoFGcC4PegNXUTlmlLpFKVbuzoZM+36kYZcLU3/wc=
Subject key identifier:   31:8A:46:E5:29:D1:A8:5E:D8:44:EB:64:34:41:DC:3C:3E:84:FD:05
Certificate issuer:       /CN=6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E
Certificate serial:       463B2456D16F618FBCC0D1B92C538730B2A90E7B
Authority key identifier: 6B:BE:7D:34:36:64:A3:5C:8F:98:55:EF:B4:5A:CC:D9:08:3B:6D:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/3134332e302e3230382e302f32322d3232203d3e20323634303732.roa
Signing time:             Thu 30 Oct 2025 11:52:49 +0000
ROA not before:           Thu 30 Oct 2025 11:47:49 +0000
ROA not after:            Thu 29 Oct 2026 11:52:49 +0000
asID:                     264072
IP address blocks:        143.0.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E.crl
                          rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 17:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3b:24:56:d1:6f:61:8f:bc:c0:d1:b9:2c:53:87:30:b2:a9:0e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E
        Validity
            Not Before: Oct 30 11:47:49 2025 GMT
            Not After : Oct 29 11:52:49 2026 GMT
        Subject: CN=318A46E529D1A85ED844EB643441DC3C3E84FD05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:60:5c:80:07:e5:28:a1:89:18:e1:d0:da:31:
                    b2:4f:21:91:e6:4b:ce:16:b0:2d:7e:f4:39:c9:f1:
                    87:3d:f5:d3:3b:5f:fd:fe:c2:74:bd:f0:fa:ce:dc:
                    2c:90:47:6b:7e:59:35:16:91:ea:bd:a7:fa:6b:5b:
                    e4:b8:92:bb:41:09:e2:10:57:16:ab:3d:29:9c:08:
                    f9:87:f1:30:29:08:d7:f8:00:8f:80:be:98:de:24:
                    12:7a:33:54:6d:9b:c5:b8:45:53:dc:51:f4:64:53:
                    e0:50:27:bd:d2:1e:c8:38:4a:7e:63:f8:4c:72:8d:
                    58:d5:ea:0f:2e:b9:d1:99:70:7d:dc:b8:09:40:f9:
                    2f:46:21:f4:f1:e1:3b:6b:dd:4f:4b:3e:78:12:4a:
                    36:ee:b1:30:62:cd:0e:1d:6f:f7:17:83:47:d1:40:
                    bd:78:06:e9:d7:fc:76:77:23:a9:8f:a4:be:c4:6a:
                    aa:f3:23:86:33:b8:ae:4b:8a:b6:cf:9a:5f:74:75:
                    39:1b:30:6b:0d:05:7c:ec:a1:61:1b:29:38:4f:b6:
                    8a:25:5c:d1:6a:c4:c7:c3:c8:66:03:5a:0d:53:29:
                    96:2a:7b:15:49:5d:bd:42:a6:ea:cd:2e:8b:b2:3f:
                    71:e1:b5:af:c7:dd:6c:64:08:dd:37:e5:59:2f:25:
                    93:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8A:46:E5:29:D1:A8:5E:D8:44:EB:64:34:41:DC:3C:3E:84:FD:05
            X509v3 Authority Key Identifier:
                keyid:6B:BE:7D:34:36:64:A3:5C:8F:98:55:EF:B4:5A:CC:D9:08:3B:6D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/3134332e302e3230382e302f32322d3232203d3e20323634303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:70:11:ae:03:40:a1:e4:c4:fb:3c:d3:66:12:a2:9c:a5:3a:
         36:6d:6f:83:95:81:18:7a:8d:fe:09:79:ab:70:a7:95:c9:e4:
         0e:89:70:23:87:b4:35:fb:0c:a7:3d:44:5f:b4:46:73:fa:fd:
         d0:c0:34:24:87:df:73:e7:76:1a:23:e1:0a:e7:00:1b:1a:e4:
         07:76:13:f6:ec:ac:a1:fe:49:2c:ac:95:5f:38:f4:66:00:f0:
         69:4e:e4:1b:79:7b:c6:4d:c0:35:42:a3:b0:11:99:0f:33:65:
         d6:11:26:77:1b:05:44:5a:0a:8e:3d:a7:26:17:0b:e0:0d:a7:
         5b:9f:5b:d7:17:75:7c:ae:df:8f:ea:1c:09:6f:3e:20:36:40:
         e2:f8:1e:47:8f:a9:69:78:f8:a1:16:37:60:b2:75:be:70:7a:
         c8:d0:66:ba:c5:9f:96:54:09:30:91:b7:1a:d8:a4:6a:68:09:
         34:58:74:54:47:25:8e:22:cb:0e:2f:5f:c8:4d:24:4e:80:74:
         ce:3f:30:d7:d4:b9:fd:4f:39:9b:2e:20:85:69:12:87:38:99:
         3a:72:87:bd:78:5a:47:53:21:aa:45:c7:69:00:be:25:27:c4:
         e1:a8:65:08:f3:48:a6:02:d0:03:c3:58:94:a3:90:ee:18:f8:
         ff:6e:6f:6b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURjskVtFvYY+8wNG5LFOHMLKpDnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJCRTdEMzQzNjY0QTM1QzhGOTg1NUVGQjQ1QUNDRDkw
ODNCNkQ0RTAeFw0yNTEwMzAxMTQ3NDlaFw0yNjEwMjkxMTUyNDlaMDMxMTAvBgNV
BAMTKDMxOEE0NkU1MjlEMUE4NUVEODQ0RUI2NDM0NDFEQzNDM0U4NEZEMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYFyAB+UooYkY4dDaMbJPIZHm
S84WsC1+9DnJ8Yc99dM7X/3+wnS98PrO3CyQR2t+WTUWkeq9p/prW+S4krtBCeIQ
VxarPSmcCPmH8TApCNf4AI+AvpjeJBJ6M1Rtm8W4RVPcUfRkU+BQJ73SHsg4Sn5j
+ExyjVjV6g8uudGZcH3cuAlA+S9GIfTx4Ttr3U9LPngSSjbusTBizQ4db/cXg0fR
QL14BunX/HZ3I6mPpL7EaqrzI4YzuK5LirbPml90dTkbMGsNBXzsoWEbKThPtool
XNFqxMfDyGYDWg1TKZYqexVJXb1CpurNLouyP3Hhta/H3WxkCN035VkvJZONAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMYpG5SnRqF7YROtkNEHcPD6E/QUwHwYDVR0j
BBgwFoAUa759NDZko1yPmFXvtFrM2Qg7bU4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzRLWFNIbzgyYmgyb3N5V2lIUW9iRE5XYzZ4RnRvSGdEMXFmVjRmMldF
dHEvMC82QkJFN0QzNDM2NjRBMzVDOEY5ODU1RUZCNDVBQ0NEOTA4M0I2RDRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCQkU3RDM0MzY2NEEzNUM4
Rjk4NTVFRkI0NUFDQ0Q5MDgzQjZENEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c0S1hTSG84MmJoMm9zeVdpSFFvYkROV2M2eEZ0b0hnRDFxZlY0ZjJXRXRxLzAv
MzEzNDMzMmUzMDJlMzIzMDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM0
MzAzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCjwDQMA0GCSqGSIb3DQEBCwUAA4IBAQBBcBGuA0Ch
5MT7PNNmEqKcpTo2bW+DlYEYeo3+CXmrcKeVyeQOiXAjh7Q1+wynPURftEZz+v3Q
wDQkh99z53YaI+EK5wAbGuQHdhP27Kyh/kksrJVfOPRmAPBpTuQbeXvGTcA1QqOw
EZkPM2XWESZ3GwVEWgqOPacmFwvgDadbn1vXF3V8rt+P6hwJbz4gNkDi+B5Hj6lp
ePihFjdgsnW+cHrI0Ga6xZ+WVAkwkbca2KRqaAk0WHRURyWOIssOL1/ITSROgHTO
PzDX1Ln9TzmbLiCFaRKHOJk6coe9eFpHUyGqRcdpAL4lJ8ThqGUI80imAtADw1iU
o5DuGPj/bm9r
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:36:10 2025 by rpki-client