Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231362e302f32312d3231203d3e20323632363533.roa
File:                     3137372e3130352e3231362e302f32312d3231203d3e20323632363533.roa (raw, json)
Hash identifier:          0+HDcovfFD35RWRjvPWak+B2zGX9fuGjr7ni6om3Yig=
Subject key identifier:   C0:99:A8:F6:F4:B3:F4:48:15:64:0F:99:CF:35:BC:87:0A:B3:BC:CD
Certificate issuer:       /CN=13A209790813EB704E8D837910B6D58314EFF4F9
Certificate serial:       546FC19BC5E1EBB4144A1CA961AC87D68B52FEE1
Authority key identifier: 13:A2:09:79:08:13:EB:70:4E:8D:83:79:10:B6:D5:83:14:EF:F4:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231362e302f32312d3231203d3e20323632363533.roa
Signing time:             Wed 09 Jul 2025 19:55:13 +0000
ROA not before:           Wed 09 Jul 2025 19:50:13 +0000
ROA not after:            Wed 08 Jul 2026 19:55:13 +0000
asID:                     262653
IP address blocks:        177.105.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 08:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6f:c1:9b:c5:e1:eb:b4:14:4a:1c:a9:61:ac:87:d6:8b:52:fe:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A209790813EB704E8D837910B6D58314EFF4F9
        Validity
            Not Before: Jul  9 19:50:13 2025 GMT
            Not After : Jul  8 19:55:13 2026 GMT
        Subject: CN=C099A8F6F4B3F44815640F99CF35BC870AB3BCCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:76:9c:12:78:9d:45:02:36:89:ea:b7:f2:99:
                    29:69:78:0a:1f:9c:e6:1c:3f:9e:47:53:3f:b3:68:
                    77:a7:65:7c:b7:38:31:10:26:db:67:e5:cc:95:df:
                    67:e1:b6:7c:a5:de:d8:c7:98:3f:7a:25:38:db:43:
                    32:f8:8c:f2:5a:38:c2:df:10:8d:38:d7:33:3b:a1:
                    ae:65:79:03:55:c4:d7:16:d8:9a:de:fd:67:a9:f1:
                    76:c7:77:4b:71:e3:9c:55:8e:0b:97:d1:96:ac:74:
                    a9:a6:62:c0:46:bb:fb:0f:ee:31:86:80:57:05:09:
                    b7:63:ed:7c:39:b1:4b:a3:20:76:db:5c:74:ba:43:
                    71:99:1c:4b:3e:5c:3b:ba:00:9e:c8:29:2d:3c:27:
                    f0:34:15:00:90:8e:74:a9:b2:65:ef:21:7c:42:2e:
                    ce:e4:b0:d1:f2:7b:68:c6:65:3a:82:0f:9b:f1:8e:
                    f4:60:d8:ed:84:3f:3a:05:42:ae:0a:aa:18:1e:21:
                    d4:97:14:0e:f2:24:04:4d:51:e4:b1:5c:87:4f:3c:
                    d8:27:5a:bb:52:e3:c3:de:9e:5d:3b:0a:52:be:f2:
                    e0:d1:8c:4e:8c:20:c0:a4:54:5b:df:0f:f4:c1:d7:
                    cf:e9:fa:05:f4:ad:12:31:c6:a9:ca:22:a4:a5:35:
                    b9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:99:A8:F6:F4:B3:F4:48:15:64:0F:99:CF:35:BC:87:0A:B3:BC:CD
            X509v3 Authority Key Identifier:
                keyid:13:A2:09:79:08:13:EB:70:4E:8D:83:79:10:B6:D5:83:14:EF:F4:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231362e302f32312d3231203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:e0:cf:67:bd:34:75:86:03:f1:20:f1:10:b0:00:09:de:02:
         79:b0:08:df:c5:c5:bf:6a:ce:fd:5f:9e:e9:a9:0b:8a:6f:98:
         36:44:a3:f6:bc:bb:9d:74:d3:9b:2d:58:b3:fa:d9:3f:68:d2:
         65:49:aa:31:57:0b:41:91:62:94:fe:a3:88:f6:31:e2:50:45:
         f6:b7:69:f0:82:87:f8:ea:9c:80:8f:12:1e:aa:03:2c:de:26:
         a4:50:be:c7:bd:46:e0:5f:67:2f:cd:12:ee:82:13:3c:b4:ce:
         5f:05:36:79:b8:7f:45:5e:b1:70:2b:0d:c7:bf:f2:42:44:9b:
         49:f6:97:5a:e9:77:de:57:1b:dd:5f:b4:dd:e8:89:14:28:1c:
         cc:f3:f9:19:5d:40:e1:2e:10:03:19:56:f3:50:6b:36:38:14:
         72:23:b7:ec:50:3f:9a:f6:a7:a6:57:b4:44:cb:38:81:95:b3:
         08:c6:48:74:17:d6:65:9c:bd:a7:26:c7:36:06:d1:0d:0f:81:
         0b:18:7f:7f:5f:12:22:27:84:24:a5:81:68:93:e3:91:33:1a:
         a7:f9:5c:28:86:bd:c6:84:2e:d5:9e:ee:da:97:9c:64:bf:e0:
         8d:00:32:60:4d:87:ae:23:50:86:4e:a7:a1:cf:ea:6a:b6:a5:
         99:ea:7a:f6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVG/Bm8Xh67QUShypYayH1otS/uEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNBMjA5NzkwODEzRUI3MDRFOEQ4Mzc5MTBCNkQ1ODMx
NEVGRjRGOTAeFw0yNTA3MDkxOTUwMTNaFw0yNjA3MDgxOTU1MTNaMDMxMTAvBgNV
BAMTKEMwOTlBOEY2RjRCM0Y0NDgxNTY0MEY5OUNGMzVCQzg3MEFCM0JDQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFdpwSeJ1FAjaJ6rfymSlpeAof
nOYcP55HUz+zaHenZXy3ODEQJttn5cyV32fhtnyl3tjHmD96JTjbQzL4jPJaOMLf
EI041zM7oa5leQNVxNcW2Jre/Wep8XbHd0tx45xVjguX0ZasdKmmYsBGu/sP7jGG
gFcFCbdj7Xw5sUujIHbbXHS6Q3GZHEs+XDu6AJ7IKS08J/A0FQCQjnSpsmXvIXxC
Ls7ksNHye2jGZTqCD5vxjvRg2O2EPzoFQq4KqhgeIdSXFA7yJARNUeSxXIdPPNgn
WrtS48Penl07ClK+8uDRjE6MIMCkVFvfD/TB18/p+gX0rRIxxqnKIqSlNbkzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUwJmo9vSz9EgVZA+ZzzW8hwqzvM0wHwYDVR0j
BBgwFoAUE6IJeQgT63BOjYN5ELbVgxTv9PkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkRHZVE2U1N0ZFRDeTlUc012Tjc5bWlRclRIQ1NSdlhnMnMya0x0RDgx
ZnovMC8xM0EyMDk3OTA4MTNFQjcwNEU4RDgzNzkxMEI2RDU4MzE0RUZGNEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzQTIwOTc5MDgxM0VCNzA0
RThEODM3OTEwQjZENTgzMTRFRkY0RjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pER2VRNlNTdGRUQ3k5VHNNdk43OW1pUXJUSENTUnZYZzJzMmtMdEQ4MWZ6LzAv
MzEzNzM3MmUzMTMwMzUyZTMyMzEzNjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy
MzYzMjM2MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7Fp2DANBgkqhkiG9w0BAQsFAAOCAQEAFeDP
Z700dYYD8SDxELAACd4CebAI38XFv2rO/V+e6akLim+YNkSj9ry7nXTTmy1Ys/rZ
P2jSZUmqMVcLQZFilP6jiPYx4lBF9rdp8IKH+OqcgI8SHqoDLN4mpFC+x71G4F9n
L80S7oITPLTOXwU2ebh/RV6xcCsNx7/yQkSbSfaXWul33lcb3V+03eiJFCgczPP5
GV1A4S4QAxlW81BrNjgUciO37FA/mvanple0RMs4gZWzCMZIdBfWZZy9pybHNgbR
DQ+BCxh/f18SIieEJKWBaJPjkTMap/lcKIa9xoQu1Z7u2pecZL/gjQAyYE2HriNQ
hk6noc/qaralmep69g==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:04:03 2025 by rpki-client