Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130322e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e3130322e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          doLbOMt1ZcG6KI/j8pVzzGGMBqxP4OiaO/CDCRrCvLQ=
Subject key identifier:   81:DA:99:FD:EF:98:54:81:D1:23:D0:C7:42:FE:7C:A4:91:50:A3:F1
Certificate issuer:       /CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
Certificate serial:       48F8B04C57701D8EF5168978E6D2AFFE9F9BA014
Authority key identifier: C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130322e302f32342d3234203d3e203533313533.roa
Signing time:             Thu 25 Sep 2025 13:35:23 +0000
ROA not before:           Thu 25 Sep 2025 13:30:23 +0000
ROA not after:            Thu 24 Sep 2026 13:35:23 +0000
asID:                     53153
IP address blocks:        187.61.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f8:b0:4c:57:70:1d:8e:f5:16:89:78:e6:d2:af:fe:9f:9b:a0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
        Validity
            Not Before: Sep 25 13:30:23 2025 GMT
            Not After : Sep 24 13:35:23 2026 GMT
        Subject: CN=81DA99FDEF985481D123D0C742FE7CA49150A3F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:39:c3:49:f6:5a:d9:43:94:13:eb:e1:ca:
                    d5:a7:cc:aa:1c:fd:a1:3a:94:a7:63:ba:6d:5a:de:
                    27:2f:76:dc:4b:d6:f1:ed:3d:a3:76:58:68:91:1e:
                    b5:33:49:47:b4:16:06:20:40:33:ab:5a:35:b1:c5:
                    2b:13:55:78:33:1c:a4:cf:b5:3c:2e:2d:f5:8f:5c:
                    a4:e7:2b:cd:06:3b:af:60:b6:2c:15:1c:f4:ea:dd:
                    cc:5d:c0:d0:b3:c0:34:6b:70:b3:c1:34:25:10:aa:
                    8d:62:45:10:3c:d3:0a:84:ec:ac:ee:8e:f8:e3:f1:
                    b4:e8:0f:c8:63:45:94:08:65:c7:80:1a:6f:55:33:
                    88:74:67:a9:9c:9d:ff:cc:9a:18:98:b3:8f:28:1f:
                    f1:e1:85:92:cc:4e:26:57:8c:ac:c3:24:82:49:1e:
                    c9:2d:dd:6c:02:de:d5:d4:32:0a:31:b2:3a:0b:22:
                    a0:2f:a3:2c:5e:2b:71:1a:90:76:36:c0:0a:14:48:
                    15:2f:be:44:82:0f:82:76:59:7f:bd:a3:bb:49:d1:
                    23:87:6c:3e:fa:92:48:30:c4:d5:a2:56:3b:79:7e:
                    48:1d:b7:7c:93:5b:3e:96:f1:89:2c:29:77:85:25:
                    b8:3e:b9:35:31:41:be:b1:2d:a1:90:9d:ec:12:a4:
                    c3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DA:99:FD:EF:98:54:81:D1:23:D0:C7:42:FE:7C:A4:91:50:A3:F1
            X509v3 Authority Key Identifier:
                keyid:C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130322e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:45:ef:5c:bc:b3:c4:f3:14:0a:75:46:19:fc:bb:55:6b:1c:
         62:ec:d5:d9:19:2a:a5:74:10:5f:35:34:20:b7:97:83:7a:31:
         cf:c4:6e:1d:f0:c4:93:b8:9c:30:67:d2:88:d5:00:17:a6:18:
         71:25:00:7b:cd:a3:07:f0:2b:ba:d9:ac:e0:c9:dc:85:65:e0:
         d5:31:de:2d:e4:fa:b5:b1:75:09:75:89:da:a7:82:51:74:1a:
         55:41:d7:e1:48:70:64:48:60:48:7f:e6:36:b1:ed:b1:9c:b7:
         10:55:bf:f4:ae:21:86:ab:fa:13:d6:d9:45:17:40:67:04:71:
         5c:db:c5:3d:a6:e3:f7:83:15:c2:4b:ae:30:63:b8:b4:5e:03:
         c4:a7:68:a1:41:7c:f8:32:72:73:ef:5f:34:83:fb:0c:9d:a5:
         4d:3a:9c:13:2d:e0:dc:64:1d:e7:ad:f2:2e:7e:45:38:5a:49:
         ff:ac:49:03:02:df:3c:19:18:0f:bd:75:91:6c:9b:fc:86:50:
         08:e2:0f:7d:ee:87:b4:b0:8b:92:13:9e:d6:29:2e:da:d4:9c:
         fd:5e:ce:96:cc:65:78:26:20:09:7a:f3:3c:0b:eb:65:84:2f:
         bb:0c:19:c9:fa:3e:c0:cb:c2:33:35:6d:a4:6d:29:b5:7f:6c:
         57:e6:fb:71
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSPiwTFdwHY71Fol45tKv/p+boBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzkyRTdCREMwQzg2NjlDODZGQkNDQUU2RjM0MjREQkY2
OUQ3NzU2RDAeFw0yNTA5MjUxMzMwMjNaFw0yNjA5MjQxMzM1MjNaMDMxMTAvBgNV
BAMTKDgxREE5OUZERUY5ODU0ODFEMTIzRDBDNzQyRkU3Q0E0OTE1MEEzRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrkznDSfZa2UOUE+vhytWnzKoc
/aE6lKdjum1a3icvdtxL1vHtPaN2WGiRHrUzSUe0FgYgQDOrWjWxxSsTVXgzHKTP
tTwuLfWPXKTnK80GO69gtiwVHPTq3cxdwNCzwDRrcLPBNCUQqo1iRRA80wqE7Kzu
jvjj8bToD8hjRZQIZceAGm9VM4h0Z6mcnf/MmhiYs48oH/HhhZLMTiZXjKzDJIJJ
Hskt3WwC3tXUMgoxsjoLIqAvoyxeK3EakHY2wAoUSBUvvkSCD4J2WX+9o7tJ0SOH
bD76kkgwxNWiVjt5fkgdt3yTWz6W8YksKXeFJbg+uTUxQb6xLaGQnewSpMPzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgdqZ/e+YVIHRI9DHQv58pJFQo/EwHwYDVR0j
BBgwFoAUyS573AyGachvvMrm80JNv2nXdW0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC9DOTJFN0JEQzBDODY2OUM4NkZCQ0NBRTZGMzQyNERCRjY5RDc3NTZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5MkU3QkRDMEM4NjY5Qzg2
RkJDQ0FFNkYzNDI0REJGNjlENzc1NkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzODM3MmUzNjMxMmUzMTMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzEzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuz1mMA0GCSqGSIb3DQEBCwUAA4IBAQBTRe9cvLPE
8xQKdUYZ/LtVaxxi7NXZGSqldBBfNTQgt5eDejHPxG4d8MSTuJwwZ9KI1QAXphhx
JQB7zaMH8Cu62azgydyFZeDVMd4t5Pq1sXUJdYnap4JRdBpVQdfhSHBkSGBIf+Y2
se2xnLcQVb/0riGGq/oT1tlFF0BnBHFc28U9puP3gxXCS64wY7i0XgPEp2ihQXz4
MnJz7180g/sMnaVNOpwTLeDcZB3nrfIufkU4Wkn/rEkDAt88GRgPvXWRbJv8hlAI
4g997oe0sIuSE57WKS7a1Jz9Xs6WzGV4JiAJevM8C+tlhC+7DBnJ+j7Ay8IzNW2k
bSm1f2xX5vtx
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:52 2025 by rpki-client