Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131302e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e3131302e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          uhk+ZpvntdEtiOpzKUiwNOPJfLBlDjazYg8pMKbYh6U=
Subject key identifier:   46:E3:22:57:58:B9:9D:5F:07:6A:F5:62:4D:A9:44:A5:03:15:E7:F3
Certificate issuer:       /CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
Certificate serial:       131D74DCEDC3A16DF60F296D21B05B6448BD3A51
Authority key identifier: C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131302e302f32342d3234203d3e203533313533.roa
Signing time:             Thu 25 Sep 2025 13:35:22 +0000
ROA not before:           Thu 25 Sep 2025 13:30:22 +0000
ROA not after:            Thu 24 Sep 2026 13:35:22 +0000
asID:                     53153
IP address blocks:        187.61.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1d:74:dc:ed:c3:a1:6d:f6:0f:29:6d:21:b0:5b:64:48:bd:3a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D
        Validity
            Not Before: Sep 25 13:30:22 2025 GMT
            Not After : Sep 24 13:35:22 2026 GMT
        Subject: CN=46E3225758B99D5F076AF5624DA944A50315E7F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6d:6c:f3:84:d3:e9:bc:5d:f1:ca:68:49:b6:
                    d7:eb:d2:d6:bc:35:76:f9:ec:a9:e5:0b:97:01:9d:
                    c3:71:e7:86:96:fa:e4:16:aa:74:f2:4c:44:e5:ca:
                    09:79:da:7e:44:d6:98:bd:21:06:ef:10:cd:e9:9b:
                    d2:d8:75:21:5b:33:9a:98:07:4b:9e:74:b9:2c:66:
                    3d:da:cd:27:d8:65:c3:70:75:39:ad:a9:a7:be:9a:
                    da:4f:9f:9e:05:3c:6b:f1:3c:f1:f6:b1:c3:c3:e2:
                    7e:e5:66:31:a4:7b:39:bb:75:f3:1e:e5:ad:04:8d:
                    74:4c:24:ff:39:dc:2a:87:bb:0f:65:de:2d:6b:d2:
                    c5:40:da:ca:fc:5b:41:e7:44:55:05:11:e6:e5:8c:
                    a3:3a:37:a1:57:a9:51:09:3f:39:30:05:1f:07:24:
                    df:4f:30:08:24:f2:65:6f:10:33:6a:7e:2c:3c:e9:
                    3a:01:b5:7c:e2:9e:27:25:73:79:fb:e6:39:47:26:
                    99:c9:06:e1:f1:40:1e:f2:23:54:a9:31:00:29:42:
                    78:12:2e:5a:12:53:c1:13:6c:cc:d8:1a:d0:61:90:
                    35:09:9f:93:ac:e0:dd:13:b8:3e:a1:d9:60:d7:a3:
                    11:6d:1c:b2:31:af:a5:29:95:c3:8c:20:b0:0d:1c:
                    4a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E3:22:57:58:B9:9D:5F:07:6A:F5:62:4D:A9:44:A5:03:15:E7:F3
            X509v3 Authority Key Identifier:
                keyid:C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131302e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:36:06:0b:e4:49:8c:1d:42:b4:58:6d:55:d4:af:66:a0:a2:
         f0:57:7c:d8:d9:ec:fb:9e:42:f8:42:f8:38:7f:3d:ab:73:3c:
         ce:96:d1:2c:36:aa:6b:fe:3e:33:ba:f4:95:18:b8:2e:d5:d2:
         d4:7a:2c:b6:ce:82:a5:52:84:c3:3a:9e:87:c0:5e:db:f7:87:
         b3:e1:2a:02:c1:79:c8:40:2f:40:0e:c2:c6:39:f7:2d:43:01:
         84:00:97:1c:24:38:48:9c:19:dd:14:89:19:db:aa:87:2d:c7:
         14:70:58:9c:d1:b5:74:69:99:2f:65:f3:f9:be:f5:a8:11:84:
         2c:73:7d:eb:ff:b9:ed:90:c5:1b:b0:06:29:06:78:79:b9:86:
         1e:0b:64:26:54:e7:ac:0c:68:66:5b:6e:8f:be:6f:46:e7:3f:
         14:94:09:50:cc:21:ad:dd:32:5a:93:df:9e:a8:ef:68:89:45:
         e3:fe:42:cd:b2:92:78:31:66:b7:ce:66:d5:0b:7f:ef:97:4e:
         30:9c:0b:ad:07:55:ff:68:91:1a:a3:17:bb:d9:1f:e2:7e:ed:
         10:01:cf:37:bb:e3:7c:6a:97:a0:18:e3:f9:ab:ce:eb:0c:29:
         26:7a:93:42:73:a5:fd:5b:98:c8:0e:f2:ef:78:04:bc:63:47:
         b8:21:ee:73
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEx103O3DoW32DyltIbBbZEi9OlEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzkyRTdCREMwQzg2NjlDODZGQkNDQUU2RjM0MjREQkY2
OUQ3NzU2RDAeFw0yNTA5MjUxMzMwMjJaFw0yNjA5MjQxMzM1MjJaMDMxMTAvBgNV
BAMTKDQ2RTMyMjU3NThCOTlENUYwNzZBRjU2MjREQTk0NEE1MDMxNUU3RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgbWzzhNPpvF3xymhJttfr0ta8
NXb57KnlC5cBncNx54aW+uQWqnTyTETlygl52n5E1pi9IQbvEM3pm9LYdSFbM5qY
B0uedLksZj3azSfYZcNwdTmtqae+mtpPn54FPGvxPPH2scPD4n7lZjGkezm7dfMe
5a0EjXRMJP853CqHuw9l3i1r0sVA2sr8W0HnRFUFEebljKM6N6FXqVEJPzkwBR8H
JN9PMAgk8mVvEDNqfiw86ToBtXziniclc3n75jlHJpnJBuHxQB7yI1SpMQApQngS
LloSU8ETbMzYGtBhkDUJn5Os4N0TuD6h2WDXoxFtHLIxr6UplcOMILANHEpfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURuMiV1i5nV8HavViTalEpQMV5/MwHwYDVR0j
BBgwFoAUyS573AyGachvvMrm80JNv2nXdW0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC9DOTJFN0JEQzBDODY2OUM4NkZCQ0NBRTZGMzQyNERCRjY5RDc3NTZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5MkU3QkRDMEM4NjY5Qzg2
RkJDQ0FFNkYzNDI0REJGNjlENzc1NkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzODM3MmUzNjMxMmUzMTMxMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzEzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuz1uMA0GCSqGSIb3DQEBCwUAA4IBAQAFNgYL5EmM
HUK0WG1V1K9moKLwV3zY2ez7nkL4Qvg4fz2rczzOltEsNqpr/j4zuvSVGLgu1dLU
eiy2zoKlUoTDOp6HwF7b94ez4SoCwXnIQC9ADsLGOfctQwGEAJccJDhInBndFIkZ
26qHLccUcFic0bV0aZkvZfP5vvWoEYQsc33r/7ntkMUbsAYpBnh5uYYeC2QmVOes
DGhmW26Pvm9G5z8UlAlQzCGt3TJak9+eqO9oiUXj/kLNspJ4MWa3zmbVC3/vl04w
nAutB1X/aJEaoxe72R/ifu0QAc83u+N8apegGOP5q87rDCkmepNCc6X9W5jIDvLv
eAS8Y0e4Ie5z
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:49 2025 by rpki-client