Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3231322e302f32322d3232203d3e203238323730.roa
File:                     3138372e31382e3231322e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier:          bva5M90iq6qETV4+dZqgtyMcFED1kiW8rv7p2QZJ3rM=
Subject key identifier:   6F:0E:AB:70:2D:06:72:EC:16:0B:92:E5:9E:59:00:48:43:54:0E:54
Certificate issuer:       /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Certificate serial:       56B2759C58F5DE41C061E82AD64CF5209BBFA146
Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3231322e302f32322d3232203d3e203238323730.roa
Signing time:             Mon 20 Oct 2025 13:43:08 +0000
ROA not before:           Mon 20 Oct 2025 13:38:08 +0000
ROA not after:            Mon 19 Oct 2026 13:43:08 +0000
asID:                     28270
IP address blocks:        187.18.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b2:75:9c:58:f5:de:41:c0:61:e8:2a:d6:4c:f5:20:9b:bf:a1:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
        Validity
            Not Before: Oct 20 13:38:08 2025 GMT
            Not After : Oct 19 13:43:08 2026 GMT
        Subject: CN=6F0EAB702D0672EC160B92E59E59004843540E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:15:ef:b5:92:78:cf:c7:d5:4f:57:72:b4:49:
                    35:7a:30:8b:34:10:5f:f7:71:31:e6:a9:ba:2a:55:
                    c6:54:d3:9e:bf:56:86:c4:ca:bc:6e:74:73:21:d6:
                    d1:73:ef:70:41:8f:ec:76:3c:e1:09:08:c3:97:6f:
                    3d:e8:b3:71:81:be:96:0a:e7:e8:c6:80:fa:01:f0:
                    1e:7b:69:04:1b:bb:28:79:7a:08:cf:5b:00:69:0b:
                    ee:4d:0a:fc:14:cc:f2:77:d4:65:8f:c8:d2:5c:d7:
                    b8:56:5f:21:5a:b4:65:b0:7c:ab:e5:af:5a:f7:6e:
                    9e:5f:39:2e:dd:d9:a4:47:81:f5:b7:59:b9:0e:ff:
                    ca:9c:0f:18:77:a5:4f:f0:37:b4:48:c4:c6:06:93:
                    a1:52:bb:03:9e:83:8a:1e:d5:b6:22:d2:95:07:01:
                    c2:fa:67:1e:b6:3b:4f:0e:9b:fc:b4:9e:54:91:74:
                    cf:40:e3:27:bf:d7:6e:a1:a7:bc:28:21:b7:fe:61:
                    25:bd:8b:7c:31:d0:c7:28:ca:f7:44:96:82:3e:17:
                    b3:36:9a:4b:ac:e3:9a:1a:81:61:f4:c3:c8:17:d5:
                    45:bb:ab:15:82:fe:17:8c:36:f9:20:7a:9f:72:88:
                    bf:a6:73:52:87:76:46:da:9a:37:f8:7b:9e:a7:03:
                    1c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0E:AB:70:2D:06:72:EC:16:0B:92:E5:9E:59:00:48:43:54:0E:54
            X509v3 Authority Key Identifier:
                keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3231322e302f32322d3232203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.18.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:48:69:90:b7:7c:ad:29:43:cf:26:1c:d2:ba:33:68:9f:4c:
         b3:c7:96:69:d9:38:19:9c:5f:c5:cf:8e:04:c4:dc:af:8a:1d:
         61:23:fd:19:80:8b:12:df:32:d6:e1:51:90:09:86:12:bf:ae:
         66:2b:33:3e:5c:b1:a8:93:a9:ce:b1:d1:11:33:a1:a6:02:78:
         74:c2:45:81:e3:32:c9:93:0d:27:9b:8d:b9:0e:ec:04:c5:0a:
         26:9f:bc:1d:2d:d6:79:b2:65:97:2d:97:91:2c:ca:1e:55:b8:
         61:69:a9:da:a8:81:e8:07:6d:78:eb:ae:f2:d5:db:cb:ac:20:
         89:47:c6:25:57:91:26:76:fa:ef:e6:84:05:cf:60:10:3c:cd:
         5d:e4:ce:a0:98:1b:34:00:0e:07:20:ea:5b:28:b1:bd:08:eb:
         0a:f8:72:e4:a3:bb:9e:4f:10:62:05:a7:ac:68:0a:11:cc:dc:
         94:e0:79:00:a9:e8:19:5e:45:71:ca:56:c8:73:9b:b1:e9:0f:
         ab:f9:07:24:93:02:1d:c8:4b:90:b4:2a:ef:a4:cf:b8:39:f1:
         c9:e2:c9:d8:5a:2e:13:f4:d3:34:a7:91:3c:33:47:28:9d:2d:
         53:3c:3d:84:50:a9:1b:1d:d0:f6:b8:29:58:d9:49:42:93:41:
         15:03:bf:b0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVrJ1nFj13kHAYegq1kz1IJu/oUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy
RTg5QUM3MjAeFw0yNTEwMjAxMzM4MDhaFw0yNjEwMTkxMzQzMDhaMDMxMTAvBgNV
BAMTKDZGMEVBQjcwMkQwNjcyRUMxNjBCOTJFNTlFNTkwMDQ4NDM1NDBFNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyFe+1knjPx9VPV3K0STV6MIs0
EF/3cTHmqboqVcZU056/VobEyrxudHMh1tFz73BBj+x2POEJCMOXbz3os3GBvpYK
5+jGgPoB8B57aQQbuyh5egjPWwBpC+5NCvwUzPJ31GWPyNJc17hWXyFatGWwfKvl
r1r3bp5fOS7d2aRHgfW3WbkO/8qcDxh3pU/wN7RIxMYGk6FSuwOeg4oe1bYi0pUH
AcL6Zx62O08Om/y0nlSRdM9A4ye/126hp7woIbf+YSW9i3wx0McoyvdEloI+F7M2
mkus45oagWH0w8gX1UW7qxWC/heMNvkgep9yiL+mc1KHdkbamjf4e56nAxxjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbw6rcC0GcuwWC5LlnlkASENUDlQwHwYDVR0j
BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3
QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzODM3MmUzMTM4MmUzMjMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzIzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCuxLUMA0GCSqGSIb3DQEBCwUAA4IBAQCbSGmQt3yt
KUPPJhzSujNon0yzx5Zp2TgZnF/Fz44ExNyvih1hI/0ZgIsS3zLW4VGQCYYSv65m
KzM+XLGok6nOsdERM6GmAnh0wkWB4zLJkw0nm425DuwExQomn7wdLdZ5smWXLZeR
LMoeVbhhaanaqIHoB214667y1dvLrCCJR8YlV5Emdvrv5oQFz2AQPM1d5M6gmBs0
AA4HIOpbKLG9COsK+HLko7ueTxBiBaesaAoRzNyU4HkAqegZXkVxylbIc5ux6Q+r
+QckkwIdyEuQtCrvpM+4OfHJ4snYWi4T9NM0p5E8M0conS1TPD2EUKkbHdD2uClY
2UlCk0EVA7+w
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:17:31 2025 by rpki-client