Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138392e34352e36342e302f31382d3138203d3e203238323230.roa
File:                     3138392e34352e36342e302f31382d3138203d3e203238323230.roa (raw, json)
Hash identifier:          s1aPpwBuTHdcGtcvac946DzgQgFNXNi4arkEMjyhQsE=
Subject key identifier:   B6:1B:E1:EE:D3:EA:E1:F3:B4:1C:D8:2C:A6:FB:79:D5:68:09:8C:6A
Certificate issuer:       /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
Certificate serial:       17AEFFAF5E7EAC8FD6D006D2F8319BBDD0BC6EC8
Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138392e34352e36342e302f31382d3138203d3e203238323230.roa
Signing time:             Sat 18 Oct 2025 23:01:04 +0000
ROA not before:           Sat 18 Oct 2025 22:56:04 +0000
ROA not after:            Sat 17 Oct 2026 23:01:04 +0000
asID:                     28220
IP address blocks:        189.45.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ae:ff:af:5e:7e:ac:8f:d6:d0:06:d2:f8:31:9b:bd:d0:bc:6e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72
        Validity
            Not Before: Oct 18 22:56:04 2025 GMT
            Not After : Oct 17 23:01:04 2026 GMT
        Subject: CN=B61BE1EED3EAE1F3B41CD82CA6FB79D568098C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:e1:c9:2a:42:1c:72:a1:d2:26:f1:9f:bf:
                    18:b0:22:83:bd:cb:ed:31:9b:90:9c:4f:cf:35:3c:
                    2e:41:b2:88:e8:a6:c4:f0:e4:75:4d:0d:f5:c2:88:
                    ae:89:b3:75:d1:98:00:e1:b5:15:41:73:11:3b:1e:
                    cb:29:ec:65:e5:10:24:91:2f:e8:1d:da:e7:71:a3:
                    41:1b:72:84:4f:ed:33:43:a2:80:b1:18:2f:8d:0e:
                    d3:a3:c1:b6:10:ab:f6:5e:9f:7e:02:ad:6e:ef:f6:
                    55:c5:86:f9:c8:a9:1c:e1:4b:43:4d:19:10:1f:94:
                    40:ed:ab:0f:61:e9:2a:c2:b5:1e:63:29:23:a0:ea:
                    79:0d:f0:06:f5:ee:94:ba:cb:d3:9f:96:7d:2a:b9:
                    ad:39:ef:3e:c4:99:84:bd:7e:b8:8e:81:60:f6:97:
                    9d:f5:43:04:7c:1c:15:04:90:20:55:3a:0c:31:31:
                    4c:10:e1:c7:a5:90:19:27:f7:b6:ea:24:b2:c9:bc:
                    1e:0f:a1:5c:46:dd:c9:f8:a3:3e:d6:60:91:96:78:
                    2e:7a:8c:9e:15:cb:c9:a5:1a:be:4b:e7:e9:6c:56:
                    fa:b8:c8:7e:89:30:5e:e9:5f:05:16:e8:1f:e1:cd:
                    01:21:1e:ed:3b:b3:a7:b5:59:be:e5:e8:e1:b4:0d:
                    5a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1B:E1:EE:D3:EA:E1:F3:B4:1C:D8:2C:A6:FB:79:D5:68:09:8C:6A
            X509v3 Authority Key Identifier:
                keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138392e34352e36342e302f31382d3138203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1b:9a:eb:57:fa:3c:14:f3:9e:8f:3f:6d:ec:06:87:a3:25:cf:
         08:1d:99:d0:d9:97:54:78:df:a5:9c:9d:9d:f3:ff:6c:d8:07:
         59:79:85:20:e0:81:80:51:28:84:92:dd:1a:3b:04:b3:f0:45:
         42:12:be:a0:c2:49:43:52:a3:0b:ce:0d:98:be:5e:92:06:58:
         da:ce:a1:16:d6:b1:a2:a5:58:c1:f7:24:07:40:4d:64:34:7f:
         41:08:32:e0:f7:1c:17:44:5c:ef:23:18:c5:0d:cf:79:b8:5e:
         f6:07:b1:a2:fa:7d:11:d9:10:67:9c:f9:0b:3d:cd:64:af:84:
         18:d6:d5:db:a5:9d:ea:db:88:21:54:4c:48:52:9d:97:0a:4e:
         ce:4f:a7:6e:a7:34:40:6c:86:ba:7c:8c:6a:5b:59:6d:1b:df:
         80:7b:10:41:c9:f1:a1:d5:27:2f:f1:1c:be:cf:97:1e:7e:61:
         d2:83:b3:7e:60:2e:37:f7:ca:8d:bc:33:e3:75:89:98:b8:a7:
         49:1f:e0:6a:49:b0:69:db:c9:a8:7e:a3:97:6e:49:ee:8c:ab:
         a2:c8:bb:e9:a9:a6:01:54:62:5c:f7:a0:c5:f0:21:d4:5d:fd:
         af:5e:d8:9d:09:79:a0:cc:85:45:9f:df:e7:75:ce:43:48:47:
         b1:4d:34:35
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUF67/r15+rI/W0AbS+DGbvdC8bsgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy
RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDRaFw0yNjEwMTcyMzAxMDRaMDMxMTAvBgNV
BAMTKEI2MUJFMUVFRDNFQUUxRjNCNDFDRDgyQ0E2RkI3OUQ1NjgwOThDNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxWOHJKkIccqHSJvGfvxiwIoO9
y+0xm5CcT881PC5BsojopsTw5HVNDfXCiK6Js3XRmADhtRVBcxE7Hssp7GXlECSR
L+gd2udxo0EbcoRP7TNDooCxGC+NDtOjwbYQq/Zen34CrW7v9lXFhvnIqRzhS0NN
GRAflEDtqw9h6SrCtR5jKSOg6nkN8Ab17pS6y9Ofln0qua057z7EmYS9friOgWD2
l531QwR8HBUEkCBVOgwxMUwQ4celkBkn97bqJLLJvB4PoVxG3cn4oz7WYJGWeC56
jJ4Vy8mlGr5L5+lsVvq4yH6JMF7pXwUW6B/hzQEhHu07s6e1Wb7l6OG0DVqZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUthvh7tPq4fO0HNgspvt51WgJjGowHwYDVR0j
BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3
QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzODM5MmUzNDM1MmUzNjM0MmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzIzODMy
MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBr0tQDANBgkqhkiG9w0BAQsFAAOCAQEAG5rrV/o8FPOe
jz9t7AaHoyXPCB2Z0NmXVHjfpZydnfP/bNgHWXmFIOCBgFEohJLdGjsEs/BFQhK+
oMJJQ1KjC84NmL5ekgZY2s6hFtaxoqVYwfckB0BNZDR/QQgy4PccF0Rc7yMYxQ3P
ebhe9gexovp9EdkQZ5z5Cz3NZK+EGNbV26Wd6tuIIVRMSFKdlwpOzk+nbqc0QGyG
unyMaltZbRvfgHsQQcnxodUnL/Ecvs+XHn5h0oOzfmAuN/fKjbwz43WJmLinSR/g
akmwadvJqH6jl25J7oyrosi76ammAVRiXPegxfAh1F39r17YnQl5oMyFRZ/f53XO
Q0hHsU00NQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:25 2025 by rpki-client