Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/3138392e382e39362e302f32302d3234203d3e203238363730.roa
File:                     3138392e382e39362e302f32302d3234203d3e203238363730.roa (raw, json)
Hash identifier:          hkuHE0uuplkpmlLR3ixKN5vVZRZFkEhI6iVDTNpExP4=
Subject key identifier:   15:B0:3B:A4:EA:EC:C2:50:8F:B2:80:D9:CA:B3:F6:52:05:3F:48:50
Certificate issuer:       /CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236
Certificate serial:       429349B9B364CBE0F033D32A55563536EF5F834E
Authority key identifier: 4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/3138392e382e39362e302f32302d3234203d3e203238363730.roa
Signing time:             Tue 01 Jul 2025 15:46:34 +0000
ROA not before:           Tue 01 Jul 2025 15:41:34 +0000
ROA not after:            Tue 30 Jun 2026 15:46:34 +0000
asID:                     28670
IP address blocks:        189.8.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl
                          rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:93:49:b9:b3:64:cb:e0:f0:33:d3:2a:55:56:35:36:ef:5f:83:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236
        Validity
            Not Before: Jul  1 15:41:34 2025 GMT
            Not After : Jun 30 15:46:34 2026 GMT
        Subject: CN=15B03BA4EAECC2508FB280D9CAB3F652053F4850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b8:8a:c2:4c:9d:11:48:aa:89:e2:b4:1f:92:
                    e2:51:52:6e:72:89:49:7a:25:53:19:04:23:20:f6:
                    4f:6d:9a:c7:bf:1c:96:0f:50:ea:7f:32:5f:b9:13:
                    91:87:6f:b0:22:83:1e:fd:78:6c:6b:f0:d7:0a:48:
                    a5:77:b2:06:b0:71:15:6a:99:32:24:72:e6:c9:bc:
                    f6:e2:0a:d5:a6:c9:f2:2e:53:1f:ad:ed:1b:e8:06:
                    da:17:00:a1:36:a1:ff:99:af:9d:b7:f5:e2:e5:7a:
                    9c:ed:5a:6a:46:1d:b4:92:22:41:86:2a:b1:d2:29:
                    63:dd:ee:41:13:c7:67:fa:7c:61:3f:a3:b3:eb:aa:
                    5e:64:15:89:d1:ab:b9:bf:e5:c6:5b:1a:f1:21:36:
                    01:b5:e9:6d:19:51:0b:44:9a:00:8f:27:fc:73:31:
                    fa:e8:0d:04:a0:89:17:d6:c8:42:a7:ed:97:bd:70:
                    30:17:67:47:13:58:4f:d6:c3:eb:63:dd:77:02:83:
                    d9:19:78:b1:76:93:fb:10:a4:f3:f7:da:b2:40:fa:
                    1d:4e:88:a8:a9:93:39:c8:2e:99:1c:90:e2:c2:8a:
                    63:73:9e:26:ad:d7:20:30:b7:96:01:de:bb:37:6b:
                    be:41:36:c0:1c:92:ed:0f:33:d6:28:d0:05:94:28:
                    b0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B0:3B:A4:EA:EC:C2:50:8F:B2:80:D9:CA:B3:F6:52:05:3F:48:50
            X509v3 Authority Key Identifier:
                keyid:4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/3138392e382e39362e302f32302d3234203d3e203238363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.8.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bf:4e:e7:16:44:84:91:c2:f5:53:3c:fe:c5:d7:d9:19:15:26:
         30:8d:2f:59:73:54:67:39:22:78:8a:66:6d:b3:50:36:74:93:
         30:87:7c:8d:e3:c7:27:87:a7:84:dd:66:43:c2:47:0b:dc:e7:
         e1:34:74:2e:66:eb:76:e0:d3:22:02:8c:1d:d0:71:e7:f8:d4:
         f4:2d:29:5f:c3:51:05:a5:b7:f1:49:fd:f6:77:e7:48:13:11:
         40:da:68:19:02:96:f8:b9:77:eb:65:ba:50:66:a1:d1:08:e0:
         78:b4:b8:7b:73:af:1c:44:4f:44:cc:03:d9:a7:4a:82:94:e0:
         42:ea:4d:b5:6f:d4:e5:74:2c:21:ed:b3:dc:9f:fe:f3:b8:6b:
         25:23:8d:96:a1:07:3f:02:78:c1:1b:34:f9:d4:37:d9:fc:8e:
         75:ff:10:39:60:f0:96:5a:0b:ca:11:7b:f6:73:c6:5f:21:86:
         f2:67:91:aa:b4:33:e5:51:b7:7c:06:3c:90:ce:76:cd:e0:40:
         08:bb:0c:b9:f7:84:89:1a:05:ad:e9:76:fc:79:a4:33:ea:82:
         27:92:45:1e:b1:a9:bb:08:96:b4:53:b6:77:56:5f:35:cb:43:
         ff:ca:bd:5c:06:f0:b5:94:34:32:74:a7:8a:50:3f:91:75:ea:
         82:86:58:a4
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUQpNJubNky+DwM9MqVVY1Nu9fg04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU3RUIzMUI2RDQ1MzJEMUMxMDQ0NERCM0I4OEQxRjZE
MDAyRjIzNjAeFw0yNTA3MDExNTQxMzRaFw0yNjA2MzAxNTQ2MzRaMDMxMTAvBgNV
BAMTKDE1QjAzQkE0RUFFQ0MyNTA4RkIyODBEOUNBQjNGNjUyMDUzRjQ4NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbuIrCTJ0RSKqJ4rQfkuJRUm5y
iUl6JVMZBCMg9k9tmse/HJYPUOp/Ml+5E5GHb7Aigx79eGxr8NcKSKV3sgawcRVq
mTIkcubJvPbiCtWmyfIuUx+t7RvoBtoXAKE2of+Zr5239eLlepztWmpGHbSSIkGG
KrHSKWPd7kETx2f6fGE/o7Prql5kFYnRq7m/5cZbGvEhNgG16W0ZUQtEmgCPJ/xz
MfroDQSgiRfWyEKn7Ze9cDAXZ0cTWE/Ww+tj3XcCg9kZeLF2k/sQpPP32rJA+h1O
iKipkznILpkckOLCimNzniat1yAwt5YB3rs3a75BNsAcku0PM9Yo0AWUKLB/AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUFbA7pOrswlCPsoDZyrP2UgU/SFAwHwYDVR0j
BBgwFoAUTn6zG21FMtHBBETbO4jR9tAC8jYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnJXenhZc2NqaFRqUkw5R2FVWDNGbVR6aXp2em5CZVNSTEc3aTYyRm5a
UEwvMC80RTdFQjMxQjZENDUzMkQxQzEwNDQ0REIzQjg4RDFGNkQwMDJGMjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFN0VCMzFCNkQ0NTMyRDFD
MTA0NDREQjNCODhEMUY2RDAwMkYyMzYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZyV3p4WXNjamhUalJMOUdhVVgzRm1Ueml6dnpuQmVTUkxHN2k2MkZuWlBMLzAv
MzEzODM5MmUzODJlMzkzNjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzgzNjM3
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAS9CGAwDQYJKoZIhvcNAQELBQADggEBAL9O5xZEhJHC9VM8
/sXX2RkVJjCNL1lzVGc5IniKZm2zUDZ0kzCHfI3jxyeHp4TdZkPCRwvc5+E0dC5m
63bg0yICjB3Qcef41PQtKV/DUQWlt/FJ/fZ350gTEUDaaBkClvi5d+tlulBmodEI
4Hi0uHtzrxxET0TMA9mnSoKU4ELqTbVv1OV0LCHts9yf/vO4ayUjjZahBz8CeMEb
NPnUN9n8jnX/EDlg8JZaC8oRe/Zzxl8hhvJnkaq0M+VRt3wGPJDOds3gQAi7DLn3
hIkaBa3pdvx5pDPqgieSRR6xqbsIlrRTtndWXzXLQ//KvVwG8LWUNDJ0p4pQP5F1
6oKGWKQ=
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:30:24 2025 by rpki-client