Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/3230312e3133312e32342e302f32312d3234203d3e20323632353139.roa
File:                     3230312e3133312e32342e302f32312d3234203d3e20323632353139.roa (raw, json)
Hash identifier:          mP9+5bqfsDm/dmjMQXVlmyWNr6uSZK6tCq5xBi+Kc8Q=
Subject key identifier:   18:3A:84:98:FC:37:85:37:B8:2F:A8:1D:C8:A0:82:5E:A2:E4:B3:79
Certificate issuer:       /CN=CE2498E8CE7B488EBFB105BFE2A04876600CB5A3
Certificate serial:       69E2052AB2DB32A16668C0E543F0A0AD7F0D4215
Authority key identifier: CE:24:98:E8:CE:7B:48:8E:BF:B1:05:BF:E2:A0:48:76:60:0C:B5:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/3230312e3133312e32342e302f32312d3234203d3e20323632353139.roa
Signing time:             Fri 08 Aug 2025 19:26:43 +0000
ROA not before:           Fri 08 Aug 2025 19:21:43 +0000
ROA not after:            Fri 07 Aug 2026 19:26:43 +0000
asID:                     262519
IP address blocks:        201.131.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl
                          rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 06:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e2:05:2a:b2:db:32:a1:66:68:c0:e5:43:f0:a0:ad:7f:0d:42:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2498E8CE7B488EBFB105BFE2A04876600CB5A3
        Validity
            Not Before: Aug  8 19:21:43 2025 GMT
            Not After : Aug  7 19:26:43 2026 GMT
        Subject: CN=183A8498FC378537B82FA81DC8A0825EA2E4B379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:58:7c:c9:85:40:1c:d2:f4:02:7e:54:49:a7:
                    a2:b4:58:6d:20:2f:6a:f0:f0:e1:8f:36:0f:06:85:
                    7c:81:cb:ca:6d:91:be:31:50:37:0a:d8:3c:52:97:
                    2b:51:f0:f6:86:c1:a3:95:b3:6e:03:e8:70:b9:9c:
                    62:b7:12:be:df:4f:c9:b6:10:5c:ea:a1:90:55:9f:
                    b6:f3:0a:f3:06:c3:c9:f8:88:01:5f:45:94:23:f0:
                    5d:c1:8e:b3:3f:c8:23:0a:8d:30:bd:e2:55:a9:c1:
                    5e:45:e9:94:d9:90:6e:33:51:bb:05:03:91:fe:5a:
                    a6:3c:ab:34:fc:bc:f0:dd:a0:8a:4e:d5:b3:61:2a:
                    a3:95:e6:a5:be:67:b3:7c:dd:a4:3e:8d:33:34:81:
                    97:e0:32:a2:ed:14:88:10:9d:68:88:6a:d9:b1:69:
                    e3:47:e5:d8:ff:e7:e1:b8:f7:47:b5:9d:f6:38:0e:
                    f7:d4:7a:89:4c:8e:64:a9:ed:2b:9c:b2:76:dc:0f:
                    92:cb:c1:dc:04:37:2f:12:24:a2:d6:4b:c1:f7:54:
                    32:56:cf:48:48:33:a8:27:c8:18:e2:07:63:72:5a:
                    0e:eb:7f:9d:f0:97:23:2c:6c:58:8d:94:a5:7c:a6:
                    98:24:8c:a6:dd:cf:01:44:15:a9:a3:48:27:3a:9d:
                    20:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3A:84:98:FC:37:85:37:B8:2F:A8:1D:C8:A0:82:5E:A2:E4:B3:79
            X509v3 Authority Key Identifier:
                keyid:CE:24:98:E8:CE:7B:48:8E:BF:B1:05:BF:E2:A0:48:76:60:0C:B5:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/3230312e3133312e32342e302f32312d3234203d3e20323632353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:21:61:80:f7:2d:32:57:4a:78:97:4c:96:50:05:fd:b8:5c:
         a4:3a:26:e0:b3:78:49:8e:d8:1f:ec:2e:69:0a:e0:0b:24:bf:
         9f:94:31:df:bd:d8:74:4b:49:b6:15:e2:74:46:f3:d2:85:c0:
         33:ee:f3:38:ef:d5:d9:12:e0:4a:62:04:dc:99:7b:31:4a:0f:
         3e:15:65:a4:a4:f3:0c:c5:5d:b1:0d:25:b4:80:e6:40:5a:4e:
         88:ff:5c:f4:3a:41:d9:64:8f:56:35:01:a9:51:cb:5b:ba:ba:
         c4:3f:0c:02:21:a4:79:9c:f4:40:9f:6a:99:5d:02:15:db:19:
         1e:a0:ef:35:bd:01:25:2a:ec:1d:34:46:e0:c8:e7:1e:d3:e3:
         19:a7:71:40:be:4e:fb:c0:49:ad:51:7a:7e:68:f8:c1:0d:98:
         4d:70:ca:57:60:89:32:7b:84:13:3f:60:6a:0d:1d:88:ca:57:
         33:fb:bc:99:61:db:2b:03:28:74:31:c4:d0:34:52:7b:e4:2a:
         bf:71:17:1a:b2:76:2e:60:a3:2b:d3:34:d0:f7:69:af:31:eb:
         c1:3b:af:60:50:bc:80:74:34:f8:fc:32:df:c2:87:a2:48:d2:
         97:9e:96:c4:4b:75:83:91:1f:a9:d7:ec:68:42:f8:8b:50:57:
         f3:b5:e3:17
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaeIFKrLbMqFmaMDlQ/CgrX8NQhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UyNDk4RThDRTdCNDg4RUJGQjEwNUJGRTJBMDQ4NzY2
MDBDQjVBMzAeFw0yNTA4MDgxOTIxNDNaFw0yNjA4MDcxOTI2NDNaMDMxMTAvBgNV
BAMTKDE4M0E4NDk4RkMzNzg1MzdCODJGQTgxREM4QTA4MjVFQTJFNEIzNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYWHzJhUAc0vQCflRJp6K0WG0g
L2rw8OGPNg8GhXyBy8ptkb4xUDcK2DxSlytR8PaGwaOVs24D6HC5nGK3Er7fT8m2
EFzqoZBVn7bzCvMGw8n4iAFfRZQj8F3BjrM/yCMKjTC94lWpwV5F6ZTZkG4zUbsF
A5H+WqY8qzT8vPDdoIpO1bNhKqOV5qW+Z7N83aQ+jTM0gZfgMqLtFIgQnWiIatmx
aeNH5dj/5+G490e1nfY4DvfUeolMjmSp7SucsnbcD5LLwdwENy8SJKLWS8H3VDJW
z0hIM6gnyBjiB2NyWg7rf53wlyMsbFiNlKV8ppgkjKbdzwFEFamjSCc6nSBbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGDqEmPw3hTe4L6gdyKCCXqLks3kwHwYDVR0j
BBgwFoAUziSY6M57SI6/sQW/4qBIdmAMtaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFltaFFHYXZrZTJNUHBOQlpueEJlenFkMVJNM3I5TnhwcEpDOUFHVVV5
RFkvMC9DRTI0OThFOENFN0I0ODhFQkZCMTA1QkZFMkEwNDg3NjYwMENCNUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFMjQ5OEU4Q0U3QjQ4OEVC
RkIxMDVCRkUyQTA0ODc2NjAwQ0I1QTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhZbWhRR2F2a2UyTVBwTkJabnhCZXpxZDFSTTNyOU54cHBKQzlBR1VVeURZLzAv
MzIzMDMxMmUzMTMzMzEyZTMyMzQyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPJgxgwDQYJKoZIhvcNAQELBQADggEBAGMhYYD3
LTJXSniXTJZQBf24XKQ6JuCzeEmO2B/sLmkK4Askv5+UMd+92HRLSbYV4nRG89KF
wDPu8zjv1dkS4EpiBNyZezFKDz4VZaSk8wzFXbENJbSA5kBaToj/XPQ6Qdlkj1Y1
AalRy1u6usQ/DAIhpHmc9ECfapldAhXbGR6g7zW9ASUq7B00RuDI5x7T4xmncUC+
TvvASa1Ren5o+MENmE1wyldgiTJ7hBM/YGoNHYjKVzP7vJlh2ysDKHQxxNA0Unvk
Kr9xFxqydi5goyvTNND3aa8x68E7r2BQvIB0NPj8Mt/Ch6JI0peelsRLdYORH6nX
7GhC+ItQV/O14xc=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:24:20 2025 by rpki-client