Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa
File:                     3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa (raw, json)
Hash identifier:          3oAiuYhvJ+DZt7xofUUV3n0WqVXHrbVIja37AnR0sW0=
Subject key identifier:   5B:F8:23:5F:E1:A8:29:43:E0:7F:EA:59:32:31:FC:E8:EF:70:18:41
Certificate issuer:       /CN=450AC02B21B3D12F3F8A7B3E6101148947852DCC
Certificate serial:       4CD2687FEA37753A95D3C1CCC0F3B43E43C07719
Authority key identifier: 45:0A:C0:2B:21:B3:D1:2F:3F:8A:7B:3E:61:01:14:89:47:85:2D:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450AC02B21B3D12F3F8A7B3E6101148947852DCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa
Signing time:             Thu 09 Oct 2025 12:14:25 +0000
ROA not before:           Thu 09 Oct 2025 12:09:25 +0000
ROA not after:            Thu 08 Oct 2026 12:14:25 +0000
asID:                     262374
IP address blocks:        177.128.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.crl
                          rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450AC02B21B3D12F3F8A7B3E6101148947852DCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d2:68:7f:ea:37:75:3a:95:d3:c1:cc:c0:f3:b4:3e:43:c0:77:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450AC02B21B3D12F3F8A7B3E6101148947852DCC
        Validity
            Not Before: Oct  9 12:09:25 2025 GMT
            Not After : Oct  8 12:14:25 2026 GMT
        Subject: CN=5BF8235FE1A82943E07FEA593231FCE8EF701841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4c:bb:d0:52:7e:8d:bc:19:28:9d:b0:0a:5d:
                    17:8f:39:82:d6:d3:69:b0:1a:2a:c1:be:02:e7:aa:
                    d1:1c:fc:3b:d8:09:e4:df:33:82:a3:d2:99:be:ac:
                    68:be:86:87:0b:88:b9:94:c3:5b:10:43:53:0b:b6:
                    b9:1a:74:be:5a:cb:93:08:00:eb:6d:9c:9c:1d:41:
                    9c:a9:60:c9:24:37:62:cf:44:ae:4e:bc:f3:7c:79:
                    21:29:ce:d8:3b:85:d9:00:99:2d:01:fe:d0:df:ff:
                    a3:c7:ee:bf:f7:5a:6a:f1:95:c9:d3:78:c7:6c:81:
                    0c:69:6a:62:e4:41:81:a8:d8:ed:be:6a:eb:0c:0e:
                    44:84:3e:5d:ff:e9:b2:db:8b:67:f8:24:6f:b6:a5:
                    91:48:8a:7a:15:0b:27:3d:0d:96:04:91:89:f5:79:
                    c3:3e:86:95:05:59:1b:f8:f8:18:46:e0:18:33:a3:
                    8b:11:f3:72:6a:16:f3:af:7c:c5:25:22:8a:13:de:
                    39:b7:47:2d:4b:43:ec:3d:83:de:86:40:be:2c:04:
                    9e:d3:80:48:30:af:4e:40:1c:2a:b7:9f:d2:24:a5:
                    1b:f5:60:37:f5:7a:9e:30:12:5d:4a:bf:1a:3b:3a:
                    98:6d:e3:ce:4c:6e:ca:41:f2:80:7b:18:ef:b8:38:
                    3e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F8:23:5F:E1:A8:29:43:E0:7F:EA:59:32:31:FC:E8:EF:70:18:41
            X509v3 Authority Key Identifier:
                keyid:45:0A:C0:2B:21:B3:D1:2F:3F:8A:7B:3E:61:01:14:89:47:85:2D:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450AC02B21B3D12F3F8A7B3E6101148947852DCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:14:d0:41:8a:27:55:4f:e9:25:79:39:85:3f:ef:9a:fe:60:
         5c:e1:dc:6c:f1:9d:19:8c:fc:9f:1a:54:39:c2:37:df:b9:6f:
         cb:37:65:a3:a4:16:dd:a7:9f:d9:cb:58:a1:82:8a:69:7e:9f:
         86:b0:c2:72:1d:04:05:7f:d2:3e:b1:db:7a:64:aa:dd:2b:32:
         32:f2:35:d7:73:6d:78:be:93:e4:e7:f6:9d:03:75:ca:08:ca:
         cb:57:8d:5b:cc:05:0b:4b:ce:82:64:35:d3:66:23:8f:17:66:
         b2:e1:45:c4:58:64:fb:b4:92:b0:45:7c:89:97:99:b1:0b:7a:
         fc:6a:69:83:21:7e:48:93:6c:ff:b9:50:bf:92:d3:54:f9:a1:
         20:0b:24:2a:75:12:bf:83:14:c9:c1:55:84:28:ac:0c:9c:dc:
         ba:26:3f:10:14:1b:a1:da:59:1a:2e:7c:ea:7b:44:dd:73:fd:
         cf:c3:d0:ed:a9:0a:00:3d:f8:b5:08:f8:ad:49:c4:cb:db:b0:
         58:3f:65:2e:37:37:d9:dd:d0:73:83:02:09:cd:f7:0f:19:35:
         ba:f0:3f:27:04:f4:7d:35:ff:75:7c:bb:5c:0e:de:7b:34:f6:
         bb:6f:32:a1:4e:c4:c5:88:96:0f:6a:4b:9f:a7:27:bf:fd:5c:
         0c:f4:16:2e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTNJof+o3dTqV08HMwPO0PkPAdxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUwQUMwMkIyMUIzRDEyRjNGOEE3QjNFNjEwMTE0ODk0
Nzg1MkRDQzAeFw0yNTEwMDkxMjA5MjVaFw0yNjEwMDgxMjE0MjVaMDMxMTAvBgNV
BAMTKDVCRjgyMzVGRTFBODI5NDNFMDdGRUE1OTMyMzFGQ0U4RUY3MDE4NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXTLvQUn6NvBkonbAKXRePOYLW
02mwGirBvgLnqtEc/DvYCeTfM4Kj0pm+rGi+hocLiLmUw1sQQ1MLtrkadL5ay5MI
AOttnJwdQZypYMkkN2LPRK5OvPN8eSEpztg7hdkAmS0B/tDf/6PH7r/3WmrxlcnT
eMdsgQxpamLkQYGo2O2+ausMDkSEPl3/6bLbi2f4JG+2pZFIinoVCyc9DZYEkYn1
ecM+hpUFWRv4+BhG4Bgzo4sR83JqFvOvfMUlIooT3jm3Ry1LQ+w9g96GQL4sBJ7T
gEgwr05AHCq3n9IkpRv1YDf1ep4wEl1Kvxo7Opht485MbspB8oB7GO+4OD4VAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUW/gjX+GoKUPgf+pZMjH86O9wGEEwHwYDVR0j
BBgwFoAURQrAKyGz0S8/ins+YQEUiUeFLcwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGVraDVOd0pySmk4OWNLWTlvS3g0YVVLMXNoTFVCazk5ZE53RUh6N1c1
Sm4vMC80NTBBQzAyQjIxQjNEMTJGM0Y4QTdCM0U2MTAxMTQ4OTQ3ODUyRENDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1MEFDMDJCMjFCM0QxMkYz
RjhBN0IzRTYxMDExNDg5NDc4NTJEQ0MuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhla2g1TndKckppODljS1k5b0t4NGFVSzFzaExVQms5OWROd0VIejdXNUpuLzAv
MzEzNzM3MmUzMTMyMzgyZTMxMzYzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7GAoDANBgkqhkiG9w0BAQsFAAOCAQEAoRTQ
QYonVU/pJXk5hT/vmv5gXOHcbPGdGYz8nxpUOcI337lvyzdlo6QW3aef2ctYoYKK
aX6fhrDCch0EBX/SPrHbemSq3SsyMvI113NteL6T5Of2nQN1ygjKy1eNW8wFC0vO
gmQ102YjjxdmsuFFxFhk+7SSsEV8iZeZsQt6/GppgyF+SJNs/7lQv5LTVPmhIAsk
KnUSv4MUycFVhCisDJzcuiY/EBQbodpZGi586ntE3XP9z8PQ7akKAD34tQj4rUnE
y9uwWD9lLjc32d3Qc4MCCc33Dxk1uvA/JwT0fTX/dXy7XA7eezT2u28yoU7ExYiW
D2pLn6cnv/1cDPQWLg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:23:04 2025 by rpki-client