Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32332d3233203d3e20323638363035.roa
File:                     3139302e3131312e3135362e302f32332d3233203d3e20323638363035.roa (raw, json)
Hash identifier:          jVhSryByaLCGVsAp3DTtUvVSG/b/xGkxk+YzQCZUI9Y=
Subject key identifier:   3C:CB:4A:16:0F:91:3A:03:0A:0B:D2:4A:BE:15:1A:6B:11:1D:CD:44
Certificate issuer:       /CN=5A8812394683FF664E1D37D3FF52295E5DB57FBF
Certificate serial:       6340070BF5C6DC774BC67A1AAE30A302F1B2660F
Authority key identifier: 5A:88:12:39:46:83:FF:66:4E:1D:37:D3:FF:52:29:5E:5D:B5:7F:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A8812394683FF664E1D37D3FF52295E5DB57FBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32332d3233203d3e20323638363035.roa
Signing time:             Mon 23 Jun 2025 14:27:34 +0000
ROA not before:           Mon 23 Jun 2025 14:22:34 +0000
ROA not after:            Mon 22 Jun 2026 14:27:34 +0000
asID:                     268605
IP address blocks:        190.111.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5A8812394683FF664E1D37D3FF52295E5DB57FBF.crl
                          rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5A8812394683FF664E1D37D3FF52295E5DB57FBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A8812394683FF664E1D37D3FF52295E5DB57FBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 07:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:40:07:0b:f5:c6:dc:77:4b:c6:7a:1a:ae:30:a3:02:f1:b2:66:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A8812394683FF664E1D37D3FF52295E5DB57FBF
        Validity
            Not Before: Jun 23 14:22:34 2025 GMT
            Not After : Jun 22 14:27:34 2026 GMT
        Subject: CN=3CCB4A160F913A030A0BD24ABE151A6B111DCD44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3f:fb:c7:08:62:0a:43:07:b4:71:e1:62:7f:
                    03:0b:8a:44:de:4a:5a:73:6b:4c:5d:6a:92:56:6c:
                    27:33:a0:68:73:42:4e:20:1a:3a:80:fd:ba:7d:0b:
                    21:a9:0f:1c:d4:80:e2:80:03:d1:19:08:be:cc:e9:
                    45:e6:c8:75:69:e4:f4:be:7e:b0:73:4f:2c:06:c5:
                    d1:3e:b8:0b:e4:a8:1f:e9:37:bf:bc:f2:49:cc:9f:
                    89:8e:6d:f7:b7:a1:2a:9b:cb:2e:a4:5e:4d:da:09:
                    44:0d:84:5d:56:eb:b9:68:86:0f:c7:58:10:3d:e0:
                    28:78:cc:66:6e:39:b4:72:ea:07:01:d3:de:29:a2:
                    0b:59:24:1f:00:0c:aa:00:4f:09:66:67:03:db:e6:
                    0d:79:8f:cd:8f:b9:71:3f:20:e2:68:00:d6:ab:7c:
                    74:e8:b8:4c:f7:83:1b:3a:c4:ca:36:7c:6f:57:99:
                    01:75:db:d3:4d:57:b6:1d:ea:fb:1e:37:5a:2f:b0:
                    b4:8f:23:46:b7:60:e8:eb:4e:0a:a3:6d:b8:c2:47:
                    59:ec:5b:9b:6f:59:33:04:ab:09:e6:c5:e9:bd:62:
                    8c:f8:27:65:f5:28:d2:82:09:22:0a:80:1e:02:3d:
                    ee:81:fe:a3:29:ef:1b:08:30:a6:5d:62:ab:d0:17:
                    17:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CB:4A:16:0F:91:3A:03:0A:0B:D2:4A:BE:15:1A:6B:11:1D:CD:44
            X509v3 Authority Key Identifier:
                keyid:5A:88:12:39:46:83:FF:66:4E:1D:37:D3:FF:52:29:5E:5D:B5:7F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5A8812394683FF664E1D37D3FF52295E5DB57FBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A8812394683FF664E1D37D3FF52295E5DB57FBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32332d3233203d3e20323638363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:8c:36:ee:85:30:00:39:6d:20:e1:73:2c:1d:61:a1:35:e7:
         62:37:ed:37:33:4f:13:ad:05:7e:17:bc:37:34:41:0a:f1:fb:
         20:4c:d8:4a:8e:25:cb:e4:7e:7f:c8:f3:ae:c6:a5:b0:60:04:
         12:ea:30:af:55:ed:26:41:8a:5d:74:db:68:67:dc:f4:ce:5f:
         d4:dd:66:ea:b9:47:21:ef:84:04:d1:3c:73:e6:65:c4:64:99:
         7f:55:dd:a2:d0:a4:90:52:8f:da:24:9a:a6:2a:37:12:fb:a8:
         dd:70:52:14:47:07:bf:37:22:aa:56:b4:f6:61:47:00:44:17:
         35:27:ce:f7:81:59:f9:e1:e9:55:c0:8f:55:3c:30:dc:29:5b:
         3d:fd:9b:e4:e8:95:93:4f:13:e3:fc:95:9b:91:48:5b:5f:3d:
         be:b5:e8:19:79:14:94:04:d4:26:3d:0a:aa:74:81:5f:46:1a:
         1a:7a:a8:78:1f:14:0d:71:d1:f9:c7:8a:d4:07:68:63:0a:41:
         32:6a:34:b7:12:38:fd:72:52:64:3d:87:70:7b:57:17:c4:f9:
         24:bf:b1:eb:f0:10:91:0e:77:b8:5a:8b:ed:11:95:76:f1:0f:
         1b:df:30:96:93:61:32:d3:fa:d3:69:5a:10:3b:a0:80:f0:06:
         4b:2a:1a:a2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUY0AHC/XG3HdLxnoarjCjAvGyZg8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE4ODEyMzk0NjgzRkY2NjRFMUQzN0QzRkY1MjI5NUU1
REI1N0ZCRjAeFw0yNTA2MjMxNDIyMzRaFw0yNjA2MjIxNDI3MzRaMDMxMTAvBgNV
BAMTKDNDQ0I0QTE2MEY5MTNBMDMwQTBCRDI0QUJFMTUxQTZCMTExRENENDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWP/vHCGIKQwe0ceFifwMLikTe
Slpza0xdapJWbCczoGhzQk4gGjqA/bp9CyGpDxzUgOKAA9EZCL7M6UXmyHVp5PS+
frBzTywGxdE+uAvkqB/pN7+88knMn4mObfe3oSqbyy6kXk3aCUQNhF1W67lohg/H
WBA94Ch4zGZuObRy6gcB094pogtZJB8ADKoATwlmZwPb5g15j82PuXE/IOJoANar
fHTouEz3gxs6xMo2fG9XmQF129NNV7Yd6vseN1ovsLSPI0a3YOjrTgqjbbjCR1ns
W5tvWTMEqwnmxem9Yoz4J2X1KNKCCSIKgB4CPe6B/qMp7xsIMKZdYqvQFxeHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPMtKFg+ROgMKC9JKvhUaaxEdzUQwHwYDVR0j
BBgwFoAUWogSOUaD/2ZOHTfT/1IpXl21f78wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWRaekF0UFBaQkR3UHFoVUVoR2J3MmVlRkJyNVpoaW5zeUZ3OEp4eHFr
VEwvMC81QTg4MTIzOTQ2ODNGRjY2NEUxRDM3RDNGRjUyMjk1RTVEQjU3RkJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBODgxMjM5NDY4M0ZGNjY0
RTFEMzdEM0ZGNTIyOTVFNURCNTdGQkYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlkWnpBdFBQWkJEd1BxaFVFaEdidzJlZUZCcjVaaGluc3lGdzhKeHhxa1RMLzAv
MzEzOTMwMmUzMTMxMzEyZTMxMzUzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzODM2MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAb5vnDANBgkqhkiG9w0BAQsFAAOCAQEAZIw2
7oUwADltIOFzLB1hoTXnYjftNzNPE60Ffhe8NzRBCvH7IEzYSo4ly+R+f8jzrsal
sGAEEuowr1XtJkGKXXTbaGfc9M5f1N1m6rlHIe+EBNE8c+ZlxGSZf1XdotCkkFKP
2iSapio3Evuo3XBSFEcHvzciqla09mFHAEQXNSfO94FZ+eHpVcCPVTww3ClbPf2b
5OiVk08T4/yVm5FIW189vrXoGXkUlATUJj0KqnSBX0YaGnqoeB8UDXHR+ceK1Ado
YwpBMmo0txI4/XJSZD2HcHtXF8T5JL+x6/AQkQ53uFqL7RGVdvEPG98wlpNhMtP6
02laEDuggPAGSyoaog==
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:55:05 2025 by rpki-client