Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e312e34382e302f32302d3234203d3e203238323031.roa
File:                     3138372e312e34382e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          vDhVxpwLM5YlZMBxOqZV7u6kaacGvqSRX1A5oOjw1m8=
Subject key identifier:   E2:BB:E1:F6:33:2B:91:AF:D9:0D:57:39:D4:2F:F6:F7:F0:81:A7:46
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       4CE069E61AEE164D6286AF13EBDD7A38CE3710BC
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e312e34382e302f32302d3234203d3e203238323031.roa
Signing time:             Sat 02 Aug 2025 12:58:29 +0000
ROA not before:           Sat 02 Aug 2025 12:53:29 +0000
ROA not after:            Sat 01 Aug 2026 12:58:29 +0000
asID:                     28201
IP address blocks:        187.1.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e0:69:e6:1a:ee:16:4d:62:86:af:13:eb:dd:7a:38:ce:37:10:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Aug  2 12:53:29 2025 GMT
            Not After : Aug  1 12:58:29 2026 GMT
        Subject: CN=E2BBE1F6332B91AFD90D5739D42FF6F7F081A746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f2:a9:da:59:3d:fb:5c:c7:4c:fc:25:1a:2a:
                    6c:0f:5b:61:58:d5:32:b0:a3:e4:2e:39:4c:8a:29:
                    a0:8b:bf:d6:d4:c4:99:fe:32:ff:a1:29:24:25:7c:
                    60:cf:d6:5b:f7:bd:bd:26:9c:85:8f:dd:93:a0:cb:
                    1b:02:01:cc:07:f1:c5:11:a9:32:e1:6e:21:5a:86:
                    59:33:01:34:bf:e8:a7:ad:17:30:48:3f:51:b6:eb:
                    63:e9:77:1d:c1:d8:53:71:71:6c:78:e0:ed:30:1a:
                    b7:20:6d:ae:f6:a6:53:23:e0:6e:6c:7a:ec:95:22:
                    56:92:4c:7c:14:13:21:f2:e8:a5:c6:33:d7:19:3b:
                    24:c0:69:39:32:59:17:1a:59:6c:84:aa:49:38:ba:
                    4a:28:12:c5:35:24:fc:f7:8d:4b:56:b7:87:d6:cf:
                    77:df:97:cb:aa:0d:9c:40:ef:6c:fb:fc:a9:72:f3:
                    f2:5b:3d:a4:a8:ad:3a:36:3b:55:02:46:d5:7a:02:
                    63:93:6d:8b:70:b2:9b:59:8c:8b:39:4f:24:71:54:
                    a7:ec:bc:11:de:a4:8f:7c:37:0a:c0:48:76:29:4e:
                    1d:77:67:f9:73:25:10:72:c3:e2:31:ab:20:db:61:
                    c8:c1:88:21:42:08:07:34:51:a1:15:e6:f7:9a:5f:
                    44:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BB:E1:F6:33:2B:91:AF:D9:0D:57:39:D4:2F:F6:F7:F0:81:A7:46
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e312e34382e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:18:fe:42:00:14:e3:22:e8:8e:59:7a:8c:11:ba:f6:5b:7f:
         74:d9:00:31:2a:65:c5:81:f0:1f:21:22:f5:01:ac:3e:81:e4:
         4d:cd:ff:b1:91:3d:e1:24:e0:2c:f8:f6:8f:33:55:ae:b0:25:
         12:99:2d:26:53:b7:59:7b:de:be:ef:39:8c:66:e0:f6:c6:08:
         27:80:43:ec:35:3c:31:53:12:2b:cc:bc:c8:64:9a:cb:f9:4f:
         8a:d8:a2:c5:31:c4:59:b2:33:cf:25:c9:36:40:85:70:31:6d:
         29:23:57:06:ff:79:23:52:10:a4:cd:5b:1a:71:e9:eb:b5:eb:
         ce:14:a9:f2:0d:7c:6a:67:f7:75:de:9e:09:6d:db:ec:b5:58:
         1b:9f:70:c7:e6:38:53:ad:4e:fc:3f:1e:5b:8b:74:b0:4f:61:
         6c:94:f8:db:50:69:c3:e0:a9:2a:26:a6:3e:eb:5f:2f:b3:43:
         67:a4:44:e0:ad:57:f7:68:31:0a:86:89:ed:24:06:f0:08:47:
         ff:53:70:c4:24:6a:b6:b8:06:8a:e5:d9:87:a9:9c:03:55:db:
         80:21:6f:04:2f:a3:3b:5c:b7:0a:5f:69:f0:35:d7:33:cf:ca:
         6e:ae:b2:af:7e:ea:51:a0:da:9a:85:1a:56:8d:ba:d7:ad:6b:
         9c:a9:34:89
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUTOBp5hruFk1ihq8T6916OM43ELwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMxRkU5Mzg3NjQwQTc3N0I3M0Q5NDIxMUQ0QzhGRkE1
QzY2OTMwNDAeFw0yNTA4MDIxMjUzMjlaFw0yNjA4MDExMjU4MjlaMDMxMTAvBgNV
BAMTKEUyQkJFMUY2MzMyQjkxQUZEOTBENTczOUQ0MkZGNkY3RjA4MUE3NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX8qnaWT37XMdM/CUaKmwPW2FY
1TKwo+QuOUyKKaCLv9bUxJn+Mv+hKSQlfGDP1lv3vb0mnIWP3ZOgyxsCAcwH8cUR
qTLhbiFahlkzATS/6KetFzBIP1G262Ppdx3B2FNxcWx44O0wGrcgba72plMj4G5s
euyVIlaSTHwUEyHy6KXGM9cZOyTAaTkyWRcaWWyEqkk4ukooEsU1JPz3jUtWt4fW
z3ffl8uqDZxA72z7/Kly8/JbPaSorTo2O1UCRtV6AmOTbYtwsptZjIs5TyRxVKfs
vBHepI98NwrASHYpTh13Z/lzJRByw+IxqyDbYcjBiCFCCAc0UaEV5veaX0TfAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU4rvh9jMrka/ZDVc51C/29/CBp0YwHwYDVR0j
BBgwFoAUrB/pOHZAp3e3PZQhHUyP+lxmkwQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm
Z1UvMC9BQzFGRTkzODc2NDBBNzc3QjczRDk0MjExRDRDOEZGQTVDNjY5MzA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDMUZFOTM4NzY0MEE3NzdC
NzNEOTQyMTFENEM4RkZBNUM2NjkzMDQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0Z0hGcllxb3RrbnJ6R05IQTIycVBYQXJiVDIyVXNwVEdjWnJpRE42ZmdVLzAv
MzEzODM3MmUzMTJlMzQzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzgzMjMw
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAS7ATAwDQYJKoZIhvcNAQELBQADggEBAKwY/kIAFOMi6I5Z
eowRuvZbf3TZADEqZcWB8B8hIvUBrD6B5E3N/7GRPeEk4Cz49o8zVa6wJRKZLSZT
t1l73r7vOYxm4PbGCCeAQ+w1PDFTEivMvMhkmsv5T4rYosUxxFmyM88lyTZAhXAx
bSkjVwb/eSNSEKTNWxpx6eu1684UqfINfGpn93Xenglt2+y1WBufcMfmOFOtTvw/
HluLdLBPYWyU+NtQacPgqSompj7rXy+zQ2ekROCtV/doMQqGie0kBvAIR/9TcMQk
ara4Borl2YepnANV24AhbwQvoztctwpfafA11zPPym6usq9+6lGg2pqFGlaNutet
a5ypNIk=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:12 2025 by rpki-client