Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e38362e36342e302f32302d3234203d3e203238323031.roa
File:                     3138372e38362e36342e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          wqzKYGPq626qoErNjrDYZ1Zxu/yPSaXdyuElYnT0+yk=
Subject key identifier:   2F:01:5F:FD:D1:68:7E:AC:55:9D:62:E6:64:2E:33:34:1E:09:29:57
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       310399081F6FB5DBF2542E71AD14C5FA39DAA43C
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e38362e36342e302f32302d3234203d3e203238323031.roa
Signing time:             Sat 02 Aug 2025 12:58:34 +0000
ROA not before:           Sat 02 Aug 2025 12:53:34 +0000
ROA not after:            Sat 01 Aug 2026 12:58:34 +0000
asID:                     28201
IP address blocks:        187.86.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:03:99:08:1f:6f:b5:db:f2:54:2e:71:ad:14:c5:fa:39:da:a4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Aug  2 12:53:34 2025 GMT
            Not After : Aug  1 12:58:34 2026 GMT
        Subject: CN=2F015FFDD1687EAC559D62E6642E33341E092957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:33:ce:49:df:eb:c9:e8:c0:d9:32:3f:c7:73:
                    65:60:7b:2e:08:2b:07:d4:bd:b3:74:17:6e:3d:96:
                    4b:5c:8f:6d:cd:c2:02:2d:2b:2a:24:61:c9:ff:19:
                    d2:c7:ed:aa:87:33:2a:37:2d:44:bb:d8:b9:1e:f6:
                    0c:d8:45:05:06:0b:eb:b5:93:e0:ce:87:f9:ad:ff:
                    c5:94:04:3e:e3:ec:0d:a7:6d:fd:e3:73:48:09:2e:
                    05:79:22:60:a8:b3:59:9a:2a:fa:27:05:62:a0:5f:
                    73:26:a7:c6:0e:2b:0d:2f:dc:86:d2:e1:5c:4d:cd:
                    b3:b3:2d:71:f3:73:94:3e:50:23:a5:10:2b:c4:46:
                    84:30:51:c2:ca:f2:d5:3f:16:3f:49:2d:01:69:c1:
                    83:09:9a:c3:bb:01:32:de:03:9b:d5:dc:f9:04:b8:
                    67:ff:d0:99:73:44:28:9b:da:5f:a5:a2:f3:82:43:
                    e6:72:02:b6:d8:19:73:cb:a6:ce:53:4c:44:fd:ee:
                    bb:f1:7d:db:ce:3e:73:76:22:cd:49:ee:b6:27:68:
                    fa:d8:6c:e2:57:41:c6:c2:ad:7e:bd:05:42:40:f3:
                    54:b0:fb:e8:c8:84:ef:17:80:97:49:29:f6:80:9b:
                    2d:87:80:ee:e4:05:e7:d7:91:6b:8c:eb:36:0d:8a:
                    a5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:01:5F:FD:D1:68:7E:AC:55:9D:62:E6:64:2E:33:34:1E:09:29:57
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e38362e36342e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a8:e5:15:c0:ae:88:ce:ba:e0:7b:03:12:11:ba:36:24:07:35:
         e7:cd:7d:37:05:c5:bb:4c:c5:df:3f:7e:f1:6f:a2:de:fb:d2:
         3f:e8:ba:e1:88:3b:f7:89:85:a6:5a:5a:d8:51:ea:4f:5f:e3:
         01:73:19:07:21:78:2f:6e:fe:14:49:7f:1a:dc:01:aa:13:ac:
         5e:f6:4a:8a:39:38:04:e7:07:74:74:dd:ea:6a:35:9e:20:74:
         fc:cd:9c:43:6b:38:db:f0:a8:20:c3:e7:ea:ce:c5:66:45:9b:
         08:4d:4f:31:dc:6b:29:d7:b3:de:42:10:25:08:55:6f:d1:63:
         51:77:5f:dd:fd:ec:a3:08:38:3f:0a:e3:0c:06:ce:27:b5:78:
         9d:73:1c:1e:d1:a5:66:ac:33:58:79:8d:04:4f:2b:e0:9b:d4:
         9d:5d:69:27:9f:10:bf:86:0b:7a:b3:d3:e0:d0:8c:8f:7f:13:
         ce:ac:69:f1:d1:f7:09:de:ab:e9:b9:40:6e:bc:6a:49:17:02:
         f1:44:69:a5:0e:cc:a4:b7:a5:9a:e6:8e:02:4c:f0:65:84:16:
         c9:27:e4:15:0e:41:ee:f1:72:b4:6f:13:44:32:8c:6d:23:ca:
         77:30:b7:78:26:b2:1c:50:9d:0f:15:ca:8c:33:28:88:ba:bc:
         33:d2:b0:06
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMQOZCB9vtdvyVC5xrRTF+jnapDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMxRkU5Mzg3NjQwQTc3N0I3M0Q5NDIxMUQ0QzhGRkE1
QzY2OTMwNDAeFw0yNTA4MDIxMjUzMzRaFw0yNjA4MDExMjU4MzRaMDMxMTAvBgNV
BAMTKDJGMDE1RkZERDE2ODdFQUM1NTlENjJFNjY0MkUzMzM0MUUwOTI5NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYM85J3+vJ6MDZMj/Hc2Vgey4I
KwfUvbN0F249lktcj23NwgItKyokYcn/GdLH7aqHMyo3LUS72Lke9gzYRQUGC+u1
k+DOh/mt/8WUBD7j7A2nbf3jc0gJLgV5ImCos1maKvonBWKgX3Mmp8YOKw0v3IbS
4VxNzbOzLXHzc5Q+UCOlECvERoQwUcLK8tU/Fj9JLQFpwYMJmsO7ATLeA5vV3PkE
uGf/0JlzRCib2l+lovOCQ+ZyArbYGXPLps5TTET97rvxfdvOPnN2Is1J7rYnaPrY
bOJXQcbCrX69BUJA81Sw++jIhO8XgJdJKfaAmy2HgO7kBefXkWuM6zYNiqWDAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQULwFf/dFofqxVnWLmZC4zNB4JKVcwHwYDVR0j
BBgwFoAUrB/pOHZAp3e3PZQhHUyP+lxmkwQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm
Z1UvMC9BQzFGRTkzODc2NDBBNzc3QjczRDk0MjExRDRDOEZGQTVDNjY5MzA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDMUZFOTM4NzY0MEE3NzdC
NzNEOTQyMTFENEM4RkZBNUM2NjkzMDQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0Z0hGcllxb3RrbnJ6R05IQTIycVBYQXJiVDIyVXNwVEdjWnJpRE42ZmdVLzAv
MzEzODM3MmUzODM2MmUzNjM0MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMy
MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLtWQDANBgkqhkiG9w0BAQsFAAOCAQEAqOUVwK6Izrrg
ewMSEbo2JAc15819NwXFu0zF3z9+8W+i3vvSP+i64Yg794mFplpa2FHqT1/jAXMZ
ByF4L27+FEl/GtwBqhOsXvZKijk4BOcHdHTd6mo1niB0/M2cQ2s42/CoIMPn6s7F
ZkWbCE1PMdxrKdez3kIQJQhVb9FjUXdf3f3sowg4PwrjDAbOJ7V4nXMcHtGlZqwz
WHmNBE8r4JvUnV1pJ58Qv4YLerPT4NCMj38Tzqxp8dH3Cd6r6blAbrxqSRcC8URp
pQ7MpLelmuaOAkzwZYQWySfkFQ5B7vFytG8TRDKMbSPKdzC3eCayHFCdDxXKjDMo
iLq8M9KwBg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:05:34 2025 by rpki-client