Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37392e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e37392e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          QtjQLy9j74okS/6gaqaAT5CkdL02e3lOA3rnXcxwino=
Subject key identifier:   3F:9D:EE:4D:5E:19:61:B0:B3:10:55:AF:F5:B3:A7:83:D4:4E:D2:3A
Certificate issuer:       /CN=E106F083B0114D3D104DD1EBEA8257FB6FA59CF7
Certificate serial:       36DBC227339DCCA365BDF3C3FCBB1FFBEB49F4D6
Authority key identifier: E1:06:F0:83:B0:11:4D:3D:10:4D:D1:EB:EA:82:57:FB:6F:A5:9C:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37392e302f32342d3234203d3e203238313834.roa
Signing time:             Wed 24 Sep 2025 18:29:31 +0000
ROA not before:           Wed 24 Sep 2025 18:24:31 +0000
ROA not after:            Wed 23 Sep 2026 18:29:31 +0000
asID:                     28184
IP address blocks:        189.89.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 22:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:db:c2:27:33:9d:cc:a3:65:bd:f3:c3:fc:bb:1f:fb:eb:49:f4:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E106F083B0114D3D104DD1EBEA8257FB6FA59CF7
        Validity
            Not Before: Sep 24 18:24:31 2025 GMT
            Not After : Sep 23 18:29:31 2026 GMT
        Subject: CN=3F9DEE4D5E1961B0B31055AFF5B3A783D44ED23A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:41:3e:35:ce:fc:50:bd:05:9b:fe:73:bf:f9:
                    2e:27:a3:39:b9:93:2d:dc:20:53:39:cd:bf:76:5f:
                    6e:8e:e2:7a:9d:f5:fb:d7:cd:b9:78:d4:72:87:6c:
                    e5:be:06:47:0d:c0:d1:24:be:eb:74:20:3d:c3:0f:
                    a0:bd:50:af:98:75:c9:85:18:e4:69:94:21:cb:7c:
                    38:ad:50:70:23:d1:07:4c:db:9b:7a:77:6b:6c:af:
                    bf:b9:50:80:b6:09:cf:34:29:89:1c:a4:6e:43:65:
                    d7:13:0f:48:58:95:0b:29:e4:43:53:3c:80:db:05:
                    8d:a4:34:e5:67:68:d1:79:f4:54:39:9f:df:ad:da:
                    fd:f9:14:aa:5a:78:2e:5a:cf:47:a6:7e:bc:2d:e4:
                    8d:97:97:ff:00:f4:60:6f:00:3d:a2:f3:69:47:14:
                    0f:24:82:94:ee:fa:6a:e5:10:d2:0d:2e:fc:37:b6:
                    75:38:5b:94:aa:50:c9:1a:ba:97:cb:48:db:d4:c1:
                    d9:1a:56:f8:10:9f:2f:c0:7b:7b:2c:55:5a:c5:75:
                    e4:64:04:3c:f4:a3:c2:c2:2c:e3:01:8d:85:78:c2:
                    18:4e:34:cc:74:47:ab:be:4b:20:9b:64:2a:56:84:
                    48:84:c9:ef:6d:f9:ff:01:94:d0:85:b6:a9:53:fe:
                    19:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9D:EE:4D:5E:19:61:B0:B3:10:55:AF:F5:B3:A7:83:D4:4E:D2:3A
            X509v3 Authority Key Identifier:
                keyid:E1:06:F0:83:B0:11:4D:3D:10:4D:D1:EB:EA:82:57:FB:6F:A5:9C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37392e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:a0:5a:1a:48:e9:e7:f5:69:ee:17:bd:48:f0:54:0c:87:31:
         f0:86:67:5e:8d:3a:c0:7a:1e:7a:6a:df:a7:58:d7:ed:97:41:
         02:38:be:ae:ca:3c:0c:b4:ef:b7:1f:af:23:87:cc:66:a6:36:
         02:dd:dc:b4:fc:ac:08:c5:a8:48:c8:a1:58:07:d5:f1:2a:08:
         56:59:4d:36:f2:d8:91:d4:46:86:c3:ff:fb:ec:b0:9d:92:90:
         f4:f4:dc:6e:7b:2d:34:3c:73:8a:a4:cd:e4:e2:37:af:fd:2d:
         8d:ed:3f:25:e9:54:76:1e:23:43:17:7d:ad:bb:71:b5:9c:fa:
         40:61:76:f1:82:e7:01:83:02:a1:a8:0a:4c:48:e4:fe:e9:9f:
         11:07:00:3a:5a:81:85:ca:20:67:90:90:18:2d:50:8e:16:be:
         1c:74:c5:d2:79:29:5c:41:26:d8:61:b5:26:88:6a:23:ee:8e:
         a4:77:91:c1:a6:e2:5f:ca:9f:7b:6e:9d:eb:c5:85:d9:90:c3:
         08:af:4f:36:a3:c4:c3:88:dd:39:c8:8c:26:dd:8b:a4:50:d0:
         70:b2:4a:be:63:da:c1:1a:12:60:22:fb:0c:7f:d2:a8:35:cd:
         52:1c:fd:d9:08:2c:a6:0e:bf:98:eb:a1:45:ee:74:a9:9c:66:
         33:23:9c:e3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNtvCJzOdzKNlvfPD/Lsf++tJ9NYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTEwNkYwODNCMDExNEQzRDEwNEREMUVCRUE4MjU3RkI2
RkE1OUNGNzAeFw0yNTA5MjQxODI0MzFaFw0yNjA5MjMxODI5MzFaMDMxMTAvBgNV
BAMTKDNGOURFRTRENUUxOTYxQjBCMzEwNTVBRkY1QjNBNzgzRDQ0RUQyM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgQT41zvxQvQWb/nO/+S4nozm5
ky3cIFM5zb92X26O4nqd9fvXzbl41HKHbOW+BkcNwNEkvut0ID3DD6C9UK+YdcmF
GORplCHLfDitUHAj0QdM25t6d2tsr7+5UIC2Cc80KYkcpG5DZdcTD0hYlQsp5ENT
PIDbBY2kNOVnaNF59FQ5n9+t2v35FKpaeC5az0emfrwt5I2Xl/8A9GBvAD2i82lH
FA8kgpTu+mrlENINLvw3tnU4W5SqUMkaupfLSNvUwdkaVvgQny/Ae3ssVVrFdeRk
BDz0o8LCLOMBjYV4whhONMx0R6u+SyCbZCpWhEiEye9t+f8BlNCFtqlT/hlJAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUP53uTV4ZYbCzEFWv9bOng9RO0jowHwYDVR0j
BBgwFoAU4Qbwg7ARTT0QTdHr6oJX+2+lnPcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL
emUvMC9FMTA2RjA4M0IwMTE0RDNEMTA0REQxRUJFQTgyNTdGQjZGQTU5Q0Y3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxMDZGMDgzQjAxMTREM0Qx
MDRERDFFQkVBODI1N0ZCNkZBNTlDRjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv
MzEzODM5MmUzODM5MmUzNzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL1ZTzANBgkqhkiG9w0BAQsFAAOCAQEAB6BaGkjp5/Vp
7he9SPBUDIcx8IZnXo06wHoeemrfp1jX7ZdBAji+rso8DLTvtx+vI4fMZqY2At3c
tPysCMWoSMihWAfV8SoIVllNNvLYkdRGhsP/++ywnZKQ9PTcbnstNDxziqTN5OI3
r/0tje0/JelUdh4jQxd9rbtxtZz6QGF28YLnAYMCoagKTEjk/umfEQcAOlqBhcog
Z5CQGC1Qjha+HHTF0nkpXEEm2GG1JohqI+6OpHeRwabiX8qfe26d68WF2ZDDCK9P
NqPEw4jdOciMJt2LpFDQcLJKvmPawRoSYCL7DH/SqDXNUhz92Qgspg6/mOuhRe50
qZxmMyOc4w==
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:22:33 2025 by rpki-client