Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133382e3235352e36382e302f32322d3332203d3e203238363439.roa
File:                     3133382e3235352e36382e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          2v7yxJAzvjytv43fAjvuWyBWsqY0YVIbPjPDVLnrsrk=
Subject key identifier:   D0:D2:61:09:79:13:D6:11:B7:99:74:3D:8E:06:B9:00:69:C0:A6:43
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       11A3AF1D2297F0744412056C977D32B3FC8E8707
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133382e3235352e36382e302f32322d3332203d3e203238363439.roa
Signing time:             Fri 15 Aug 2025 20:31:16 +0000
ROA not before:           Fri 15 Aug 2025 20:26:16 +0000
ROA not after:            Fri 14 Aug 2026 20:31:16 +0000
asID:                     28649
IP address blocks:        138.255.68.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a3:af:1d:22:97:f0:74:44:12:05:6c:97:7d:32:b3:fc:8e:87:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Aug 15 20:26:16 2025 GMT
            Not After : Aug 14 20:31:16 2026 GMT
        Subject: CN=D0D261097913D611B799743D8E06B90069C0A643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:3c:5a:ed:6b:36:a2:4a:87:db:30:ee:c4:
                    14:7d:e8:a0:c1:3e:62:59:fc:1f:e4:4a:b9:44:48:
                    13:21:b3:56:a1:8b:25:52:eb:7a:64:fb:61:2c:c2:
                    be:9f:1f:2f:36:61:4b:fc:bc:80:e7:0a:62:20:f1:
                    2e:8e:1b:4f:cd:55:66:07:3d:cd:42:22:68:db:67:
                    ee:d9:b4:11:8f:a3:43:25:14:27:eb:5c:b8:a1:a7:
                    7f:57:40:37:97:68:2d:b8:f9:ec:00:ed:3b:40:d8:
                    b0:c3:21:2f:71:1f:69:9f:e7:88:79:02:ab:e4:31:
                    d5:66:9c:c2:49:68:75:9f:5c:c1:7b:02:90:61:10:
                    7d:2e:2e:ab:71:47:3f:de:0b:08:f4:a0:dd:ab:ca:
                    93:f3:01:63:3a:1e:92:66:fb:31:08:80:9a:1b:00:
                    93:13:61:c0:ee:11:d7:6f:12:a0:e5:34:bd:04:ed:
                    3c:48:96:b3:8f:4d:d7:57:ec:ea:2d:61:76:be:ce:
                    e2:ea:13:e4:76:aa:04:80:f7:a7:a2:a8:bc:90:91:
                    a9:c3:34:eb:1d:fa:54:fe:67:13:cd:cc:56:96:10:
                    ef:e4:a2:94:00:5a:06:8c:b1:98:e4:5a:8e:41:9a:
                    b3:50:fe:ea:13:3d:9c:eb:8a:f9:62:4c:95:45:3b:
                    94:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D2:61:09:79:13:D6:11:B7:99:74:3D:8E:06:B9:00:69:C0:A6:43
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133382e3235352e36382e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:7d:f5:d0:26:68:12:1e:53:f4:7c:81:b2:bf:c5:30:05:15:
         d8:bc:cf:f6:d2:91:07:76:a5:64:fa:22:5a:7b:a2:0d:80:59:
         d4:92:96:e0:a4:5c:4f:4f:5f:c6:32:55:27:7d:49:2e:0c:67:
         0f:08:b3:41:b3:e1:ff:bb:c4:10:a0:37:28:5b:38:04:81:64:
         81:3b:ff:5e:c9:34:a4:a1:86:87:b4:b2:80:a4:04:a6:ed:0c:
         f3:2c:6f:0f:ff:60:13:00:2b:3c:6b:ea:e5:5d:f0:24:9f:90:
         6d:17:d6:ca:8a:07:35:22:08:8b:0e:de:66:52:d2:00:fb:a3:
         45:22:f2:29:83:54:90:b9:a0:f1:d0:84:4a:4e:24:5e:e0:54:
         8d:77:b3:fb:ba:68:e8:d6:41:32:86:0e:97:84:41:56:96:0f:
         84:12:1d:7c:df:8b:32:95:2e:a1:ff:d4:70:4f:a8:87:51:35:
         00:dd:14:59:a2:d8:f3:a4:90:e6:e0:41:00:e4:92:13:c2:39:
         e1:a7:31:06:ba:87:1e:2c:8d:64:6e:38:dc:ec:f8:62:82:9c:
         74:52:65:67:00:c5:aa:c3:09:41:b7:23:63:ad:3c:1c:24:95:
         cd:7e:a9:5e:3f:94:41:db:65:f4:80:91:d2:b3:86:96:4d:08:
         17:21:74:5a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEaOvHSKX8HREEgVsl30ys/yOhwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBNTc0MTM4RDBEOEZDMEEzNzZBQTIzREI0RTE1MzNG
RjBDNTY1MjAeFw0yNTA4MTUyMDI2MTZaFw0yNjA4MTQyMDMxMTZaMDMxMTAvBgNV
BAMTKEQwRDI2MTA5NzkxM0Q2MTFCNzk5NzQzRDhFMDZCOTAwNjlDMEE2NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDROTxa7Ws2okqH2zDuxBR96KDB
PmJZ/B/kSrlESBMhs1ahiyVS63pk+2Eswr6fHy82YUv8vIDnCmIg8S6OG0/NVWYH
Pc1CImjbZ+7ZtBGPo0MlFCfrXLihp39XQDeXaC24+ewA7TtA2LDDIS9xH2mf54h5
AqvkMdVmnMJJaHWfXMF7ApBhEH0uLqtxRz/eCwj0oN2rypPzAWM6HpJm+zEIgJob
AJMTYcDuEddvEqDlNL0E7TxIlrOPTddX7OotYXa+zuLqE+R2qgSA96eiqLyQkanD
NOsd+lT+ZxPNzFaWEO/kopQAWgaMsZjkWo5BmrNQ/uoTPZzrivliTJVFO5ThAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0NJhCXkT1hG3mXQ9jga5AGnApkMwHwYDVR0j
BBgwFoAUAaV0E40Nj8Cjdqoj204VM/8MVlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8wMUE1NzQxMzhEMEQ4RkMwQTM3NkFBMjNEQjRFMTUzM0ZGMEM1NjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQTU3NDEzOEQwRDhGQzBB
Mzc2QUEyM0RCNEUxNTMzRkYwQzU2NTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzEzMzM4MmUzMjM1MzUyZTM2MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM4
MzYzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCiv9EMA0GCSqGSIb3DQEBCwUAA4IBAQBgffXQJmgS
HlP0fIGyv8UwBRXYvM/20pEHdqVk+iJae6INgFnUkpbgpFxPT1/GMlUnfUkuDGcP
CLNBs+H/u8QQoDcoWzgEgWSBO/9eyTSkoYaHtLKApASm7QzzLG8P/2ATACs8a+rl
XfAkn5BtF9bKigc1IgiLDt5mUtIA+6NFIvIpg1SQuaDx0IRKTiRe4FSNd7P7umjo
1kEyhg6XhEFWlg+EEh1834sylS6h/9RwT6iHUTUA3RRZotjzpJDm4EEA5JITwjnh
pzEGuoceLI1kbjjc7Phigpx0UmVnAMWqwwlBtyNjrTwcJJXNfqleP5RB22X0gJHS
s4aWTQgXIXRa
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:52 2025 by rpki-client