Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e3233312e3130342e302f32322d3332203d3e203238363439.roa
File:                     3137302e3233312e3130342e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          eEfvilPMy6R1xLzKCOD5+icqtolM0FIeZjrSPgW0mnU=
Subject key identifier:   51:18:F1:C0:D4:59:5C:EE:D7:31:14:2C:0D:47:D0:54:6D:83:57:19
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       12381C69DA5BF02CCF21028D38F11CA0E44948FD
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e3233312e3130342e302f32322d3332203d3e203238363439.roa
Signing time:             Fri 15 Aug 2025 20:31:15 +0000
ROA not before:           Fri 15 Aug 2025 20:26:15 +0000
ROA not after:            Fri 14 Aug 2026 20:31:15 +0000
asID:                     28649
IP address blocks:        170.231.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:38:1c:69:da:5b:f0:2c:cf:21:02:8d:38:f1:1c:a0:e4:49:48:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Aug 15 20:26:15 2025 GMT
            Not After : Aug 14 20:31:15 2026 GMT
        Subject: CN=5118F1C0D4595CEED731142C0D47D0546D835719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0e:29:e3:2f:7e:4d:84:95:53:73:42:ef:12:
                    5c:b4:6b:b8:8d:09:e9:5f:f9:91:fe:a6:74:d3:3e:
                    fe:74:c5:79:0f:a6:ea:78:9b:69:6c:5d:f1:15:70:
                    8b:57:b1:16:58:f2:94:b5:08:08:58:e6:bf:95:94:
                    0d:6d:e1:c2:87:9a:31:d0:e9:8f:6c:69:81:f5:49:
                    2c:f8:1c:47:4f:07:07:a1:01:64:c3:2b:f9:60:89:
                    e0:ec:49:47:19:94:3e:5c:53:3e:23:fa:2b:7e:02:
                    35:f8:1c:a7:90:62:31:93:ca:33:0d:94:37:a2:94:
                    9f:c4:04:d1:09:4f:66:30:3b:e2:35:e4:09:18:b5:
                    e1:e3:34:ea:3b:67:5c:c9:be:d1:6b:ea:6e:2e:2f:
                    8c:d2:26:ca:02:c0:07:84:de:38:c8:0e:86:2b:49:
                    e0:5b:f6:bc:2b:8e:2b:e8:ab:5b:c5:6e:a7:b3:ee:
                    9d:02:4c:63:e5:f3:0c:00:4e:d1:e7:b6:5b:b5:dc:
                    79:42:30:3c:7a:c4:aa:a4:bf:b9:a4:0a:a6:6f:2e:
                    d7:65:e2:e8:0e:5d:5e:7d:41:2d:9d:2d:ac:0c:e9:
                    44:4b:c1:26:b4:00:20:8f:a5:1e:da:ae:21:55:e3:
                    22:48:9a:d6:01:72:aa:85:e8:49:14:a1:dd:0c:e6:
                    40:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:18:F1:C0:D4:59:5C:EE:D7:31:14:2C:0D:47:D0:54:6D:83:57:19
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e3233312e3130342e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:8a:28:e1:89:a3:b9:86:1c:dc:4a:ab:d7:ca:24:4c:04:50:
         83:0c:ff:67:30:f7:a7:02:82:1e:2f:0d:2e:c2:b4:cb:be:62:
         13:5c:45:47:66:f4:3d:03:a8:f8:6d:7e:e2:8d:80:89:5c:65:
         53:8d:ea:bc:75:6f:bc:a0:b4:81:ae:8a:fa:18:27:d7:8d:a1:
         fc:d0:a0:50:ed:f7:84:b5:be:07:7b:4f:37:44:a2:69:81:12:
         72:04:cd:36:88:69:c3:40:bd:8e:e4:07:d9:03:b5:93:e5:20:
         f0:a3:57:52:b6:a6:ee:f7:9b:1e:fd:e9:2a:38:de:40:dd:09:
         ef:3f:dd:1c:27:c9:b7:af:51:7a:eb:9a:94:d5:b2:f5:2f:25:
         28:3f:c8:5f:79:96:c7:af:51:02:eb:6e:5a:30:3a:b4:d9:13:
         31:c9:ab:0c:0e:ec:9c:cc:66:e7:f6:ee:46:a9:d4:eb:03:d8:
         3a:db:5f:68:98:fe:59:fd:c3:68:0d:80:3b:96:bb:09:7d:01:
         ee:a8:48:13:23:81:0c:98:0f:0a:d6:31:80:7b:1a:9a:03:82:
         18:b0:f2:59:b5:c8:dc:79:f8:cf:93:85:8c:bb:57:d3:7b:7f:
         b2:81:19:10:c5:98:65:8a:35:3a:63:96:42:04:bc:b7:5c:a8:
         bd:55:34:34
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEjgcadpb8CzPIQKNOPEcoORJSP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBNTc0MTM4RDBEOEZDMEEzNzZBQTIzREI0RTE1MzNG
RjBDNTY1MjAeFw0yNTA4MTUyMDI2MTVaFw0yNjA4MTQyMDMxMTVaMDMxMTAvBgNV
BAMTKDUxMThGMUMwRDQ1OTVDRUVENzMxMTQyQzBENDdEMDU0NkQ4MzU3MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrDinjL35NhJVTc0LvEly0a7iN
Celf+ZH+pnTTPv50xXkPpup4m2lsXfEVcItXsRZY8pS1CAhY5r+VlA1t4cKHmjHQ
6Y9saYH1SSz4HEdPBwehAWTDK/lgieDsSUcZlD5cUz4j+it+AjX4HKeQYjGTyjMN
lDeilJ/EBNEJT2YwO+I15AkYteHjNOo7Z1zJvtFr6m4uL4zSJsoCwAeE3jjIDoYr
SeBb9rwrjivoq1vFbqez7p0CTGPl8wwATtHntlu13HlCMDx6xKqkv7mkCqZvLtdl
4ugOXV59QS2dLawM6URLwSa0ACCPpR7ariFV4yJImtYBcqqF6EkUod0M5kBPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUURjxwNRZXO7XMRQsDUfQVG2DVxkwHwYDVR0j
BBgwFoAUAaV0E40Nj8Cjdqoj204VM/8MVlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8wMUE1NzQxMzhEMEQ4RkMwQTM3NkFBMjNEQjRFMTUzM0ZGMEM1NjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQTU3NDEzOEQwRDhGQzBB
Mzc2QUEyM0RCNEUxNTMzRkYwQzU2NTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzEzNzMwMmUzMjMzMzEyZTMxMzAzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzgzNjM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq52gwDQYJKoZIhvcNAQELBQADggEBAB2KKOGJ
o7mGHNxKq9fKJEwEUIMM/2cw96cCgh4vDS7CtMu+YhNcRUdm9D0DqPhtfuKNgIlc
ZVON6rx1b7ygtIGuivoYJ9eNofzQoFDt94S1vgd7TzdEommBEnIEzTaIacNAvY7k
B9kDtZPlIPCjV1K2pu73mx796So43kDdCe8/3RwnybevUXrrmpTVsvUvJSg/yF95
lsevUQLrblowOrTZEzHJqwwO7JzMZuf27kap1OsD2DrbX2iY/ln9w2gNgDuWuwl9
Ae6oSBMjgQyYDwrWMYB7GpoDghiw8lm1yNx5+M+ThYy7V9N7f7KBGRDFmGWKNTpj
lkIEvLdcqL1VNDQ=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:22:24 2025 by rpki-client