Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137372e35322e382e302f32312d3332203d3e203238363439.roa
File:                     3137372e35322e382e302f32312d3332203d3e203238363439.roa (raw, json)
Hash identifier:          +OoyZ9KpKwY4eHkMUr0Aiu7FJ8OT2RB5eKCSq5ha6rg=
Subject key identifier:   88:84:C7:2A:F8:C1:E0:08:53:17:2E:F4:1D:4E:A1:79:C0:E4:03:81
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       38B183276061FFEC80008BBF23DBC94E4F4F557A
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137372e35322e382e302f32312d3332203d3e203238363439.roa
Signing time:             Fri 15 Aug 2025 20:31:17 +0000
ROA not before:           Fri 15 Aug 2025 20:26:17 +0000
ROA not after:            Fri 14 Aug 2026 20:31:17 +0000
asID:                     28649
IP address blocks:        177.52.8.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b1:83:27:60:61:ff:ec:80:00:8b:bf:23:db:c9:4e:4f:4f:55:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Aug 15 20:26:17 2025 GMT
            Not After : Aug 14 20:31:17 2026 GMT
        Subject: CN=8884C72AF8C1E00853172EF41D4EA179C0E40381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a8:e3:d1:86:35:75:96:1d:db:2d:92:ba:ae:
                    0e:b8:90:82:36:48:22:e8:74:c4:9f:e3:fa:ea:4b:
                    15:d2:37:d7:df:e8:26:47:af:c7:07:83:df:c4:50:
                    f4:90:6d:fe:7e:6e:7d:36:cf:2e:92:be:4f:fb:46:
                    8b:d4:e5:af:74:54:6a:d7:0f:6a:8e:49:f6:df:5a:
                    19:1f:99:0a:ab:df:31:10:90:18:26:74:10:e8:8e:
                    38:6a:19:cd:34:8f:1f:d0:04:43:ed:b7:19:c5:a5:
                    84:6c:89:a4:6e:3e:5f:83:20:1c:75:4a:0a:dd:d4:
                    a6:fd:ed:55:7e:e4:73:2d:9e:3b:f9:7f:60:e3:e9:
                    c2:39:1e:8b:6d:20:4f:68:0e:18:25:de:a7:8c:f3:
                    8d:80:bf:38:d5:ff:fc:57:7c:cf:7f:33:6e:4f:8e:
                    35:0f:39:86:ed:d6:d8:26:5d:55:76:b6:ac:df:87:
                    9f:1a:61:49:2b:e6:d5:45:5f:1d:25:80:f6:9e:6a:
                    45:0d:47:85:cf:eb:e8:a9:5b:fc:e9:00:a4:11:a7:
                    7b:a0:99:d0:c7:92:36:2e:02:d5:98:b7:de:07:6b:
                    9f:3a:6d:57:c3:3b:b3:72:25:f9:ff:92:84:09:0f:
                    c2:a3:ea:c4:e5:5e:86:dd:59:ee:72:15:74:38:57:
                    0b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:84:C7:2A:F8:C1:E0:08:53:17:2E:F4:1D:4E:A1:79:C0:E4:03:81
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137372e35322e382e302f32312d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         de:5d:74:37:cc:c0:f8:c1:15:62:c8:a5:e0:ea:64:06:ac:0c:
         6f:cd:f2:24:29:f1:fd:65:3a:80:57:64:67:1f:84:a8:1c:4f:
         46:d6:c7:a0:2a:2f:38:b6:0d:01:a5:80:91:47:e1:1b:df:95:
         fb:b5:ce:90:2e:84:bd:fd:d1:22:ff:4a:67:d9:e2:d4:f2:a7:
         97:dc:2c:71:f4:57:42:ad:3e:c8:49:79:16:8a:4f:5c:ff:75:
         dd:ff:82:cd:a6:02:4d:f7:cc:f4:9d:44:a6:b2:75:45:e9:5c:
         9c:a8:6e:bd:77:68:0d:29:4d:0b:57:d0:13:05:68:88:66:67:
         39:1b:37:50:7d:72:b0:89:0c:bf:ea:ef:0c:71:ca:9a:76:83:
         b1:a8:4f:a9:2d:a6:d0:17:c0:0e:e0:44:2c:f9:47:56:2a:39:
         91:86:6c:03:65:58:4a:4e:63:c1:99:6d:d6:b7:60:44:6d:50:
         d9:e9:8f:f1:aa:03:2b:8a:33:28:56:e2:c7:4f:d0:5b:aa:f6:
         06:b0:0c:8b:87:27:71:91:59:a8:ad:50:42:76:0e:1d:69:7a:
         fa:6a:5d:b9:f9:3b:90:9e:6c:7b:26:09:a4:b6:17:aa:f3:49:
         0d:e5:79:c0:b5:1d:a7:75:83:b9:2c:e5:13:76:92:26:11:cf:
         5f:b4:e8:ac
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUOLGDJ2Bh/+yAAIu/I9vJTk9PVXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBNTc0MTM4RDBEOEZDMEEzNzZBQTIzREI0RTE1MzNG
RjBDNTY1MjAeFw0yNTA4MTUyMDI2MTdaFw0yNjA4MTQyMDMxMTdaMDMxMTAvBgNV
BAMTKDg4ODRDNzJBRjhDMUUwMDg1MzE3MkVGNDFENEVBMTc5QzBFNDAzODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdqOPRhjV1lh3bLZK6rg64kII2
SCLodMSf4/rqSxXSN9ff6CZHr8cHg9/EUPSQbf5+bn02zy6Svk/7RovU5a90VGrX
D2qOSfbfWhkfmQqr3zEQkBgmdBDojjhqGc00jx/QBEPttxnFpYRsiaRuPl+DIBx1
Sgrd1Kb97VV+5HMtnjv5f2Dj6cI5HottIE9oDhgl3qeM842AvzjV//xXfM9/M25P
jjUPOYbt1tgmXVV2tqzfh58aYUkr5tVFXx0lgPaeakUNR4XP6+ipW/zpAKQRp3ug
mdDHkjYuAtWYt94Ha586bVfDO7NyJfn/koQJD8Kj6sTlXobdWe5yFXQ4Vwt5AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUiITHKvjB4AhTFy70HU6hecDkA4EwHwYDVR0j
BBgwFoAUAaV0E40Nj8Cjdqoj204VM/8MVlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8wMUE1NzQxMzhEMEQ4RkMwQTM3NkFBMjNEQjRFMTUzM0ZGMEM1NjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQTU3NDEzOEQwRDhGQzBB
Mzc2QUEyM0RCNEUxNTMzRkYwQzU2NTIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzEzNzM3MmUzNTMyMmUzODJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDMyMzgzNjM0
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAOxNAgwDQYJKoZIhvcNAQELBQADggEBAN5ddDfMwPjBFWLI
peDqZAasDG/N8iQp8f1lOoBXZGcfhKgcT0bWx6AqLzi2DQGlgJFH4Rvflfu1zpAu
hL390SL/SmfZ4tTyp5fcLHH0V0KtPshJeRaKT1z/dd3/gs2mAk33zPSdRKaydUXp
XJyobr13aA0pTQtX0BMFaIhmZzkbN1B9crCJDL/q7wxxypp2g7GoT6ktptAXwA7g
RCz5R1YqOZGGbANlWEpOY8GZbda3YERtUNnpj/GqAyuKMyhW4sdP0Fuq9gawDIuH
J3GRWaitUEJ2Dh1pevpqXbn5O5CebHsmCaS2F6rzSQ3lecC1Had1g7ks5RN2kiYR
z1+06Kw=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:59 2025 by rpki-client