Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e312e3134342e302f32302d3332203d3e203238363638.roa
File:                     3138392e312e3134342e302f32302d3332203d3e203238363638.roa (raw, json)
Hash identifier:          ZHXtOSkm1F/Hw26hnb/NDs7e4v2IdU1fFMHb3tlvP8A=
Subject key identifier:   A9:B7:A1:93:7D:BE:E3:7B:87:01:23:75:47:4D:4E:E9:09:0F:77:AF
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       04E540738662E3A747DABF6DFF7B42470C935C19
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e312e3134342e302f32302d3332203d3e203238363638.roa
Signing time:             Fri 15 Aug 2025 20:31:23 +0000
ROA not before:           Fri 15 Aug 2025 20:26:23 +0000
ROA not after:            Fri 14 Aug 2026 20:31:23 +0000
asID:                     28668
IP address blocks:        189.1.144.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e5:40:73:86:62:e3:a7:47:da:bf:6d:ff:7b:42:47:0c:93:5c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Aug 15 20:26:23 2025 GMT
            Not After : Aug 14 20:31:23 2026 GMT
        Subject: CN=A9B7A1937DBEE37B87012375474D4EE9090F77AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c4:66:b7:64:6e:91:7d:5d:44:23:bd:79:ae:
                    9b:09:38:a8:45:92:54:59:a6:e3:e0:b4:57:04:78:
                    58:91:6d:fd:80:1a:a8:ba:f8:c5:c6:30:9c:42:ea:
                    0c:38:b8:b0:cd:3c:46:8a:99:ad:d3:3f:1b:69:05:
                    d2:57:f6:f7:9c:b8:11:7c:55:d0:41:6e:1c:e0:5c:
                    68:ec:94:7c:92:93:50:dd:e1:93:c9:8d:3f:cc:0b:
                    71:d6:3c:90:5e:50:15:b4:b3:05:95:08:6e:a1:0d:
                    9c:39:bd:f5:96:28:66:be:7b:ab:41:d7:c2:2e:f1:
                    72:dc:5e:7e:71:7b:38:74:44:e1:99:76:b0:70:27:
                    9b:52:92:4c:d9:04:75:15:34:90:87:1b:6b:49:4a:
                    6d:6b:e0:dd:b9:9c:f5:23:6a:f6:ea:43:19:e2:f6:
                    ba:69:c2:a7:58:5a:7e:ac:fa:84:2a:7d:7a:14:1a:
                    74:c1:1f:40:92:27:a1:61:d8:90:fc:69:6b:14:23:
                    d6:57:d0:17:f8:c4:63:57:c9:48:72:25:45:31:9c:
                    11:2d:40:22:96:52:f8:25:52:38:07:b7:c5:67:7f:
                    4e:d3:33:a4:82:52:06:81:ff:b1:35:5b:38:0b:1e:
                    aa:69:4e:43:e9:c2:f6:92:1b:41:4a:cd:1c:3e:d3:
                    ca:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B7:A1:93:7D:BE:E3:7B:87:01:23:75:47:4D:4E:E9:09:0F:77:AF
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e312e3134342e302f32302d3332203d3e203238363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.1.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:92:db:04:1e:16:19:fe:b5:1e:1d:aa:7c:c1:72:1a:28:25:
         0c:60:ee:a7:76:82:21:13:42:a0:d0:81:d2:ed:3c:2c:6a:a7:
         9d:09:48:32:4e:55:aa:6b:c5:e9:f8:82:d4:ff:3f:62:5b:e2:
         9b:4e:75:c0:1b:76:92:a6:4d:54:ad:03:7f:18:b3:f9:5e:fc:
         a7:12:28:f3:d0:93:ee:49:6a:85:a2:79:9a:f4:b2:39:4c:0f:
         ca:2e:45:9f:5c:7b:7d:1f:dd:62:63:77:b4:19:16:6d:32:82:
         8a:51:aa:2c:bc:38:3c:dc:8b:d5:36:16:35:15:24:7e:27:97:
         98:e4:4d:d6:8b:9b:2a:89:b2:b2:79:88:0c:45:e6:fa:a5:6e:
         31:c4:01:9f:d8:9c:31:76:f8:2d:5b:8f:d9:d5:a2:de:98:00:
         d2:bf:a6:5f:a7:36:7d:7d:27:d9:a3:e5:cc:4f:a0:a9:76:5f:
         21:74:65:7b:35:dd:21:00:13:1e:e8:e6:53:36:ab:5e:b1:1e:
         dc:5d:ac:f1:8b:27:9e:ec:33:07:6b:d6:03:14:a4:ba:45:08:
         13:89:05:14:b5:32:58:80:f3:5f:2d:6f:05:33:58:c4:d2:32:
         19:67:3b:68:dd:f5:3c:61:6f:64:0f:0c:e3:8b:a5:11:df:66:
         fa:fb:12:b0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUBOVAc4Zi46dH2r9t/3tCRwyTXBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBNTc0MTM4RDBEOEZDMEEzNzZBQTIzREI0RTE1MzNG
RjBDNTY1MjAeFw0yNTA4MTUyMDI2MjNaFw0yNjA4MTQyMDMxMjNaMDMxMTAvBgNV
BAMTKEE5QjdBMTkzN0RCRUUzN0I4NzAxMjM3NTQ3NEQ0RUU5MDkwRjc3QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXxGa3ZG6RfV1EI715rpsJOKhF
klRZpuPgtFcEeFiRbf2AGqi6+MXGMJxC6gw4uLDNPEaKma3TPxtpBdJX9vecuBF8
VdBBbhzgXGjslHySk1Dd4ZPJjT/MC3HWPJBeUBW0swWVCG6hDZw5vfWWKGa+e6tB
18Iu8XLcXn5xezh0ROGZdrBwJ5tSkkzZBHUVNJCHG2tJSm1r4N25nPUjavbqQxni
9rppwqdYWn6s+oQqfXoUGnTBH0CSJ6Fh2JD8aWsUI9ZX0Bf4xGNXyUhyJUUxnBEt
QCKWUvglUjgHt8Vnf07TM6SCUgaB/7E1WzgLHqppTkPpwvaSG0FKzRw+08o7AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUqbehk32+43uHASN1R01O6QkPd68wHwYDVR0j
BBgwFoAUAaV0E40Nj8Cjdqoj204VM/8MVlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8wMUE1NzQxMzhEMEQ4RkMwQTM3NkFBMjNEQjRFMTUzM0ZGMEM1NjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQTU3NDEzOEQwRDhGQzBB
Mzc2QUEyM0RCNEUxNTMzRkYwQzU2NTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzEzODM5MmUzMTJlMzEzNDM0MmUzMDJmMzIzMDJkMzMzMjIwM2QzZTIwMzIzODM2
MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL0BkDANBgkqhkiG9w0BAQsFAAOCAQEAB5LbBB4WGf61
Hh2qfMFyGiglDGDup3aCIRNCoNCB0u08LGqnnQlIMk5VqmvF6fiC1P8/Ylvim051
wBt2kqZNVK0Dfxiz+V78pxIo89CT7klqhaJ5mvSyOUwPyi5Fn1x7fR/dYmN3tBkW
bTKCilGqLLw4PNyL1TYWNRUkfieXmORN1oubKomysnmIDEXm+qVuMcQBn9icMXb4
LVuP2dWi3pgA0r+mX6c2fX0n2aPlzE+gqXZfIXRlezXdIQATHujmUzarXrEe3F2s
8YsnnuwzB2vWAxSkukUIE4kFFLUyWIDzXy1vBTNYxNIyGWc7aN31PGFvZA8M44ul
Ed9m+vsSsA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:13:38 2025 by rpki-client