Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3139312e3235332e33322e302f32312d3332203d3e203238363439.roa
File:                     3139312e3235332e33322e302f32312d3332203d3e203238363439.roa (raw, json)
Hash identifier:          RlJqtavXnhZeJGixcLxoqwojvI2QwJ87m+x/YPD8rAc=
Subject key identifier:   69:DE:94:1A:6D:BC:30:FC:C5:98:CC:ED:FB:E0:D3:62:77:E6:5A:12
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       2162CDBD0D8C96B2AD163421BDC8F0CCEE7304AE
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3139312e3235332e33322e302f32312d3332203d3e203238363439.roa
Signing time:             Fri 15 Aug 2025 20:31:15 +0000
ROA not before:           Fri 15 Aug 2025 20:26:15 +0000
ROA not after:            Fri 14 Aug 2026 20:31:15 +0000
asID:                     28649
IP address blocks:        191.253.32.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:62:cd:bd:0d:8c:96:b2:ad:16:34:21:bd:c8:f0:cc:ee:73:04:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Aug 15 20:26:15 2025 GMT
            Not After : Aug 14 20:31:15 2026 GMT
        Subject: CN=69DE941A6DBC30FCC598CCEDFBE0D36277E65A12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2d:cb:b8:a6:d5:31:a2:2f:5b:8e:31:54:09:
                    72:98:34:36:51:5f:c0:a8:82:41:c7:91:b4:2b:af:
                    b0:5f:2a:92:ad:55:ca:1a:98:d0:91:3a:50:4a:92:
                    13:4d:d8:cb:d9:73:26:a5:ef:fc:de:4c:2c:bd:b0:
                    ad:24:9a:47:51:dd:da:f5:55:8b:9d:b9:80:21:a3:
                    08:6b:63:b1:66:11:9d:b0:eb:50:a2:38:da:1c:57:
                    eb:4a:64:51:10:40:4a:e3:98:a9:89:1f:3f:f5:44:
                    f5:06:fc:8f:9a:ff:93:59:8b:00:2b:1b:95:a1:2d:
                    c0:f9:66:ec:52:40:3a:d4:58:24:28:de:a1:0f:19:
                    e6:b8:7d:9d:dd:01:ee:e6:88:e6:61:0e:32:ee:dc:
                    e7:f1:ff:31:f4:16:b3:a5:79:7c:8b:48:54:35:2c:
                    98:60:d0:59:9f:c3:e5:94:a3:c5:87:fe:6a:2d:f2:
                    5c:f6:4e:4c:e8:41:db:54:98:12:e8:8f:10:a6:b2:
                    3c:57:0c:d9:82:aa:91:7a:ed:00:c0:7d:39:72:10:
                    44:ce:96:da:27:da:a0:57:6b:6a:0b:97:76:1f:ac:
                    ec:10:a5:24:31:f5:61:cb:3c:9c:b9:12:af:6c:7c:
                    50:60:a4:e2:74:2d:9a:48:d2:dc:29:64:b5:d8:a7:
                    7e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DE:94:1A:6D:BC:30:FC:C5:98:CC:ED:FB:E0:D3:62:77:E6:5A:12
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3139312e3235332e33322e302f32312d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:7d:73:d0:f9:0c:90:a9:55:69:65:50:a7:85:c9:d7:c8:3e:
         0d:fc:42:99:5a:76:0f:57:aa:fe:db:70:51:aa:3f:ca:53:f9:
         64:81:66:b3:b5:69:ea:af:6f:55:73:e6:f1:6d:b9:91:c6:66:
         29:15:3e:78:3f:b7:9e:e8:8a:ac:54:4d:53:e7:a8:e3:39:8c:
         47:09:a6:3b:e2:2b:04:e5:b3:dd:6c:9a:b0:5f:71:42:9d:ba:
         97:3e:5d:43:32:16:e6:e0:26:cf:e2:53:0a:ec:bd:88:95:9d:
         1a:a4:b4:d5:76:d8:8b:85:3e:e9:db:18:06:c5:85:66:c4:f0:
         ea:da:77:2f:9d:c0:43:93:62:9a:50:da:df:56:df:16:1a:3c:
         bd:d3:bb:cf:e8:1a:18:8a:bb:69:3f:ac:71:ba:d3:c0:ed:24:
         8c:5e:f4:80:1e:a4:93:b2:34:fd:ee:8a:1e:1a:e4:cc:d5:3d:
         cc:2e:af:cb:ed:58:9c:71:3d:cd:24:aa:1e:81:68:2e:7b:12:
         51:1f:4c:4f:c0:90:01:c8:bc:e1:78:2b:ef:e6:d4:c3:38:f7:
         de:05:31:4f:fe:45:bf:ed:af:1f:fc:7a:5c:e4:81:c6:fe:a3:
         79:6a:7e:43:74:90:f8:8d:47:6d:e4:aa:11:e8:5e:62:d6:0f:
         23:25:09:32
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIWLNvQ2MlrKtFjQhvcjwzO5zBK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBNTc0MTM4RDBEOEZDMEEzNzZBQTIzREI0RTE1MzNG
RjBDNTY1MjAeFw0yNTA4MTUyMDI2MTVaFw0yNjA4MTQyMDMxMTVaMDMxMTAvBgNV
BAMTKDY5REU5NDFBNkRCQzMwRkNDNTk4Q0NFREZCRTBEMzYyNzdFNjVBMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpLcu4ptUxoi9bjjFUCXKYNDZR
X8CogkHHkbQrr7BfKpKtVcoamNCROlBKkhNN2MvZcyal7/zeTCy9sK0kmkdR3dr1
VYuduYAhowhrY7FmEZ2w61CiONocV+tKZFEQQErjmKmJHz/1RPUG/I+a/5NZiwAr
G5WhLcD5ZuxSQDrUWCQo3qEPGea4fZ3dAe7miOZhDjLu3Ofx/zH0FrOleXyLSFQ1
LJhg0Fmfw+WUo8WH/mot8lz2TkzoQdtUmBLojxCmsjxXDNmCqpF67QDAfTlyEETO
lton2qBXa2oLl3YfrOwQpSQx9WHLPJy5Eq9sfFBgpOJ0LZpI0twpZLXYp34FAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUad6UGm28MPzFmMzt++DTYnfmWhIwHwYDVR0j
BBgwFoAUAaV0E40Nj8Cjdqoj204VM/8MVlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8wMUE1NzQxMzhEMEQ4RkMwQTM3NkFBMjNEQjRFMTUzM0ZGMEM1NjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQTU3NDEzOEQwRDhGQzBB
Mzc2QUEyM0RCNEUxNTMzRkYwQzU2NTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzEzOTMxMmUzMjM1MzMyZTMzMzIyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzMjM4
MzYzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDv/0gMA0GCSqGSIb3DQEBCwUAA4IBAQAGfXPQ+QyQ
qVVpZVCnhcnXyD4N/EKZWnYPV6r+23BRqj/KU/lkgWaztWnqr29Vc+bxbbmRxmYp
FT54P7ee6IqsVE1T56jjOYxHCaY74isE5bPdbJqwX3FCnbqXPl1DMhbm4CbP4lMK
7L2IlZ0apLTVdtiLhT7p2xgGxYVmxPDq2ncvncBDk2KaUNrfVt8WGjy907vP6BoY
irtpP6xxutPA7SSMXvSAHqSTsjT97ooeGuTM1T3MLq/L7ViccT3NJKoegWguexJR
H0xPwJAByLzheCvv5tTDOPfeBTFP/kW/7a8f/Hpc5IHG/qN5an5DdJD4jUdt5KoR
6F5i1g8jJQky
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:05 2025 by rpki-client