Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa
File:                     3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa (raw, json)
Hash identifier:          Tr7fHp+T6Rna7ne5raBAeRnK9Ry4NlOEHktnSkWKl1U=
Subject key identifier:   5F:78:5D:BC:B4:FC:A1:D7:9F:81:DA:22:7E:C1:31:02:22:37:B4:EC
Certificate issuer:       /CN=C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B
Certificate serial:       11634756BC08E33F37B3E513F2B1D73F54BBCD08
Authority key identifier: C8:68:A6:8B:2B:0C:AA:98:D2:EE:3E:E6:87:3F:60:BE:9E:33:BD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa
Signing time:             Fri 15 Aug 2025 14:51:29 +0000
ROA not before:           Fri 15 Aug 2025 14:46:29 +0000
ROA not after:            Fri 14 Aug 2026 14:51:29 +0000
asID:                     263920
IP address blocks:        138.185.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 02:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:63:47:56:bc:08:e3:3f:37:b3:e5:13:f2:b1:d7:3f:54:bb:cd:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B
        Validity
            Not Before: Aug 15 14:46:29 2025 GMT
            Not After : Aug 14 14:51:29 2026 GMT
        Subject: CN=5F785DBCB4FCA1D79F81DA227EC131022237B4EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3f:61:bf:ae:83:63:cb:72:dd:ef:c1:e3:e3:
                    c1:27:a6:e9:10:89:d2:3d:0e:c4:e8:4f:a6:2b:ba:
                    36:32:54:b1:9d:f5:ff:05:ff:1d:35:2a:e9:93:c4:
                    41:3f:47:9f:36:5b:8d:e2:5f:e8:ce:f9:68:e0:44:
                    5a:73:52:88:45:fb:57:c2:37:b3:7e:f6:6d:ef:6e:
                    58:c4:81:d1:ca:15:a3:47:f5:40:27:b5:62:4e:4a:
                    ac:a5:85:36:9e:7b:97:fa:7a:be:97:44:f3:e1:97:
                    54:0c:17:b7:e8:1f:da:8e:64:b5:d2:1e:01:93:96:
                    78:52:42:8f:69:f9:43:85:47:1f:db:d5:0f:89:b5:
                    8a:84:e1:ae:fc:c4:16:9d:ec:c4:81:9c:f2:6d:53:
                    d8:88:05:e7:88:3f:89:25:e9:e1:e2:6c:98:96:cb:
                    fe:06:04:47:bd:24:b7:ff:d1:d8:81:62:9f:20:d8:
                    a0:a9:01:c0:9e:c0:b7:19:39:2d:43:2b:92:fd:d4:
                    41:8a:85:fc:85:eb:45:f2:af:ff:3e:4a:97:46:51:
                    d5:cb:99:54:1d:a8:bd:69:ca:70:2a:8b:9a:76:36:
                    05:7c:18:dd:4d:c9:9f:f3:69:41:4a:97:ec:db:aa:
                    af:a3:f2:62:50:47:af:7a:19:93:2c:80:63:40:90:
                    98:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:78:5D:BC:B4:FC:A1:D7:9F:81:DA:22:7E:C1:31:02:22:37:B4:EC
            X509v3 Authority Key Identifier:
                keyid:C8:68:A6:8B:2B:0C:AA:98:D2:EE:3E:E6:87:3F:60:BE:9E:33:BD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:c8:a4:2f:c4:3c:91:a2:d2:35:2e:1d:f3:ec:7e:73:97:8d:
         77:f3:e1:6c:bb:ba:ce:b7:24:23:1f:1f:8a:26:8d:22:33:da:
         68:20:3a:d7:be:60:b1:c1:c7:09:29:54:d4:d7:cf:2c:1a:08:
         f8:d2:f7:e4:15:f7:59:35:28:b6:49:7f:6e:05:52:29:39:e4:
         dc:2e:55:3f:92:72:c2:75:77:04:a6:52:ad:57:be:ee:7a:b2:
         f6:43:c7:9d:99:59:63:73:f1:64:43:6a:0b:5a:d8:5e:69:2d:
         2a:0e:ad:66:c1:a0:59:c5:22:7c:88:34:0e:60:7e:c6:1b:8a:
         87:3e:67:5b:e3:ba:9f:a3:96:98:da:2a:e1:7b:2b:f8:11:0f:
         d4:1e:e3:38:c6:a1:5c:71:71:4d:f3:d8:40:c3:b5:ba:17:b7:
         89:b1:6b:80:ca:1e:af:e7:d4:fb:a7:a7:9c:69:d9:4a:7f:36:
         4e:34:58:fa:2b:ef:73:90:a2:a4:b8:40:80:6d:b7:0d:4a:95:
         3e:24:71:04:08:32:f3:76:b1:2c:85:f1:1e:02:51:ad:91:cb:
         e4:2c:fa:96:46:6c:5d:17:55:5f:8f:56:01:4c:4b:1e:59:03:
         14:b3:6b:92:46:48:29:0b:ab:23:36:0b:0e:2b:2b:3e:00:6b:
         9e:66:c2:2b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEWNHVrwI4z83s+UT8rHXP1S7zQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg2OEE2OEIyQjBDQUE5OEQyRUUzRUU2ODczRjYwQkU5
RTMzQkQ0QjAeFw0yNTA4MTUxNDQ2MjlaFw0yNjA4MTQxNDUxMjlaMDMxMTAvBgNV
BAMTKDVGNzg1REJDQjRGQ0ExRDc5RjgxREEyMjdFQzEzMTAyMjIzN0I0RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQP2G/roNjy3Ld78Hj48EnpukQ
idI9DsToT6YrujYyVLGd9f8F/x01KumTxEE/R582W43iX+jO+WjgRFpzUohF+1fC
N7N+9m3vbljEgdHKFaNH9UAntWJOSqylhTaee5f6er6XRPPhl1QMF7foH9qOZLXS
HgGTlnhSQo9p+UOFRx/b1Q+JtYqE4a78xBad7MSBnPJtU9iIBeeIP4kl6eHibJiW
y/4GBEe9JLf/0diBYp8g2KCpAcCewLcZOS1DK5L91EGKhfyF60Xyr/8+SpdGUdXL
mVQdqL1pynAqi5p2NgV8GN1NyZ/zaUFKl+zbqq+j8mJQR696GZMsgGNAkJiPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUX3hdvLT8odefgdoifsExAiI3tOwwHwYDVR0j
BBgwFoAUyGimiysMqpjS7j7mhz9gvp4zvUswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUY3Mk1KZTE4c3BCQWJMTlZEdWM2QjNCaXBDZk5LbnRRTnd1aFpBd2U4
OG8vMC9DODY4QTY4QjJCMENBQTk4RDJFRTNFRTY4NzNGNjBCRTlFMzNCRDRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4NjhBNjhCMkIwQ0FBOThE
MkVFM0VFNjg3M0Y2MEJFOUUzM0JENEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGNzJNSmUxOHNwQkFiTE5WRHVjNkIzQmlwQ2ZOS250UU53dWhaQXdlODhvLzAv
MzEzMzM4MmUzMTM4MzUyZTMyMzQzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM5MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoq58DANBgkqhkiG9w0BAQsFAAOCAQEAfMik
L8Q8kaLSNS4d8+x+c5eNd/PhbLu6zrckIx8fiiaNIjPaaCA6175gscHHCSlU1NfP
LBoI+NL35BX3WTUotkl/bgVSKTnk3C5VP5JywnV3BKZSrVe+7nqy9kPHnZlZY3Px
ZENqC1rYXmktKg6tZsGgWcUifIg0DmB+xhuKhz5nW+O6n6OWmNoq4Xsr+BEP1B7j
OMahXHFxTfPYQMO1uhe3ibFrgMoer+fU+6ennGnZSn82TjRY+ivvc5CipLhAgG23
DUqVPiRxBAgy83axLIXxHgJRrZHL5Cz6lkZsXRdVX49WAUxLHlkDFLNrkkZIKQur
IzYLDisrPgBrnmbCKw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:58:11 2025 by rpki-client