Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/3138372e3130392e3139322e302f32302d3332203d3e20313938393439.roa
File:                     3138372e3130392e3139322e302f32302d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          q5Amp+E/tcUmn90F1ijcwUIXjRA9aziUd/48DxQys4Q=
Subject key identifier:   93:5A:AF:27:8A:53:53:EF:73:2D:F7:B0:2F:01:11:3F:DB:3D:B6:D3
Certificate issuer:       /CN=8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2
Certificate serial:       1233D5A01E99E203C8E0D851E7D63DA7B18C401B
Authority key identifier: 83:70:E8:F5:BE:86:E6:36:B7:4F:2E:9A:87:B5:ED:E5:DE:C4:F8:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/3138372e3130392e3139322e302f32302d3332203d3e20313938393439.roa
Signing time:             Tue 29 Apr 2025 14:56:12 +0000
ROA not before:           Tue 29 Apr 2025 14:51:12 +0000
ROA not after:            Tue 28 Apr 2026 14:56:12 +0000
asID:                     198949
IP address blocks:        187.109.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.crl
                          rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 23:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:33:d5:a0:1e:99:e2:03:c8:e0:d8:51:e7:d6:3d:a7:b1:8c:40:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2
        Validity
            Not Before: Apr 29 14:51:12 2025 GMT
            Not After : Apr 28 14:56:12 2026 GMT
        Subject: CN=935AAF278A5353EF732DF7B02F01113FDB3DB6D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:43:e1:be:22:07:4a:bf:6e:64:a5:aa:52:
                    6c:38:ba:db:d2:1d:85:d3:0a:9e:15:fc:9f:4e:5e:
                    c2:4e:43:cb:5a:ac:8d:c7:0c:6e:67:a0:0c:cd:7f:
                    9d:fd:44:3c:ba:7a:25:af:c8:59:98:61:f0:2e:4e:
                    6f:a1:66:06:65:e2:98:2c:5a:2c:4c:b2:66:23:47:
                    a6:59:f0:92:11:a8:5e:9a:94:3c:c6:c5:96:73:24:
                    f5:94:ca:30:f4:cf:28:70:7d:5e:a1:b5:59:03:1f:
                    13:15:30:ca:f3:83:01:21:cf:63:ab:fb:de:a7:05:
                    ae:54:af:ed:2e:f4:cf:3e:82:5e:50:d9:11:25:19:
                    65:a0:92:88:e1:b1:d5:ef:4e:02:a3:69:cb:74:f6:
                    8c:6a:b5:d8:ad:2a:1a:a7:35:d5:74:f4:d9:81:3d:
                    4f:3c:93:da:7c:45:db:84:d3:87:2d:35:df:87:86:
                    4c:9f:63:97:cd:66:d6:8a:8c:84:e4:ac:2f:19:cd:
                    eb:2b:d4:b3:b1:56:13:8f:a0:cd:1a:90:1f:2b:1e:
                    b9:c4:c9:b0:99:57:6d:a4:52:f4:e1:f6:e6:78:a6:
                    2f:81:e7:79:f6:6f:9d:cf:0a:e9:a4:c1:61:aa:e4:
                    c0:71:ab:9d:23:b3:03:6a:39:6d:94:b9:0f:f0:ef:
                    e5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5A:AF:27:8A:53:53:EF:73:2D:F7:B0:2F:01:11:3F:DB:3D:B6:D3
            X509v3 Authority Key Identifier:
                keyid:83:70:E8:F5:BE:86:E6:36:B7:4F:2E:9A:87:B5:ED:E5:DE:C4:F8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/3138372e3130392e3139322e302f32302d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:6f:7c:cc:84:4d:72:1b:ca:d0:7e:81:ed:39:8c:3a:2a:fa:
         88:69:61:ee:f8:ae:fc:28:a5:ea:ca:c8:8e:4e:01:80:5a:31:
         71:50:94:24:ef:36:1e:cb:56:dd:98:f7:6f:10:1f:e7:e0:a1:
         98:4f:54:76:cd:a9:ca:5c:d6:ae:77:48:55:eb:fb:57:1f:fb:
         14:a9:8c:f4:d2:b6:33:f7:79:ee:8d:38:71:da:30:bf:93:5a:
         d4:c2:44:f9:c0:26:8e:96:87:b8:f0:c3:91:5d:90:63:5f:70:
         97:85:53:a1:f4:73:d5:ca:21:b5:e4:e2:12:b2:0a:f8:8d:2c:
         ef:33:b7:25:e2:22:35:cc:38:92:54:f8:3c:c1:e4:8a:10:86:
         f7:58:d9:c1:02:e3:ce:b2:de:e9:81:b9:36:eb:30:fc:d1:6e:
         ea:91:c7:b0:5e:95:6b:1a:a3:89:22:6b:14:d3:b4:9d:78:a7:
         0f:13:1e:b1:e7:e7:9b:26:00:17:02:e3:44:88:8c:6a:59:60:
         3d:f5:21:b9:b3:3d:52:b5:84:c8:fb:65:52:4c:f7:a6:3f:2f:
         6b:96:29:84:af:b1:2c:c2:85:12:0f:ba:a3:37:fd:c6:03:09:
         f0:6d:7f:04:01:72:82:e4:51:6d:cf:34:da:d4:47:8c:3b:d1:
         fb:1c:56:ed
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEjPVoB6Z4gPI4NhR59Y9p7GMQBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM3MEU4RjVCRTg2RTYzNkI3NEYyRTlBODdCNUVERTVE
RUM0RjhBMjAeFw0yNTA0MjkxNDUxMTJaFw0yNjA0MjgxNDU2MTJaMDMxMTAvBgNV
BAMTKDkzNUFBRjI3OEE1MzUzRUY3MzJERjdCMDJGMDExMTNGREIzREI2RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qEPhviIHSr9uZKWqUmw4utvS
HYXTCp4V/J9OXsJOQ8tarI3HDG5noAzNf539RDy6eiWvyFmYYfAuTm+hZgZl4pgs
WixMsmYjR6ZZ8JIRqF6alDzGxZZzJPWUyjD0zyhwfV6htVkDHxMVMMrzgwEhz2Or
+96nBa5Ur+0u9M8+gl5Q2RElGWWgkojhsdXvTgKjact09oxqtditKhqnNdV09NmB
PU88k9p8RduE04ctNd+HhkyfY5fNZtaKjITkrC8Zzesr1LOxVhOPoM0akB8rHrnE
ybCZV22kUvTh9uZ4pi+B53n2b53PCumkwWGq5MBxq50jswNqOW2UuQ/w7+XNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUk1qvJ4pTU+9zLfewLwERP9s9ttMwHwYDVR0j
BBgwFoAUg3Do9b6G5ja3Ty6ah7Xt5d7E+KIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVE5U2hZaUZINXlrc2ZRVmVtaXFNOFRFUVVrOHVqdWd2eExOYndDdUN2
RUQvMC84MzcwRThGNUJFODZFNjM2Qjc0RjJFOUE4N0I1RURFNURFQzRGOEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzNzBFOEY1QkU4NkU2MzZC
NzRGMkU5QTg3QjVFREU1REVDNEY4QTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VROVNoWWlGSDV5a3NmUVZlbWlxTThURVFVazh1anVndnhMTmJ3Q3VDdkVELzAv
MzEzODM3MmUzMTMwMzkyZTMxMzkzMjJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMx
MzkzODM5MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLttwDANBgkqhkiG9w0BAQsFAAOCAQEABG98
zIRNchvK0H6B7TmMOir6iGlh7viu/Cil6srIjk4BgFoxcVCUJO82HstW3Zj3bxAf
5+ChmE9Uds2pylzWrndIVev7Vx/7FKmM9NK2M/d57o04cdowv5Na1MJE+cAmjpaH
uPDDkV2QY19wl4VTofRz1cohteTiErIK+I0s7zO3JeIiNcw4klT4PMHkihCG91jZ
wQLjzrLe6YG5Nusw/NFu6pHHsF6VaxqjiSJrFNO0nXinDxMesefnmyYAFwLjRIiM
allgPfUhubM9UrWEyPtlUkz3pj8va5YphK+xLMKFEg+6ozf9xgMJ8G1/BAFyguRR
bc802tRHjDvR+xxW7Q==
-----END CERTIFICATE-----
Generated at Wed May 14 03:25:40 2025 by rpki-client