Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/3230312e3133312e3137322e302f32322d3234203d3e203631383432.roa
File:                     3230312e3133312e3137322e302f32322d3234203d3e203631383432.roa (raw, json)
Hash identifier:          y7GzveV/lU+tym8BOQs0o4EDTw5cAvNoHjq0lJu52qQ=
Subject key identifier:   39:B6:02:39:E3:AE:60:46:0D:22:99:C6:73:64:15:C8:5B:A8:CF:FA
Certificate issuer:       /CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
Certificate serial:       5F762A9F077C950154ABDE2B602EB0F2B13C3165
Authority key identifier: 18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/3230312e3133312e3137322e302f32322d3234203d3e203631383432.roa
Signing time:             Fri 08 Aug 2025 13:00:00 +0000
ROA not before:           Fri 08 Aug 2025 12:55:00 +0000
ROA not after:            Fri 07 Aug 2026 13:00:00 +0000
asID:                     61842
IP address blocks:        201.131.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl
                          rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 13:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:76:2a:9f:07:7c:95:01:54:ab:de:2b:60:2e:b0:f2:b1:3c:31:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
        Validity
            Not Before: Aug  8 12:55:00 2025 GMT
            Not After : Aug  7 13:00:00 2026 GMT
        Subject: CN=39B60239E3AE60460D2299C6736415C85BA8CFFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:52:ed:a8:22:61:1b:b4:a1:54:f3:d3:42:
                    bd:29:cd:78:1d:a0:37:c4:20:d4:1b:85:43:d8:bb:
                    fe:3d:3c:59:99:15:21:13:cd:04:ee:29:92:d2:2a:
                    0e:2e:6c:aa:17:b7:ce:d8:5d:68:4a:6b:5b:e1:44:
                    0a:0e:fc:56:5b:60:21:92:f6:11:2e:b0:2d:34:5e:
                    b7:81:28:6c:6c:f6:58:47:4e:6a:12:06:c5:2c:3f:
                    b7:2e:8b:1c:91:21:d8:74:b8:69:48:1b:b6:95:44:
                    05:85:7f:34:63:96:0e:1d:e8:37:01:b4:bd:df:68:
                    fc:d2:42:02:12:1c:e5:90:1d:24:9b:92:43:4c:69:
                    78:5d:e2:21:a0:bd:1c:58:d2:19:d4:bd:a0:6f:46:
                    55:32:f8:0b:8f:ac:65:54:ee:ec:dc:13:fc:d0:d1:
                    58:9f:45:68:9e:97:81:7a:ab:7b:ef:b5:e4:6e:cf:
                    d2:00:bb:1c:ae:40:97:63:e5:ff:0d:0b:5f:54:b9:
                    b9:32:13:b8:90:88:c9:1c:60:9a:5f:69:b4:84:d5:
                    66:5e:d9:0c:ee:01:06:d5:a8:77:ba:f5:2c:ea:8e:
                    63:0a:17:53:3e:07:b0:10:78:3b:53:b9:e7:17:f8:
                    fe:19:8e:62:8f:6b:3d:9c:76:62:e0:a6:e8:da:55:
                    a3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B6:02:39:E3:AE:60:46:0D:22:99:C6:73:64:15:C8:5B:A8:CF:FA
            X509v3 Authority Key Identifier:
                keyid:18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/3230312e3133312e3137322e302f32322d3234203d3e203631383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:6e:c3:2f:25:52:80:ec:d5:b4:d7:40:5a:22:59:a6:b8:dd:
         63:3a:ac:23:b8:23:9e:22:29:3c:76:e7:01:67:a6:54:dd:34:
         53:75:fd:c1:70:00:59:e5:4a:52:04:a5:ac:6a:3b:d6:59:86:
         31:84:06:07:79:21:dd:67:bd:28:e2:03:2f:34:58:11:3f:fc:
         cd:8c:d7:66:74:9d:5c:dc:f6:9b:70:24:bb:d1:4b:cb:db:62:
         68:83:c8:7f:f3:bb:37:c0:2d:c4:e9:af:8e:60:2e:1c:82:82:
         0d:be:fa:82:99:3c:b2:a4:b8:14:d0:32:7a:1c:09:2d:15:f6:
         2a:4c:ce:87:79:1f:ed:5a:d4:8e:1a:ea:bb:d7:d0:11:63:07:
         35:91:ed:59:27:ca:2c:2d:31:f7:e3:e7:f7:fd:f3:61:8e:63:
         cb:79:ca:e7:92:2c:62:22:af:cb:68:f9:7d:af:c2:26:29:dd:
         05:f6:1a:2a:34:1c:1c:60:3e:6c:22:46:6c:2d:ae:08:e8:b7:
         74:56:01:9a:48:29:63:7d:12:ad:ae:7f:52:6f:ef:08:a7:bd:
         61:6d:37:fb:d4:ed:ac:7e:f5:2f:66:7f:e5:e0:61:93:e9:a5:
         7b:68:10:39:0d:c9:a7:21:7a:c1:8c:4d:4d:85:72:d7:43:66:
         ea:ff:03:d3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUX3Yqnwd8lQFUq94rYC6w8rE8MWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThGQkRCNzUxNzg5QTNEMUNDRkE3RjQyQkMzOEYwQThD
QUJBRjJDRTAeFw0yNTA4MDgxMjU1MDBaFw0yNjA4MDcxMzAwMDBaMDMxMTAvBgNV
BAMTKDM5QjYwMjM5RTNBRTYwNDYwRDIyOTlDNjczNjQxNUM4NUJBOENGRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JVLtqCJhG7ShVPPTQr0pzXgd
oDfEINQbhUPYu/49PFmZFSETzQTuKZLSKg4ubKoXt87YXWhKa1vhRAoO/FZbYCGS
9hEusC00XreBKGxs9lhHTmoSBsUsP7cuixyRIdh0uGlIG7aVRAWFfzRjlg4d6DcB
tL3faPzSQgISHOWQHSSbkkNMaXhd4iGgvRxY0hnUvaBvRlUy+AuPrGVU7uzcE/zQ
0VifRWiel4F6q3vvteRuz9IAuxyuQJdj5f8NC19UubkyE7iQiMkcYJpfabSE1WZe
2QzuAQbVqHe69SzqjmMKF1M+B7AQeDtTuecX+P4ZjmKPaz2cdmLgpujaVaOfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUObYCOeOuYEYNIpnGc2QVyFuoz/owHwYDVR0j
BBgwFoAUGPvbdReJo9HM+n9CvDjwqMq68s4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVFYdUd2cWtleGp1dWJxSjNuMUx4N290dFRrSFlOVTV5cndkQ3dvaGhN
THovMS8xOEZCREI3NTE3ODlBM0QxQ0NGQTdGNDJCQzM4RjBBOENBQkFGMkNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4RkJEQjc1MTc4OUEzRDFD
Q0ZBN0Y0MkJDMzhGMEE4Q0FCQUYyQ0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VRWHVHdnFrZXhqdXVicUozbjFMeDdvdHRUa0hZTlU1eXJ3ZEN3b2hoTUx6LzEv
MzIzMDMxMmUzMTMzMzEyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2
MzEzODM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJg6wwDQYJKoZIhvcNAQELBQADggEBAEZuwy8l
UoDs1bTXQFoiWaa43WM6rCO4I54iKTx25wFnplTdNFN1/cFwAFnlSlIEpaxqO9ZZ
hjGEBgd5Id1nvSjiAy80WBE//M2M12Z0nVzc9ptwJLvRS8vbYmiDyH/zuzfALcTp
r45gLhyCgg2++oKZPLKkuBTQMnocCS0V9ipMzod5H+1a1I4a6rvX0BFjBzWR7Vkn
yiwtMffj5/f982GOY8t5yueSLGIir8to+X2vwiYp3QX2Gio0HBxgPmwiRmwtrgjo
t3RWAZpIKWN9Eq2uf1Jv7winvWFtN/vU7ax+9S9mf+XgYZPppXtoEDkNyachesGM
TU2FctdDZur/A9M=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:00:04 2025 by rpki-client