Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3132392e302f32342d3234203d3e203237373135.roa
File:                     3138372e312e3132392e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          cRvahclsqpsC7GhQxsloq1lxYlRFhb+WS+P5AMte7PY=
Subject key identifier:   D5:CB:40:D0:5D:9E:82:09:7D:35:00:F2:A8:B1:A6:E1:15:8C:1F:10
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       4FBF5D415068F4E9840E2E8B7BB1A335535BDFE0
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3132392e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 12:00:07 +0000
ROA not before:           Mon 20 Oct 2025 11:55:07 +0000
ROA not after:            Mon 19 Oct 2026 12:00:07 +0000
asID:                     27715
IP address blocks:        187.1.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:bf:5d:41:50:68:f4:e9:84:0e:2e:8b:7b:b1:a3:35:53:5b:df:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 11:55:07 2025 GMT
            Not After : Oct 19 12:00:07 2026 GMT
        Subject: CN=D5CB40D05D9E82097D3500F2A8B1A6E1158C1F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:94:61:ea:5d:3a:14:2e:ce:a0:c2:a7:23:
                    73:04:7f:7c:6b:50:17:a4:a9:14:da:9b:18:b4:67:
                    b4:c4:5a:a4:a9:26:ae:39:5a:15:87:63:d9:39:93:
                    51:05:13:ec:dd:15:c5:a4:50:ba:c0:b6:4e:62:f5:
                    fb:b0:ef:40:18:00:51:26:62:ee:01:cb:b5:10:72:
                    6b:8b:2e:2c:9a:4b:f8:43:a9:d3:2f:2b:bf:91:52:
                    8a:71:a7:59:fd:86:60:8e:a1:63:c0:84:34:90:6f:
                    af:b2:93:31:64:a1:86:52:81:40:12:3f:ff:cc:21:
                    5d:95:e1:ae:44:dc:96:f9:a4:65:a0:f2:00:40:32:
                    7d:b7:f0:69:44:86:bd:32:3f:db:10:c9:8c:bf:5a:
                    3d:6b:b0:e3:bb:39:54:74:20:26:25:3b:db:50:0f:
                    36:5c:a1:0d:06:ed:bc:7a:b6:10:0b:77:53:41:b5:
                    db:93:c6:37:24:46:e9:aa:55:64:ac:a3:01:7c:10:
                    38:90:bd:f0:20:63:d0:5f:52:3d:84:55:f3:10:74:
                    b3:39:bd:39:83:fc:93:65:65:b3:eb:01:d2:7d:60:
                    8c:c9:01:1b:61:20:3f:b0:fb:71:72:5e:3e:62:58:
                    e0:5b:64:7f:97:43:79:c2:2b:c9:c9:f1:e7:a9:ab:
                    bc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CB:40:D0:5D:9E:82:09:7D:35:00:F2:A8:B1:A6:E1:15:8C:1F:10
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3132392e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:db:c8:3c:bc:45:5d:26:be:69:ef:48:82:9c:05:b7:22:15:
         8b:fe:5e:73:6e:ed:05:f1:3f:87:f4:af:1a:e8:5c:85:cb:f8:
         7b:05:26:48:56:08:3f:75:90:70:23:fe:3b:2f:93:1a:4e:7f:
         d6:84:44:4c:a9:87:79:22:38:db:de:56:45:f3:42:01:a7:c0:
         1b:c6:79:fb:07:ee:ec:bc:d4:cf:a4:d3:75:ad:36:a1:97:cf:
         ca:d2:bb:39:c8:8b:be:d9:48:bc:28:b4:44:15:ac:1f:84:ab:
         4d:a8:42:00:b1:3d:60:d9:db:4f:9c:9f:57:e7:95:60:15:65:
         1e:f0:6d:13:54:b9:d5:f7:ff:dd:91:67:87:60:e5:77:6a:4a:
         a5:0b:5d:03:1c:e6:d4:5c:9b:ab:88:08:44:29:76:4e:d5:43:
         bf:48:2a:1a:9a:c8:f7:b3:f9:f4:51:fe:58:75:cf:73:1d:cf:
         ce:f5:40:a3:8d:cc:32:40:83:d2:43:f9:d2:f6:04:85:67:ce:
         c1:76:3b:65:09:c4:1a:0a:4e:96:92:78:98:48:95:04:42:1a:
         54:1f:e5:ad:14:f5:84:ba:2d:b4:5d:71:0c:c9:ed:f7:c1:bb:
         18:1e:8a:56:df:7a:bb:80:63:d9:21:72:68:a8:c0:d3:1c:12:
         5e:8b:46:65
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUT79dQVBo9OmEDi6Le7GjNVNb3+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAxQUQ2MUExQTVBNDlCMDhGOUQ4Q0ZFOTlEMjU4MjM1
NUE5RENFODAeFw0yNTEwMjAxMTU1MDdaFw0yNjEwMTkxMjAwMDdaMDMxMTAvBgNV
BAMTKEQ1Q0I0MEQwNUQ5RTgyMDk3RDM1MDBGMkE4QjFBNkUxMTU4QzFGMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBvZRh6l06FC7OoMKnI3MEf3xr
UBekqRTamxi0Z7TEWqSpJq45WhWHY9k5k1EFE+zdFcWkULrAtk5i9fuw70AYAFEm
Yu4By7UQcmuLLiyaS/hDqdMvK7+RUopxp1n9hmCOoWPAhDSQb6+ykzFkoYZSgUAS
P//MIV2V4a5E3Jb5pGWg8gBAMn238GlEhr0yP9sQyYy/Wj1rsOO7OVR0ICYlO9tQ
DzZcoQ0G7bx6thALd1NBtduTxjckRumqVWSsowF8EDiQvfAgY9BfUj2EVfMQdLM5
vTmD/JNlZbPrAdJ9YIzJARthID+w+3FyXj5iWOBbZH+XQ3nCK8nJ8eepq7yNAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU1ctA0F2eggl9NQDyqLGm4RWMHxAwHwYDVR0j
BBgwFoAUUBrWGhpaSbCPnYz+mdJYI1Wp3OgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWo5eTlxQ2pMaGdZR3YxWmRoN2E2WXozZlRhbmR2VEJOclVteWhVMWRR
N1UvMC81MDFBRDYxQTFBNUE0OUIwOEY5RDhDRkU5OUQyNTgyMzU1QTlEQ0U4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwMUFENjFBMUE1QTQ5QjA4
RjlEOENGRTk5RDI1ODIzNTVBOURDRTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VqOXk5cUNqTGhnWUd2MVpkaDdhNll6M2ZUYW5kdlRCTnJVbXloVTFkUTdVLzAv
MzEzODM3MmUzMTJlMzEzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3
MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALsBgTANBgkqhkiG9w0BAQsFAAOCAQEASdvIPLxFXSa+
ae9IgpwFtyIVi/5ec27tBfE/h/SvGuhchcv4ewUmSFYIP3WQcCP+Oy+TGk5/1oRE
TKmHeSI4295WRfNCAafAG8Z5+wfu7LzUz6TTda02oZfPytK7OciLvtlIvCi0RBWs
H4SrTahCALE9YNnbT5yfV+eVYBVlHvBtE1S51ff/3ZFnh2Dld2pKpQtdAxzm1Fyb
q4gIRCl2TtVDv0gqGprI97P59FH+WHXPcx3PzvVAo43MMkCD0kP50vYEhWfOwXY7
ZQnEGgpOlpJ4mEiVBEIaVB/lrRT1hLottF1xDMnt98G7GB6KVt96u4Bj2SFyaKjA
0xwSXotGZQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:08:10 2025 by rpki-client