Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133362e302f32342d3234203d3e203237373135.roa
File:                     3138372e312e3133362e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          sJODUoIS3PMRl3KrL/4ADiQqgpoGOz5EGzE9Yh6DKyg=
Subject key identifier:   FD:E5:97:8C:8F:4C:FF:30:CB:87:F8:3D:56:C7:8B:F0:FD:6B:71:4F
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       532514D92268E6CD02D31ADFFD60B2AD7F3A2B91
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133362e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 12:02:58 +0000
ROA not before:           Mon 20 Oct 2025 11:57:58 +0000
ROA not after:            Mon 19 Oct 2026 12:02:58 +0000
asID:                     27715
IP address blocks:        187.1.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:25:14:d9:22:68:e6:cd:02:d3:1a:df:fd:60:b2:ad:7f:3a:2b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 11:57:58 2025 GMT
            Not After : Oct 19 12:02:58 2026 GMT
        Subject: CN=FDE5978C8F4CFF30CB87F83D56C78BF0FD6B714F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:75:1d:f3:09:81:80:46:d9:dc:7c:6e:ba:
                    b4:f4:3b:12:d5:27:d0:7b:d2:c2:5b:16:2b:24:e6:
                    ea:f9:1a:bb:d6:84:bf:b0:37:0f:e5:3c:32:3f:72:
                    d9:a7:cb:66:2b:92:65:59:6e:d0:98:1e:74:57:99:
                    ab:70:35:62:55:ef:1c:ee:3e:23:e0:86:08:80:a0:
                    f3:4a:bc:6d:c0:14:3f:67:78:e0:28:ef:5a:d0:9e:
                    16:5f:4c:97:93:a5:4a:ab:22:b6:8f:34:28:34:8a:
                    4b:a8:17:95:35:85:0b:b1:c0:7e:26:2c:32:b3:3a:
                    d7:8e:d3:85:56:f7:b7:05:75:eb:a2:4f:7b:5a:1f:
                    0f:1b:8a:2c:04:08:67:a2:19:65:1c:3c:ae:f3:30:
                    bc:9f:5e:3d:c2:5f:28:63:d1:7e:46:b1:a7:6c:8c:
                    0e:d7:c3:60:ab:f8:a8:ea:d0:61:83:9a:a9:1f:f6:
                    a6:39:f6:2f:d1:17:64:74:75:15:4d:fd:2f:de:2f:
                    16:75:ce:64:fc:aa:55:be:a4:bf:3d:89:dc:28:d8:
                    8e:1e:a1:9f:11:4c:33:9a:43:ec:bb:4d:fb:3a:f1:
                    3b:d5:a8:7c:1b:02:76:cb:d1:60:ba:a0:f6:73:40:
                    21:db:3f:c0:cc:ec:cf:46:39:01:94:fc:b8:24:e0:
                    1a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E5:97:8C:8F:4C:FF:30:CB:87:F8:3D:56:C7:8B:F0:FD:6B:71:4F
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138372e312e3133362e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:bf:8a:b7:88:21:f0:1c:66:a0:1d:3e:df:c9:8f:e7:ac:fb:
         5a:8b:30:7f:83:2d:e4:f8:b9:9b:03:4b:f6:0d:9b:80:39:bf:
         e8:4a:e5:41:ad:c0:99:00:8c:b4:a6:c6:09:3a:aa:44:bb:5c:
         13:ae:3d:aa:92:64:66:c8:a9:f6:8c:fc:52:27:cc:45:be:0b:
         37:d9:af:ef:14:a1:09:53:18:23:33:dd:26:25:45:cd:dc:2e:
         36:28:89:4b:a0:d5:87:7c:39:f6:dd:95:1c:07:a2:a7:f5:1b:
         71:b7:c9:14:5e:87:a4:48:27:ba:a4:68:bc:4d:44:1c:85:e0:
         45:d7:9d:e3:b4:ac:c9:d1:bd:b1:85:d7:dc:d2:d3:aa:ec:08:
         d9:6d:84:df:54:0b:d0:c4:fc:38:cd:da:83:5f:c7:ef:fd:dd:
         2f:32:63:8e:99:ea:f5:19:13:26:33:71:93:49:3f:0e:9f:40:
         fe:d5:7c:5a:f4:c7:23:0c:9b:1a:c8:a1:08:07:c5:6b:a7:f9:
         d1:7a:db:58:76:4d:df:36:8c:d9:95:71:34:7a:ab:f7:33:8f:
         b7:93:99:ac:78:bb:48:2b:14:98:39:ee:53:38:ce:b2:8e:c2:
         0e:b7:2b:ff:6e:50:48:05:bd:c0:83:6c:ca:40:53:b8:91:24:
         bc:31:ee:6b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUUyUU2SJo5s0C0xrf/WCyrX86K5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAxQUQ2MUExQTVBNDlCMDhGOUQ4Q0ZFOTlEMjU4MjM1
NUE5RENFODAeFw0yNTEwMjAxMTU3NThaFw0yNjEwMTkxMjAyNThaMDMxMTAvBgNV
BAMTKEZERTU5NzhDOEY0Q0ZGMzBDQjg3RjgzRDU2Qzc4QkYwRkQ2QjcxNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKH3Ud8wmBgEbZ3HxuurT0OxLV
J9B70sJbFisk5ur5GrvWhL+wNw/lPDI/ctmny2YrkmVZbtCYHnRXmatwNWJV7xzu
PiPghgiAoPNKvG3AFD9neOAo71rQnhZfTJeTpUqrIraPNCg0ikuoF5U1hQuxwH4m
LDKzOteO04VW97cFdeuiT3taHw8biiwECGeiGWUcPK7zMLyfXj3CXyhj0X5Gsads
jA7Xw2Cr+Kjq0GGDmqkf9qY59i/RF2R0dRVN/S/eLxZ1zmT8qlW+pL89idwo2I4e
oZ8RTDOaQ+y7Tfs68TvVqHwbAnbL0WC6oPZzQCHbP8DM7M9GOQGU/Lgk4BpVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU/eWXjI9M/zDLh/g9VseL8P1rcU8wHwYDVR0j
BBgwFoAUUBrWGhpaSbCPnYz+mdJYI1Wp3OgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWo5eTlxQ2pMaGdZR3YxWmRoN2E2WXozZlRhbmR2VEJOclVteWhVMWRR
N1UvMC81MDFBRDYxQTFBNUE0OUIwOEY5RDhDRkU5OUQyNTgyMzU1QTlEQ0U4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwMUFENjFBMUE1QTQ5QjA4
RjlEOENGRTk5RDI1ODIzNTVBOURDRTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VqOXk5cUNqTGhnWUd2MVpkaDdhNll6M2ZUYW5kdlRCTnJVbXloVTFkUTdVLzAv
MzEzODM3MmUzMTJlMzEzMzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3
MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALsBiDANBgkqhkiG9w0BAQsFAAOCAQEAJL+Kt4gh8Bxm
oB0+38mP56z7Woswf4Mt5Pi5mwNL9g2bgDm/6ErlQa3AmQCMtKbGCTqqRLtcE649
qpJkZsip9oz8UifMRb4LN9mv7xShCVMYIzPdJiVFzdwuNiiJS6DVh3w59t2VHAei
p/UbcbfJFF6HpEgnuqRovE1EHIXgRded47SsydG9sYXX3NLTquwI2W2E31QL0MT8
OM3ag1/H7/3dLzJjjpnq9RkTJjNxk0k/Dp9A/tV8WvTHIwybGsihCAfFa6f50Xrb
WHZN3zaM2ZVxNHqr9zOPt5OZrHi7SCsUmDnuUzjOso7CDrcr/25QSAW9wINsykBT
uJEkvDHuaw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:08:08 2025 by rpki-client