Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3231302e302f32332d3233203d3e20323730353434.roa
File:                     3138372e39352e3231302e302f32332d3233203d3e20323730353434.roa (raw, json)
Hash identifier:          YJTA+k0YURxhT0VV+KyKp5OWgH/5WgKQbM1IeJ1x46w=
Subject key identifier:   A2:CE:BF:D8:9E:D0:4F:4A:D2:B7:24:F4:3D:C8:60:08:C2:D3:4D:54
Certificate issuer:       /CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
Certificate serial:       79EC1A05B0372B0831D05E529CBD99A87990C62E
Authority key identifier: 5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3231302e302f32332d3233203d3e20323730353434.roa
Signing time:             Wed 09 Jul 2025 01:43:35 +0000
ROA not before:           Wed 09 Jul 2025 01:38:35 +0000
ROA not after:            Wed 08 Jul 2026 01:43:35 +0000
asID:                     270544
IP address blocks:        187.95.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl
                          rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 03:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ec:1a:05:b0:37:2b:08:31:d0:5e:52:9c:bd:99:a8:79:90:c6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
        Validity
            Not Before: Jul  9 01:38:35 2025 GMT
            Not After : Jul  8 01:43:35 2026 GMT
        Subject: CN=A2CEBFD89ED04F4AD2B724F43DC86008C2D34D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:18:82:a9:b9:f2:7d:34:40:3b:a3:8b:92:e1:
                    2f:87:16:a4:a3:3f:55:26:20:fc:3a:9b:bc:6e:bc:
                    8a:f3:1a:3b:c3:bf:d3:ea:82:35:f0:d9:56:f4:18:
                    c4:f5:dc:ff:cf:0b:02:fc:b1:25:51:b0:5d:4b:09:
                    21:3e:80:aa:e5:d0:cf:e8:a5:c1:6b:44:82:90:e2:
                    e9:6d:75:3f:13:93:cf:d4:22:2d:e8:f2:4a:2f:5e:
                    39:70:30:61:f4:b1:c6:a7:95:c7:50:f6:7e:c0:b8:
                    ed:e2:1d:99:e4:73:05:fa:77:c4:18:9f:21:ca:9b:
                    81:ac:2a:65:ae:0a:0f:ad:b1:27:20:a3:b4:ba:35:
                    04:7c:67:87:39:58:e4:fe:aa:6c:0d:89:43:78:de:
                    43:3d:a5:6c:8f:42:cb:5d:12:4f:72:e7:84:f9:d9:
                    77:11:78:3a:01:ff:78:3a:90:43:78:1d:57:f0:00:
                    de:b3:e6:58:b5:e1:67:d6:b1:58:a1:52:2a:1a:3e:
                    4a:bb:ae:6d:fe:db:6e:e3:c5:0e:f5:7b:8f:c1:70:
                    78:55:b4:37:f1:0b:52:a7:9e:42:65:f4:66:64:6a:
                    27:81:cd:c8:4b:04:5d:2b:33:79:3b:16:f5:88:ed:
                    1e:9d:90:7b:67:ce:a2:da:3e:ef:a7:a9:1c:00:24:
                    c6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CE:BF:D8:9E:D0:4F:4A:D2:B7:24:F4:3D:C8:60:08:C2:D3:4D:54
            X509v3 Authority Key Identifier:
                keyid:5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3231302e302f32332d3233203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:34:28:60:24:ed:a5:22:d0:86:9e:cc:d0:bd:7b:0b:e9:27:
         52:af:93:62:80:3e:ee:d7:3a:da:ee:d7:ff:f0:1d:aa:46:6e:
         78:99:4b:04:eb:5a:38:6f:95:d3:b5:75:60:90:05:fa:eb:ba:
         68:d8:d4:ff:40:b8:52:55:a2:ca:b8:42:f0:04:9d:2a:c1:7e:
         cf:ea:25:a3:5b:a6:ab:29:22:02:48:a2:f1:a8:eb:27:de:a9:
         07:60:3c:ba:1e:0e:b5:6c:e6:d1:1c:e6:cc:4b:79:3a:c8:21:
         22:d1:c0:a7:61:49:f1:51:25:74:a0:20:94:f3:a9:b7:c4:b0:
         b4:00:07:d8:b2:81:70:86:af:3f:de:50:7b:39:46:2e:bb:d3:
         73:b6:e5:11:c8:e6:67:73:e3:c0:3d:fa:4c:76:71:01:42:78:
         3f:ae:c8:0b:36:4f:00:90:29:ce:19:51:1e:71:23:55:bf:21:
         85:5e:e9:b6:76:ff:2a:f4:38:20:c7:31:74:34:59:ee:8e:f4:
         03:4e:a1:d5:be:29:7a:f2:ff:87:7a:6e:8a:65:c5:46:04:72:
         cf:41:65:4f:ce:ad:8b:11:99:07:fd:18:40:29:9c:e8:b0:b7:
         e3:14:06:e4:37:f2:d5:9b:3a:56:db:ce:bf:cd:53:b3:6c:af:
         39:07:02:87
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeewaBbA3Kwgx0F5SnL2ZqHmQxi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURENUZDODRCNzRGRDlGOEQ3NUMyODQwNzM3Qjk0MkQ3
QzVERjY1OTAeFw0yNTA3MDkwMTM4MzVaFw0yNjA3MDgwMTQzMzVaMDMxMTAvBgNV
BAMTKEEyQ0VCRkQ4OUVEMDRGNEFEMkI3MjRGNDNEQzg2MDA4QzJEMzRENTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXGIKpufJ9NEA7o4uS4S+HFqSj
P1UmIPw6m7xuvIrzGjvDv9PqgjXw2Vb0GMT13P/PCwL8sSVRsF1LCSE+gKrl0M/o
pcFrRIKQ4ultdT8Tk8/UIi3o8kovXjlwMGH0scanlcdQ9n7AuO3iHZnkcwX6d8QY
nyHKm4GsKmWuCg+tsScgo7S6NQR8Z4c5WOT+qmwNiUN43kM9pWyPQstdEk9y54T5
2XcReDoB/3g6kEN4HVfwAN6z5li14WfWsVihUioaPkq7rm3+227jxQ71e4/BcHhV
tDfxC1KnnkJl9GZkaieBzchLBF0rM3k7FvWI7R6dkHtnzqLaPu+nqRwAJMaHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUos6/2J7QT0rStyT0PchgCMLTTVQwHwYDVR0j
BBgwFoAUXdX8hLdP2fjXXChAc3uULXxd9lkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWtVOVBRa1JGY0JQTnFFNVY5RzRuSEY0c0V3UWppNnp0RHF4cTVHVjN3
YzgvMC81REQ1RkM4NEI3NEZEOUY4RDc1QzI4NDA3MzdCOTQyRDdDNURGNjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVERDVGQzg0Qjc0RkQ5RjhE
NzVDMjg0MDczN0I5NDJEN0M1REY2NTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VrVTlQUWtSRmNCUE5xRTVWOUc0bkhGNHNFd1FqaTZ6dERxeHE1R1Yzd2M4LzAv
MzEzODM3MmUzOTM1MmUzMjMxMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzAzNTM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG7X9IwDQYJKoZIhvcNAQELBQADggEBALA0KGAk
7aUi0IaezNC9ewvpJ1Kvk2KAPu7XOtru1//wHapGbniZSwTrWjhvldO1dWCQBfrr
umjY1P9AuFJVosq4QvAEnSrBfs/qJaNbpqspIgJIovGo6yfeqQdgPLoeDrVs5tEc
5sxLeTrIISLRwKdhSfFRJXSgIJTzqbfEsLQAB9iygXCGrz/eUHs5Ri6703O25RHI
5mdz48A9+kx2cQFCeD+uyAs2TwCQKc4ZUR5xI1W/IYVe6bZ2/yr0OCDHMXQ0We6O
9ANOodW+KXry/4d6boplxUYEcs9BZU/OrYsRmQf9GEApnOiwt+MUBuQ38tWbOlbb
zr/NU7NsrzkHAoc=
-----END CERTIFICATE-----
Generated at Sat Jul 12 14:09:55 2025 by rpki-client