Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3137372e36372e33382e302f32342d3234203d3e20323633393438.roa
File:                     3137372e36372e33382e302f32342d3234203d3e20323633393438.roa (raw, json)
Hash identifier:          Kcst2XysiuQIakBv13QHh3Ex/Sk/JyKEvlGVRpLiKFU=
Subject key identifier:   48:AE:49:1B:71:13:AD:3F:B3:34:5C:81:73:70:C1:9A:49:DA:B2:08
Certificate issuer:       /CN=5BE321DE017ABAEE980EA37ECDEE6E89FC3D9237
Certificate serial:       559F5D56180A29D7310EB89FE0FA48701725AD32
Authority key identifier: 5B:E3:21:DE:01:7A:BA:EE:98:0E:A3:7E:CD:EE:6E:89:FC:3D:92:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE321DE017ABAEE980EA37ECDEE6E89FC3D9237.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3137372e36372e33382e302f32342d3234203d3e20323633393438.roa
Signing time:             Fri 26 Sep 2025 19:28:21 +0000
ROA not before:           Fri 26 Sep 2025 19:23:21 +0000
ROA not after:            Fri 25 Sep 2026 19:28:21 +0000
asID:                     263948
IP address blocks:        177.67.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/5BE321DE017ABAEE980EA37ECDEE6E89FC3D9237.crl
                          rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/5BE321DE017ABAEE980EA37ECDEE6E89FC3D9237.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE321DE017ABAEE980EA37ECDEE6E89FC3D9237.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:14:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9f:5d:56:18:0a:29:d7:31:0e:b8:9f:e0:fa:48:70:17:25:ad:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE321DE017ABAEE980EA37ECDEE6E89FC3D9237
        Validity
            Not Before: Sep 26 19:23:21 2025 GMT
            Not After : Sep 25 19:28:21 2026 GMT
        Subject: CN=48AE491B7113AD3FB3345C817370C19A49DAB208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:20:6c:a0:11:64:7f:2d:e2:3b:d9:21:31:
                    a6:6a:46:e5:01:b2:e8:2b:4b:74:17:e9:77:35:18:
                    43:bb:6a:0f:9f:e7:75:33:d9:6f:f8:13:8e:56:bc:
                    00:e4:20:cc:b2:4f:f4:70:65:7d:40:e2:11:33:2e:
                    54:ff:ea:ca:1b:0b:c8:c4:cf:90:23:47:fd:52:08:
                    b0:86:23:65:2d:e9:01:05:e1:85:9c:fb:56:d3:06:
                    ad:b4:13:3c:5e:3a:2c:2f:80:87:d8:0f:e3:41:21:
                    15:3e:03:05:b8:8b:27:19:7b:12:96:ba:ec:7b:4b:
                    d5:57:f5:a8:59:b8:1a:da:b3:76:d7:81:91:8d:2b:
                    43:61:8d:b7:dd:6f:92:d4:a5:f5:2d:79:f6:59:5a:
                    2a:b2:94:eb:13:73:20:b6:b2:b8:dc:62:e8:93:35:
                    02:42:ae:91:db:80:5b:1b:58:95:3c:8b:2a:dc:64:
                    e8:5f:fe:5a:65:5d:be:e9:43:93:1e:a5:39:f9:fc:
                    d3:00:92:68:27:53:5d:e0:5d:b2:8b:6e:83:fe:19:
                    37:a4:58:83:90:3e:0d:63:5a:ed:7e:8b:e6:c7:87:
                    ed:01:f9:67:e3:e4:75:22:00:ec:65:07:ab:eb:d7:
                    11:f1:41:64:50:55:30:72:ba:03:37:50:a6:21:08:
                    7d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AE:49:1B:71:13:AD:3F:B3:34:5C:81:73:70:C1:9A:49:DA:B2:08
            X509v3 Authority Key Identifier:
                keyid:5B:E3:21:DE:01:7A:BA:EE:98:0E:A3:7E:CD:EE:6E:89:FC:3D:92:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/5BE321DE017ABAEE980EA37ECDEE6E89FC3D9237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE321DE017ABAEE980EA37ECDEE6E89FC3D9237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3137372e36372e33382e302f32342d3234203d3e20323633393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:63:fb:56:fc:29:8d:68:a7:a0:bb:34:8d:e7:80:5b:e6:be:
         84:5a:3f:bf:7a:cb:57:60:5f:0c:6e:3f:59:a9:10:0b:dd:cb:
         87:1a:de:22:87:aa:10:79:b4:8f:28:88:06:43:79:ba:b9:ba:
         87:71:e5:11:6c:36:6f:a5:8e:d4:1c:c3:a4:0c:a5:f1:0d:24:
         fd:34:16:07:90:0c:de:02:5a:cf:64:cf:4c:ea:29:ac:63:97:
         4c:3a:ac:8e:16:1d:64:f6:e6:e2:70:16:6e:20:af:3e:69:4c:
         f5:1d:01:84:9c:15:e1:08:28:d0:de:1c:55:4e:d6:27:04:59:
         4d:a2:4f:37:10:fa:d4:06:52:7f:4b:ec:4b:11:f0:fe:4c:62:
         97:fb:64:9f:c0:b0:98:10:ea:35:8c:af:08:6f:a5:48:42:2e:
         bc:07:3b:52:5f:40:84:7c:50:be:06:25:f2:fd:cd:52:53:14:
         30:7a:e7:ad:50:fa:98:aa:60:94:4e:93:da:5a:35:d1:b5:6b:
         62:2d:c3:18:bf:be:7e:eb:dc:e9:1b:4e:34:30:b1:74:f4:16:
         b9:e0:0d:b3:54:71:16:82:52:fb:0c:f6:c6:ec:58:ac:24:dd:
         32:9c:c8:b6:04:8a:91:64:53:17:3d:11:65:a3:89:4c:f4:3e:
         bb:84:f6:be
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVZ9dVhgKKdcxDrif4PpIcBclrTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJFMzIxREUwMTdBQkFFRTk4MEVBMzdFQ0RFRTZFODlG
QzNEOTIzNzAeFw0yNTA5MjYxOTIzMjFaFw0yNjA5MjUxOTI4MjFaMDMxMTAvBgNV
BAMTKDQ4QUU0OTFCNzExM0FEM0ZCMzM0NUM4MTczNzBDMTlBNDlEQUIyMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9miBsoBFkfy3iO9khMaZqRuUB
sugrS3QX6Xc1GEO7ag+f53Uz2W/4E45WvADkIMyyT/RwZX1A4hEzLlT/6sobC8jE
z5AjR/1SCLCGI2Ut6QEF4YWc+1bTBq20EzxeOiwvgIfYD+NBIRU+AwW4iycZexKW
uux7S9VX9ahZuBras3bXgZGNK0Nhjbfdb5LUpfUtefZZWiqylOsTcyC2srjcYuiT
NQJCrpHbgFsbWJU8iyrcZOhf/lplXb7pQ5MepTn5/NMAkmgnU13gXbKLboP+GTek
WIOQPg1jWu1+i+bHh+0B+Wfj5HUiAOxlB6vr1xHxQWRQVTByugM3UKYhCH3jAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSK5JG3ETrT+zNFyBc3DBmknasggwHwYDVR0j
BBgwFoAUW+Mh3gF6uu6YDqN+ze5uifw9kjcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRW1SS1REUUJlR1ZFREdHeWpXaTh0VldMWGpVVHRzamVIbUR2Wmg0UkpF
aXEvMC81QkUzMjFERTAxN0FCQUVFOTgwRUEzN0VDREVFNkU4OUZDM0Q5MjM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRTMyMURFMDE3QUJBRUU5
ODBFQTM3RUNERUU2RTg5RkMzRDkyMzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VtUktURFFCZUdWRURHR3lqV2k4dFZXTFhqVVR0c2plSG1EdlpoNFJKRWlxLzAv
MzEzNzM3MmUzNjM3MmUzMzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzkzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsUMmMA0GCSqGSIb3DQEBCwUAA4IBAQCGY/tW/CmN
aKeguzSN54Bb5r6EWj+/estXYF8Mbj9ZqRAL3cuHGt4ih6oQebSPKIgGQ3m6ubqH
ceURbDZvpY7UHMOkDKXxDST9NBYHkAzeAlrPZM9M6imsY5dMOqyOFh1k9ubicBZu
IK8+aUz1HQGEnBXhCCjQ3hxVTtYnBFlNok83EPrUBlJ/S+xLEfD+TGKX+2SfwLCY
EOo1jK8Ib6VIQi68BztSX0CEfFC+BiXy/c1SUxQweuetUPqYqmCUTpPaWjXRtWti
LcMYv75+69zpG040MLF09Ba54A2zVHEWglL7DPbG7FisJN0ynMi2BIqRZFMXPRFl
o4lM9D67hPa+
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:41:22 2025 by rpki-client