Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e342e302f32332d3233203d3e20323634383939.roa
File:                     3136382e3232382e342e302f32332d3233203d3e20323634383939.roa (raw, json)
Hash identifier:          +jOrRaBj3DbjkySuyKQ7WRccSbco2X6KD88MQ4mcpsI=
Subject key identifier:   27:83:5B:03:FD:75:0B:70:CA:98:45:11:F3:E8:8E:9E:A1:42:22:10
Certificate issuer:       /CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
Certificate serial:       616A9C620BC64FDFC3094C954C497C246E5E1227
Authority key identifier: 14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e342e302f32332d3233203d3e20323634383939.roa
Signing time:             Thu 16 Oct 2025 18:30:53 +0000
ROA not before:           Thu 16 Oct 2025 18:25:53 +0000
ROA not after:            Thu 15 Oct 2026 18:30:53 +0000
asID:                     264899
IP address blocks:        168.228.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl
                          rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 05:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6a:9c:62:0b:c6:4f:df:c3:09:4c:95:4c:49:7c:24:6e:5e:12:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
        Validity
            Not Before: Oct 16 18:25:53 2025 GMT
            Not After : Oct 15 18:30:53 2026 GMT
        Subject: CN=27835B03FD750B70CA984511F3E88E9EA1422210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:88:53:32:f3:52:3c:c8:db:2f:6e:dc:7d:3a:
                    ba:fc:e5:cb:d8:73:76:b1:23:c0:10:b2:02:87:af:
                    1e:60:66:7d:df:b2:90:fa:73:f1:2f:ef:94:9e:fa:
                    1c:a0:c2:5c:d3:25:d5:a2:91:bb:b5:6f:4c:d9:c1:
                    9e:ce:f9:6b:b3:78:b2:13:0a:d1:ce:0a:1a:d1:53:
                    c3:4e:85:54:de:16:96:2e:f5:8b:91:00:e7:6d:79:
                    54:22:ba:48:51:d7:52:ee:23:4d:8a:60:ab:52:0f:
                    95:bb:e2:f1:89:b3:95:e2:b3:fa:47:81:6f:d6:c7:
                    f6:3d:7f:f3:b3:8b:54:ed:a4:7d:01:9e:a0:06:14:
                    0e:f7:54:bf:4b:59:eb:8d:1d:5a:84:9f:ab:03:35:
                    ae:c2:b8:ea:28:b2:94:87:15:3e:92:76:45:d0:a2:
                    3d:a1:f4:70:0d:a6:27:a6:83:51:17:30:97:14:ff:
                    9b:d7:f6:51:a3:e1:40:bf:05:ed:7f:65:0b:ac:64:
                    7e:de:4e:e1:34:b3:29:51:c9:7f:e7:bc:a4:ee:87:
                    91:6a:62:f2:b2:c5:49:e9:4e:00:bd:2a:df:45:0f:
                    55:40:c8:c2:1f:02:37:88:66:a2:b9:6d:3b:85:d7:
                    f8:59:cd:55:3a:48:bc:dd:03:fb:ed:b3:8a:96:a4:
                    db:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:83:5B:03:FD:75:0B:70:CA:98:45:11:F3:E8:8E:9E:A1:42:22:10
            X509v3 Authority Key Identifier:
                keyid:14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e342e302f32332d3233203d3e20323634383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:0a:b8:96:20:37:9c:80:fd:84:06:aa:fb:a0:c8:d3:97:05:
         f1:c8:2d:4d:c4:f9:8c:75:3e:79:e9:15:bf:6d:ed:18:a5:20:
         3c:0b:49:cc:e9:1d:a2:8f:c1:a4:80:4e:e7:2a:4d:f2:d4:23:
         1e:fe:d0:68:79:a6:1d:92:95:86:e9:fd:3b:51:7b:f3:80:f2:
         42:52:4b:ea:fe:75:92:69:5b:9b:b4:7f:64:73:d4:02:f2:7d:
         ce:34:d3:a2:7c:fc:64:74:c0:be:48:f9:a2:d5:5d:1b:f6:1b:
         91:60:34:41:06:9d:98:6f:0b:e5:f0:d9:5e:9d:86:34:11:73:
         d1:3c:2b:35:44:2f:cc:12:e3:60:e2:64:e0:82:1f:ca:fe:4f:
         53:96:04:44:c8:9e:47:2c:dd:49:5f:c5:e1:e4:87:d8:a2:b0:
         28:d1:b5:31:a3:bc:81:62:13:89:ba:5d:1a:be:37:c9:02:99:
         61:8d:a2:87:a8:24:27:af:b3:a3:d2:d1:b4:1e:2b:88:9c:91:
         0d:9b:c6:3c:a9:3a:94:ef:3f:b4:59:20:68:60:ec:cd:b5:dd:
         ee:4e:fd:63:35:f0:0c:bd:1e:7b:91:c9:6c:01:fa:b1:40:40:
         1e:f5:a1:31:e4:02:ec:8a:f2:00:f5:d5:29:2f:45:3b:73:1d:
         79:38:3c:c4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYWqcYgvGT9/DCUyVTEl8JG5eEicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQxOTJGODFCRkI4MDYwOUY5RTk1REQ4RDI4OEFFRUNF
N0I1MjkzODAeFw0yNTEwMTYxODI1NTNaFw0yNjEwMTUxODMwNTNaMDMxMTAvBgNV
BAMTKDI3ODM1QjAzRkQ3NTBCNzBDQTk4NDUxMUYzRTg4RTlFQTE0MjIyMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgiFMy81I8yNsvbtx9Orr85cvY
c3axI8AQsgKHrx5gZn3fspD6c/Ev75Se+hygwlzTJdWikbu1b0zZwZ7O+WuzeLIT
CtHOChrRU8NOhVTeFpYu9YuRAOdteVQiukhR11LuI02KYKtSD5W74vGJs5Xis/pH
gW/Wx/Y9f/Ozi1TtpH0BnqAGFA73VL9LWeuNHVqEn6sDNa7CuOoospSHFT6SdkXQ
oj2h9HANpiemg1EXMJcU/5vX9lGj4UC/Be1/ZQusZH7eTuE0sylRyX/nvKTuh5Fq
YvKyxUnpTgC9Kt9FD1VAyMIfAjeIZqK5bTuF1/hZzVU6SLzdA/vts4qWpNtJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUJ4NbA/11C3DKmEUR8+iOnqFCIhAwHwYDVR0j
BBgwFoAUFBkvgb+4Bgn56V3Y0oiu7Oe1KTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXZhcWFaZlUzRzFOWGdtekJYQjFUUWRLWDhqbW83UU1pZVByQkJVaWNr
aW0vMC8xNDE5MkY4MUJGQjgwNjA5RjlFOTVERDhEMjg4QUVFQ0U3QjUyOTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0MTkyRjgxQkZCODA2MDlG
OUU5NUREOEQyODhBRUVDRTdCNTI5MzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V2YXFhWmZVM0cxTlhnbXpCWEIxVFFkS1g4am1vN1FNaWVQckJCVWlja2ltLzAv
MzEzNjM4MmUzMjMyMzgyZTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzgzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqOQEMA0GCSqGSIb3DQEBCwUAA4IBAQBwCriWIDec
gP2EBqr7oMjTlwXxyC1NxPmMdT556RW/be0YpSA8C0nM6R2ij8GkgE7nKk3y1CMe
/tBoeaYdkpWG6f07UXvzgPJCUkvq/nWSaVubtH9kc9QC8n3ONNOifPxkdMC+SPmi
1V0b9huRYDRBBp2Ybwvl8NlenYY0EXPRPCs1RC/MEuNg4mTggh/K/k9TlgREyJ5H
LN1JX8Xh5IfYorAo0bUxo7yBYhOJul0avjfJAplhjaKHqCQnr7Oj0tG0HiuInJEN
m8Y8qTqU7z+0WSBoYOzNtd3uTv1jNfAMvR57kclsAfqxQEAe9aEx5ALsivIA9dUp
L0U7cx15ODzE
-----END CERTIFICATE-----
Generated at Tue Oct 21 09:38:29 2025 by rpki-client