Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e342e302f32342d3234203d3e20323634383939.roa
File:                     3136382e3232382e342e302f32342d3234203d3e20323634383939.roa (raw, json)
Hash identifier:          vCHnjRdU0BYB/3m8PivRx3Qzsc6f6pwMV3m34HOXzkI=
Subject key identifier:   D2:96:9B:7D:FA:E1:54:D8:3D:AB:E1:73:41:77:21:87:2C:09:6E:18
Certificate issuer:       /CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
Certificate serial:       7E1C84508AE96EE36CF5DF56E3B9EA6FAF93639A
Authority key identifier: 14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e342e302f32342d3234203d3e20323634383939.roa
Signing time:             Thu 16 Oct 2025 18:30:55 +0000
ROA not before:           Thu 16 Oct 2025 18:25:55 +0000
ROA not after:            Thu 15 Oct 2026 18:30:55 +0000
asID:                     264899
IP address blocks:        168.228.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl
                          rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 05:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:1c:84:50:8a:e9:6e:e3:6c:f5:df:56:e3:b9:ea:6f:af:93:63:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
        Validity
            Not Before: Oct 16 18:25:55 2025 GMT
            Not After : Oct 15 18:30:55 2026 GMT
        Subject: CN=D2969B7DFAE154D83DABE173417721872C096E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1a:38:61:7a:d8:5d:29:69:06:7b:74:5e:da:
                    fa:e1:81:d6:42:d7:f2:3d:23:63:62:af:98:e6:12:
                    69:39:85:f7:3c:d4:d2:9e:b9:22:70:33:95:12:ff:
                    99:9b:61:32:89:2e:8b:8f:2c:99:5a:cb:5a:e5:99:
                    ad:c3:1a:2a:ab:26:c6:23:60:ba:31:8c:5d:f6:3c:
                    c6:fc:b0:e8:65:d1:fe:f6:c8:43:54:ed:9e:63:c9:
                    7f:ed:a7:17:e9:9f:dc:8e:6c:51:45:a1:82:28:ac:
                    53:fa:3b:95:94:16:97:19:db:07:73:4e:9d:70:c4:
                    cf:67:d4:51:63:7b:64:f6:c6:a0:f0:6c:63:26:f4:
                    59:b2:e0:bd:af:dd:cd:1c:62:f1:cc:02:69:e1:62:
                    40:29:fe:74:75:cf:1a:9a:f3:e7:fa:37:79:37:23:
                    c8:86:01:32:7b:2b:4e:a0:62:3a:48:e2:ef:82:36:
                    1c:30:a3:e0:85:05:c3:ac:5a:53:5a:85:fe:cd:94:
                    0c:09:03:4d:42:37:1a:29:fe:86:36:06:56:a0:a2:
                    ba:0a:3f:56:1b:52:84:9f:ce:03:64:66:e3:7a:ed:
                    87:9b:7c:6b:8d:2d:07:58:30:2b:b4:4d:21:cf:f0:
                    bd:2d:4a:85:70:3e:dd:ba:6b:20:c9:7d:17:d2:80:
                    b0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:96:9B:7D:FA:E1:54:D8:3D:AB:E1:73:41:77:21:87:2C:09:6E:18
            X509v3 Authority Key Identifier:
                keyid:14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e342e302f32342d3234203d3e20323634383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:ee:cb:cb:3f:02:4d:a2:a2:ad:1f:b3:51:eb:66:aa:88:54:
         24:a8:eb:2e:6f:70:cb:a4:e6:eb:90:32:12:08:16:2a:bc:46:
         92:4e:43:80:6e:7b:46:c6:b8:5e:02:d7:c0:e0:43:43:b0:18:
         c4:18:7d:a5:27:12:75:c1:41:03:fa:56:0c:04:07:40:1d:a1:
         ce:60:61:07:18:dd:70:f2:0e:52:9a:0b:f1:60:cc:35:2a:2a:
         92:23:fd:45:02:a2:58:2b:dc:9b:f5:49:cf:01:93:50:24:8a:
         62:a3:e7:45:7e:82:70:46:16:87:37:ca:7b:fc:65:48:33:c2:
         5f:b4:68:f9:d5:5c:6c:cc:1b:e2:02:ae:8d:bc:e6:07:58:ff:
         8b:ab:8a:68:15:85:ec:36:70:8e:8f:4c:88:0c:eb:ef:5c:98:
         7e:de:44:f8:96:8c:6e:6b:10:f1:e6:d8:d4:5e:4c:67:4d:71:
         43:59:2b:21:4a:97:e2:d5:55:92:22:50:6d:82:70:d7:aa:ba:
         36:8a:3e:7c:9f:be:da:99:94:02:00:54:41:6c:fd:99:a0:b2:
         1a:e0:31:43:ff:75:50:ab:ac:4b:00:2d:62:89:83:76:a5:97:
         a9:d4:1d:db:bb:19:3b:01:63:1a:b7:65:1b:aa:0c:96:6a:25:
         ec:3a:ae:d7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfhyEUIrpbuNs9d9W47nqb6+TY5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQxOTJGODFCRkI4MDYwOUY5RTk1REQ4RDI4OEFFRUNF
N0I1MjkzODAeFw0yNTEwMTYxODI1NTVaFw0yNjEwMTUxODMwNTVaMDMxMTAvBgNV
BAMTKEQyOTY5QjdERkFFMTU0RDgzREFCRTE3MzQxNzcyMTg3MkMwOTZFMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSGjhhethdKWkGe3Re2vrhgdZC
1/I9I2Nir5jmEmk5hfc81NKeuSJwM5US/5mbYTKJLouPLJlay1rlma3DGiqrJsYj
YLoxjF32PMb8sOhl0f72yENU7Z5jyX/tpxfpn9yObFFFoYIorFP6O5WUFpcZ2wdz
Tp1wxM9n1FFje2T2xqDwbGMm9Fmy4L2v3c0cYvHMAmnhYkAp/nR1zxqa8+f6N3k3
I8iGATJ7K06gYjpI4u+CNhwwo+CFBcOsWlNahf7NlAwJA01CNxop/oY2BlagoroK
P1YbUoSfzgNkZuN67YebfGuNLQdYMCu0TSHP8L0tSoVwPt26ayDJfRfSgLBNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0pabffrhVNg9q+FzQXchhywJbhgwHwYDVR0j
BBgwFoAUFBkvgb+4Bgn56V3Y0oiu7Oe1KTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXZhcWFaZlUzRzFOWGdtekJYQjFUUWRLWDhqbW83UU1pZVByQkJVaWNr
aW0vMC8xNDE5MkY4MUJGQjgwNjA5RjlFOTVERDhEMjg4QUVFQ0U3QjUyOTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0MTkyRjgxQkZCODA2MDlG
OUU5NUREOEQyODhBRUVDRTdCNTI5MzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V2YXFhWmZVM0cxTlhnbXpCWEIxVFFkS1g4am1vN1FNaWVQckJCVWlja2ltLzAv
MzEzNjM4MmUzMjMyMzgyZTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzgzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqOQEMA0GCSqGSIb3DQEBCwUAA4IBAQCt7svLPwJN
oqKtH7NR62aqiFQkqOsub3DLpObrkDISCBYqvEaSTkOAbntGxrheAtfA4ENDsBjE
GH2lJxJ1wUED+lYMBAdAHaHOYGEHGN1w8g5SmgvxYMw1KiqSI/1FAqJYK9yb9UnP
AZNQJIpio+dFfoJwRhaHN8p7/GVIM8JftGj51VxszBviAq6NvOYHWP+Lq4poFYXs
NnCOj0yIDOvvXJh+3kT4loxuaxDx5tjUXkxnTXFDWSshSpfi1VWSIlBtgnDXqro2
ij58n77amZQCAFRBbP2ZoLIa4DFD/3VQq6xLAC1iiYN2pZep1B3buxk7AWMat2Ub
qgyWaiXsOq7X
-----END CERTIFICATE-----
Generated at Tue Oct 21 09:38:27 2025 by rpki-client