Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133362e302f32342d3332203d3e203533323235.roa
File:                     3138362e3235312e3133362e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          pXnpuj3ro/L9n8RBDbk3hWzjNybEr6dcWfarpDXmbjQ=
Subject key identifier:   0C:D8:71:60:C8:37:FA:E9:D8:7A:FA:F3:B5:E9:43:E2:EA:2C:F9:61
Certificate issuer:       /CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
Certificate serial:       5CB18CC288D7A35633678EE374A8E2C8EA16BBD4
Authority key identifier: 72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133362e302f32342d3332203d3e203533323235.roa
Signing time:             Tue 06 May 2025 14:42:52 +0000
ROA not before:           Tue 06 May 2025 14:37:52 +0000
ROA not after:            Tue 05 May 2026 14:42:52 +0000
asID:                     53225
IP address blocks:        186.251.136.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b1:8c:c2:88:d7:a3:56:33:67:8e:e3:74:a8:e2:c8:ea:16:bb:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
        Validity
            Not Before: May  6 14:37:52 2025 GMT
            Not After : May  5 14:42:52 2026 GMT
        Subject: CN=0CD87160C837FAE9D87AFAF3B5E943E2EA2CF961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1d:5f:d3:58:65:48:2a:14:32:ff:7d:ef:f7:
                    14:f7:34:18:dc:b1:bb:96:9d:d7:9d:1a:69:f5:2c:
                    82:1a:da:0d:0b:86:ee:df:4f:76:26:7a:f6:2b:11:
                    f6:d0:9b:c5:08:71:09:14:88:22:e1:9b:16:1c:56:
                    10:af:f2:45:c9:8a:6b:c1:f4:67:f9:4d:2c:d7:4c:
                    eb:95:a1:c7:4d:17:9b:d2:a5:90:57:40:bf:95:6c:
                    37:56:24:81:cc:c5:ab:8b:74:9e:52:e1:0e:9e:94:
                    40:62:88:6d:76:ca:23:43:3f:68:3e:95:45:ba:27:
                    e8:72:53:7c:3d:f8:de:d5:37:77:9e:d3:e6:08:d3:
                    66:7f:1b:57:15:9d:0e:c8:92:54:00:82:93:a5:5e:
                    25:8f:50:4b:e8:93:2f:eb:e8:9b:c1:cc:f7:28:cc:
                    0f:55:85:2d:42:15:89:ea:5c:d9:09:e7:23:ef:56:
                    03:ec:62:00:42:38:d8:1e:cd:9c:0d:03:c1:c5:63:
                    62:3b:e4:fc:ec:88:7a:ea:35:f0:7d:9c:72:91:d6:
                    53:ef:7e:8b:54:a7:59:8b:64:1a:4c:68:b1:02:55:
                    e6:c1:ea:b3:a1:9f:5a:04:90:6f:e3:49:4c:2d:d5:
                    33:30:7b:02:3a:ae:71:34:7f:85:55:0f:b7:9a:20:
                    fe:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D8:71:60:C8:37:FA:E9:D8:7A:FA:F3:B5:E9:43:E2:EA:2C:F9:61
            X509v3 Authority Key Identifier:
                keyid:72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133362e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:35:c1:00:45:5e:9c:a9:64:be:86:55:33:aa:0c:f4:7e:7a:
         68:bb:c2:f2:a2:5d:56:33:ed:3e:c4:d4:58:59:46:87:ca:f7:
         9e:16:0e:f1:2f:7f:3c:3d:f5:c6:71:cf:d6:ae:cf:49:f8:7c:
         c4:f2:35:3f:60:92:fb:ac:af:17:5e:cc:12:82:ee:63:53:25:
         88:5f:07:ef:61:24:45:e6:d7:e3:ea:30:7a:9b:45:49:4e:41:
         52:ed:6f:75:a5:46:03:f2:c3:d6:62:25:6a:8b:14:f5:5e:79:
         9f:73:e2:6a:42:b0:97:5d:7c:bc:93:24:3c:22:66:0c:9a:ae:
         4d:dc:00:13:7a:62:c8:22:82:d9:d7:ad:c8:34:3e:70:d3:c5:
         f0:9a:0d:bd:80:2c:07:7a:20:3b:3d:76:e0:f6:53:4e:67:18:
         10:4e:ce:17:20:1d:d9:12:60:0f:5a:85:a8:86:8e:e6:63:7a:
         9f:86:3b:2c:cf:f8:fe:5b:6e:92:af:f6:f3:24:58:a9:5d:b1:
         1b:8e:fe:f1:10:90:c2:d0:01:33:ee:e5:14:f3:a2:53:78:b8:
         f9:c3:01:63:78:09:70:84:4f:03:a7:13:1f:30:5f:d0:ea:4b:
         04:d3:f0:41:62:a0:ff:30:6e:47:f0:58:61:35:bc:d8:98:ab:
         14:ca:7d:da
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXLGMwojXo1YzZ47jdKjiyOoWu9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJEMjE1NjVDMEE1MDhGQzJCREVBNzc2OEQwRjRBRUZE
NkNEMTlGMTAeFw0yNTA1MDYxNDM3NTJaFw0yNjA1MDUxNDQyNTJaMDMxMTAvBgNV
BAMTKDBDRDg3MTYwQzgzN0ZBRTlEODdBRkFGM0I1RTk0M0UyRUEyQ0Y5NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlHV/TWGVIKhQy/33v9xT3NBjc
sbuWndedGmn1LIIa2g0Lhu7fT3YmevYrEfbQm8UIcQkUiCLhmxYcVhCv8kXJimvB
9Gf5TSzXTOuVocdNF5vSpZBXQL+VbDdWJIHMxauLdJ5S4Q6elEBiiG12yiNDP2g+
lUW6J+hyU3w9+N7VN3ee0+YI02Z/G1cVnQ7IklQAgpOlXiWPUEvoky/r6JvBzPco
zA9VhS1CFYnqXNkJ5yPvVgPsYgBCONgezZwNA8HFY2I75PzsiHrqNfB9nHKR1lPv
fotUp1mLZBpMaLECVebB6rOhn1oEkG/jSUwt1TMwewI6rnE0f4VVD7eaIP7vAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDNhxYMg3+unYevrztelD4uos+WEwHwYDVR0j
BBgwFoAUctIVZcClCPwr3qd2jQ9K79bNGfEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlNmb2o0TU5LcG5hQnU4NTVNeE1qM01qWWh1M292bVMyMlhweDRMRDZT
UFEvMC83MkQyMTU2NUMwQTUwOEZDMkJERUE3NzY4RDBGNEFFRkQ2Q0QxOUYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyRDIxNTY1QzBBNTA4RkMy
QkRFQTc3NjhEMEY0QUVGRDZDRDE5RjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZTZm9qNE1OS3BuYUJ1ODU1TXhNajNNallodTNvdm1TMjJYcHg0TEQ2U1BRLzAv
MzEzODM2MmUzMjM1MzEyZTMxMzMzNjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1
MzMzMjMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6+4gwDQYJKoZIhvcNAQELBQADggEBAAs1wQBF
XpypZL6GVTOqDPR+emi7wvKiXVYz7T7E1FhZRofK954WDvEvfzw99cZxz9auz0n4
fMTyNT9gkvusrxdezBKC7mNTJYhfB+9hJEXm1+PqMHqbRUlOQVLtb3WlRgPyw9Zi
JWqLFPVeeZ9z4mpCsJddfLyTJDwiZgyark3cABN6YsgigtnXrcg0PnDTxfCaDb2A
LAd6IDs9duD2U05nGBBOzhcgHdkSYA9ahaiGjuZjep+GOyzP+P5bbpKv9vMkWKld
sRuO/vEQkMLQATPu5RTzolN4uPnDAWN4CXCETwOnEx8wX9DqSwTT8EFioP8wbkfw
WGE1vNiYqxTKfdo=
-----END CERTIFICATE-----
Generated at Wed May 14 10:30:19 2025 by rpki-client