Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/3136382e3233322e3133322e302f32322d3232203d3e20323634393431.roa
File:                     3136382e3233322e3133322e302f32322d3232203d3e20323634393431.roa (raw, json)
Hash identifier:          I+VCfiVFgs6ctwRiPhJe1rX+dpao/Uv/m//s6pOaHmo=
Subject key identifier:   52:00:2F:87:19:7C:F8:28:B7:36:BF:7A:88:3F:20:3C:CE:6C:41:CE
Certificate issuer:       /CN=E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D
Certificate serial:       5A2F41B719F9B587B18875B6477F52395159743D
Authority key identifier: E5:79:D9:FF:63:D9:A4:8D:BD:6C:7C:9A:21:1C:5A:62:53:89:1E:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/3136382e3233322e3133322e302f32322d3232203d3e20323634393431.roa
Signing time:             Tue 02 Sep 2025 01:14:41 +0000
ROA not before:           Tue 02 Sep 2025 01:09:41 +0000
ROA not after:            Tue 01 Sep 2026 01:14:41 +0000
asID:                     264941
IP address blocks:        168.232.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.crl
                          rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2f:41:b7:19:f9:b5:87:b1:88:75:b6:47:7f:52:39:51:59:74:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D
        Validity
            Not Before: Sep  2 01:09:41 2025 GMT
            Not After : Sep  1 01:14:41 2026 GMT
        Subject: CN=52002F87197CF828B736BF7A883F203CCE6C41CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b4:80:51:f4:b4:e6:c6:37:af:d4:c7:6e:32:
                    b2:f1:24:86:1c:5a:5e:4f:53:6c:3e:60:6b:f0:7b:
                    05:c6:7e:b8:fa:97:66:fd:89:c8:3e:d3:5e:5f:fb:
                    07:04:ac:7c:d5:08:2e:cd:7d:8f:4e:8b:e3:c5:2e:
                    4c:66:3b:8e:06:57:80:f3:39:20:c8:d9:f6:2e:dc:
                    9e:de:d9:c9:bc:73:da:b9:8a:4d:fc:d5:7f:c9:c7:
                    3c:e4:46:10:ff:67:a6:f6:6a:d6:0f:d3:88:d9:f7:
                    c2:4b:c7:4e:e3:aa:dc:18:80:46:ab:b8:62:f2:6a:
                    8d:db:c2:b3:c7:69:0e:c3:fb:a4:6d:5c:2e:67:cd:
                    bf:09:d8:8f:2e:da:2b:4b:44:80:d5:04:b5:1a:a0:
                    41:38:f0:6c:5a:dd:51:eb:8e:bf:84:62:5b:c3:7c:
                    c9:4d:d3:de:61:2e:67:81:2d:de:b5:76:4e:64:64:
                    fe:64:c4:a4:ab:79:ad:20:84:ea:47:9e:0c:23:e9:
                    b6:b6:55:ef:a4:6e:8c:24:30:ec:e3:14:c3:79:36:
                    0c:01:36:8c:1c:49:36:11:92:9d:62:d5:67:73:0c:
                    85:5a:77:9b:48:c6:58:28:fe:b9:fd:10:39:62:74:
                    aa:55:b0:d9:df:8e:ee:7d:29:02:7b:f2:1c:ad:7a:
                    fd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:00:2F:87:19:7C:F8:28:B7:36:BF:7A:88:3F:20:3C:CE:6C:41:CE
            X509v3 Authority Key Identifier:
                keyid:E5:79:D9:FF:63:D9:A4:8D:BD:6C:7C:9A:21:1C:5A:62:53:89:1E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/3136382e3233322e3133322e302f32322d3232203d3e20323634393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:1c:74:29:76:b1:a2:07:6a:d6:b6:78:ed:cd:14:43:bb:d7:
         4f:03:71:70:e5:fb:d5:b5:c0:6b:12:fa:34:57:1a:91:27:04:
         67:36:e0:7b:bd:56:7d:80:e7:dd:b0:ad:b5:c6:30:25:7b:79:
         77:e6:90:81:c8:51:5a:de:63:7a:90:f3:a3:00:9b:8b:76:1a:
         d3:d0:43:37:d5:82:ec:ee:5b:6c:75:6d:0e:6b:19:23:83:d2:
         07:ce:82:3e:07:f0:00:1c:0c:43:17:da:19:0d:a4:3c:bc:a1:
         92:30:39:18:5a:07:2f:d6:88:55:c8:1b:94:55:9c:ae:2a:80:
         1d:bf:16:38:2f:7a:0f:4e:6b:3c:aa:58:72:91:ff:a3:01:74:
         24:b1:d6:35:12:bd:2e:4d:26:a9:4a:7f:56:b1:ad:4c:7a:b5:
         bb:49:54:13:8f:c6:dc:13:38:45:c1:be:4c:5a:ae:27:8b:aa:
         a8:b4:42:a1:e5:94:4d:e4:bc:94:71:e9:97:66:58:67:a1:11:
         af:0d:22:6f:ef:85:db:ad:bf:b3:74:5c:c6:c1:fb:69:50:5a:
         38:3a:ac:d4:21:66:e7:61:cb:34:19:24:c6:96:88:ca:0d:ad:
         38:04:81:d1:31:95:51:42:9d:f6:ed:50:f9:73:c2:b0:7f:33:
         8a:f8:be:ee
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUWi9Btxn5tYexiHW2R39SOVFZdD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU3OUQ5RkY2M0Q5QTQ4REJENkM3QzlBMjExQzVBNjI1
Mzg5MUUzRDAeFw0yNTA5MDIwMTA5NDFaFw0yNjA5MDEwMTE0NDFaMDMxMTAvBgNV
BAMTKDUyMDAyRjg3MTk3Q0Y4MjhCNzM2QkY3QTg4M0YyMDNDQ0U2QzQxQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDftIBR9LTmxjev1MduMrLxJIYc
Wl5PU2w+YGvwewXGfrj6l2b9icg+015f+wcErHzVCC7NfY9Oi+PFLkxmO44GV4Dz
OSDI2fYu3J7e2cm8c9q5ik381X/JxzzkRhD/Z6b2atYP04jZ98JLx07jqtwYgEar
uGLyao3bwrPHaQ7D+6RtXC5nzb8J2I8u2itLRIDVBLUaoEE48Gxa3VHrjr+EYlvD
fMlN095hLmeBLd61dk5kZP5kxKSrea0ghOpHngwj6ba2Ve+kbowkMOzjFMN5NgwB
NowcSTYRkp1i1WdzDIVad5tIxlgo/rn9EDlidKpVsNnfju59KQJ78hytev0tAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUUgAvhxl8+Ci3Nr96iD8gPM5sQc4wHwYDVR0j
BBgwFoAU5XnZ/2PZpI29bHyaIRxaYlOJHj0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlY0cHZmVFZBUEdTd1VGMTZiaHo3dXhvQWhyNERKMXhTRlNQUWFIUWl5
d1UvMC9FNTc5RDlGRjYzRDlBNDhEQkQ2QzdDOUEyMTFDNUE2MjUzODkxRTNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1NzlEOUZGNjNEOUE0OERC
RDZDN0M5QTIxMUM1QTYyNTM4OTFFM0QuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZWNHB2ZlRWQVBHU3dVRjE2Ymh6N3V4b0FocjRESjF4U0ZTUFFhSFFpeXdVLzAv
MzEzNjM4MmUzMjMzMzIyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNDM5MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjohDANBgkqhkiG9w0BAQsFAAOCAQEAUBx0
KXaxogdq1rZ47c0UQ7vXTwNxcOX71bXAaxL6NFcakScEZzbge71WfYDn3bCttcYw
JXt5d+aQgchRWt5jepDzowCbi3Ya09BDN9WC7O5bbHVtDmsZI4PSB86CPgfwABwM
QxfaGQ2kPLyhkjA5GFoHL9aIVcgblFWcriqAHb8WOC96D05rPKpYcpH/owF0JLHW
NRK9Lk0mqUp/VrGtTHq1u0lUE4/G3BM4RcG+TFquJ4uqqLRCoeWUTeS8lHHpl2ZY
Z6ERrw0ib++F262/s3RcxsH7aVBaODqs1CFm52HLNBkkxpaIyg2tOASB0TGVUUKd
9u1Q+XPCsH8zivi+7g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:26:55 2025 by rpki-client