Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/3132382e3230312e3139312e302f32342d3234203d3e20323635383936.roa
File:                     3132382e3230312e3139312e302f32342d3234203d3e20323635383936.roa (raw, json)
Hash identifier:          6X0OUHQWO7bGzIHQu5T3Ny5noKqlCCVjkmqKMaTIl+Y=
Subject key identifier:   E3:1C:BD:2E:9F:3B:C7:D6:41:DC:61:4F:95:0E:E0:38:05:28:F7:51
Certificate issuer:       /CN=6F5278DB8F876783903A082AEFA62867B10AC72E
Certificate serial:       4C27E8B6F4CDCDBCE1D19D02848254A7550AB68C
Authority key identifier: 6F:52:78:DB:8F:87:67:83:90:3A:08:2A:EF:A6:28:67:B1:0A:C7:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5278DB8F876783903A082AEFA62867B10AC72E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/3132382e3230312e3139312e302f32342d3234203d3e20323635383936.roa
Signing time:             Tue 01 Jul 2025 05:26:16 +0000
ROA not before:           Tue 01 Jul 2025 05:21:16 +0000
ROA not after:            Tue 30 Jun 2026 05:26:16 +0000
asID:                     265896
IP address blocks:        128.201.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/6F5278DB8F876783903A082AEFA62867B10AC72E.crl
                          rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/6F5278DB8F876783903A082AEFA62867B10AC72E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5278DB8F876783903A082AEFA62867B10AC72E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 12:22:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:27:e8:b6:f4:cd:cd:bc:e1:d1:9d:02:84:82:54:a7:55:0a:b6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5278DB8F876783903A082AEFA62867B10AC72E
        Validity
            Not Before: Jul  1 05:21:16 2025 GMT
            Not After : Jun 30 05:26:16 2026 GMT
        Subject: CN=E31CBD2E9F3BC7D641DC614F950EE0380528F751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:85:89:d0:d7:47:02:d8:11:f9:6d:ff:b5:
                    5d:87:fe:12:9d:c1:b5:86:34:53:8e:18:5d:78:11:
                    fc:99:e3:8b:0e:83:f6:5b:72:66:ee:e0:a6:fd:6f:
                    e7:db:26:79:9c:a3:4b:69:4d:ca:4d:22:04:5e:67:
                    78:9e:3a:9d:8e:85:8c:e7:32:bf:10:3b:fd:95:14:
                    f8:8d:3d:1e:df:d4:7e:23:15:17:a9:88:48:18:4b:
                    ae:14:1e:68:49:1d:9d:90:ec:80:a2:3b:31:a1:19:
                    73:89:46:c2:dd:b5:72:db:65:86:90:ad:a1:2e:85:
                    e6:71:9a:93:d2:19:e6:74:6b:5a:6f:8d:81:9c:bd:
                    f7:be:c4:f1:14:6b:82:ce:07:9c:da:bf:4f:bf:de:
                    5b:c5:b4:eb:a6:b1:bb:24:b9:cc:8d:c9:ce:f6:89:
                    6f:d7:3d:30:f7:29:f5:56:73:d9:07:af:3d:bd:de:
                    d0:f0:04:77:49:6e:ff:8d:37:ce:c0:e7:f1:48:33:
                    d7:d5:4c:14:1a:98:df:b2:71:74:9b:ca:94:df:92:
                    b4:5f:85:18:b3:77:3d:2f:b3:39:10:58:8d:23:a6:
                    0c:49:87:3c:a8:dc:df:2f:dd:50:e6:e4:39:aa:f0:
                    5e:78:4d:36:3f:54:94:50:37:0c:0e:81:35:a2:9e:
                    aa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1C:BD:2E:9F:3B:C7:D6:41:DC:61:4F:95:0E:E0:38:05:28:F7:51
            X509v3 Authority Key Identifier:
                keyid:6F:52:78:DB:8F:87:67:83:90:3A:08:2A:EF:A6:28:67:B1:0A:C7:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/6F5278DB8F876783903A082AEFA62867B10AC72E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5278DB8F876783903A082AEFA62867B10AC72E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/1/3132382e3230312e3139312e302f32342d3234203d3e20323635383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:7b:b6:78:aa:36:a5:39:e8:48:64:4b:8e:00:da:7f:08:3f:
         d7:f3:2e:74:4d:25:76:94:e9:68:e4:08:ad:d0:ff:8e:72:d4:
         52:10:4a:c8:af:d2:ab:79:c2:19:d7:43:67:48:a9:71:2e:d2:
         a3:26:e6:2e:55:ee:19:80:e0:54:06:e5:c9:90:fc:d3:54:eb:
         7a:8e:41:24:85:a3:a7:cb:6a:64:2a:1a:f1:f0:39:11:62:3a:
         34:cf:e7:a9:d4:67:67:c0:b9:41:93:db:7e:ad:58:31:98:23:
         30:34:05:b4:c9:73:a2:89:30:92:b3:7c:46:39:b4:3c:9e:9a:
         95:88:1f:97:f9:d6:3d:6f:be:f6:87:f8:0f:c2:30:0a:d0:3c:
         d2:54:59:44:c9:a9:cf:14:64:64:17:56:32:4e:1d:74:0c:6d:
         2e:39:0c:30:e0:05:7b:ee:2f:33:48:c5:b9:c6:5f:22:f0:ea:
         e5:ff:e2:8b:4a:00:b8:04:4f:b9:6d:da:e8:53:0c:29:9e:9e:
         9e:05:77:66:52:92:89:66:02:32:d7:85:8a:95:37:63:56:b1:
         50:1e:e5:bb:e9:13:91:36:af:02:ed:7e:33:8b:17:d0:5a:c6:
         0e:01:f7:c5:ef:1d:2b:61:71:a7:91:c7:a0:95:12:d1:e9:38:
         53:0d:36:ae
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTCfotvTNzbzh0Z0ChIJUp1UKtowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY1Mjc4REI4Rjg3Njc4MzkwM0EwODJBRUZBNjI4NjdC
MTBBQzcyRTAeFw0yNTA3MDEwNTIxMTZaFw0yNjA2MzAwNTI2MTZaMDMxMTAvBgNV
BAMTKEUzMUNCRDJFOUYzQkM3RDY0MURDNjE0Rjk1MEVFMDM4MDUyOEY3NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9uIWJ0NdHAtgR+W3/tV2H/hKd
wbWGNFOOGF14EfyZ44sOg/Zbcmbu4Kb9b+fbJnmco0tpTcpNIgReZ3ieOp2OhYzn
Mr8QO/2VFPiNPR7f1H4jFRepiEgYS64UHmhJHZ2Q7ICiOzGhGXOJRsLdtXLbZYaQ
raEuheZxmpPSGeZ0a1pvjYGcvfe+xPEUa4LOB5zav0+/3lvFtOumsbskucyNyc72
iW/XPTD3KfVWc9kHrz293tDwBHdJbv+NN87A5/FIM9fVTBQamN+ycXSbypTfkrRf
hRizdz0vszkQWI0jpgxJhzyo3N8v3VDm5Dmq8F54TTY/VJRQNwwOgTWinqorAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU4xy9Lp87x9ZB3GFPlQ7gOAUo91EwHwYDVR0j
BBgwFoAUb1J424+HZ4OQOggq76YoZ7EKxy4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnR2dnNjanYxak1VTHNRWUNhcjNLVzVDcXJVcjNCZ3Zidkx5Zmg1WlY5
ckYvMS82RjUyNzhEQjhGODc2NzgzOTAzQTA4MkFFRkE2Mjg2N0IxMEFDNzJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGNTI3OERCOEY4NzY3ODM5
MDNBMDgyQUVGQTYyODY3QjEwQUM3MkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z0dnZzY2p2MWpNVUxzUVlDYXIzS1c1Q3FyVXIzQmd2YnZMeWZoNVpWOXJGLzEv
MzEzMjM4MmUzMjMwMzEyZTMxMzkzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM4MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIDJvzANBgkqhkiG9w0BAQsFAAOCAQEAPnu2
eKo2pTnoSGRLjgDafwg/1/MudE0ldpTpaOQIrdD/jnLUUhBKyK/Sq3nCGddDZ0ip
cS7SoybmLlXuGYDgVAblyZD801Treo5BJIWjp8tqZCoa8fA5EWI6NM/nqdRnZ8C5
QZPbfq1YMZgjMDQFtMlzookwkrN8Rjm0PJ6alYgfl/nWPW++9of4D8IwCtA80lRZ
RMmpzxRkZBdWMk4ddAxtLjkMMOAFe+4vM0jFucZfIvDq5f/ii0oAuARPuW3a6FMM
KZ6engV3ZlKSiWYCMteFipU3Y1axUB7lu+kTkTavAu1+M4sX0FrGDgH3xe8dK2Fx
p5HHoJUS0ek4Uw02rg==
-----END CERTIFICATE-----
Generated at Thu Jul 3 14:51:55 2025 by rpki-client