Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3130342e302f32322d3332203d3e203238323736.roa
File:                     3138372e3130322e3130342e302f32322d3332203d3e203238323736.roa (raw, json)
Hash identifier:          4rpx3PV5uzwiGxvw9gaiUgY9ehkeQMOdD7kp7l0F140=
Subject key identifier:   E2:4A:59:67:5D:AF:9F:AC:E2:BE:56:EB:A9:D6:9C:8E:8E:76:5E:A2
Certificate issuer:       /CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
Certificate serial:       7AEC31C0CE020C199849570CFCFB8DD786208B70
Authority key identifier: 8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3130342e302f32322d3332203d3e203238323736.roa
Signing time:             Thu 09 Oct 2025 14:32:39 +0000
ROA not before:           Thu 09 Oct 2025 14:27:39 +0000
ROA not after:            Thu 08 Oct 2026 14:32:39 +0000
asID:                     28276
IP address blocks:        187.102.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl
                          rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ec:31:c0:ce:02:0c:19:98:49:57:0c:fc:fb:8d:d7:86:20:8b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
        Validity
            Not Before: Oct  9 14:27:39 2025 GMT
            Not After : Oct  8 14:32:39 2026 GMT
        Subject: CN=E24A59675DAF9FACE2BE56EBA9D69C8E8E765EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9c:6c:b9:ad:74:e8:1a:a4:90:4b:c1:85:ec:
                    c2:a6:21:c8:26:79:a5:8e:3e:6d:b2:a2:68:c5:06:
                    b6:5b:bd:02:1b:95:b1:f7:5b:4a:1d:46:f8:84:ea:
                    83:f4:17:03:9c:ac:af:29:8b:00:47:bf:c7:12:34:
                    54:69:a3:55:e3:61:b8:db:5a:bc:a9:f7:59:14:6b:
                    e2:75:0c:14:f5:5c:19:59:bf:4e:85:bd:74:1b:0e:
                    f0:c2:bb:39:b1:78:a6:e6:ce:10:c9:d3:3b:5d:36:
                    45:9c:9b:9c:35:d3:31:27:eb:c0:f5:91:0e:38:c9:
                    33:39:07:bd:5d:05:fc:bc:0e:c7:f6:b6:2e:97:52:
                    e8:33:1c:d0:a0:d5:a2:f5:bc:75:4f:88:b0:ba:05:
                    84:c6:cb:ce:d6:24:f2:8a:e1:ee:4e:fd:7d:81:23:
                    b5:cb:ea:ac:11:cd:ed:6c:6a:64:7d:fb:de:ae:94:
                    d3:23:41:af:1f:02:9d:54:f2:5c:b6:d7:96:2f:0e:
                    d8:6d:50:d0:60:24:81:97:16:b3:5d:f3:c1:8f:81:
                    06:d6:12:cc:69:e3:0a:6e:60:ba:6a:a5:9e:81:3d:
                    4c:3e:bd:ab:d1:b0:cd:3b:5b:50:08:cb:26:7a:92:
                    af:ca:3e:6e:e3:93:8a:3a:72:11:f9:9a:9a:44:8f:
                    0a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4A:59:67:5D:AF:9F:AC:E2:BE:56:EB:A9:D6:9C:8E:8E:76:5E:A2
            X509v3 Authority Key Identifier:
                keyid:8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3130342e302f32322d3332203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:d8:38:01:5e:3a:db:86:d1:a3:46:6d:55:53:7c:62:bf:a5:
         94:14:4e:9c:71:31:89:fe:ad:65:9c:89:d4:a7:d4:bc:81:05:
         ef:45:46:9f:1f:d0:7e:e3:0c:64:8f:28:76:b0:67:8a:ab:ba:
         d3:97:2e:05:05:40:42:3e:fa:c2:0a:e5:af:27:39:09:a2:09:
         ad:d9:bc:bc:7f:de:c0:ae:50:37:37:39:f3:ef:89:ef:c1:a4:
         88:b1:e6:7b:21:43:2f:ca:41:f7:b0:db:12:ec:68:9c:35:9a:
         ac:21:92:74:33:57:b5:8a:fa:14:cd:0a:a3:6d:10:50:c7:85:
         3b:6a:11:c7:42:72:08:49:c0:1e:82:df:18:36:57:72:a1:93:
         34:54:a7:59:6e:12:83:11:4f:18:82:70:5f:90:4d:d7:7b:dc:
         f2:a5:4d:c3:cf:6a:1f:84:9d:28:4b:4f:f0:49:82:b2:bc:7f:
         a1:b0:11:d0:3d:0f:71:5c:52:4e:73:b6:d1:26:56:6f:41:fe:
         00:ad:02:76:a4:30:df:0a:55:30:c3:a4:e6:30:0e:ad:a5:bf:
         35:99:01:3b:20:87:ff:b0:0d:d7:d7:33:8e:d3:70:b9:66:41:
         75:9f:d9:4f:75:8a:84:41:ee:a7:94:ae:4e:10:20:a8:c0:4e:
         f0:08:8e:fe
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeuwxwM4CDBmYSVcM/PuN14Ygi3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFCQzA4NEI1M0Y5Nzk4NzE0QzA2QTY0MkI2OThERDkw
RUMyRjI1RTAeFw0yNTEwMDkxNDI3MzlaFw0yNjEwMDgxNDMyMzlaMDMxMTAvBgNV
BAMTKEUyNEE1OTY3NURBRjlGQUNFMkJFNTZFQkE5RDY5QzhFOEU3NjVFQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrnGy5rXToGqSQS8GF7MKmIcgm
eaWOPm2yomjFBrZbvQIblbH3W0odRviE6oP0FwOcrK8piwBHv8cSNFRpo1XjYbjb
Wryp91kUa+J1DBT1XBlZv06FvXQbDvDCuzmxeKbmzhDJ0ztdNkWcm5w10zEn68D1
kQ44yTM5B71dBfy8Dsf2ti6XUugzHNCg1aL1vHVPiLC6BYTGy87WJPKK4e5O/X2B
I7XL6qwRze1samR9+96ulNMjQa8fAp1U8ly215YvDthtUNBgJIGXFrNd88GPgQbW
Esxp4wpuYLpqpZ6BPUw+vavRsM07W1AIyyZ6kq/KPm7jk4o6chH5mppEjwopAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4kpZZ12vn6zivlbrqdacjo52XqIwHwYDVR0j
BBgwFoAUirwIS1P5eYcUwGpkK2mN2Q7C8l4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDFnTHJlV0xmY0xzMlA0eGlkUkxLMTRrdENqVzFLVW43aERCNEFMVHFI
bjgvMC84QUJDMDg0QjUzRjk3OTg3MTRDMDZBNjQyQjY5OEREOTBFQzJGMjVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBQkMwODRCNTNGOTc5ODcx
NEMwNkE2NDJCNjk4REQ5MEVDMkYyNUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gxZ0xyZVdMZmNMczJQNHhpZFJMSzE0a3RDalcxS1VuN2hEQjRBTFRxSG44LzAv
MzEzODM3MmUzMTMwMzIyZTMxMzAzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzgzMjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK7ZmgwDQYJKoZIhvcNAQELBQADggEBALrYOAFe
OtuG0aNGbVVTfGK/pZQUTpxxMYn+rWWcidSn1LyBBe9FRp8f0H7jDGSPKHawZ4qr
utOXLgUFQEI++sIK5a8nOQmiCa3ZvLx/3sCuUDc3OfPvie/BpIix5nshQy/KQfew
2xLsaJw1mqwhknQzV7WK+hTNCqNtEFDHhTtqEcdCcghJwB6C3xg2V3KhkzRUp1lu
EoMRTxiCcF+QTdd73PKlTcPPah+EnShLT/BJgrK8f6GwEdA9D3FcUk5zttEmVm9B
/gCtAnakMN8KVTDDpOYwDq2lvzWZATsgh/+wDdfXM47TcLlmQXWf2U91ioRB7qeU
rk4QIKjATvAIjv4=
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:40:52 2025 by rpki-client