Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134342e302f32322d3232203d3e20323730373034.roa
File:                     3138392e3132372e3134342e302f32322d3232203d3e20323730373034.roa (raw, json)
Hash identifier:          mSGJZ+rJG3zKVlQpJOo98A+k2jRGJJFctTkZ8yeTtSA=
Subject key identifier:   4B:32:F0:FC:DE:20:B9:6A:13:2C:10:84:DC:7F:90:40:DC:C7:05:41
Certificate issuer:       /CN=1374315B9575D65AACB45CAFC3702522BE608F60
Certificate serial:       349015A0B0F2C4AB2E0119E9096BB971A43E249F
Authority key identifier: 13:74:31:5B:95:75:D6:5A:AC:B4:5C:AF:C3:70:25:22:BE:60:8F:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134342e302f32322d3232203d3e20323730373034.roa
Signing time:             Fri 03 Oct 2025 02:28:45 +0000
ROA not before:           Fri 03 Oct 2025 02:23:45 +0000
ROA not after:            Fri 02 Oct 2026 02:28:45 +0000
asID:                     270704
IP address blocks:        189.127.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.crl
                          rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 23:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:90:15:a0:b0:f2:c4:ab:2e:01:19:e9:09:6b:b9:71:a4:3e:24:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1374315B9575D65AACB45CAFC3702522BE608F60
        Validity
            Not Before: Oct  3 02:23:45 2025 GMT
            Not After : Oct  2 02:28:45 2026 GMT
        Subject: CN=4B32F0FCDE20B96A132C1084DC7F9040DCC70541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:81:4b:46:de:ab:4e:3c:55:06:74:2c:68:c7:
                    d4:25:4e:a9:2a:7e:72:7b:35:2d:29:b9:34:f1:50:
                    4e:a3:5e:d7:2e:0f:33:6b:be:eb:27:87:79:db:6e:
                    ca:ce:95:d7:94:84:ea:4f:3c:63:a4:ac:bc:e5:57:
                    cb:86:78:ef:2e:eb:18:1d:f5:e0:7e:4d:73:c8:3a:
                    11:3a:f0:ba:cd:e3:76:21:22:72:f0:50:af:7f:63:
                    e8:8e:e8:c3:1f:4d:c8:43:6f:6f:f9:a9:91:87:18:
                    5f:50:3c:5e:f0:13:99:de:14:88:a2:05:9d:40:e3:
                    32:ad:e1:e5:91:74:ed:e2:87:ba:5a:d2:6f:b5:d6:
                    7f:1d:ff:e8:a6:53:ac:30:a0:e5:f9:e4:a1:00:b4:
                    06:cd:c9:88:5d:ae:f5:6f:61:f9:95:3c:09:59:18:
                    5b:b0:ad:81:b1:b9:9f:29:56:60:65:b5:5b:42:46:
                    8e:88:f6:a9:49:0d:ec:7a:cd:1d:96:81:c8:42:48:
                    3f:a6:4a:32:e7:95:c2:4e:79:6f:59:e7:98:e8:5a:
                    6d:cf:b3:68:0e:43:14:b5:25:0b:ba:f8:e2:ee:a1:
                    f6:9e:09:be:54:4b:b4:fb:4e:70:66:57:c1:7d:a5:
                    42:09:68:bd:72:a9:0a:d2:f4:40:64:40:36:15:20:
                    07:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:32:F0:FC:DE:20:B9:6A:13:2C:10:84:DC:7F:90:40:DC:C7:05:41
            X509v3 Authority Key Identifier:
                keyid:13:74:31:5B:95:75:D6:5A:AC:B4:5C:AF:C3:70:25:22:BE:60:8F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134342e302f32322d3232203d3e20323730373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:40:76:5e:cf:f5:2d:dd:28:b0:00:79:15:83:3f:05:63:9e:
         e5:0d:43:1e:6f:75:97:ec:9a:bd:7a:58:11:05:8c:17:32:62:
         f0:4a:b5:26:10:20:e7:a8:35:74:3a:5b:09:78:8c:6e:4d:07:
         29:0c:db:70:9b:5c:86:ae:79:63:c8:7b:1f:26:98:90:f8:dc:
         d8:ea:57:74:9f:fc:46:a8:da:ef:68:64:0f:ad:7f:76:f5:7b:
         69:84:d9:6c:ca:e2:f9:45:4e:9f:4b:a1:53:11:56:00:ba:d5:
         d4:c4:bf:27:40:01:72:5e:d4:f7:85:7b:1f:cc:a8:9a:1f:86:
         55:90:f4:a7:66:c8:45:b7:9a:54:86:1f:8f:96:b0:1b:a0:6b:
         5b:2f:2e:3a:5f:bc:6a:68:23:2c:c2:b2:9c:f9:1d:ca:76:20:
         00:a5:7e:0b:41:ec:31:a6:93:90:d9:c5:68:56:ff:ce:57:0f:
         f5:81:4a:61:da:d3:72:51:c1:0f:08:cf:ef:24:01:b1:26:2b:
         bd:7e:94:d4:4d:23:02:8e:d2:49:4b:13:99:52:15:7a:1a:88:
         35:06:7a:52:09:a7:31:2f:51:89:4b:fb:43:ad:bf:f3:42:4e:
         66:3d:dd:62:6f:65:60:a6:22:5b:a9:bb:a5:84:ec:ec:89:50:
         de:13:3b:4e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNJAVoLDyxKsuARnpCWu5caQ+JJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM3NDMxNUI5NTc1RDY1QUFDQjQ1Q0FGQzM3MDI1MjJC
RTYwOEY2MDAeFw0yNTEwMDMwMjIzNDVaFw0yNjEwMDIwMjI4NDVaMDMxMTAvBgNV
BAMTKDRCMzJGMEZDREUyMEI5NkExMzJDMTA4NERDN0Y5MDQwRENDNzA1NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCygUtG3qtOPFUGdCxox9QlTqkq
fnJ7NS0puTTxUE6jXtcuDzNrvusnh3nbbsrOldeUhOpPPGOkrLzlV8uGeO8u6xgd
9eB+TXPIOhE68LrN43YhInLwUK9/Y+iO6MMfTchDb2/5qZGHGF9QPF7wE5neFIii
BZ1A4zKt4eWRdO3ih7pa0m+11n8d/+imU6wwoOX55KEAtAbNyYhdrvVvYfmVPAlZ
GFuwrYGxuZ8pVmBltVtCRo6I9qlJDex6zR2WgchCSD+mSjLnlcJOeW9Z55joWm3P
s2gOQxS1JQu6+OLuofaeCb5US7T7TnBmV8F9pUIJaL1yqQrS9EBkQDYVIAcxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUSzLw/N4guWoTLBCE3H+QQNzHBUEwHwYDVR0j
BBgwFoAUE3QxW5V11lqstFyvw3AlIr5gj2AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGU1aUtvNVV2eTNTc1RIYm4yS2dyMmVYbnhEejM3OTN0NEwyRndCbnNV
TFUvMC8xMzc0MzE1Qjk1NzVENjVBQUNCNDVDQUZDMzcwMjUyMkJFNjA4RjYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzNzQzMTVCOTU3NUQ2NUFB
Q0I0NUNBRkMzNzAyNTIyQkU2MDhGNjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hlNWlLbzVVdnkzU3NUSGJuMktncjJlWG54RHozNzkzdDRMMkZ3Qm5zVUxVLzAv
MzEzODM5MmUzMTMyMzcyZTMxMzQzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMDM3MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr1/kDANBgkqhkiG9w0BAQsFAAOCAQEA0UB2
Xs/1Ld0osAB5FYM/BWOe5Q1DHm91l+yavXpYEQWMFzJi8Eq1JhAg56g1dDpbCXiM
bk0HKQzbcJtchq55Y8h7HyaYkPjc2OpXdJ/8Rqja72hkD61/dvV7aYTZbMri+UVO
n0uhUxFWALrV1MS/J0ABcl7U94V7H8yomh+GVZD0p2bIRbeaVIYfj5awG6BrWy8u
Ol+8amgjLMKynPkdynYgAKV+C0HsMaaTkNnFaFb/zlcP9YFKYdrTclHBDwjP7yQB
sSYrvX6U1E0jAo7SSUsTmVIVehqINQZ6UgmnMS9RiUv7Q62/80JOZj3dYm9lYKYi
W6m7pYTs7IlQ3hM7Tg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:41:23 2025 by rpki-client