Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134352e302f32342d3234203d3e20323730373034.roa
File:                     3138392e3132372e3134352e302f32342d3234203d3e20323730373034.roa (raw, json)
Hash identifier:          xMkJfEEv/HLhE8WeIlKVb6G8SLi4yPunBlrAFQOQwhA=
Subject key identifier:   D0:D2:5A:AB:54:9A:9A:31:FC:A6:05:F4:EA:47:BC:EA:72:11:16:C5
Certificate issuer:       /CN=1374315B9575D65AACB45CAFC3702522BE608F60
Certificate serial:       3DA5B59B073D706BA394B2D2CCFAE998E421028E
Authority key identifier: 13:74:31:5B:95:75:D6:5A:AC:B4:5C:AF:C3:70:25:22:BE:60:8F:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134352e302f32342d3234203d3e20323730373034.roa
Signing time:             Fri 03 Oct 2025 02:28:48 +0000
ROA not before:           Fri 03 Oct 2025 02:23:48 +0000
ROA not after:            Fri 02 Oct 2026 02:28:48 +0000
asID:                     270704
IP address blocks:        189.127.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.crl
                          rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 23:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a5:b5:9b:07:3d:70:6b:a3:94:b2:d2:cc:fa:e9:98:e4:21:02:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1374315B9575D65AACB45CAFC3702522BE608F60
        Validity
            Not Before: Oct  3 02:23:48 2025 GMT
            Not After : Oct  2 02:28:48 2026 GMT
        Subject: CN=D0D25AAB549A9A31FCA605F4EA47BCEA721116C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1b:d8:61:8d:15:e2:21:83:bf:10:fe:e0:3e:
                    80:9c:88:c8:4e:e8:a5:2c:ce:30:a6:8e:aa:bc:60:
                    c1:11:99:5e:82:f6:9d:c5:90:62:52:54:2d:d8:d3:
                    f3:e3:ba:b9:3b:59:ff:29:b5:d3:3c:4c:9c:d4:fd:
                    b5:d2:5a:2a:4c:67:25:82:dc:20:13:60:53:1a:c2:
                    8f:86:da:aa:48:ca:41:82:75:13:f9:62:70:f4:98:
                    de:e4:75:16:cd:ff:5d:9c:6f:c7:da:50:d7:cc:dd:
                    51:8f:f2:4f:b7:56:10:b9:8c:02:15:d4:1b:c9:7b:
                    6b:3f:88:e5:31:08:dd:6e:c5:41:08:80:6e:02:b9:
                    ee:6e:f9:6e:0e:cb:41:b7:60:90:d6:42:c1:8f:31:
                    13:e9:fa:88:45:49:bd:f6:91:d0:da:c9:4d:f8:60:
                    3e:f4:97:f7:46:6f:fe:cc:cd:d5:db:44:ba:92:ee:
                    34:e1:3c:2a:b2:96:e7:b3:4e:f8:2b:09:c2:cf:6f:
                    d1:87:12:b2:ec:7d:88:51:df:00:37:6e:b4:b0:1c:
                    10:e6:90:70:10:53:ff:f6:44:10:b1:0a:d4:b5:7c:
                    41:7b:53:ab:68:3e:0f:17:00:d3:ec:4a:0c:f5:c1:
                    66:cb:c2:89:1e:63:a1:cb:30:39:e8:da:18:05:95:
                    af:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D2:5A:AB:54:9A:9A:31:FC:A6:05:F4:EA:47:BC:EA:72:11:16:C5
            X509v3 Authority Key Identifier:
                keyid:13:74:31:5B:95:75:D6:5A:AC:B4:5C:AF:C3:70:25:22:BE:60:8F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134352e302f32342d3234203d3e20323730373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:63:8d:62:c0:70:b1:ac:33:d5:24:77:1d:d7:84:89:f1:cb:
         2a:7c:2c:97:0e:ba:80:c5:96:02:6a:f8:06:9b:d6:cc:35:92:
         31:b4:3d:6a:e0:6e:37:b7:64:42:b2:9c:9c:db:b4:6f:8b:96:
         7a:ca:fd:d2:40:08:38:de:13:d4:f5:b4:e8:a4:ba:b7:31:28:
         43:ef:26:b7:60:31:95:54:ff:25:5d:b7:09:e6:db:5d:64:2c:
         35:de:20:60:99:e3:79:8d:cd:34:ff:7d:ee:71:b6:c1:98:59:
         80:93:1a:59:5a:17:5b:ba:3f:97:93:2b:1d:ab:87:a3:8f:0d:
         5f:b7:92:2f:5f:90:0c:85:df:22:07:df:60:95:0e:27:4a:02:
         93:fa:71:2c:44:40:6e:b3:46:eb:16:4e:9f:71:dd:f4:f4:28:
         77:61:3b:f5:0e:68:d5:96:ec:4b:b5:e4:c5:66:c6:7c:a1:42:
         f2:be:ca:f2:83:62:fd:81:45:3f:4b:d6:9f:d2:b9:38:e9:f8:
         0b:5b:f9:d9:8e:68:ea:0a:bc:73:e3:63:4c:a8:78:96:f3:bb:
         d0:f1:02:c4:56:fa:60:b6:ee:39:e2:a7:e5:80:44:54:d3:6f:
         3a:ae:b9:f8:51:98:a2:14:5a:4b:3d:40:5a:80:ee:d7:46:a0:
         cd:d3:9b:3e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPaW1mwc9cGujlLLSzPrpmOQhAo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM3NDMxNUI5NTc1RDY1QUFDQjQ1Q0FGQzM3MDI1MjJC
RTYwOEY2MDAeFw0yNTEwMDMwMjIzNDhaFw0yNjEwMDIwMjI4NDhaMDMxMTAvBgNV
BAMTKEQwRDI1QUFCNTQ5QTlBMzFGQ0E2MDVGNEVBNDdCQ0VBNzIxMTE2QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2G9hhjRXiIYO/EP7gPoCciMhO
6KUszjCmjqq8YMERmV6C9p3FkGJSVC3Y0/Pjurk7Wf8ptdM8TJzU/bXSWipMZyWC
3CATYFMawo+G2qpIykGCdRP5YnD0mN7kdRbN/12cb8faUNfM3VGP8k+3VhC5jAIV
1BvJe2s/iOUxCN1uxUEIgG4Cue5u+W4Oy0G3YJDWQsGPMRPp+ohFSb32kdDayU34
YD70l/dGb/7MzdXbRLqS7jThPCqyluezTvgrCcLPb9GHErLsfYhR3wA3brSwHBDm
kHAQU//2RBCxCtS1fEF7U6toPg8XANPsSgz1wWbLwokeY6HLMDno2hgFla8xAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0NJaq1SamjH8pgX06ke86nIRFsUwHwYDVR0j
BBgwFoAUE3QxW5V11lqstFyvw3AlIr5gj2AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGU1aUtvNVV2eTNTc1RIYm4yS2dyMmVYbnhEejM3OTN0NEwyRndCbnNV
TFUvMC8xMzc0MzE1Qjk1NzVENjVBQUNCNDVDQUZDMzcwMjUyMkJFNjA4RjYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzNzQzMTVCOTU3NUQ2NUFB
Q0I0NUNBRkMzNzAyNTIyQkU2MDhGNjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hlNWlLbzVVdnkzU3NUSGJuMktncjJlWG54RHozNzkzdDRMMkZ3Qm5zVUxVLzAv
MzEzODM5MmUzMTMyMzcyZTMxMzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM3MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL1/kTANBgkqhkiG9w0BAQsFAAOCAQEAnGON
YsBwsawz1SR3HdeEifHLKnwslw66gMWWAmr4BpvWzDWSMbQ9auBuN7dkQrKcnNu0
b4uWesr90kAION4T1PW06KS6tzEoQ+8mt2AxlVT/JV23CebbXWQsNd4gYJnjeY3N
NP997nG2wZhZgJMaWVoXW7o/l5MrHauHo48NX7eSL1+QDIXfIgffYJUOJ0oCk/px
LERAbrNG6xZOn3Hd9PQod2E79Q5o1ZbsS7XkxWbGfKFC8r7K8oNi/YFFP0vWn9K5
OOn4C1v52Y5o6gq8c+NjTKh4lvO70PECxFb6YLbuOeKn5YBEVNNvOq65+FGYohRa
Sz1AWoDu10agzdObPg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:40:39 2025 by rpki-client