Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3233322e3131322e302f32322d3332203d3e20323632373733.roa
File:                     3136382e3233322e3131322e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          oJPN5ZDtuMb4Qau5X7R1tg+wfpBmgEtuSjkrvyBHC1s=
Subject key identifier:   34:BA:1B:61:11:02:11:62:3D:42:2E:1F:E8:42:F4:BC:4B:1E:31:DE
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       240F11CCBEC4AB1F0F379960E92EFBFFDDB63B69
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3233322e3131322e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 15:46:59 +0000
ROA not before:           Mon 11 Aug 2025 15:41:59 +0000
ROA not after:            Mon 10 Aug 2026 15:46:59 +0000
asID:                     262773
IP address blocks:        168.232.112.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0f:11:cc:be:c4:ab:1f:0f:37:99:60:e9:2e:fb:ff:dd:b6:3b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 15:41:59 2025 GMT
            Not After : Aug 10 15:46:59 2026 GMT
        Subject: CN=34BA1B61110211623D422E1FE842F4BC4B1E31DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:db:a2:a2:77:3b:e7:95:bf:dc:33:9c:c3:7e:
                    cd:c2:25:f3:00:76:9b:21:e0:f2:a1:67:ae:c8:fb:
                    54:02:55:0b:1a:31:13:01:02:79:cd:7a:0f:61:35:
                    03:b1:64:34:c4:73:44:bd:d4:af:47:e0:69:30:e1:
                    ba:e1:48:d1:97:e6:07:9f:37:04:b5:72:6b:f0:04:
                    b8:6f:73:a3:66:23:3d:e4:b4:ff:a2:7f:30:7b:b3:
                    49:2d:7f:0c:fc:47:90:6c:a2:62:e3:94:3c:b8:4d:
                    17:2f:4d:30:de:d2:52:39:45:f2:48:5d:f3:e1:8d:
                    1d:65:29:2e:eb:2e:e0:89:c8:c4:2f:c4:fb:26:ba:
                    f9:fb:2e:da:a3:ad:9f:f0:57:10:06:94:49:90:53:
                    8e:97:f0:e6:52:b2:2e:36:77:7f:22:25:89:8e:be:
                    cf:5c:4e:bc:7d:6c:e3:8c:84:20:d8:02:a5:c1:77:
                    d5:11:ef:bd:c8:cf:cb:06:82:2d:48:92:44:16:c9:
                    7c:93:b6:58:91:1d:5a:76:a9:e2:1c:4f:0c:23:b2:
                    81:7f:c4:3b:25:66:3e:55:d4:ef:8e:5f:c5:1d:a8:
                    40:61:50:87:42:54:a4:e7:4f:df:64:1d:50:4f:c2:
                    56:8c:e8:fd:d7:98:e4:81:4c:da:72:4f:e2:07:96:
                    55:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BA:1B:61:11:02:11:62:3D:42:2E:1F:E8:42:F4:BC:4B:1E:31:DE
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136382e3233322e3131322e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:bc:59:49:9f:d0:7c:78:47:14:2d:73:5f:bf:37:a5:66:37:
         30:ab:10:f3:72:14:18:7f:4e:41:7d:50:13:80:a8:ca:5b:ff:
         56:10:23:30:f2:db:d7:3d:25:61:69:1e:3d:88:86:61:98:29:
         dd:59:f2:ad:d6:18:ad:5d:73:c8:0e:d2:d1:1d:0f:4e:dd:ad:
         e4:27:41:98:86:d7:0b:ab:c8:7c:b9:e9:51:68:fa:fa:de:22:
         ec:7e:6b:b4:5d:95:9b:ed:c9:17:55:9e:28:d4:79:7d:68:a8:
         ad:73:a6:7c:f1:91:28:be:8e:87:0f:c9:ca:35:ea:89:08:a8:
         c1:b9:88:25:10:d7:97:f3:f7:b1:99:11:83:c1:30:bf:45:f9:
         73:77:59:e6:f3:1b:cc:16:48:c7:6a:6d:fc:49:e8:a4:5a:2a:
         a1:bc:53:42:da:da:9b:69:6b:5c:0c:66:20:7a:54:34:82:b7:
         32:95:ec:3c:9e:31:16:b5:7f:b6:fa:88:3a:6d:bc:cd:14:ce:
         18:c1:35:ba:d0:4c:98:a0:9e:7f:8b:6b:cb:9f:e3:00:ce:20:
         ac:60:be:80:e7:88:8e:c4:3d:9c:60:a7:02:f3:9f:0e:78:80:
         0c:9a:9f:d8:24:0d:97:6f:56:35:46:b6:1e:3b:51:e2:e4:e0:
         6d:06:ff:54
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJA8RzL7Eqx8PN5lg6S77/922O2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNTA4MTExNTQxNTlaFw0yNjA4MTAxNTQ2NTlaMDMxMTAvBgNV
BAMTKDM0QkExQjYxMTEwMjExNjIzRDQyMkUxRkU4NDJGNEJDNEIxRTMxREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP26Kidzvnlb/cM5zDfs3CJfMA
dpsh4PKhZ67I+1QCVQsaMRMBAnnNeg9hNQOxZDTEc0S91K9H4Gkw4brhSNGX5gef
NwS1cmvwBLhvc6NmIz3ktP+ifzB7s0ktfwz8R5BsomLjlDy4TRcvTTDe0lI5RfJI
XfPhjR1lKS7rLuCJyMQvxPsmuvn7LtqjrZ/wVxAGlEmQU46X8OZSsi42d38iJYmO
vs9cTrx9bOOMhCDYAqXBd9UR773Iz8sGgi1IkkQWyXyTtliRHVp2qeIcTwwjsoF/
xDslZj5V1O+OX8UdqEBhUIdCVKTnT99kHVBPwlaM6P3XmOSBTNpyT+IHllXzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUNLobYRECEWI9Qi4f6EL0vEseMd4wHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzNjM4MmUzMjMzMzIyZTMxMzEzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMjM3MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjocDANBgkqhkiG9w0BAQsFAAOCAQEAqLxZ
SZ/QfHhHFC1zX783pWY3MKsQ83IUGH9OQX1QE4Coylv/VhAjMPLb1z0lYWkePYiG
YZgp3VnyrdYYrV1zyA7S0R0PTt2t5CdBmIbXC6vIfLnpUWj6+t4i7H5rtF2Vm+3J
F1WeKNR5fWiorXOmfPGRKL6Ohw/JyjXqiQiowbmIJRDXl/P3sZkRg8Ewv0X5c3dZ
5vMbzBZIx2pt/EnopFoqobxTQtram2lrXAxmIHpUNIK3MpXsPJ4xFrV/tvqIOm28
zRTOGME1utBMmKCef4try5/jAM4grGC+gOeIjsQ9nGCnAvOfDniADJqf2CQNl29W
NUa2HjtR4uTgbQb/VA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:52:42 2025 by rpki-client