Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e38342e37372e302f32342d3234203d3e20323633323630.roa
File:                     3138392e38342e37372e302f32342d3234203d3e20323633323630.roa (raw, json)
Hash identifier:          zew8cHxmnYc7RSTQp+jKJWtTBgoekhsKhf3UerwLKkc=
Subject key identifier:   DE:4D:E7:38:F5:2F:B1:E1:73:98:6B:FC:A7:77:60:CA:83:1D:DB:62
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       04C3ABFBC16E67B15008DCC8903D9D6217FDE01E
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e38342e37372e302f32342d3234203d3e20323633323630.roa
Signing time:             Wed 02 Jul 2025 14:46:00 +0000
ROA not before:           Wed 02 Jul 2025 14:41:00 +0000
ROA not after:            Wed 01 Jul 2026 14:46:00 +0000
asID:                     263260
IP address blocks:        189.84.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 19:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c3:ab:fb:c1:6e:67:b1:50:08:dc:c8:90:3d:9d:62:17:fd:e0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Jul  2 14:41:00 2025 GMT
            Not After : Jul  1 14:46:00 2026 GMT
        Subject: CN=DE4DE738F52FB1E173986BFCA77760CA831DDB62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ef:7d:c5:55:e0:76:87:85:f0:e6:c6:8e:16:
                    28:7a:3e:16:37:6a:cc:58:a2:04:78:c2:5c:96:aa:
                    07:bb:79:f9:b7:3f:0e:34:ea:05:f7:16:09:6a:16:
                    81:97:de:34:9b:3b:c9:a7:0c:5a:87:d4:8c:9f:e2:
                    04:2b:e0:e6:9f:34:bf:01:0d:6d:2f:d7:a4:ed:b5:
                    ec:b5:c0:94:e7:d0:2d:e2:74:3c:e3:8c:91:a5:2d:
                    e2:22:d2:dc:f1:5c:83:76:b5:62:fd:75:46:0f:d2:
                    e8:9b:cb:74:27:5d:89:af:77:a8:98:ac:16:c7:07:
                    b5:bd:80:a9:a0:d5:cf:a9:bc:2e:d8:26:89:a1:63:
                    74:e0:0b:4c:90:ea:90:57:75:36:96:9a:9c:db:22:
                    2c:fa:9e:ea:51:56:04:bf:13:42:ae:18:3a:68:b9:
                    07:35:38:70:25:92:69:e1:58:64:54:19:4b:82:d5:
                    e9:14:c9:08:8a:1c:27:74:4b:28:81:1f:ae:ff:c6:
                    db:5f:b9:95:a7:6a:32:31:c0:6b:c7:61:01:e0:06:
                    14:39:ec:4f:eb:86:b8:a4:77:21:03:22:89:82:25:
                    1d:8c:68:50:a7:d4:16:22:44:03:60:81:1c:b0:32:
                    c9:5b:c0:30:84:aa:6c:26:f2:23:17:d6:6c:1b:1f:
                    3e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4D:E7:38:F5:2F:B1:E1:73:98:6B:FC:A7:77:60:CA:83:1D:DB:62
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138392e38342e37372e302f32342d3234203d3e20323633323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:3f:1e:67:e9:4d:c4:a4:0a:ed:04:47:a4:f9:37:99:56:14:
         3d:98:bb:82:c8:9f:6c:3f:0e:90:64:da:ea:1d:59:dc:9b:1c:
         04:0c:4a:09:50:34:6d:ac:13:bb:44:8d:ef:c6:8a:cc:13:b0:
         4e:d2:c0:57:ff:93:de:05:d1:c5:53:00:46:09:f8:59:0f:c8:
         dc:f1:7f:db:ef:15:5a:51:c5:fe:ea:fa:32:85:26:12:4c:bf:
         43:c3:3f:31:1c:5f:64:4c:ca:4d:56:9b:e6:64:fb:9d:8e:49:
         03:9c:cb:9b:5a:e9:eb:4e:21:14:98:7b:ca:16:15:23:c9:13:
         33:9a:3e:da:82:87:3d:e5:39:a1:ee:78:fe:80:df:8d:95:dc:
         88:2c:6d:f1:7b:61:81:9a:f3:b4:ba:67:06:2e:a8:83:b0:3c:
         d3:24:e4:2e:32:0e:d4:95:ad:3a:13:84:27:59:48:e9:f0:65:
         9e:48:bb:c0:16:a8:11:f5:65:3f:6b:3f:b6:e8:52:fa:2a:4f:
         99:a0:06:59:2d:b6:ce:63:f5:02:26:b3:d3:5f:d3:33:4e:90:
         05:2a:62:6e:f6:41:39:e2:34:65:4e:f2:82:9d:7e:8c:87:f4:
         35:ab:83:4c:4d:13:5e:fe:b8:1e:d4:25:7a:3f:e1:d6:9c:39:
         f2:a5:83:6e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBMOr+8FuZ7FQCNzIkD2dYhf94B4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNTA3MDIxNDQxMDBaFw0yNjA3MDExNDQ2MDBaMDMxMTAvBgNV
BAMTKERFNERFNzM4RjUyRkIxRTE3Mzk4NkJGQ0E3Nzc2MENBODMxRERCNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf733FVeB2h4Xw5saOFih6PhY3
asxYogR4wlyWqge7efm3Pw406gX3FglqFoGX3jSbO8mnDFqH1Iyf4gQr4OafNL8B
DW0v16Tttey1wJTn0C3idDzjjJGlLeIi0tzxXIN2tWL9dUYP0uiby3QnXYmvd6iY
rBbHB7W9gKmg1c+pvC7YJomhY3TgC0yQ6pBXdTaWmpzbIiz6nupRVgS/E0KuGDpo
uQc1OHAlkmnhWGRUGUuC1ekUyQiKHCd0SyiBH67/xttfuZWnajIxwGvHYQHgBhQ5
7E/rhrikdyEDIomCJR2MaFCn1BYiRANggRywMslbwDCEqmwm8iMX1mwbHz49AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3k3nOPUvseFzmGv8p3dgyoMd22IwHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzODM5MmUzODM0MmUzNzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzIzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvVRNMA0GCSqGSIb3DQEBCwUAA4IBAQDDPx5n6U3E
pArtBEek+TeZVhQ9mLuCyJ9sPw6QZNrqHVncmxwEDEoJUDRtrBO7RI3vxorME7BO
0sBX/5PeBdHFUwBGCfhZD8jc8X/b7xVaUcX+6voyhSYSTL9Dwz8xHF9kTMpNVpvm
ZPudjkkDnMubWunrTiEUmHvKFhUjyRMzmj7agoc95Tmh7nj+gN+NldyILG3xe2GB
mvO0umcGLqiDsDzTJOQuMg7Ula06E4QnWUjp8GWeSLvAFqgR9WU/az+26FL6Kk+Z
oAZZLbbOY/UCJrPTX9MzTpAFKmJu9kE54jRlTvKCnX6Mh/Q1q4NMTRNe/rge1CV6
P+HWnDnypYNu
-----END CERTIFICATE-----
Generated at Sat Jul 5 21:37:39 2025 by rpki-client