Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135342e302f32342d3234203d3e20323633303539.roa
File:                     3138362e3233322e3135342e302f32342d3234203d3e20323633303539.roa (raw, json)
Hash identifier:          IvcXUZsQOCttvcMB2VUvKX+WfdDmkd+zDxskP56qdqs=
Subject key identifier:   19:E5:3E:C7:96:CB:5D:74:C3:23:B6:EA:8E:34:3A:3D:5C:6C:51:67
Certificate issuer:       /CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
Certificate serial:       548C20BCE5FAF0988AE1BECD53879E1E9C92BBFD
Authority key identifier: 87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135342e302f32342d3234203d3e20323633303539.roa
Signing time:             Thu 17 Jul 2025 18:36:55 +0000
ROA not before:           Thu 17 Jul 2025 18:31:55 +0000
ROA not after:            Thu 16 Jul 2026 18:36:55 +0000
asID:                     263059
IP address blocks:        186.232.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 23:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8c:20:bc:e5:fa:f0:98:8a:e1:be:cd:53:87:9e:1e:9c:92:bb:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
        Validity
            Not Before: Jul 17 18:31:55 2025 GMT
            Not After : Jul 16 18:36:55 2026 GMT
        Subject: CN=19E53EC796CB5D74C323B6EA8E343A3D5C6C5167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:90:ef:26:ba:61:96:9f:59:e8:ea:bf:db:49:
                    0f:a0:c0:35:b2:c7:93:3b:fe:e2:d7:2f:65:c8:9c:
                    31:63:2a:14:27:b2:40:cd:2e:44:12:2a:ae:d7:8e:
                    2a:70:09:1a:2f:4d:e0:04:ff:4c:20:f0:39:11:f6:
                    3a:7d:47:76:c3:88:6d:7a:2d:43:45:bd:73:c2:67:
                    c8:78:40:3e:04:18:18:f7:9d:b7:1f:49:5b:1b:ff:
                    77:ba:b5:4a:08:11:e9:73:ce:9f:31:b7:62:a4:f9:
                    2a:1e:68:0d:00:e0:29:68:44:15:e4:03:3c:04:0f:
                    29:a1:25:0a:cf:0e:d4:63:9f:c8:e5:9e:fc:ae:b8:
                    83:90:08:de:d1:a6:9f:ca:0f:3d:f8:f5:d9:32:05:
                    eb:65:d8:95:c7:e8:5b:2a:25:3f:da:21:e6:32:85:
                    24:33:23:8e:1a:f3:01:da:62:84:19:a7:e4:5a:9b:
                    99:a2:62:71:fa:44:e1:42:49:f0:51:89:69:39:ce:
                    ba:44:5f:cb:52:df:b3:30:16:a8:b6:0d:7f:bf:ca:
                    4f:c7:88:4b:41:25:38:3d:c3:83:f2:61:d5:7e:e4:
                    df:92:74:42:e3:85:2d:fe:eb:74:4b:d2:16:42:4f:
                    80:8d:57:68:79:2b:16:3e:c1:f1:a8:42:4a:64:3e:
                    dc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E5:3E:C7:96:CB:5D:74:C3:23:B6:EA:8E:34:3A:3D:5C:6C:51:67
            X509v3 Authority Key Identifier:
                keyid:87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135342e302f32342d3234203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:1a:cd:63:ae:21:7c:99:51:38:9e:c8:57:77:00:e4:c3:a3:
         00:e1:c4:7a:b4:a5:be:a2:2a:51:d4:53:a1:b7:4e:d2:c0:33:
         bc:23:55:73:94:98:be:34:e8:77:49:dc:7c:d1:e7:49:36:04:
         9d:9e:f2:04:e6:20:4b:6a:76:0b:9e:15:54:3c:ad:4b:f6:9d:
         a5:0d:88:a0:13:78:22:1f:d7:fd:82:20:29:74:54:91:5b:93:
         31:ed:55:4e:b8:dc:44:43:be:a0:83:03:37:25:35:0f:7b:80:
         f0:e7:84:6b:48:cf:84:b8:30:80:7c:00:f2:05:61:14:13:bc:
         dc:09:d7:4e:e7:b9:37:59:0f:f2:be:42:89:00:20:b3:f0:e6:
         5c:9b:e0:39:ac:58:eb:1e:a0:3c:b1:63:6f:c7:8c:6c:1b:5c:
         19:2b:0d:d3:bd:e1:31:fb:b9:20:fb:f8:7a:ef:68:11:45:9a:
         67:2a:72:ab:88:d9:36:0e:07:77:62:b6:b7:5d:63:2a:c5:98:
         50:14:9b:62:bd:80:db:8e:e8:ec:43:e7:0f:b6:56:dd:8d:2c:
         f7:65:b7:67:58:54:72:c8:c3:5b:68:64:3f:7f:46:fb:77:cf:
         a2:93:b7:ab:3e:2c:6e:73:26:b0:72:b3:43:2c:c6:d4:a0:51:
         e9:7a:a3:e8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVIwgvOX68JiK4b7NU4eeHpySu/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODc1MkUyQkUwREE5OEVFRDQ2NDg1NENEQjQ4QTIzRTcw
RDk3REY1NTAeFw0yNTA3MTcxODMxNTVaFw0yNjA3MTYxODM2NTVaMDMxMTAvBgNV
BAMTKDE5RTUzRUM3OTZDQjVENzRDMzIzQjZFQThFMzQzQTNENUM2QzUxNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRkO8mumGWn1no6r/bSQ+gwDWy
x5M7/uLXL2XInDFjKhQnskDNLkQSKq7XjipwCRovTeAE/0wg8DkR9jp9R3bDiG16
LUNFvXPCZ8h4QD4EGBj3nbcfSVsb/3e6tUoIEelzzp8xt2Kk+SoeaA0A4CloRBXk
AzwEDymhJQrPDtRjn8jlnvyuuIOQCN7Rpp/KDz349dkyBetl2JXH6FsqJT/aIeYy
hSQzI44a8wHaYoQZp+Ram5miYnH6ROFCSfBRiWk5zrpEX8tS37MwFqi2DX+/yk/H
iEtBJTg9w4PyYdV+5N+SdELjhS3+63RL0hZCT4CNV2h5KxY+wfGoQkpkPtxbAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUGeU+x5bLXXTDI7bqjjQ6PVxsUWcwHwYDVR0j
BBgwFoAUh1Livg2pju1GSFTNtIoj5w2X31UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u
NnQvMC84NzUyRTJCRTBEQTk4RUVENDY0ODU0Q0RCNDhBMjNFNzBEOTdERjU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3NTJFMkJFMERBOThFRUQ0
NjQ4NTRDREI0OEEyM0U3MEQ5N0RGNTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv
MzEzODM2MmUzMjMzMzIyZTMxMzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALromjANBgkqhkiG9w0BAQsFAAOCAQEAnRrN
Y64hfJlROJ7IV3cA5MOjAOHEerSlvqIqUdRTobdO0sAzvCNVc5SYvjTod0ncfNHn
STYEnZ7yBOYgS2p2C54VVDytS/adpQ2IoBN4Ih/X/YIgKXRUkVuTMe1VTrjcREO+
oIMDNyU1D3uA8OeEa0jPhLgwgHwA8gVhFBO83AnXTue5N1kP8r5CiQAgs/DmXJvg
OaxY6x6gPLFjb8eMbBtcGSsN073hMfu5IPv4eu9oEUWaZypyq4jZNg4Hd2K2t11j
KsWYUBSbYr2A247o7EPnD7ZW3Y0s92W3Z1hUcsjDW2hkP39G+3fPopO3qz4sbnMm
sHKzQyzG1KBR6Xqj6A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:01:49 2025 by rpki-client