Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e302e302f32312d3231203d3e2032373136.roa
File:                     3230302e31392e302e302f32312d3231203d3e2032373136.roa (raw, json)
Hash identifier:          8oaQkzhTw10C/RWZ+mpgRx5UIe2ZxEwhm/a3XpZT/K4=
Subject key identifier:   21:86:19:82:92:96:B0:6F:85:6A:6A:B2:62:86:7C:EB:16:DF:D7:25
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       07553F32A5D752BD67935E0F7A590EB914CA1398
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e302e302f32312d3231203d3e2032373136.roa
Signing time:             Tue 22 Jul 2025 15:09:02 +0000
ROA not before:           Tue 22 Jul 2025 15:04:02 +0000
ROA not after:            Tue 21 Jul 2026 15:09:02 +0000
asID:                     2716
IP address blocks:        200.19.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 15:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:55:3f:32:a5:d7:52:bd:67:93:5e:0f:7a:59:0e:b9:14:ca:13:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Jul 22 15:04:02 2025 GMT
            Not After : Jul 21 15:09:02 2026 GMT
        Subject: CN=218619829296B06F856A6AB262867CEB16DFD725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:35:a6:39:a6:b0:5e:61:ab:d7:ba:77:81:15:
                    2f:31:6b:c4:13:03:93:fe:1c:1f:1a:dc:c0:14:94:
                    f3:1b:7a:fc:b8:50:86:ec:e1:65:3d:dc:c3:dd:2b:
                    5e:6d:c1:1f:70:73:0d:73:6f:db:b6:e8:36:11:f7:
                    1a:1c:90:c2:af:87:3e:74:1c:c0:2a:12:5e:ab:40:
                    6e:2e:45:36:0b:02:7f:36:b1:51:bf:3f:46:a3:05:
                    31:e4:be:e2:7f:84:72:11:f0:f0:8b:a3:c6:27:55:
                    a3:74:13:bd:85:00:9d:41:a9:12:06:d5:38:35:1a:
                    4a:b9:5d:08:8f:cc:5e:ed:c0:28:85:6b:9a:a4:05:
                    f2:10:c7:52:8f:dc:af:da:6e:9e:47:c8:26:3a:c4:
                    85:48:da:23:86:88:db:9a:b1:2f:ab:ab:e7:be:a4:
                    48:5a:29:e0:93:09:d4:ea:cc:21:18:bf:06:c1:8b:
                    3c:a8:7b:05:06:ab:08:c3:ef:b5:09:79:07:b3:95:
                    e1:6a:83:74:2e:4a:45:7a:8b:6a:2b:8f:9a:43:a3:
                    fc:4e:55:77:c5:80:7d:b4:9e:61:aa:59:76:ff:94:
                    ef:6e:ab:bb:ae:4d:e4:41:f7:bc:88:75:be:bb:a2:
                    3b:f3:a0:05:34:d6:d2:1a:9e:db:8f:1a:eb:f9:7b:
                    79:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:86:19:82:92:96:B0:6F:85:6A:6A:B2:62:86:7C:EB:16:DF:D7:25
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e302e302f32312d3231203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:ae:ef:4d:80:22:14:ba:f5:d5:d5:e6:8b:d4:a6:8a:af:07:
         f2:06:b3:82:21:36:0b:60:6c:7f:0b:52:4d:bd:6b:34:61:d4:
         ae:8d:7b:45:fc:cb:ea:13:a8:aa:20:2e:d7:e4:5b:0a:88:ec:
         16:5d:dd:ba:79:83:8a:d3:00:4f:bc:ea:41:ac:9f:15:ea:a1:
         a1:01:a1:0f:5f:79:a8:aa:27:ad:41:52:f0:d5:ce:df:39:31:
         a9:11:7c:de:22:1b:e9:2c:6b:ec:22:ed:f4:ec:75:e4:6a:44:
         22:c2:10:2c:d9:90:c1:d3:4b:ba:b0:1f:01:4f:27:c1:26:c6:
         56:f5:ff:6e:6c:c5:47:00:62:44:70:74:f8:da:d4:54:4f:75:
         02:ea:8b:a1:db:0a:df:51:3e:e0:40:36:25:4f:87:bb:3c:da:
         17:c0:b7:bc:b3:24:5f:af:81:b6:03:04:f1:9b:cf:0b:45:c4:
         1e:3d:02:ca:27:6d:c7:20:8d:cf:59:14:40:8e:d3:1f:7e:43:
         fc:27:99:41:65:ca:24:70:da:ba:2f:84:19:cb:87:57:8a:be:
         dd:b8:17:80:a2:e0:ec:fb:b0:c1:c4:3f:e9:9f:5f:70:6b:5c:
         89:d0:af:09:4a:86:f9:1a:81:bd:e1:43:ed:48:bc:92:47:1d:
         29:f3:0d:a9
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUB1U/MqXXUr1nk14PelkOuRTKE5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0QzM3Njk2MEEyNjk3MkEwQjc2N0JEQTA4NDA0OERG
RkUzNjczRTAeFw0yNTA3MjIxNTA0MDJaFw0yNjA3MjExNTA5MDJaMDMxMTAvBgNV
BAMTKDIxODYxOTgyOTI5NkIwNkY4NTZBNkFCMjYyODY3Q0VCMTZERkQ3MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeNaY5prBeYavXuneBFS8xa8QT
A5P+HB8a3MAUlPMbevy4UIbs4WU93MPdK15twR9wcw1zb9u26DYR9xockMKvhz50
HMAqEl6rQG4uRTYLAn82sVG/P0ajBTHkvuJ/hHIR8PCLo8YnVaN0E72FAJ1BqRIG
1Tg1Gkq5XQiPzF7twCiFa5qkBfIQx1KP3K/abp5HyCY6xIVI2iOGiNuasS+rq+e+
pEhaKeCTCdTqzCEYvwbBizyoewUGqwjD77UJeQezleFqg3QuSkV6i2orj5pDo/xO
VXfFgH20nmGqWXb/lO9uq7uuTeRB97yIdb67ojvzoAU01tIantuPGuv5e3k9AgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUIYYZgpKWsG+FamqyYoZ86xbf1yUwHwYDVR0j
BBgwFoAU1Uw3aWCiaXKgt2e9oIQEjf/jZz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEViNEFHamZOWTl6ZDd0Qm13aFRYTFRKeUZGQUZ6VUZxUGdlSFVDTjFT
d2EvMS9ENTRDMzc2OTYwQTI2OTcyQTBCNzY3QkRBMDg0MDQ4REZGRTM2NzNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1NEMzNzY5NjBBMjY5NzJB
MEI3NjdCREEwODQwNDhERkZFMzY3M0UuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFYjRBR2pmTlk5emQ3dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzEv
MzIzMDMwMmUzMTM5MmUzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMyMzczMTM2
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQDyBMAMA0GCSqGSIb3DQEBCwUAA4IBAQATru9NgCIUuvXV1eaL
1KaKrwfyBrOCITYLYGx/C1JNvWs0YdSujXtF/MvqE6iqIC7X5FsKiOwWXd26eYOK
0wBPvOpBrJ8V6qGhAaEPX3moqietQVLw1c7fOTGpEXzeIhvpLGvsIu307HXkakQi
whAs2ZDB00u6sB8BTyfBJsZW9f9ubMVHAGJEcHT42tRUT3UC6ouh2wrfUT7gQDYl
T4e7PNoXwLe8syRfr4G2AwTxm88LRcQePQLKJ23HII3PWRRAjtMffkP8J5lBZcok
cNq6L4QZy4dXir7duBeAouDs+7DBxD/pn19wa1yJ0K8JSob5GoG94UPtSLySRx0p
8w2p
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:00:53 2025 by rpki-client