Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/3137392e3130392e36342e302f32302d3332203d3e20323633353738.roa
File:                     3137392e3130392e36342e302f32302d3332203d3e20323633353738.roa (raw, json)
Hash identifier:          Q1uNYyBjGbyIhtDBLHYu22N+qGJlESCPootyri/UJWg=
Subject key identifier:   5B:48:C4:AA:D9:FD:85:C0:89:7A:35:24:C7:F8:F2:41:27:B3:94:5E
Certificate issuer:       /CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9
Certificate serial:       6A4AB4F68EB47146B5A8DE2B111130873B9A9D
Authority key identifier: 93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/3137392e3130392e36342e302f32302d3332203d3e20323633353738.roa
Signing time:             Fri 25 Jul 2025 19:57:23 +0000
ROA not before:           Fri 25 Jul 2025 19:52:23 +0000
ROA not after:            Fri 24 Jul 2026 19:57:23 +0000
asID:                     263578
IP address blocks:        179.109.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl
                          rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 20:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4a:b4:f6:8e:b4:71:46:b5:a8:de:2b:11:11:30:87:3b:9a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9
        Validity
            Not Before: Jul 25 19:52:23 2025 GMT
            Not After : Jul 24 19:57:23 2026 GMT
        Subject: CN=5B48C4AAD9FD85C0897A3524C7F8F24127B3945E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:74:6f:55:62:7c:41:92:5d:7c:6e:b1:42:
                    26:7d:db:d0:eb:27:05:a2:46:38:e6:e1:38:4d:17:
                    93:fb:2d:e4:3e:2b:7a:05:a9:a9:b4:d2:45:a9:4a:
                    8d:e4:ab:14:fe:48:32:a3:b3:96:fb:19:50:c5:bb:
                    9a:db:a2:2d:9e:b2:da:52:02:6b:f4:2c:1b:0c:5e:
                    51:4d:39:9d:df:44:22:16:74:7c:a3:dd:da:a9:65:
                    36:68:7c:f7:87:2e:45:12:03:82:ce:43:b1:83:cf:
                    94:6a:62:c4:41:f6:15:ed:37:38:ab:9c:e9:5c:1a:
                    e0:50:19:ed:f7:54:0c:b2:2e:e4:c9:4c:43:53:24:
                    2d:fb:7b:fb:0e:8c:72:74:59:e7:18:83:cd:5d:e0:
                    1f:2f:5b:50:37:a0:5b:f6:55:91:62:f8:3b:30:8c:
                    e4:6c:d6:36:cd:34:67:c2:2a:36:9c:ea:ce:20:de:
                    46:02:9c:70:f1:40:31:bb:33:43:2a:44:8d:69:f3:
                    29:50:cc:51:24:4c:c3:62:13:d0:fd:78:97:1c:ef:
                    22:f2:b4:dd:3d:d4:f8:10:6a:37:83:88:1d:b6:95:
                    e0:03:cb:5f:8f:7f:bc:26:e5:c4:90:6d:cd:2c:fc:
                    49:c2:dc:d1:7f:41:b8:b5:bc:27:58:f7:95:34:9c:
                    18:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:48:C4:AA:D9:FD:85:C0:89:7A:35:24:C7:F8:F2:41:27:B3:94:5E
            X509v3 Authority Key Identifier:
                keyid:93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/3137392e3130392e36342e302f32302d3332203d3e20323633353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:b5:31:d9:63:03:df:d3:58:4e:9a:40:58:1a:ac:1f:7c:a6:
         b8:26:00:d2:3e:1d:48:76:a5:2c:46:b2:1c:5d:83:e0:7a:f4:
         16:a5:4d:f9:60:30:be:ac:94:24:af:dd:09:d9:4d:91:30:e1:
         4f:a4:95:26:9a:10:d7:ba:ef:71:81:91:14:81:f0:1b:68:d4:
         c1:d4:1f:70:6e:31:cf:05:60:c3:91:60:ac:1c:17:9f:51:51:
         88:db:68:e1:e8:79:62:24:01:bf:ae:00:a7:7b:85:b0:a3:b7:
         99:88:93:cb:81:28:0b:c9:0f:55:77:09:28:a7:ac:a0:d5:a3:
         76:ee:7e:e9:dc:44:26:64:72:2c:61:9c:62:84:c3:ef:db:cf:
         47:20:92:21:6c:ac:03:50:c8:b0:0f:9a:af:94:be:b4:19:fc:
         17:50:55:96:7c:a8:0c:d0:12:d3:ba:72:e7:39:b9:5e:3d:d3:
         45:b0:a3:ee:37:e4:29:36:51:fc:73:d6:4d:bd:f1:be:6e:cf:
         16:93:98:32:8a:eb:dc:04:a1:93:10:b7:24:26:c4:49:c8:91:
         a4:1c:a5:b5:9a:8c:fb:6a:58:de:4d:c0:0b:a2:7d:31:53:f2:
         e4:34:5b:67:83:c7:b2:47:b7:5a:a8:4e:b4:d5:b1:77:dd:74:
         84:2d:29:a2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgITakq09o60cUa1qN4rEREwhzuanTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg5Mzk3QzI4RTMwNjVGQkU0ODEyNTRBQThDMENFRjY5MDZG
NjZBQkU5MB4XDTI1MDcyNTE5NTIyM1oXDTI2MDcyNDE5NTcyM1owMzExMC8GA1UE
AxMoNUI0OEM0QUFEOUZEODVDMDg5N0EzNTI0QzdGOEYyNDEyN0IzOTQ1RTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK4KdG9VYnxBkl18brFCJn3b0Osn
BaJGOObhOE0Xk/st5D4regWpqbTSRalKjeSrFP5IMqOzlvsZUMW7mtuiLZ6y2lIC
a/QsGwxeUU05nd9EIhZ0fKPd2qllNmh894cuRRIDgs5DsYPPlGpixEH2Fe03OKuc
6Vwa4FAZ7fdUDLIu5MlMQ1MkLft7+w6McnRZ5xiDzV3gHy9bUDegW/ZVkWL4OzCM
5GzWNs00Z8IqNpzqziDeRgKccPFAMbszQypEjWnzKVDMUSRMw2IT0P14lxzvIvK0
3T3U+BBqN4OIHbaV4APLX49/vCblxJBtzSz8ScLc0X9BuLW8J1j3lTScGPECAwEA
AaOCAlEwggJNMB0GA1UdDgQWBBRbSMSq2f2FwIl6NSTH+PJBJ7OUXjAfBgNVHSME
GDAWgBSTl8KOMGX75IElSqjAzvaQb2ar6TAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Bc2hqVGJ4eGlrY3d2TjJLRXh3Q0ZoZERoQnRWN0RXSkpMYzY1QzExQVRo
dS8wLzkzOTdDMjhFMzA2NUZCRTQ4MTI1NEFBOEMwQ0VGNjkwNkY2NkFCRTkuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvOTM5N0MyOEUzMDY1RkJFNDgx
MjU0QUE4QzBDRUY2OTA2RjY2QUJFOS5jZXIwga4GCCsGAQUFBwELBIGhMIGeMIGb
BggrBgEFBQcwC4aBjnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QXNoalRieHhpa2N3dk4yS0V4d0NGaGREaEJ0VjdEV0pKTGM2NUMxMUFUaHUvMC8z
MTM3MzkyZTMxMzAzOTJlMzYzNDJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMyMzYz
MzM1MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEBLNtQDANBgkqhkiG9w0BAQsFAAOCAQEAIbUx2WMD
39NYTppAWBqsH3ymuCYA0j4dSHalLEayHF2D4Hr0FqVN+WAwvqyUJK/dCdlNkTDh
T6SVJpoQ17rvcYGRFIHwG2jUwdQfcG4xzwVgw5FgrBwXn1FRiNto4eh5YiQBv64A
p3uFsKO3mYiTy4EoC8kPVXcJKKesoNWjdu5+6dxEJmRyLGGcYoTD79vPRyCSIWys
A1DIsA+ar5S+tBn8F1BVlnyoDNAS07py5zm5Xj3TRbCj7jfkKTZR/HPWTb3xvm7P
FpOYMorr3AShkxC3JCbESciRpByltZqM+2pY3k3AC6J9MVPy5DRbZ4PHske3WqhO
tNWxd910hC0pog==
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:13:50 2025 by rpki-client