Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMn2RzF1dWSDso9K5bc7e9pWQxGMSSZ8LBGGfETtysRb/0/3133382e3138352e3134342e302f32322d3332203d3e20323634333435.roa
File:                     3133382e3138352e3134342e302f32322d3332203d3e20323634333435.roa (raw, json)
Hash identifier:          d2hEwsQEysc0A+MP0fyAQYsVkxlHaXNTDfFlBMCIhRA=
Subject key identifier:   64:82:40:41:EB:60:8E:EB:38:31:6E:C6:8F:7E:EC:E5:0E:7A:A4:BC
Certificate issuer:       /CN=2650620B3901844B4004E0B0BFDB9FC43A30E964
Certificate serial:       1B445D72B94F921EF9A0F18FB50E415808BE5FCE
Authority key identifier: 26:50:62:0B:39:01:84:4B:40:04:E0:B0:BF:DB:9F:C4:3A:30:E9:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2650620B3901844B4004E0B0BFDB9FC43A30E964.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMn2RzF1dWSDso9K5bc7e9pWQxGMSSZ8LBGGfETtysRb/0/3133382e3138352e3134342e302f32322d3332203d3e20323634333435.roa
Signing time:             Mon 21 Jul 2025 17:20:05 +0000
ROA not before:           Mon 21 Jul 2025 17:15:05 +0000
ROA not after:            Mon 20 Jul 2026 17:20:05 +0000
asID:                     264345
IP address blocks:        138.185.144.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMn2RzF1dWSDso9K5bc7e9pWQxGMSSZ8LBGGfETtysRb/0/2650620B3901844B4004E0B0BFDB9FC43A30E964.crl
                          rsync://rpki-repo.registro.br/repo/FMn2RzF1dWSDso9K5bc7e9pWQxGMSSZ8LBGGfETtysRb/0/2650620B3901844B4004E0B0BFDB9FC43A30E964.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2650620B3901844B4004E0B0BFDB9FC43A30E964.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 21:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:44:5d:72:b9:4f:92:1e:f9:a0:f1:8f:b5:0e:41:58:08:be:5f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2650620B3901844B4004E0B0BFDB9FC43A30E964
        Validity
            Not Before: Jul 21 17:15:05 2025 GMT
            Not After : Jul 20 17:20:05 2026 GMT
        Subject: CN=64824041EB608EEB38316EC68F7EECE50E7AA4BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:35:48:b8:64:56:27:28:61:2d:98:91:fd:5e:
                    ea:d5:e1:d3:4e:6f:af:2d:55:f7:5d:38:9e:24:6d:
                    16:0f:86:50:13:0b:e6:97:2b:39:b7:30:0d:79:74:
                    a6:6e:f2:d9:cb:4e:23:ad:91:6b:a7:12:02:3a:dd:
                    e9:80:a2:57:d5:62:51:80:01:55:b6:d9:43:1a:51:
                    7e:45:12:97:c5:f9:ef:41:e2:86:1a:c2:70:fe:81:
                    b0:91:70:80:e9:fa:7c:c2:3c:a3:49:38:43:42:e6:
                    a4:78:be:7b:f5:9c:45:8d:45:18:42:63:16:ab:78:
                    f2:85:75:3f:0d:68:f2:4c:44:64:4b:2f:73:13:a2:
                    5d:39:7c:79:a3:e0:75:ba:68:eb:24:12:6c:d5:86:
                    41:06:64:17:c0:6a:94:15:96:a4:0e:9a:69:3b:4a:
                    b7:8c:f4:6f:dc:d1:e5:77:9e:1c:e1:c4:1b:a7:a2:
                    b3:f4:79:6a:5f:42:2a:83:41:f4:b9:f4:60:80:c3:
                    00:35:a2:36:97:63:4e:e0:3f:8f:16:52:11:c0:a8:
                    11:0b:d5:18:f3:35:f7:3a:e6:52:07:3d:2d:83:8a:
                    07:cb:ec:9b:5b:f9:33:4a:ac:1c:c0:ba:7d:45:b0:
                    f1:a6:e6:ab:25:f5:45:e1:7d:74:03:54:fb:9c:d0:
                    4f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:82:40:41:EB:60:8E:EB:38:31:6E:C6:8F:7E:EC:E5:0E:7A:A4:BC
            X509v3 Authority Key Identifier:
                keyid:26:50:62:0B:39:01:84:4B:40:04:E0:B0:BF:DB:9F:C4:3A:30:E9:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMn2RzF1dWSDso9K5bc7e9pWQxGMSSZ8LBGGfETtysRb/0/2650620B3901844B4004E0B0BFDB9FC43A30E964.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2650620B3901844B4004E0B0BFDB9FC43A30E964.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMn2RzF1dWSDso9K5bc7e9pWQxGMSSZ8LBGGfETtysRb/0/3133382e3138352e3134342e302f32322d3332203d3e20323634333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:4c:14:1d:79:61:69:64:f1:09:bb:75:ea:75:a3:05:30:a2:
         2d:68:79:0b:54:ab:08:bd:ab:2c:eb:82:fe:38:8f:30:f9:8c:
         10:2e:a7:7a:e3:44:4d:95:05:35:04:95:cd:9d:7b:9e:4f:44:
         3f:2d:b8:05:36:e1:f4:96:48:db:84:fb:63:cf:e0:ae:62:6e:
         46:00:2e:93:04:aa:ef:a7:1f:63:ad:26:e7:5f:10:40:c8:37:
         ab:16:22:b5:1b:1f:e1:ce:88:cd:0a:ac:99:4f:5d:b0:cd:42:
         8a:4f:99:45:4d:f3:17:ed:f4:af:5d:f5:f6:8e:6a:82:3d:51:
         a2:b3:a9:ac:ff:60:f5:bb:e3:98:42:05:67:90:3f:f9:68:f2:
         a7:55:5e:7c:2a:4f:5c:c3:2a:2f:71:2c:e1:69:10:68:d3:ea:
         44:49:3b:f9:3f:bc:0b:21:2e:ca:21:33:13:1d:81:ef:fd:f1:
         83:2d:44:f8:f3:51:52:de:db:ee:1b:29:83:36:e1:72:64:b4:
         f2:2d:da:d9:64:39:5f:b4:a9:c4:ef:6e:3e:1f:4a:0b:bf:72:
         58:f7:3b:be:2c:d4:5f:f0:2a:ae:2b:bb:7e:39:4a:f2:61:91:
         8f:6b:db:7a:6b:3d:1b:c3:df:d1:0e:30:57:94:12:5e:d1:21:
         e7:dd:4e:7a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUG0RdcrlPkh75oPGPtQ5BWAi+X84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY1MDYyMEIzOTAxODQ0QjQwMDRFMEIwQkZEQjlGQzQz
QTMwRTk2NDAeFw0yNTA3MjExNzE1MDVaFw0yNjA3MjAxNzIwMDVaMDMxMTAvBgNV
BAMTKDY0ODI0MDQxRUI2MDhFRUIzODMxNkVDNjhGN0VFQ0U1MEU3QUE0QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7NUi4ZFYnKGEtmJH9XurV4dNO
b68tVfddOJ4kbRYPhlATC+aXKzm3MA15dKZu8tnLTiOtkWunEgI63emAolfVYlGA
AVW22UMaUX5FEpfF+e9B4oYawnD+gbCRcIDp+nzCPKNJOENC5qR4vnv1nEWNRRhC
YxarePKFdT8NaPJMRGRLL3MTol05fHmj4HW6aOskEmzVhkEGZBfAapQVlqQOmmk7
SreM9G/c0eV3nhzhxBunorP0eWpfQiqDQfS59GCAwwA1ojaXY07gP48WUhHAqBEL
1RjzNfc65lIHPS2DigfL7Jtb+TNKrBzAun1FsPGm5qsl9UXhfXQDVPuc0E9VAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUZIJAQetgjus4MW7Gj37s5Q56pLwwHwYDVR0j
BBgwFoAUJlBiCzkBhEtABOCwv9ufxDow6WQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRk1uMlJ6RjFkV1NEc285SzViYzdlOXBXUXhHTVNTWjhMQkdHZkVUdHlz
UmIvMC8yNjUwNjIwQjM5MDE4NDRCNDAwNEUwQjBCRkRCOUZDNDNBMzBFOTY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2NTA2MjBCMzkwMTg0NEI0
MDA0RTBCMEJGREI5RkM0M0EzMEU5NjQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZNbjJSekYxZFdTRHNvOUs1YmM3ZTlwV1F4R01TU1o4TEJHR2ZFVHR5c1JiLzAv
MzEzMzM4MmUzMTM4MzUyZTMxMzQzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNDMzMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoq5kDANBgkqhkiG9w0BAQsFAAOCAQEAdkwU
HXlhaWTxCbt16nWjBTCiLWh5C1SrCL2rLOuC/jiPMPmMEC6neuNETZUFNQSVzZ17
nk9EPy24BTbh9JZI24T7Y8/grmJuRgAukwSq76cfY60m518QQMg3qxYitRsf4c6I
zQqsmU9dsM1Cik+ZRU3zF+30r1319o5qgj1RorOprP9g9bvjmEIFZ5A/+Wjyp1Ve
fCpPXMMqL3Es4WkQaNPqREk7+T+8CyEuyiEzEx2B7/3xgy1E+PNRUt7b7hspgzbh
cmS08i3a2WQ5X7SpxO9uPh9KC79yWPc7vizUX/Aqriu7fjlK8mGRj2vbems9G8Pf
0Q4wV5QSXtEh591Oeg==
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:54:44 2025 by rpki-client