Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3138362e3235312e3231342e302f32332d3234203d3e203232313238.roa
File:                     3138362e3235312e3231342e302f32332d3234203d3e203232313238.roa (raw, json)
Hash identifier:          /erAdkgMAScaOc053Dc33HvofwHQ5EWBSpEIOqMsMXc=
Subject key identifier:   11:69:3E:24:40:64:9A:49:EE:7C:0D:54:BF:ED:83:A5:02:8E:AA:FE
Certificate issuer:       /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial:       6367C0308D2F6D4B6B72FFB102720184282D66F8
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3138362e3235312e3231342e302f32332d3234203d3e203232313238.roa
Signing time:             Wed 16 Jul 2025 02:50:25 +0000
ROA not before:           Wed 16 Jul 2025 02:45:25 +0000
ROA not after:            Wed 15 Jul 2026 02:50:25 +0000
asID:                     22128
IP address blocks:        186.251.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
                          rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 Aug 2025 05:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:67:c0:30:8d:2f:6d:4b:6b:72:ff:b1:02:72:01:84:28:2d:66:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
        Validity
            Not Before: Jul 16 02:45:25 2025 GMT
            Not After : Jul 15 02:50:25 2026 GMT
        Subject: CN=11693E2440649A49EE7C0D54BFED83A5028EAAFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:66:be:4c:d7:b4:df:1c:a6:ee:6c:0e:f3:ff:
                    6b:7a:d3:a4:51:73:74:04:35:9a:95:c0:5b:47:40:
                    0e:03:a3:b1:33:6d:ac:9b:c6:6f:81:c7:33:4f:1d:
                    f5:44:8f:99:3e:c5:38:ce:31:a8:72:83:65:56:5b:
                    c9:dd:4f:7e:ca:52:f7:7c:c0:4a:ce:5e:6d:c4:7c:
                    2e:87:35:48:ef:25:99:af:72:17:37:1c:ca:ac:bd:
                    32:84:13:8e:42:90:2b:f4:1e:70:b4:ff:e3:88:f4:
                    ee:ed:43:c3:fd:77:5b:18:ce:95:b0:34:98:2c:f9:
                    92:0f:83:d0:26:8c:f3:ed:3d:17:82:b6:37:1e:a0:
                    7a:06:34:83:29:e1:aa:21:0b:e7:4d:97:62:ab:d6:
                    d5:1c:c2:2c:43:fd:81:8c:cf:3c:9b:76:a3:ae:1d:
                    9d:31:50:92:b7:e5:68:bc:d6:ab:d1:80:ee:b2:71:
                    e2:c0:0d:ce:28:4a:e4:da:86:69:03:01:53:58:13:
                    af:4a:f2:60:eb:26:eb:fc:c7:e4:69:98:3f:48:99:
                    3e:c8:8f:f0:23:e5:be:be:08:be:26:67:a5:20:0d:
                    92:0f:42:39:2c:8b:92:4b:6a:4f:b0:93:0f:ae:01:
                    66:d5:d8:12:f5:9b:0e:f4:c6:66:20:76:64:33:40:
                    38:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:69:3E:24:40:64:9A:49:EE:7C:0D:54:BF:ED:83:A5:02:8E:AA:FE
            X509v3 Authority Key Identifier:
                keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3138362e3235312e3231342e302f32332d3234203d3e203232313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:14:8f:d0:80:3d:f3:2e:cd:55:85:9a:fd:37:af:0f:c3:22:
         e4:e2:8b:19:67:1e:83:97:b1:99:53:0c:5f:14:61:fe:3a:bb:
         29:aa:02:14:a9:25:be:7d:99:83:0c:da:e9:7c:90:43:67:e3:
         d6:b1:a4:4a:41:39:1b:28:f1:84:1b:10:74:6a:06:b0:ac:eb:
         b0:3a:2e:10:d7:fd:23:28:ec:98:1c:f9:3c:f0:20:8f:f8:aa:
         94:58:06:09:fe:46:2f:7d:af:72:f7:9c:f2:d0:13:9c:64:c5:
         4c:f8:0c:47:67:34:8d:d7:59:3a:82:42:88:1c:d3:61:91:19:
         88:fc:8b:fe:f8:76:5f:b4:21:26:ef:46:67:e4:2f:a8:ec:d1:
         e0:f1:74:6a:3e:cb:02:7e:16:8e:61:b3:87:94:7f:6d:3a:d2:
         23:ba:bc:77:a9:2f:57:83:79:85:44:16:35:82:8a:b9:e0:1f:
         42:c6:11:09:b8:b6:4a:21:8e:8c:72:ce:9f:43:c3:91:5a:dc:
         6a:38:0d:d0:c5:70:b4:c7:5d:21:63:45:09:cb:f1:77:7f:ba:
         2e:2b:6b:b3:48:d5:d8:0a:1c:da:4c:f0:8f:17:de:a5:2e:fc:
         a6:4b:cc:b6:54:9e:9c:b0:f1:16:93:e2:46:0e:88:57:ce:83:
         20:34:7c:ef
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUY2fAMI0vbUtrcv+xAnIBhCgtZvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIzMzk2MUUwNTU5RjIzOUFFRDRGNTA0MzcwODdFRjY4
MzdEQzVFMzAeFw0yNTA3MTYwMjQ1MjVaFw0yNjA3MTUwMjUwMjVaMDMxMTAvBgNV
BAMTKDExNjkzRTI0NDA2NDlBNDlFRTdDMEQ1NEJGRUQ4M0E1MDI4RUFBRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2Zr5M17TfHKbubA7z/2t606RR
c3QENZqVwFtHQA4Do7Ezbaybxm+BxzNPHfVEj5k+xTjOMahyg2VWW8ndT37KUvd8
wErOXm3EfC6HNUjvJZmvchc3HMqsvTKEE45CkCv0HnC0/+OI9O7tQ8P9d1sYzpWw
NJgs+ZIPg9AmjPPtPReCtjceoHoGNIMp4aohC+dNl2Kr1tUcwixD/YGMzzybdqOu
HZ0xUJK35Wi81qvRgO6yceLADc4oSuTahmkDAVNYE69K8mDrJuv8x+RpmD9ImT7I
j/Aj5b6+CL4mZ6UgDZIPQjksi5JLak+wkw+uAWbV2BL1mw70xmYgdmQzQDgDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEWk+JEBkmknufA1Uv+2DpQKOqv4wHwYDVR0j
BBgwFoAUEjOWHgVZ8jmu1PUENwh+9oN9xeMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkFtVWMycnQ4RVVTbkRRb1JyWWdnUVJNNExWbW5kM2dmTnRVc2dwMVhR
a1AvMC8xMjMzOTYxRTA1NTlGMjM5QUVENEY1MDQzNzA4N0VGNjgzN0RDNUUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyMzM5NjFFMDU1OUYyMzlB
RUQ0RjUwNDM3MDg3RUY2ODM3REM1RTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJBbVVjMnJ0OEVVU25EUW9ScllnZ1FSTTRMVm1uZDNnZk50VXNncDFYUWtQLzAv
MzEzODM2MmUzMjM1MzEyZTMyMzEzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy
MzIzMTMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG6+9YwDQYJKoZIhvcNAQELBQADggEBAFEUj9CA
PfMuzVWFmv03rw/DIuTiixlnHoOXsZlTDF8UYf46uymqAhSpJb59mYMM2ul8kENn
49axpEpBORso8YQbEHRqBrCs67A6LhDX/SMo7Jgc+TzwII/4qpRYBgn+Ri99r3L3
nPLQE5xkxUz4DEdnNI3XWTqCQogc02GRGYj8i/74dl+0ISbvRmfkL6js0eDxdGo+
ywJ+Fo5hs4eUf2060iO6vHepL1eDeYVEFjWCirngH0LGEQm4tkohjoxyzp9Dw5Fa
3Go4DdDFcLTHXSFjRQnL8Xd/ui4ra7NI1dgKHNpM8I8X3qUu/KZLzLZUnpyw8RaT
4kYOiFfOgyA0fO8=
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:24:14 2025 by rpki-client