Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/3136302e3233382e3232382e302f32322d3232203d3e20323636353536.roa
File:                     3136302e3233382e3232382e302f32322d3232203d3e20323636353536.roa (raw, json)
Hash identifier:          ZtLi9pepBluNDAhUNA2nZQ2BvSAboQFvEs5nlsuzdfY=
Subject key identifier:   01:3D:2F:ED:01:24:9A:AC:D1:FC:B1:49:75:30:B8:3F:DD:6D:F0:4C
Certificate issuer:       /CN=038EA35AF01B781289F24933082A9857B17EAE3A
Certificate serial:       26CD50CCEE76287A2DDDDBA10CDE60003D1469B5
Authority key identifier: 03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/3136302e3233382e3232382e302f32322d3232203d3e20323636353536.roa
Signing time:             Thu 18 Sep 2025 13:40:40 +0000
ROA not before:           Thu 18 Sep 2025 13:35:40 +0000
ROA not after:            Thu 17 Sep 2026 13:40:40 +0000
asID:                     266556
IP address blocks:        160.238.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.crl
                          rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 05:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:cd:50:cc:ee:76:28:7a:2d:dd:db:a1:0c:de:60:00:3d:14:69:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038EA35AF01B781289F24933082A9857B17EAE3A
        Validity
            Not Before: Sep 18 13:35:40 2025 GMT
            Not After : Sep 17 13:40:40 2026 GMT
        Subject: CN=013D2FED01249AACD1FCB1497530B83FDD6DF04C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:f6:08:f5:0c:a9:60:22:20:7f:bd:57:4d:
                    b8:f1:a5:b9:dc:c9:5f:8a:02:d1:f7:4c:5b:eb:75:
                    f7:60:6b:e7:9b:e6:bd:0d:de:34:92:24:a2:1e:90:
                    7c:8f:35:b1:93:97:bc:70:83:15:01:b4:8f:cd:59:
                    a4:70:75:e1:8e:64:17:1f:f4:c0:f2:8e:63:bb:78:
                    33:8a:be:a6:62:43:32:56:4c:8b:f1:3a:9f:d5:a2:
                    05:2e:9c:02:97:2e:b7:78:68:15:fc:f9:20:51:30:
                    6f:61:38:3f:36:d2:11:3f:2b:9b:c0:05:0c:1b:46:
                    8e:93:18:60:93:48:e9:58:39:fd:65:06:89:e7:a6:
                    6b:d1:68:88:a4:73:81:27:b1:6e:35:b8:5d:e3:6f:
                    ca:01:aa:41:e2:d4:84:c4:0c:f2:a6:68:7d:30:38:
                    fb:22:19:27:d1:87:54:6f:2b:b1:19:70:92:5e:cb:
                    b3:09:9c:f4:48:e2:51:45:9d:ca:18:21:90:c1:b3:
                    eb:be:ba:1d:f5:94:65:b5:5f:00:6b:f9:90:ca:0a:
                    e5:38:d8:10:4a:4b:57:19:f2:aa:57:35:83:0b:79:
                    8d:28:37:d3:1b:bf:8f:7e:fb:cd:44:07:e7:06:77:
                    5c:33:1f:43:ad:eb:8e:c7:4d:f9:e7:ca:4d:dd:46:
                    a4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3D:2F:ED:01:24:9A:AC:D1:FC:B1:49:75:30:B8:3F:DD:6D:F0:4C
            X509v3 Authority Key Identifier:
                keyid:03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/3136302e3233382e3232382e302f32322d3232203d3e20323636353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:99:58:cb:55:fa:87:32:81:b3:1a:8a:f9:85:10:6a:34:e2:
         d9:4f:82:73:62:81:ba:82:89:90:cb:56:38:45:18:a6:a5:7f:
         4a:a0:25:81:68:08:18:02:d4:8e:91:84:ff:cb:aa:f9:86:bd:
         cb:e3:a3:74:c3:94:21:15:31:a8:68:ee:ec:e8:38:3d:f2:96:
         c3:76:ca:dc:d2:11:30:96:43:4a:a3:b2:0c:a2:b2:8c:2b:f1:
         c5:06:43:00:1f:91:e4:87:2c:58:7b:90:24:79:1e:28:aa:0b:
         97:c3:62:24:1a:bc:22:92:eb:0d:49:5d:8e:92:2f:dd:7e:23:
         19:38:db:91:57:49:8b:d6:33:7b:0a:95:3c:f3:f6:b0:17:fa:
         9a:17:35:d7:29:26:64:40:60:de:9c:4e:7e:93:93:a4:ed:24:
         2b:4c:e0:ea:09:8d:55:2c:8e:ec:e5:cf:61:45:f9:17:94:b0:
         be:4a:9e:53:f6:f7:73:14:6e:2c:00:51:e3:09:67:a2:0f:10:
         5f:15:75:92:95:dd:d5:96:fd:89:26:8f:3c:ec:08:b6:f8:de:
         f6:0c:68:39:be:f3:93:26:e7:ae:ad:8f:03:05:9f:ee:01:43:
         61:da:cc:13:93:1d:78:8a:d5:48:75:29:06:97:09:60:9f:cf:
         d2:54:62:b3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJs1QzO52KHot3duhDN5gAD0UabUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM4RUEzNUFGMDFCNzgxMjg5RjI0OTMzMDgyQTk4NTdC
MTdFQUUzQTAeFw0yNTA5MTgxMzM1NDBaFw0yNjA5MTcxMzQwNDBaMDMxMTAvBgNV
BAMTKDAxM0QyRkVEMDEyNDlBQUNEMUZDQjE0OTc1MzBCODNGREQ2REYwNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCixvYI9QypYCIgf71XTbjxpbnc
yV+KAtH3TFvrdfdga+eb5r0N3jSSJKIekHyPNbGTl7xwgxUBtI/NWaRwdeGOZBcf
9MDyjmO7eDOKvqZiQzJWTIvxOp/VogUunAKXLrd4aBX8+SBRMG9hOD820hE/K5vA
BQwbRo6TGGCTSOlYOf1lBonnpmvRaIikc4EnsW41uF3jb8oBqkHi1ITEDPKmaH0w
OPsiGSfRh1RvK7EZcJJey7MJnPRI4lFFncoYIZDBs+u+uh31lGW1XwBr+ZDKCuU4
2BBKS1cZ8qpXNYMLeY0oN9Mbv49++81EB+cGd1wzH0Ot647HTfnnyk3dRqQ/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUAT0v7QEkmqzR/LFJdTC4P91t8EwwHwYDVR0j
BBgwFoAUA46jWvAbeBKJ8kkzCCqYV7F+rjowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0VTVFZwZGlBcDdUUzhHbkdWSHl4ekhzeGFkekpDOXRYUkFQd1N6Mng4
R3IvMC8wMzhFQTM1QUYwMUI3ODEyODlGMjQ5MzMwODJBOTg1N0IxN0VBRTNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzOEVBMzVBRjAxQjc4MTI4
OUYyNDkzMzA4MkE5ODU3QjE3RUFFM0EuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNFU1RWcGRpQXA3VFM4R25HVkh5eHpIc3hhZHpKQzl0WFJBUHdTejJ4OEdyLzAv
MzEzNjMwMmUzMjMzMzgyZTMyMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNjM1MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqDu5DANBgkqhkiG9w0BAQsFAAOCAQEAIZlY
y1X6hzKBsxqK+YUQajTi2U+Cc2KBuoKJkMtWOEUYpqV/SqAlgWgIGALUjpGE/8uq
+Ya9y+OjdMOUIRUxqGju7Og4PfKWw3bK3NIRMJZDSqOyDKKyjCvxxQZDAB+R5Ics
WHuQJHkeKKoLl8NiJBq8IpLrDUldjpIv3X4jGTjbkVdJi9YzewqVPPP2sBf6mhc1
1ykmZEBg3pxOfpOTpO0kK0zg6gmNVSyO7OXPYUX5F5SwvkqeU/b3cxRuLABR4wln
og8QXxV1kpXd1Zb9iSaPPOwItvje9gxoOb7zkybnrq2PAwWf7gFDYdrME5MdeIrV
SHUpBpcJYJ/P0lRisw==
-----END CERTIFICATE-----
Generated at Sat Sep 20 04:13:43 2025 by rpki-client