Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/3136302e3233382e3233302e302f32332d3233203d3e20323636353536.roa
File:                     3136302e3233382e3233302e302f32332d3233203d3e20323636353536.roa (raw, json)
Hash identifier:          zMnDbfmkPgHskdtlQ1eZNoUoL2BaMaCxCcWPiG/ZVN8=
Subject key identifier:   4F:22:82:2F:58:5D:C2:34:80:C0:F3:D6:33:2B:2F:C7:64:33:14:2E
Certificate issuer:       /CN=038EA35AF01B781289F24933082A9857B17EAE3A
Certificate serial:       6E44CCE3A9EC7AB8D893E073EABE3F668F7416EE
Authority key identifier: 03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/3136302e3233382e3233302e302f32332d3233203d3e20323636353536.roa
Signing time:             Thu 18 Sep 2025 13:40:40 +0000
ROA not before:           Thu 18 Sep 2025 13:35:40 +0000
ROA not after:            Thu 17 Sep 2026 13:40:40 +0000
asID:                     266556
IP address blocks:        160.238.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.crl
                          rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 10:38:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:44:cc:e3:a9:ec:7a:b8:d8:93:e0:73:ea:be:3f:66:8f:74:16:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038EA35AF01B781289F24933082A9857B17EAE3A
        Validity
            Not Before: Sep 18 13:35:40 2025 GMT
            Not After : Sep 17 13:40:40 2026 GMT
        Subject: CN=4F22822F585DC23480C0F3D6332B2FC76433142E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ac:3e:c9:25:7c:87:96:55:db:49:60:22:5a:
                    99:0f:2d:c0:44:7e:2a:bc:d6:b0:d4:f5:e0:4d:7a:
                    48:2f:13:7e:cc:a2:7b:51:95:f0:3f:35:e1:2a:73:
                    dc:62:d9:61:06:c0:2e:03:d2:72:0e:89:fe:02:e8:
                    73:54:0b:bc:a0:91:3a:0e:d3:4c:0e:2a:5f:02:08:
                    18:b0:ff:ff:c1:bb:a5:0d:29:fd:07:7b:1f:17:1b:
                    4d:9d:01:6d:00:d4:db:74:30:b3:e8:db:e6:45:35:
                    97:f7:b1:99:d3:2d:9c:35:65:df:dd:20:2a:6a:59:
                    77:5e:28:da:cb:b7:9d:74:64:dd:40:9e:a5:64:e5:
                    aa:86:11:a8:a7:8a:13:ef:d1:8e:60:6a:38:d7:22:
                    6e:5c:61:3e:f7:56:45:f1:ff:1c:2f:00:f7:69:c0:
                    59:58:39:4b:d7:a3:83:d6:d7:6c:c1:51:24:1b:81:
                    dd:6b:a5:e4:fd:06:de:91:f6:2c:03:53:9f:c7:46:
                    04:bd:bd:c8:57:1c:46:5b:9b:71:5b:09:ab:c2:1c:
                    4f:07:22:3e:95:2d:17:1f:47:c1:d4:14:75:7b:3f:
                    d6:61:21:96:19:07:d4:fe:d7:54:1a:c0:51:c4:c1:
                    6b:5a:b6:9f:06:3e:3f:73:8b:d1:e7:fc:81:6d:52:
                    b2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:22:82:2F:58:5D:C2:34:80:C0:F3:D6:33:2B:2F:C7:64:33:14:2E
            X509v3 Authority Key Identifier:
                keyid:03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/3136302e3233382e3233302e302f32332d3233203d3e20323636353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:1c:e5:09:d4:f0:f7:48:40:00:29:dd:e3:9e:41:ad:2c:73:
         19:6f:85:bc:78:14:18:d7:02:c0:d8:03:3b:fd:cf:0f:fb:c1:
         c1:3b:21:ab:c3:b6:de:96:2d:88:d6:4a:3d:10:d9:db:2e:cc:
         91:6f:c4:cd:22:ad:4d:cc:1e:a2:a7:f7:f7:fd:c7:39:23:3f:
         25:70:d3:a6:59:33:bd:da:c2:07:89:86:c9:2d:e6:3b:2c:05:
         02:ca:25:8a:88:0c:a5:e7:b9:1e:6a:e0:80:6c:3e:5b:c1:c9:
         3f:e4:09:81:99:82:07:6b:61:9b:38:e6:15:eb:c3:3d:0a:31:
         6a:53:57:df:c0:f4:a9:a3:0a:31:31:45:0d:cb:8a:3e:63:bd:
         40:71:b0:d7:4b:79:a0:42:c5:3c:b0:5e:b6:50:b7:b4:9a:89:
         df:b2:41:8b:75:ff:24:75:d5:15:d4:2e:11:38:91:a3:3f:9a:
         18:7f:46:c8:f9:01:0e:e1:a3:48:e4:6b:03:4c:9c:42:e3:a2:
         8a:97:0c:50:8b:86:2e:6a:60:53:91:22:34:c5:13:fa:92:52:
         2b:20:04:9d:92:1e:00:d1:5a:40:ca:f4:f3:c5:e0:fd:b2:9f:
         a6:00:2d:35:e5:57:ee:c4:86:c1:9f:fe:b6:76:ec:ef:9c:e7:
         6a:d3:07:f7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbkTM46nserjYk+Bz6r4/Zo90Fu4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM4RUEzNUFGMDFCNzgxMjg5RjI0OTMzMDgyQTk4NTdC
MTdFQUUzQTAeFw0yNTA5MTgxMzM1NDBaFw0yNjA5MTcxMzQwNDBaMDMxMTAvBgNV
BAMTKDRGMjI4MjJGNTg1REMyMzQ4MEMwRjNENjMzMkIyRkM3NjQzMzE0MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCrD7JJXyHllXbSWAiWpkPLcBE
fiq81rDU9eBNekgvE37MontRlfA/NeEqc9xi2WEGwC4D0nIOif4C6HNUC7ygkToO
00wOKl8CCBiw///Bu6UNKf0Hex8XG02dAW0A1Nt0MLPo2+ZFNZf3sZnTLZw1Zd/d
ICpqWXdeKNrLt510ZN1AnqVk5aqGEainihPv0Y5gajjXIm5cYT73VkXx/xwvAPdp
wFlYOUvXo4PW12zBUSQbgd1rpeT9Bt6R9iwDU5/HRgS9vchXHEZbm3FbCavCHE8H
Ij6VLRcfR8HUFHV7P9ZhIZYZB9T+11QawFHEwWtatp8GPj9zi9Hn/IFtUrIvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUTyKCL1hdwjSAwPPWMysvx2QzFC4wHwYDVR0j
BBgwFoAUA46jWvAbeBKJ8kkzCCqYV7F+rjowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0VTVFZwZGlBcDdUUzhHbkdWSHl4ekhzeGFkekpDOXRYUkFQd1N6Mng4
R3IvMC8wMzhFQTM1QUYwMUI3ODEyODlGMjQ5MzMwODJBOTg1N0IxN0VBRTNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzOEVBMzVBRjAxQjc4MTI4
OUYyNDkzMzA4MkE5ODU3QjE3RUFFM0EuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNFU1RWcGRpQXA3VFM4R25HVkh5eHpIc3hhZHpKQzl0WFJBUHdTejJ4OEdyLzAv
MzEzNjMwMmUzMjMzMzgyZTMyMzMzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNjM1MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaDu5jANBgkqhkiG9w0BAQsFAAOCAQEAhhzl
CdTw90hAACnd455BrSxzGW+FvHgUGNcCwNgDO/3PD/vBwTshq8O23pYtiNZKPRDZ
2y7MkW/EzSKtTcweoqf39/3HOSM/JXDTplkzvdrCB4mGyS3mOywFAsoliogMpee5
HmrggGw+W8HJP+QJgZmCB2thmzjmFevDPQoxalNX38D0qaMKMTFFDcuKPmO9QHGw
10t5oELFPLBetlC3tJqJ37JBi3X/JHXVFdQuETiRoz+aGH9GyPkBDuGjSORrA0yc
QuOiipcMUIuGLmpgU5EiNMUT+pJSKyAEnZIeANFaQMr088Xg/bKfpgAtNeVX7sSG
wZ/+tnbs75znatMH9w==
-----END CERTIFICATE-----
Generated at Fri Sep 19 14:47:31 2025 by rpki-client