Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa
File:                     3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa (raw, json)
Hash identifier:          986F92dvoA2APFqn5Bj9FfIz2RM5dIbwJr9bghMJRUk=
Subject key identifier:   65:F2:07:CB:47:30:82:DE:0F:21:92:B6:78:B0:18:96:14:08:09:8B
Certificate issuer:       /CN=F369B880738FA6C66F931D123DE6542D4B42FD29
Certificate serial:       77CF813D8168E9635A352EBA838BC51DC7A1C960
Authority key identifier: F3:69:B8:80:73:8F:A6:C6:6F:93:1D:12:3D:E6:54:2D:4B:42:FD:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F369B880738FA6C66F931D123DE6542D4B42FD29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa
Signing time:             Mon 21 Jul 2025 15:57:40 +0000
ROA not before:           Mon 21 Jul 2025 15:52:40 +0000
ROA not after:            Mon 20 Jul 2026 15:57:40 +0000
asID:                     270579
IP address blocks:        189.126.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F369B880738FA6C66F931D123DE6542D4B42FD29.crl
                          rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F369B880738FA6C66F931D123DE6542D4B42FD29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F369B880738FA6C66F931D123DE6542D4B42FD29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 22:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cf:81:3d:81:68:e9:63:5a:35:2e:ba:83:8b:c5:1d:c7:a1:c9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B880738FA6C66F931D123DE6542D4B42FD29
        Validity
            Not Before: Jul 21 15:52:40 2025 GMT
            Not After : Jul 20 15:57:40 2026 GMT
        Subject: CN=65F207CB473082DE0F2192B678B018961408098B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:c0:ea:a3:3f:dc:12:94:52:67:11:17:84:
                    ba:82:24:06:7c:2d:24:df:21:80:82:2a:4a:24:4f:
                    f2:7a:0d:c3:c7:eb:0c:8f:7b:3d:15:21:b8:fe:f0:
                    2d:69:e5:2b:49:82:bb:2a:61:bf:3f:64:5b:5d:1b:
                    06:f0:31:5a:42:9c:2a:3b:b5:92:e0:2d:8a:94:50:
                    9d:e1:46:e0:08:6c:49:31:71:7f:4a:c5:09:e2:60:
                    25:20:9a:32:28:1e:2c:e3:7a:2f:65:f2:83:8d:ef:
                    16:47:c9:71:f2:0c:e9:5f:35:e3:6a:4d:a8:62:89:
                    91:41:91:b5:e1:19:15:12:6e:35:e6:bc:c4:a6:99:
                    37:07:ff:53:df:25:fa:c1:63:62:6f:2f:23:5c:54:
                    3a:d0:aa:5f:73:67:0e:63:31:9a:f9:76:a9:a4:fe:
                    6a:76:b7:68:62:a4:60:9c:09:48:7a:04:c3:12:85:
                    5a:47:ee:ae:b5:bb:20:6e:6e:95:82:a2:b4:6b:27:
                    5f:01:ac:d3:0e:f6:07:5d:ae:9c:60:68:d6:63:62:
                    a6:0f:4e:49:3a:65:29:b0:5f:24:23:99:76:ea:c7:
                    a4:c3:6b:2a:ba:d0:3b:98:20:01:56:4e:f2:19:ec:
                    02:a6:f2:43:96:b7:3e:7b:4f:10:2b:7b:0b:45:d6:
                    c3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F2:07:CB:47:30:82:DE:0F:21:92:B6:78:B0:18:96:14:08:09:8B
            X509v3 Authority Key Identifier:
                keyid:F3:69:B8:80:73:8F:A6:C6:6F:93:1D:12:3D:E6:54:2D:4B:42:FD:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F369B880738FA6C66F931D123DE6542D4B42FD29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F369B880738FA6C66F931D123DE6542D4B42FD29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:69:28:ec:4e:ee:96:35:bd:39:a0:7b:28:a6:89:1f:30:92:
         57:00:24:1f:a1:d1:d9:20:fb:73:7d:b0:e0:88:0f:08:89:cc:
         43:77:50:5a:04:a9:d2:03:af:74:09:2d:e6:ce:41:9d:36:cd:
         0b:d3:45:e4:0a:f0:d2:2a:a4:2a:bb:4c:06:ba:ff:c4:43:c1:
         4a:19:fb:51:77:05:cb:d0:19:c7:50:5a:e9:16:cf:e8:f2:ab:
         c2:d7:c5:f6:2f:b8:36:3b:52:e1:93:21:e1:15:b1:ee:c9:7a:
         03:6e:05:bf:f6:d1:e8:b1:32:56:39:bc:2e:c0:77:34:c1:8c:
         c6:fe:d0:20:37:b7:fb:0d:71:b7:41:08:99:a2:62:0c:22:bc:
         93:d2:46:21:f4:a6:61:4f:da:8e:07:80:3d:2c:1e:cd:f1:8a:
         58:d3:ff:6d:4c:81:62:b5:e0:ed:ad:45:b3:33:41:a0:71:25:
         01:9e:0f:9b:ea:3a:fa:2f:cb:f0:ee:48:3c:6f:6c:5b:bb:2b:
         85:e8:04:e0:a0:c7:43:76:f6:54:9a:ef:3e:e1:bf:73:48:a7:
         50:08:9f:f8:a3:d8:7a:7d:f6:c6:b4:91:6e:48:49:73:e9:13:
         81:27:22:d9:ca:79:b6:24:f5:c7:f5:d8:48:48:c4:e6:63:7a:
         46:54:7f:cf
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUd8+BPYFo6WNaNS66g4vFHcehyWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM2OUI4ODA3MzhGQTZDNjZGOTMxRDEyM0RFNjU0MkQ0
QjQyRkQyOTAeFw0yNTA3MjExNTUyNDBaFw0yNjA3MjAxNTU3NDBaMDMxMTAvBgNV
BAMTKDY1RjIwN0NCNDczMDgyREUwRjIxOTJCNjc4QjAxODk2MTQwODA5OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQjMDqoz/cEpRSZxEXhLqCJAZ8
LSTfIYCCKkokT/J6DcPH6wyPez0VIbj+8C1p5StJgrsqYb8/ZFtdGwbwMVpCnCo7
tZLgLYqUUJ3hRuAIbEkxcX9KxQniYCUgmjIoHizjei9l8oON7xZHyXHyDOlfNeNq
TahiiZFBkbXhGRUSbjXmvMSmmTcH/1PfJfrBY2JvLyNcVDrQql9zZw5jMZr5dqmk
/mp2t2hipGCcCUh6BMMShVpH7q61uyBubpWCorRrJ18BrNMO9gddrpxgaNZjYqYP
Tkk6ZSmwXyQjmXbqx6TDayq60DuYIAFWTvIZ7AKm8kOWtz57TxArewtF1sNnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZfIHy0cwgt4PIZK2eLAYlhQICYswHwYDVR0j
BBgwFoAU82m4gHOPpsZvkx0SPeZULUtC/SkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0t5aFN0RFVFTG1nbWVFZGZMOTdudjNkaWt1UXhmQzhwTUFNNXY0a1Zm
VkEvMC9GMzY5Qjg4MDczOEZBNkM2NkY5MzFEMTIzREU2NTQyRDRCNDJGRDI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzNjlCODgwNzM4RkE2QzY2
RjkzMUQxMjNERTY1NDJENEI0MkZEMjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLeWhTdERVRUxtZ21lRWRmTDk3bnYzZGlrdVF4ZkM4cE1BTTV2NGtWZlZBLzAv
MzEzODM5MmUzMTMyMzYyZTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzAzNTM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9flQwDQYJKoZIhvcNAQELBQADggEBACppKOxO
7pY1vTmgeyimiR8wklcAJB+h0dkg+3N9sOCIDwiJzEN3UFoEqdIDr3QJLebOQZ02
zQvTReQK8NIqpCq7TAa6/8RDwUoZ+1F3BcvQGcdQWukWz+jyq8LXxfYvuDY7UuGT
IeEVse7JegNuBb/20eixMlY5vC7AdzTBjMb+0CA3t/sNcbdBCJmiYgwivJPSRiH0
pmFP2o4HgD0sHs3xiljT/21MgWK14O2tRbMzQaBxJQGeD5vqOvovy/DuSDxvbFu7
K4XoBOCgx0N29lSa7z7hv3NIp1AIn/ij2Hp99sa0kW5ISXPpE4EnItnKebYk9cf1
2EhIxOZjekZUf88=
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:42:13 2025 by rpki-client