Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/3138392e33372e3132382e302f31372d3234203d3e203233313036.roa
File:                     3138392e33372e3132382e302f31372d3234203d3e203233313036.roa (raw, json)
Hash identifier:          Mu3VsonQHXsRJDIh+SBtw2xgVg3kAp068E+Ukrn/gJE=
Subject key identifier:   88:CB:C8:9F:5A:7D:2C:89:4B:1C:8C:53:65:55:4E:A4:9B:E7:24:A4
Certificate issuer:       /CN=E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC
Certificate serial:       7839AA3AB2B9782BA3DB1FE347EE0ACDE733213D
Authority key identifier: E6:DD:4A:59:FA:8F:F5:B9:19:C1:CC:8C:B6:3B:8E:D9:50:2A:B7:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/3138392e33372e3132382e302f31372d3234203d3e203233313036.roa
Signing time:             Fri 23 May 2025 06:09:47 +0000
ROA not before:           Fri 23 May 2025 06:04:47 +0000
ROA not after:            Fri 22 May 2026 06:09:47 +0000
asID:                     23106
IP address blocks:        189.37.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.crl
                          rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 14:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:39:aa:3a:b2:b9:78:2b:a3:db:1f:e3:47:ee:0a:cd:e7:33:21:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC
        Validity
            Not Before: May 23 06:04:47 2025 GMT
            Not After : May 22 06:09:47 2026 GMT
        Subject: CN=88CBC89F5A7D2C894B1C8C5365554EA49BE724A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:2b:ab:82:c7:14:b0:91:e2:a4:fe:d5:e3:
                    22:89:37:86:db:c4:b6:89:2c:0b:e5:a1:8b:59:ef:
                    47:4b:1b:ad:97:7d:86:ac:e4:21:62:02:95:84:43:
                    8b:33:83:85:6c:3d:56:aa:1d:81:68:c7:4d:aa:4f:
                    cc:68:8c:f1:cd:c9:e7:27:e6:9d:7e:57:04:5d:2e:
                    c7:0e:4a:a9:c9:aa:66:4f:ff:b2:c1:90:d6:05:74:
                    6c:54:17:81:89:cc:19:77:b6:f4:46:15:f1:af:db:
                    f5:67:f9:0f:5c:51:79:ef:2c:8d:d6:96:dc:db:fa:
                    d5:50:d7:e8:39:9f:bf:b3:02:a1:99:4e:be:46:bf:
                    94:50:b8:ef:d3:74:91:e0:52:34:49:e8:f3:8a:c7:
                    de:58:fb:40:bc:27:00:3c:0f:7c:3e:d7:37:4a:95:
                    98:37:ca:d2:50:74:11:b4:0f:ce:19:32:e5:07:c0:
                    07:8e:83:74:7d:16:08:f0:9b:5e:69:3e:32:5a:c8:
                    26:da:51:d9:2e:59:a3:5d:66:51:14:80:59:ff:6c:
                    ea:29:f4:08:f3:4f:e5:c2:d1:ac:dd:fa:1d:16:1b:
                    9e:a1:e9:58:f2:8d:7e:3a:fc:ba:1f:e2:86:51:eb:
                    3f:aa:3b:34:02:25:04:e5:eb:da:10:01:c8:fd:e9:
                    ef:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CB:C8:9F:5A:7D:2C:89:4B:1C:8C:53:65:55:4E:A4:9B:E7:24:A4
            X509v3 Authority Key Identifier:
                keyid:E6:DD:4A:59:FA:8F:F5:B9:19:C1:CC:8C:B6:3B:8E:D9:50:2A:B7:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/3138392e33372e3132382e302f31372d3234203d3e203233313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.37.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9a:f1:cb:b3:8c:9a:18:28:da:b3:25:10:8d:0e:2b:d8:a8:df:
         fa:10:d5:1f:61:70:6d:9b:ee:0a:fe:26:1e:05:d6:b7:41:84:
         ec:af:21:77:47:ae:67:fe:51:e9:a4:e4:5e:df:a0:9f:81:0f:
         7e:7b:bf:cb:64:22:ae:5d:c6:94:ec:d1:7d:e8:ff:a7:22:c4:
         77:21:f9:ee:fe:4f:af:a6:03:bb:f5:3b:5f:af:06:61:7e:20:
         dc:9c:54:29:c1:dc:69:9b:d6:8f:e9:4e:f3:fd:b4:39:99:5c:
         f0:f9:17:c6:d6:78:92:18:89:60:41:8f:8e:f4:f2:c5:dd:3d:
         82:a2:ac:1b:b4:a5:e4:e1:37:89:c5:b0:85:09:b5:8c:81:4c:
         5b:6d:12:75:8e:c1:45:61:da:2c:a6:40:ce:aa:7f:d4:96:c8:
         a0:85:27:a5:7c:c5:6a:66:37:02:d8:2a:16:d2:ba:4c:41:07:
         fc:10:60:b9:f7:01:37:c0:e0:c3:a5:99:ff:02:a8:13:42:e2:
         36:49:38:bf:0e:76:e2:dd:e4:02:23:d7:d6:78:27:6f:5b:5f:
         81:60:9c:53:ac:49:32:65:36:e3:26:84:81:e7:8e:54:53:6a:
         e3:d8:9b:1c:b9:95:7b:81:96:68:5f:51:6b:96:13:14:c0:ab:
         b4:5a:b8:ab
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeDmqOrK5eCuj2x/jR+4KzeczIT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZERDRBNTlGQThGRjVCOTE5QzFDQzhDQjYzQjhFRDk1
MDJBQjdDQzAeFw0yNTA1MjMwNjA0NDdaFw0yNjA1MjIwNjA5NDdaMDMxMTAvBgNV
BAMTKDg4Q0JDODlGNUE3RDJDODk0QjFDOEM1MzY1NTU0RUE0OUJFNzI0QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2VyurgscUsJHipP7V4yKJN4bb
xLaJLAvloYtZ70dLG62XfYas5CFiApWEQ4szg4VsPVaqHYFox02qT8xojPHNyecn
5p1+VwRdLscOSqnJqmZP/7LBkNYFdGxUF4GJzBl3tvRGFfGv2/Vn+Q9cUXnvLI3W
ltzb+tVQ1+g5n7+zAqGZTr5Gv5RQuO/TdJHgUjRJ6POKx95Y+0C8JwA8D3w+1zdK
lZg3ytJQdBG0D84ZMuUHwAeOg3R9Fgjwm15pPjJayCbaUdkuWaNdZlEUgFn/bOop
9AjzT+XC0azd+h0WG56h6VjyjX46/Lof4oZR6z+qOzQCJQTl69oQAcj96e/zAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUiMvIn1p9LIlLHIxTZVVOpJvnJKQwHwYDVR0j
BBgwFoAU5t1KWfqP9bkZwcyMtjuO2VAqt8wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWZMNzNEbVFRYmZEb3ZmcXBwUGNnR0V2MVZrUW51eGtQaUdpTXpjS2N4
NGgvMC9FNkRENEE1OUZBOEZGNUI5MTlDMUNDOENCNjNCOEVEOTUwMkFCN0NDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2REQ0QTU5RkE4RkY1Qjkx
OUMxQ0M4Q0I2M0I4RUQ5NTAyQUI3Q0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVmTDczRG1RUWJmRG92ZnFwcFBjZ0dFdjFWa1FudXhrUGlHaU16Y0tjeDRoLzAv
MzEzODM5MmUzMzM3MmUzMTMyMzgyZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMjMz
MzEzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQHvSWAMA0GCSqGSIb3DQEBCwUAA4IBAQCa8cuzjJoY
KNqzJRCNDivYqN/6ENUfYXBtm+4K/iYeBda3QYTsryF3R65n/lHppORe36CfgQ9+
e7/LZCKuXcaU7NF96P+nIsR3Ifnu/k+vpgO79TtfrwZhfiDcnFQpwdxpm9aP6U7z
/bQ5mVzw+RfG1niSGIlgQY+O9PLF3T2CoqwbtKXk4TeJxbCFCbWMgUxbbRJ1jsFF
YdospkDOqn/UlsighSelfMVqZjcC2CoW0rpMQQf8EGC59wE3wODDpZn/AqgTQuI2
STi/Dnbi3eQCI9fWeCdvW1+BYJxTrEkyZTbjJoSB545UU2rj2JscuZV7gZZoX1Fr
lhMUwKu0Wrir
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:24:33 2025 by rpki-client