Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/3230302e3133392e3132382e302f31382d3234203d3e203233313036.roa
File:                     3230302e3133392e3132382e302f31382d3234203d3e203233313036.roa (raw, json)
Hash identifier:          lDhgRNypOikgDz5YcOcr6E5dtADRLQuhtLrL35Eho14=
Subject key identifier:   40:AE:53:F6:FF:5F:7B:86:3F:C3:E3:5B:28:59:B3:32:C8:A1:34:10
Certificate issuer:       /CN=E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC
Certificate serial:       14B7B54871589CDFDB11E2D533B24A0E363F5B43
Authority key identifier: E6:DD:4A:59:FA:8F:F5:B9:19:C1:CC:8C:B6:3B:8E:D9:50:2A:B7:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/3230302e3133392e3132382e302f31382d3234203d3e203233313036.roa
Signing time:             Fri 23 May 2025 06:13:00 +0000
ROA not before:           Fri 23 May 2025 06:08:00 +0000
ROA not after:            Fri 22 May 2026 06:13:00 +0000
asID:                     23106
IP address blocks:        200.139.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.crl
                          rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 07:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b7:b5:48:71:58:9c:df:db:11:e2:d5:33:b2:4a:0e:36:3f:5b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC
        Validity
            Not Before: May 23 06:08:00 2025 GMT
            Not After : May 22 06:13:00 2026 GMT
        Subject: CN=40AE53F6FF5F7B863FC3E35B2859B332C8A13410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:18:1b:b4:7b:93:02:38:54:96:ed:47:4b:af:
                    d4:d5:3f:8e:78:02:fc:d6:b9:73:25:1c:5f:5f:73:
                    0a:12:48:fd:3f:83:55:c1:3b:49:a2:ae:ce:91:60:
                    5b:b8:fe:23:48:f2:43:9a:2b:4c:5c:b7:00:80:38:
                    3b:18:92:fd:40:92:39:26:04:72:1e:f5:e7:9b:7c:
                    71:40:d5:16:57:94:0a:a3:80:0f:33:3b:60:9e:f4:
                    86:0e:0e:4d:d9:02:0b:0f:fd:d7:7f:d3:fb:0e:6e:
                    e6:79:55:1e:ae:b7:9e:7b:dc:b3:87:06:91:aa:58:
                    d8:f4:aa:8d:55:36:ef:a6:1e:15:89:6d:13:7d:55:
                    39:0d:f9:04:1b:d9:bf:fc:84:a3:1e:30:75:ba:c8:
                    de:76:1c:9a:fe:4d:90:20:45:29:86:44:1b:5e:b1:
                    58:28:c6:f1:4c:20:76:d9:d8:e1:32:2c:ab:8d:67:
                    4f:f0:7f:59:a1:25:8a:a0:a6:bb:3e:0a:b2:39:e8:
                    b8:2a:c2:b3:34:2e:ea:52:ed:b2:1c:cb:1d:a1:4c:
                    2f:99:8d:53:ae:80:5d:f8:a2:b7:86:79:46:87:6c:
                    bf:49:ae:6e:2e:9a:ec:9d:d3:d7:bd:28:87:76:0e:
                    29:85:44:fe:91:85:d5:20:19:dc:3f:b2:50:88:e7:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AE:53:F6:FF:5F:7B:86:3F:C3:E3:5B:28:59:B3:32:C8:A1:34:10
            X509v3 Authority Key Identifier:
                keyid:E6:DD:4A:59:FA:8F:F5:B9:19:C1:CC:8C:B6:3B:8E:D9:50:2A:B7:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/3230302e3133392e3132382e302f31382d3234203d3e203233313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.139.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         60:40:c2:44:0f:02:4c:4d:8a:d8:b9:85:e1:c3:b9:07:9d:60:
         be:a2:aa:6a:bd:85:81:2f:6e:52:5d:9f:4c:34:6d:34:5b:62:
         8f:fd:92:45:f5:aa:34:be:a2:09:38:18:bd:a1:37:09:16:16:
         57:61:41:bc:fa:4b:18:d6:49:67:e4:15:be:68:af:7f:54:78:
         c6:65:32:9b:55:e0:ff:1e:b6:72:85:99:01:90:82:55:33:9c:
         9b:8c:47:14:29:c9:f8:6e:9d:c9:e3:f9:2f:97:85:0a:d3:33:
         fc:77:1d:f0:37:45:5f:81:78:26:e2:ae:ec:29:f9:3d:ce:f6:
         24:c5:5f:b0:0e:c0:0f:39:e6:e8:87:00:7a:62:fd:e3:55:9d:
         21:ba:8a:a2:a5:46:24:b6:25:46:dd:8a:07:ef:23:dd:a2:5f:
         e0:ed:ce:5a:6f:80:94:4b:97:2b:47:3e:3d:e9:57:54:59:df:
         55:c1:85:d2:ba:d6:c0:e9:ad:d4:c5:23:98:11:4f:5d:4e:bc:
         6b:b4:85:fb:cf:e0:75:17:31:28:6c:71:97:a9:ef:2f:c8:1b:
         e9:d0:fb:f3:2f:5a:8a:84:f4:3f:69:64:93:f8:e9:5f:2e:56:
         33:c5:6a:c1:74:b5:1e:86:90:20:94:c9:ee:79:ef:2c:a2:2a:
         68:30:99:95
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFLe1SHFYnN/bEeLVM7JKDjY/W0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZERDRBNTlGQThGRjVCOTE5QzFDQzhDQjYzQjhFRDk1
MDJBQjdDQzAeFw0yNTA1MjMwNjA4MDBaFw0yNjA1MjIwNjEzMDBaMDMxMTAvBgNV
BAMTKDQwQUU1M0Y2RkY1RjdCODYzRkMzRTM1QjI4NTlCMzMyQzhBMTM0MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkGBu0e5MCOFSW7UdLr9TVP454
AvzWuXMlHF9fcwoSSP0/g1XBO0mirs6RYFu4/iNI8kOaK0xctwCAODsYkv1Akjkm
BHIe9eebfHFA1RZXlAqjgA8zO2Ce9IYODk3ZAgsP/dd/0/sObuZ5VR6ut5573LOH
BpGqWNj0qo1VNu+mHhWJbRN9VTkN+QQb2b/8hKMeMHW6yN52HJr+TZAgRSmGRBte
sVgoxvFMIHbZ2OEyLKuNZ0/wf1mhJYqgprs+CrI56LgqwrM0LupS7bIcyx2hTC+Z
jVOugF34oreGeUaHbL9Jrm4umuyd09e9KId2DimFRP6RhdUgGdw/slCI59ljAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQK5T9v9fe4Y/w+NbKFmzMsihNBAwHwYDVR0j
BBgwFoAU5t1KWfqP9bkZwcyMtjuO2VAqt8wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWZMNzNEbVFRYmZEb3ZmcXBwUGNnR0V2MVZrUW51eGtQaUdpTXpjS2N4
NGgvMC9FNkRENEE1OUZBOEZGNUI5MTlDMUNDOENCNjNCOEVEOTUwMkFCN0NDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2REQ0QTU5RkE4RkY1Qjkx
OUMxQ0M4Q0I2M0I4RUQ5NTAyQUI3Q0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVmTDczRG1RUWJmRG92ZnFwcFBjZ0dFdjFWa1FudXhrUGlHaU16Y0tjeDRoLzAv
MzIzMDMwMmUzMTMzMzkyZTMxMzIzODJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMy
MzMzMTMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAbIi4AwDQYJKoZIhvcNAQELBQADggEBAGBAwkQP
AkxNiti5heHDuQedYL6iqmq9hYEvblJdn0w0bTRbYo/9kkX1qjS+ogk4GL2hNwkW
FldhQbz6SxjWSWfkFb5or39UeMZlMptV4P8etnKFmQGQglUznJuMRxQpyfhuncnj
+S+XhQrTM/x3HfA3RV+BeCbiruwp+T3O9iTFX7AOwA855uiHAHpi/eNVnSG6iqKl
RiS2JUbdigfvI92iX+DtzlpvgJRLlytHPj3pV1RZ31XBhdK61sDprdTFI5gRT11O
vGu0hfvP4HUXMShscZep7y/IG+nQ+/MvWoqE9D9pZJP46V8uVjPFasF0tR6GkCCU
ye557yyiKmgwmZU=
-----END CERTIFICATE-----
Generated at Tue Jun 10 13:00:43 2025 by rpki-client