Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/3136382e3139352e3234302e302f32322d3332203d3e20313938393439.roa
File:                     3136382e3139352e3234302e302f32322d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          pp5t3qJn5rDhw+Z5n5gF5R2FG5DI7lwwFHUJtjBaUuU=
Subject key identifier:   15:DE:F3:16:4B:8B:96:45:A3:9D:26:32:D3:F9:4C:B9:02:48:4F:41
Certificate issuer:       /CN=E648F8D55C21E34319A7C414ECB0155EED5E0B31
Certificate serial:       42A1D49AB0FDF66D6CA3F6E5F2A6995FB488AB21
Authority key identifier: E6:48:F8:D5:5C:21:E3:43:19:A7:C4:14:EC:B0:15:5E:ED:5E:0B:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E648F8D55C21E34319A7C414ECB0155EED5E0B31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/3136382e3139352e3234302e302f32322d3332203d3e20313938393439.roa
Signing time:             Wed 27 Aug 2025 15:16:47 +0000
ROA not before:           Wed 27 Aug 2025 15:11:47 +0000
ROA not after:            Wed 26 Aug 2026 15:16:47 +0000
asID:                     198949
IP address blocks:        168.195.240.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/E648F8D55C21E34319A7C414ECB0155EED5E0B31.crl
                          rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/E648F8D55C21E34319A7C414ECB0155EED5E0B31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E648F8D55C21E34319A7C414ECB0155EED5E0B31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 04:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a1:d4:9a:b0:fd:f6:6d:6c:a3:f6:e5:f2:a6:99:5f:b4:88:ab:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E648F8D55C21E34319A7C414ECB0155EED5E0B31
        Validity
            Not Before: Aug 27 15:11:47 2025 GMT
            Not After : Aug 26 15:16:47 2026 GMT
        Subject: CN=15DEF3164B8B9645A39D2632D3F94CB902484F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:62:b2:fa:46:45:e8:c1:30:a1:18:44:c4:78:
                    e2:75:18:b1:a2:f2:db:9b:88:be:19:75:94:eb:3d:
                    ff:1b:9d:9f:f0:3a:a3:ed:e3:77:13:e5:3f:95:03:
                    44:62:05:18:8e:f2:fd:83:94:69:c0:91:6b:ab:40:
                    f8:cd:6c:86:82:6f:36:06:d0:23:64:65:a2:f2:e4:
                    07:d5:86:9d:00:53:48:2f:d2:78:ca:cd:bc:e0:5f:
                    1f:83:c8:04:af:8b:3d:7a:20:da:ce:7c:d1:f4:20:
                    e1:4b:cf:b9:95:32:e7:da:16:8d:c5:78:4e:b5:21:
                    5c:f8:c1:48:1c:54:1b:51:c3:91:8f:90:cf:69:3e:
                    40:71:d9:f9:cd:45:b7:c1:44:90:30:fb:99:59:02:
                    d4:d4:04:35:2b:8d:af:7c:81:0f:5f:fa:db:1f:9e:
                    09:e1:26:77:39:95:fc:0a:44:74:da:4a:6b:ab:cc:
                    ab:9a:52:c7:70:bb:5c:e1:eb:05:f7:c4:1c:08:c3:
                    b7:cd:07:b4:b8:39:4e:69:95:4e:52:0a:ba:03:50:
                    78:e3:4c:3e:e3:bc:bb:94:44:f6:5d:49:99:34:6a:
                    7b:18:c6:8d:0e:84:52:20:78:0b:05:1d:07:d0:5d:
                    b1:05:aa:5b:6d:31:7c:d1:53:e1:e9:12:ab:45:f3:
                    c1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DE:F3:16:4B:8B:96:45:A3:9D:26:32:D3:F9:4C:B9:02:48:4F:41
            X509v3 Authority Key Identifier:
                keyid:E6:48:F8:D5:5C:21:E3:43:19:A7:C4:14:EC:B0:15:5E:ED:5E:0B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/E648F8D55C21E34319A7C414ECB0155EED5E0B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E648F8D55C21E34319A7C414ECB0155EED5E0B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/3136382e3139352e3234302e302f32322d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:97:fd:c7:fb:25:90:7e:74:99:ab:91:a6:b6:c1:b6:89:70:
         e4:27:4d:de:22:fd:29:66:36:04:f9:0e:b0:5c:21:d4:96:5f:
         3a:83:38:21:dc:0f:4e:82:39:12:6d:73:a4:86:81:37:26:67:
         86:37:95:e6:da:ea:1e:3c:e0:fa:7d:f3:7a:7f:72:a1:00:c7:
         30:9e:4c:cd:14:7f:f0:f8:ca:f2:a7:cb:14:0f:5c:0d:98:eb:
         98:d6:b0:64:02:2f:d9:ae:eb:22:44:18:f6:2b:b9:be:27:9c:
         fb:11:ab:6e:f9:93:44:b8:53:97:0f:57:b8:2b:be:ad:83:af:
         29:cf:85:49:54:d7:04:27:88:d0:00:0a:13:1f:f6:e1:6f:b2:
         76:89:68:69:c6:eb:33:19:e4:57:0f:6b:ab:b4:be:ea:41:e5:
         0c:29:39:33:fc:fc:04:3f:6d:ce:e1:e4:e2:34:4f:ae:9d:cb:
         d4:58:2d:c8:a6:10:56:6a:a8:99:e9:d2:34:00:a7:61:4c:5c:
         03:9d:37:33:9d:93:3b:01:25:f9:6e:90:12:dd:02:98:2d:03:
         11:4d:00:53:98:4c:10:91:ff:46:e6:40:03:63:1e:64:e3:a5:
         1d:c1:a2:b1:b3:cc:83:f2:df:24:4e:18:20:96:5c:4f:0d:94:
         e8:72:3b:2b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQqHUmrD99m1so/bl8qaZX7SIqyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY0OEY4RDU1QzIxRTM0MzE5QTdDNDE0RUNCMDE1NUVF
RDVFMEIzMTAeFw0yNTA4MjcxNTExNDdaFw0yNjA4MjYxNTE2NDdaMDMxMTAvBgNV
BAMTKDE1REVGMzE2NEI4Qjk2NDVBMzlEMjYzMkQzRjk0Q0I5MDI0ODRGNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3YrL6RkXowTChGETEeOJ1GLGi
8tubiL4ZdZTrPf8bnZ/wOqPt43cT5T+VA0RiBRiO8v2DlGnAkWurQPjNbIaCbzYG
0CNkZaLy5AfVhp0AU0gv0njKzbzgXx+DyASviz16INrOfNH0IOFLz7mVMufaFo3F
eE61IVz4wUgcVBtRw5GPkM9pPkBx2fnNRbfBRJAw+5lZAtTUBDUrja98gQ9f+tsf
ngnhJnc5lfwKRHTaSmurzKuaUsdwu1zh6wX3xBwIw7fNB7S4OU5plU5SCroDUHjj
TD7jvLuURPZdSZk0ansYxo0OhFIgeAsFHQfQXbEFqlttMXzRU+HpEqtF88FTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUFd7zFkuLlkWjnSYy0/lMuQJIT0EwHwYDVR0j
BBgwFoAU5kj41Vwh40MZp8QU7LAVXu1eCzEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlgxTk5ZVTI4YzEzb2hBWXBBbm1mY05QUFBLUGVvN25EcUdxcmlrbjVj
RGEvMC9FNjQ4RjhENTVDMjFFMzQzMTlBN0M0MTRFQ0IwMTU1RUVENUUwQjMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2NDhGOEQ1NUMyMUUzNDMx
OUE3QzQxNEVDQjAxNTVFRUQ1RTBCMzEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYMU5OWVUyOGMxM29oQVlwQW5tZmNOUFBQS1BlbzduRHFHcXJpa241Y0RhLzAv
MzEzNjM4MmUzMTM5MzUyZTMyMzQzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMx
MzkzODM5MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjD8DANBgkqhkiG9w0BAQsFAAOCAQEAfZf9
x/slkH50mauRprbBtolw5CdN3iL9KWY2BPkOsFwh1JZfOoM4IdwPToI5Em1zpIaB
NyZnhjeV5trqHjzg+n3zen9yoQDHMJ5MzRR/8PjK8qfLFA9cDZjrmNawZAIv2a7r
IkQY9iu5viec+xGrbvmTRLhTlw9XuCu+rYOvKc+FSVTXBCeI0AAKEx/24W+ydolo
acbrMxnkVw9rq7S+6kHlDCk5M/z8BD9tzuHk4jRPrp3L1FgtyKYQVmqomenSNACn
YUxcA503M52TOwEl+W6QEt0CmC0DEU0AU5hMEJH/RuZAA2MeZOOlHcGisbPMg/Lf
JE4YIJZcTw2U6HI7Kw==
-----END CERTIFICATE-----
Generated at Fri Sep 19 10:20:23 2025 by rpki-client