Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32322d3234203d3e203238353736.roa
File:                     3138392e33382e31362e302f32322d3234203d3e203238353736.roa (raw, json)
Hash identifier:          dbNCkMmUz+V5xS+dq+WO8J173B1V6mOprMapJNQvIhQ=
Subject key identifier:   B2:A0:80:54:C8:10:2C:99:52:8B:86:55:64:4A:10:15:7C:C8:E6:F1
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       63DE5701E963F2F2F83888FB18E3FA2D3ACC2A05
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32322d3234203d3e203238353736.roa
Signing time:             Fri 04 Jul 2025 21:17:00 +0000
ROA not before:           Fri 04 Jul 2025 21:12:00 +0000
ROA not after:            Fri 03 Jul 2026 21:17:00 +0000
asID:                     28576
IP address blocks:        189.38.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 17:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:de:57:01:e9:63:f2:f2:f8:38:88:fb:18:e3:fa:2d:3a:cc:2a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Jul  4 21:12:00 2025 GMT
            Not After : Jul  3 21:17:00 2026 GMT
        Subject: CN=B2A08054C8102C99528B8655644A10157CC8E6F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:92:98:22:04:fd:6d:1a:59:cd:96:6b:d3:d8:
                    64:44:3b:b3:88:ca:fd:7b:94:3e:f3:2f:89:fc:9c:
                    51:c2:13:8b:9c:db:fe:32:4d:13:52:f2:d3:38:60:
                    43:21:e7:51:d0:2e:32:49:61:b7:33:f1:a3:5a:10:
                    68:eb:ec:8d:6d:48:81:21:ae:9b:d3:51:9f:f9:10:
                    b8:76:5c:0d:bd:b7:4a:d2:15:3d:c0:05:21:65:75:
                    e8:7a:a0:26:8b:34:fb:0f:4f:ef:51:79:60:df:54:
                    6e:c0:c9:3f:3b:9b:b5:2c:ba:45:f2:41:e8:da:a0:
                    68:c7:72:1f:8b:5b:3d:f5:86:ba:6d:26:cd:b5:4e:
                    ef:f7:d4:08:dc:f2:9d:58:aa:c1:28:d7:39:8a:d1:
                    59:7c:a4:7a:96:97:2e:2a:aa:fa:1e:21:6b:89:2d:
                    4d:41:1d:0c:2d:0b:95:91:92:d7:3e:e8:19:8d:fc:
                    ce:21:64:a9:e0:fe:bf:41:4b:74:f9:5f:77:25:3a:
                    24:55:12:8f:03:b8:57:4f:6a:96:4f:0e:3a:20:bb:
                    e9:e6:51:2f:a6:b9:a0:30:22:9d:65:1c:b7:66:d0:
                    93:8b:fb:eb:d8:03:53:53:a2:05:b8:7c:04:bb:d9:
                    ce:09:4a:c2:0b:9a:fa:07:ad:49:7b:c3:a0:0f:e1:
                    d7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A0:80:54:C8:10:2C:99:52:8B:86:55:64:4A:10:15:7C:C8:E6:F1
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32322d3234203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:76:d6:35:d1:f1:08:d6:5c:99:f1:1a:73:c9:89:9f:b4:52:
         65:6a:2d:b3:ed:4a:8d:b3:60:13:30:f1:b0:f4:67:33:f0:37:
         62:7e:a9:42:ff:5c:15:f5:3d:e0:f9:2b:84:5e:10:0a:4e:aa:
         18:e9:89:58:97:10:8c:6c:dd:30:95:e4:4c:3d:5e:bb:e7:d3:
         7b:37:05:c0:f7:1d:bb:70:49:5b:50:10:3c:a8:e8:49:e6:63:
         01:bf:6a:c3:66:ec:13:49:8b:bc:de:36:3f:aa:a9:f8:eb:1f:
         10:a6:93:79:bc:c9:d5:8e:48:62:4e:01:71:bd:14:37:0e:df:
         1d:1f:3d:76:84:f2:b9:6e:43:8b:b0:f2:8f:79:cb:fb:ee:cd:
         45:41:b2:c8:3a:f5:2a:79:54:de:11:16:53:c0:fc:2d:48:b3:
         c3:dd:d7:6c:be:7e:4e:18:5f:37:48:a9:2e:c7:89:f3:78:87:
         0f:c5:c6:ec:bd:21:70:16:2a:93:b3:64:2b:7a:a6:44:d5:55:
         86:a6:8e:fe:3c:b9:af:58:cb:2d:49:14:38:92:9d:dc:62:9d:
         04:8c:8f:03:9a:fb:5e:0c:78:d0:f9:e2:09:1a:83:82:02:59:
         c7:dc:03:c9:f2:33:b7:2a:75:2a:dd:7b:a0:27:c9:99:be:62:
         6b:77:d7:22
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUY95XAelj8vL4OIj7GOP6LTrMKgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQxRTg3Qzg1MTQ5OThFMzYyMjkyNzQxQzcwRjY5MzE3
OEZERDIwRTAeFw0yNTA3MDQyMTEyMDBaFw0yNjA3MDMyMTE3MDBaMDMxMTAvBgNV
BAMTKEIyQTA4MDU0QzgxMDJDOTk1MjhCODY1NTY0NEExMDE1N0NDOEU2RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkpgiBP1tGlnNlmvT2GREO7OI
yv17lD7zL4n8nFHCE4uc2/4yTRNS8tM4YEMh51HQLjJJYbcz8aNaEGjr7I1tSIEh
rpvTUZ/5ELh2XA29t0rSFT3ABSFldeh6oCaLNPsPT+9ReWDfVG7AyT87m7UsukXy
QejaoGjHch+LWz31hrptJs21Tu/31Ajc8p1YqsEo1zmK0Vl8pHqWly4qqvoeIWuJ
LU1BHQwtC5WRktc+6BmN/M4hZKng/r9BS3T5X3clOiRVEo8DuFdPapZPDjogu+nm
US+muaAwIp1lHLdm0JOL++vYA1NTogW4fAS72c4JSsILmvoHrUl7w6AP4deXAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUsqCAVMgQLJlSi4ZVZEoQFXzI5vEwHwYDVR0j
BBgwFoAUvR6HyFFJmONiKSdBxw9pMXj90g4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0NHV0x1YW1XQlJTWnJ6eUFWZzZyd1BhOGQ2NWhvN2FnNEY5Wnl4WkJj
NU4vMC9CRDFFODdDODUxNDk5OEUzNjIyOTI3NDFDNzBGNjkzMTc4RkREMjBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEMUU4N0M4NTE0OTk4RTM2
MjI5Mjc0MUM3MEY2OTMxNzhGREQyMEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdDR1dMdWFtV0JSU1pyenlBVmc2cndQYThkNjVobzdhZzRGOVp5eFpCYzVOLzAv
MzEzODM5MmUzMzM4MmUzMTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODM1
MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAr0mEDANBgkqhkiG9w0BAQsFAAOCAQEAF3bWNdHxCNZc
mfEac8mJn7RSZWots+1KjbNgEzDxsPRnM/A3Yn6pQv9cFfU94PkrhF4QCk6qGOmJ
WJcQjGzdMJXkTD1eu+fTezcFwPcdu3BJW1AQPKjoSeZjAb9qw2bsE0mLvN42P6qp
+OsfEKaTebzJ1Y5IYk4Bcb0UNw7fHR89doTyuW5Di7Dyj3nL++7NRUGyyDr1KnlU
3hEWU8D8LUizw93XbL5+ThhfN0ipLseJ83iHD8XG7L0hcBYqk7NkK3qmRNVVhqaO
/jy5r1jLLUkUOJKd3GKdBIyPA5r7Xgx40PniCRqDggJZx9wDyfIztyp1Kt17oCfJ
mb5ia3fXIg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 21:19:16 2025 by rpki-client