Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/3133382e35392e3135322e302f32322d3332203d3e20323638313531.roa
File:                     3133382e35392e3135322e302f32322d3332203d3e20323638313531.roa (raw, json)
Hash identifier:          1ku5Ezmg0pBB1gC77C84OHbaV9H8uFjfjfR3cXbNcuY=
Subject key identifier:   82:91:71:4B:CD:47:FC:6A:52:4A:82:BD:24:B4:80:D5:1D:A0:8D:E4
Certificate issuer:       /CN=E11E6683597C8BDD4CA32F5407D91168F5C3A87C
Certificate serial:       06DF9AC9A671B7A4723B77173A3AF9FAF70F7FC2
Authority key identifier: E1:1E:66:83:59:7C:8B:DD:4C:A3:2F:54:07:D9:11:68:F5:C3:A8:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/3133382e35392e3135322e302f32322d3332203d3e20323638313531.roa
Signing time:             Fri 05 Sep 2025 03:03:11 +0000
ROA not before:           Fri 05 Sep 2025 02:58:11 +0000
ROA not after:            Fri 04 Sep 2026 03:03:11 +0000
asID:                     268151
IP address blocks:        138.59.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.crl
                          rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Oct 2025 05:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:df:9a:c9:a6:71:b7:a4:72:3b:77:17:3a:3a:f9:fa:f7:0f:7f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E11E6683597C8BDD4CA32F5407D91168F5C3A87C
        Validity
            Not Before: Sep  5 02:58:11 2025 GMT
            Not After : Sep  4 03:03:11 2026 GMT
        Subject: CN=8291714BCD47FC6A524A82BD24B480D51DA08DE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0d:4f:8f:dc:b8:00:7a:1a:95:88:bb:2a:7a:
                    dc:a4:7f:bf:3a:ae:09:6a:f1:55:fc:67:5f:d6:8d:
                    1b:83:51:9a:bc:b2:fe:d1:8d:44:af:ed:53:c8:11:
                    fc:6f:7e:31:7d:ee:62:d1:56:c1:d4:8f:87:ad:bd:
                    42:51:1e:a5:65:71:ff:f5:a1:5c:61:e5:29:30:7f:
                    ee:65:63:27:b5:cb:0f:a6:82:2b:9d:22:aa:02:84:
                    38:8d:12:9f:f0:1a:bd:1b:b1:ec:a8:f2:9e:4c:b4:
                    84:ae:20:d8:41:72:a5:5f:52:98:c8:5b:64:ee:40:
                    7c:2e:76:ca:e0:18:c9:3f:2b:c9:2f:07:3e:37:bb:
                    c0:45:89:38:9b:de:ff:b8:5c:5a:58:65:c6:ea:5d:
                    2d:68:6a:5e:b9:2c:b0:dd:8d:5a:64:06:80:33:8d:
                    2d:55:0c:d2:60:77:cd:f1:09:18:4c:d0:d7:7e:72:
                    1e:9a:ca:aa:bb:fe:46:e5:38:41:82:0c:44:d2:84:
                    38:ae:cd:ab:0c:bb:f2:9b:ed:35:e5:73:b4:4f:a6:
                    fd:83:8a:5a:05:fa:39:24:37:85:3c:75:e2:17:d6:
                    48:ef:83:27:52:42:fb:b0:06:f5:08:2d:16:8f:92:
                    02:3e:0c:e6:46:99:0f:00:f0:98:88:aa:4c:a8:51:
                    f0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:91:71:4B:CD:47:FC:6A:52:4A:82:BD:24:B4:80:D5:1D:A0:8D:E4
            X509v3 Authority Key Identifier:
                keyid:E1:1E:66:83:59:7C:8B:DD:4C:A3:2F:54:07:D9:11:68:F5:C3:A8:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/3133382e35392e3135322e302f32322d3332203d3e20323638313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:95:17:ac:0a:62:b5:7d:d1:f3:33:59:ba:d4:be:65:13:f4:
         9b:c9:8b:e5:66:4a:2b:4a:a8:18:8f:a2:f3:97:0d:ca:08:c5:
         a4:05:6c:7d:29:cb:eb:e6:60:59:2d:85:57:4e:cb:db:40:7b:
         1b:93:33:db:da:45:c1:bb:f7:e1:5b:50:a2:77:75:ed:c2:ec:
         13:1e:13:7b:5d:39:01:f8:74:f4:c9:44:a2:2b:1a:b9:30:cf:
         88:63:fd:10:e3:01:78:f8:d8:4e:23:19:78:d9:1e:f8:e7:7c:
         03:33:79:01:4c:7f:6e:79:0f:47:1f:b1:cb:7c:7e:a8:cf:0f:
         f9:8e:af:6d:05:cd:e5:85:df:b4:9d:16:c9:ef:26:eb:db:19:
         78:0d:df:46:0e:2e:79:45:45:bd:b7:0f:a1:22:f0:da:7d:bf:
         91:1b:8a:75:c1:c2:a9:ba:6c:46:1a:91:9f:bc:bd:bc:79:c0:
         b5:a0:f9:46:87:d4:91:db:a7:a1:ad:c5:e9:b2:18:bd:c8:01:
         6f:c1:3a:4e:47:73:e7:60:ba:8f:23:d5:45:32:99:20:51:e3:
         cd:e4:a8:90:0c:c1:30:a5:48:01:3b:24:37:3f:3c:7d:a6:dd:
         0a:69:c9:4d:bb:76:61:40:7a:d4:db:18:ff:dd:ce:06:5a:49:
         9b:4e:be:41
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBt+ayaZxt6RyO3cXOjr5+vcPf8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTExRTY2ODM1OTdDOEJERDRDQTMyRjU0MDdEOTExNjhG
NUMzQTg3QzAeFw0yNTA5MDUwMjU4MTFaFw0yNjA5MDQwMzAzMTFaMDMxMTAvBgNV
BAMTKDgyOTE3MTRCQ0Q0N0ZDNkE1MjRBODJCRDI0QjQ4MEQ1MURBMDhERTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeDU+P3LgAehqViLsqetykf786
rglq8VX8Z1/WjRuDUZq8sv7RjUSv7VPIEfxvfjF97mLRVsHUj4etvUJRHqVlcf/1
oVxh5Skwf+5lYye1yw+mgiudIqoChDiNEp/wGr0bseyo8p5MtISuINhBcqVfUpjI
W2TuQHwudsrgGMk/K8kvBz43u8BFiTib3v+4XFpYZcbqXS1oal65LLDdjVpkBoAz
jS1VDNJgd83xCRhM0Nd+ch6ayqq7/kblOEGCDETShDiuzasMu/Kb7TXlc7RPpv2D
iloF+jkkN4U8deIX1kjvgydSQvuwBvUILRaPkgI+DOZGmQ8A8JiIqkyoUfBTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgpFxS81H/GpSSoK9JLSA1R2gjeQwHwYDVR0j
BBgwFoAU4R5mg1l8i91Moy9UB9kRaPXDqHwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGFGSDhISHJvaWZDQjVlTGZmSmpTSHM4TDREa3pvVG1DS3dtRG9YYWZx
WW0vMC9FMTFFNjY4MzU5N0M4QkRENENBMzJGNTQwN0Q5MTE2OEY1QzNBODdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxMUU2NjgzNTk3QzhCREQ0
Q0EzMkY1NDA3RDkxMTY4RjVDM0E4N0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhhRkg4SEhyb2lmQ0I1ZUxmZkpqU0hzOEw0RGt6b1RtQ0t3bURvWGFmcVltLzAv
MzEzMzM4MmUzNTM5MmUzMTM1MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzMTM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKO5gwDQYJKoZIhvcNAQELBQADggEBAESVF6wK
YrV90fMzWbrUvmUT9JvJi+VmSitKqBiPovOXDcoIxaQFbH0py+vmYFkthVdOy9tA
exuTM9vaRcG79+FbUKJ3de3C7BMeE3tdOQH4dPTJRKIrGrkwz4hj/RDjAXj42E4j
GXjZHvjnfAMzeQFMf255D0cfsct8fqjPD/mOr20FzeWF37SdFsnvJuvbGXgN30YO
LnlFRb23D6Ei8Np9v5EbinXBwqm6bEYakZ+8vbx5wLWg+UaH1JHbp6GtxemyGL3I
AW/BOk5Hc+dguo8j1UUymSBR483kqJAMwTClSAE7JDc/PH2m3QppyU27dmFAetTb
GP/dzgZaSZtOvkE=
-----END CERTIFICATE-----
Generated at Sat Oct 18 05:52:28 2025 by rpki-client