Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3133382e3231392e3134382e302f32332d3233203d3e20323632383137.roa
File:                     3133382e3231392e3134382e302f32332d3233203d3e20323632383137.roa (raw, json)
Hash identifier:          xpN+k+M2akVM40/LORTBoEGNBCFbHHlYibKgjbxJGfc=
Subject key identifier:   C2:48:30:A9:AB:C6:BD:D6:3C:F4:8A:5C:F5:2B:9D:AA:8F:71:BE:53
Certificate issuer:       /CN=D65657C29D82DD94BF5CCD512A0A176A5F35259F
Certificate serial:       56E85E890479F22D6D015E0B1D45E9F5F2EABC63
Authority key identifier: D6:56:57:C2:9D:82:DD:94:BF:5C:CD:51:2A:0A:17:6A:5F:35:25:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D65657C29D82DD94BF5CCD512A0A176A5F35259F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3133382e3231392e3134382e302f32332d3233203d3e20323632383137.roa
Signing time:             Fri 03 Oct 2025 13:25:48 +0000
ROA not before:           Fri 03 Oct 2025 13:20:48 +0000
ROA not after:            Fri 02 Oct 2026 13:25:48 +0000
asID:                     262817
IP address blocks:        138.219.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/D65657C29D82DD94BF5CCD512A0A176A5F35259F.crl
                          rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/D65657C29D82DD94BF5CCD512A0A176A5F35259F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D65657C29D82DD94BF5CCD512A0A176A5F35259F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e8:5e:89:04:79:f2:2d:6d:01:5e:0b:1d:45:e9:f5:f2:ea:bc:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D65657C29D82DD94BF5CCD512A0A176A5F35259F
        Validity
            Not Before: Oct  3 13:20:48 2025 GMT
            Not After : Oct  2 13:25:48 2026 GMT
        Subject: CN=C24830A9ABC6BDD63CF48A5CF52B9DAA8F71BE53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:55:95:55:4a:96:52:a8:56:59:63:ba:96:2c:
                    9e:7c:c0:70:a8:a9:8d:19:7f:44:1a:e8:e8:f3:ec:
                    3c:d1:fd:17:56:3c:fd:92:e2:97:4d:22:61:0f:25:
                    2c:a7:fc:63:08:c4:cc:db:7f:df:47:31:21:2b:2c:
                    ce:d5:95:95:3e:51:0f:38:c3:ff:30:ce:5a:99:6b:
                    46:8b:55:09:85:54:7c:0d:91:c3:d8:6f:66:f5:de:
                    92:e0:00:29:51:71:4b:f1:00:a8:20:21:db:81:1f:
                    1f:66:06:31:50:c4:12:cd:f6:e7:6c:b1:68:12:9f:
                    3a:f6:95:2b:db:40:d5:b8:d7:11:1d:cc:95:eb:fd:
                    3c:71:6d:f5:06:30:98:7a:28:1f:56:db:17:96:a1:
                    4c:f8:47:f9:44:15:b3:ba:49:58:0a:1b:d3:c8:ae:
                    5d:99:db:81:52:bc:27:3d:0b:47:36:3e:3e:54:9e:
                    d3:9f:49:b8:da:fc:cd:a3:9c:be:6c:10:a7:04:18:
                    68:df:aa:6c:72:1a:6c:4f:76:41:9e:db:45:76:58:
                    51:03:ae:1c:f8:5a:31:80:b8:24:b1:8b:69:0a:74:
                    48:09:7c:d4:7a:e5:bb:bf:f0:96:5f:fe:a1:18:70:
                    93:46:c1:f9:c1:71:fb:30:9d:07:2f:9d:7a:9f:b8:
                    0b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:48:30:A9:AB:C6:BD:D6:3C:F4:8A:5C:F5:2B:9D:AA:8F:71:BE:53
            X509v3 Authority Key Identifier:
                keyid:D6:56:57:C2:9D:82:DD:94:BF:5C:CD:51:2A:0A:17:6A:5F:35:25:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/D65657C29D82DD94BF5CCD512A0A176A5F35259F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D65657C29D82DD94BF5CCD512A0A176A5F35259F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3133382e3231392e3134382e302f32332d3233203d3e20323632383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:dd:6e:61:7a:68:34:69:7d:62:ff:72:d8:30:8e:35:ee:ab:
         9e:4f:72:e4:88:f6:a9:a8:1e:92:d7:94:b3:68:78:ce:95:1c:
         6f:f7:74:f5:9b:29:8e:55:cc:ad:73:59:f8:97:7f:54:ff:b7:
         06:b2:b7:bb:ac:74:cf:b5:6d:bc:b4:a1:ea:55:d0:59:95:7a:
         ae:51:de:c3:bf:54:3f:1b:de:4d:76:f2:ed:68:44:31:8f:a9:
         9b:fb:b3:37:c6:53:93:70:1c:db:d0:ec:0e:c7:5d:48:e0:57:
         d6:50:fd:f0:0c:63:6d:17:25:84:bb:da:71:16:f7:5b:a4:e0:
         3e:84:f5:42:c0:49:74:85:68:3b:7a:6a:11:f7:da:b3:12:85:
         36:92:28:35:96:ac:ec:32:55:a7:a9:9d:e4:57:db:64:3b:07:
         30:52:64:13:c9:49:3b:5c:4f:2b:a9:01:d6:1c:43:3a:83:95:
         eb:2e:af:8e:6b:82:74:75:5f:04:5f:d5:f9:66:bf:39:f3:8b:
         8d:90:d7:46:3f:6d:0c:02:1a:5c:0d:8e:e9:f7:99:ba:6d:60:
         4e:5b:fa:b4:9d:58:c7:d0:be:b0:66:18:33:f9:84:80:94:cd:
         bb:19:e3:16:ca:1f:e9:44:13:57:44:42:bb:fe:0f:8c:4c:07:
         41:47:9e:59
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVuheiQR58i1tAV4LHUXp9fLqvGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY1NjU3QzI5RDgyREQ5NEJGNUNDRDUxMkEwQTE3NkE1
RjM1MjU5RjAeFw0yNTEwMDMxMzIwNDhaFw0yNjEwMDIxMzI1NDhaMDMxMTAvBgNV
BAMTKEMyNDgzMEE5QUJDNkJERDYzQ0Y0OEE1Q0Y1MkI5REFBOEY3MUJFNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaVZVVSpZSqFZZY7qWLJ58wHCo
qY0Zf0Qa6Ojz7DzR/RdWPP2S4pdNImEPJSyn/GMIxMzbf99HMSErLM7VlZU+UQ84
w/8wzlqZa0aLVQmFVHwNkcPYb2b13pLgAClRcUvxAKggIduBHx9mBjFQxBLN9uds
sWgSnzr2lSvbQNW41xEdzJXr/TxxbfUGMJh6KB9W2xeWoUz4R/lEFbO6SVgKG9PI
rl2Z24FSvCc9C0c2Pj5UntOfSbja/M2jnL5sEKcEGGjfqmxyGmxPdkGe20V2WFED
rhz4WjGAuCSxi2kKdEgJfNR65bu/8JZf/qEYcJNGwfnBcfswnQcvnXqfuAvZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUwkgwqavGvdY89Ipc9Sudqo9xvlMwHwYDVR0j
BBgwFoAU1lZXwp2C3ZS/XM1RKgoXal81JZ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUxqdWlSbmtoTTVCMXRCU3JZY0Z5aG1XMkY5c1RNV29WdGRwQldZWVlz
NHkvMC9ENjU2NTdDMjlEODJERDk0QkY1Q0NENTEyQTBBMTc2QTVGMzUyNTlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2NTY1N0MyOUQ4MkREOTRC
RjVDQ0Q1MTJBMEExNzZBNUYzNTI1OUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlManVpUm5raE01QjF0QlNyWWNGeWhtVzJGOXNUTVdvVnRkcEJXWVlZczR5LzAv
MzEzMzM4MmUzMjMxMzkyZTMxMzQzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM4MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYrblDANBgkqhkiG9w0BAQsFAAOCAQEAv91u
YXpoNGl9Yv9y2DCONe6rnk9y5Ij2qagekteUs2h4zpUcb/d09ZspjlXMrXNZ+Jd/
VP+3BrK3u6x0z7VtvLSh6lXQWZV6rlHew79UPxveTXby7WhEMY+pm/uzN8ZTk3Ac
29DsDsddSOBX1lD98AxjbRclhLvacRb3W6TgPoT1QsBJdIVoO3pqEffasxKFNpIo
NZas7DJVp6md5FfbZDsHMFJkE8lJO1xPK6kB1hxDOoOV6y6vjmuCdHVfBF/V+Wa/
OfOLjZDXRj9tDAIaXA2O6feZum1gTlv6tJ1Yx9C+sGYYM/mEgJTNuxnjFsof6UQT
V0RCu/4PjEwHQUeeWQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 06:36:11 2025 by rpki-client