Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33342e302f32332d3233203d3e203533303532.roa
File:                     3138372e38342e33342e302f32332d3233203d3e203533303532.roa (raw, json)
Hash identifier:          u32/uZ4yBcFZXvw1hLPy5wYAoSgbMpUkCDwo8kvjvVg=
Subject key identifier:   83:7C:F4:6B:C4:4A:AF:75:F7:36:E6:FF:16:A5:07:9A:95:F9:3B:3F
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       2024831F02D1FE252CD7DFE7B5BC0E1257F2406D
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33342e302f32332d3233203d3e203533303532.roa
Signing time:             Mon 01 Sep 2025 18:45:30 +0000
ROA not before:           Mon 01 Sep 2025 18:40:30 +0000
ROA not after:            Mon 31 Aug 2026 18:45:30 +0000
asID:                     53052
IP address blocks:        187.84.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 13:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:24:83:1f:02:d1:fe:25:2c:d7:df:e7:b5:bc:0e:12:57:f2:40:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Sep  1 18:40:30 2025 GMT
            Not After : Aug 31 18:45:30 2026 GMT
        Subject: CN=837CF46BC44AAF75F736E6FF16A5079A95F93B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:0c:fb:db:48:32:e9:d6:57:72:c6:9a:5d:
                    70:34:e1:b3:9b:ea:de:7d:4e:ef:08:c8:61:26:56:
                    44:8c:4f:4a:62:2c:69:60:d2:ea:96:04:76:61:1c:
                    91:48:9f:82:f7:c2:6f:cd:d2:30:f3:ed:a1:33:54:
                    13:54:75:d5:5b:cd:ed:da:b8:93:84:ca:64:6f:60:
                    d3:c2:3e:ac:e5:97:fc:cb:36:ed:55:e2:f8:af:43:
                    c2:6e:b8:40:cd:df:5f:b9:32:40:e4:63:e9:6a:ca:
                    c9:f4:c4:3f:ab:69:a8:bd:27:0a:f8:cc:e3:14:db:
                    42:a8:04:a7:6c:9a:cc:11:4a:c0:eb:4d:54:46:9d:
                    5f:15:9f:b5:41:1d:d6:ca:79:a2:2f:4a:b4:74:dc:
                    17:8d:20:74:2d:6b:4d:f4:27:5a:f9:0e:8f:5b:7c:
                    60:88:d0:91:c3:73:92:5a:84:7c:61:94:b6:74:9d:
                    e5:dd:54:e9:df:51:3e:5f:bb:cc:8e:56:33:17:07:
                    ee:5a:50:1b:19:a3:60:00:94:39:ea:ed:79:f9:c6:
                    27:ae:6c:8d:c0:24:38:64:57:c4:a0:94:5d:f7:4f:
                    48:96:b9:27:37:cd:e8:e1:0b:4d:3b:f5:2a:ab:a0:
                    b9:16:fe:f4:49:ab:42:01:63:b9:46:fa:e9:cb:87:
                    6e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7C:F4:6B:C4:4A:AF:75:F7:36:E6:FF:16:A5:07:9A:95:F9:3B:3F
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33342e302f32332d3233203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:94:26:9f:49:21:f7:f2:2e:8c:ad:93:73:d6:89:81:f9:9b:
         07:69:4e:f7:7d:c0:4c:02:50:08:26:59:b6:26:89:6e:22:04:
         09:08:67:a0:96:cc:d1:4f:ef:f5:ba:b7:19:38:f5:d3:43:6e:
         47:2a:5c:94:47:38:fb:b7:a6:fa:1c:f4:69:e7:ca:9a:31:77:
         c9:fd:79:e8:db:f5:26:f7:d8:83:aa:7e:0f:01:45:b0:f3:a9:
         ea:a0:9a:d0:de:f2:8a:10:27:9e:83:65:44:7f:51:ef:4d:cf:
         d1:98:db:ea:aa:f3:b5:ec:30:65:ac:11:26:48:4e:6f:c8:07:
         ec:8f:65:41:3c:16:57:63:2f:d8:58:0a:dc:f7:c2:d0:7b:70:
         7a:12:1c:13:93:24:37:25:2e:54:12:1c:08:c1:8e:1b:8a:41:
         63:45:d8:db:58:d6:db:ce:b7:57:6f:f6:e6:19:9e:6e:76:60:
         fe:6c:11:57:34:9e:e3:46:75:a3:cc:1a:ea:62:67:78:ab:03:
         1c:06:75:8e:04:1e:d0:d1:f0:a4:87:ca:77:ad:d7:94:0e:af:
         4c:79:46:a0:ea:c6:87:56:14:29:50:84:19:f0:ab:63:93:2d:
         8c:d0:75:b3:86:c2:ac:57:45:70:56:df:af:ab:13:f6:23:b5:
         ca:cf:10:ea
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUICSDHwLR/iUs19/ntbwOElfyQG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FBNjUxNEQyREQxQUY0NkU3OTdEOTFDMzM0Qzc4QTQ0
OUI3NDAzRDAeFw0yNTA5MDExODQwMzBaFw0yNjA4MzExODQ1MzBaMDMxMTAvBgNV
BAMTKDgzN0NGNDZCQzQ0QUFGNzVGNzM2RTZGRjE2QTUwNzlBOTVGOTNCM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXwz720gy6dZXcsaaXXA04bOb
6t59Tu8IyGEmVkSMT0piLGlg0uqWBHZhHJFIn4L3wm/N0jDz7aEzVBNUddVbze3a
uJOEymRvYNPCPqzll/zLNu1V4vivQ8JuuEDN31+5MkDkY+lqysn0xD+raai9Jwr4
zOMU20KoBKdsmswRSsDrTVRGnV8Vn7VBHdbKeaIvSrR03BeNIHQta030J1r5Do9b
fGCI0JHDc5JahHxhlLZ0neXdVOnfUT5fu8yOVjMXB+5aUBsZo2AAlDnq7Xn5xieu
bI3AJDhkV8SglF33T0iWuSc3zejhC0079SqroLkW/vRJq0IBY7lG+unLh27HAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUg3z0a8RKr3X3Nub/FqUHmpX5Oz8wHwYDVR0j
BBgwFoAUyqZRTS3Rr0bnl9kcM0x4pEm3QD0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVlVM3VMUWdVWHU1RWJSazd1V01hWmRmTENLQmdqUW1YOUZnMnRDdzVM
RFUvMC9DQUE2NTE0RDJERDFBRjQ2RTc5N0Q5MUMzMzRDNzhBNDQ5Qjc0MDNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBQTY1MTREMkREMUFGNDZF
Nzk3RDkxQzMzNEM3OEE0NDlCNzQwM0QuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlZVTN1TFFnVVh1NUViUms3dVdNYVpkZkxDS0JnalFtWDlGZzJ0Q3c1TERVLzAv
MzEzODM3MmUzODM0MmUzMzM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMzMw
MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbtUIjANBgkqhkiG9w0BAQsFAAOCAQEAPJQmn0kh9/Iu
jK2Tc9aJgfmbB2lO933ATAJQCCZZtiaJbiIECQhnoJbM0U/v9bq3GTj100NuRypc
lEc4+7em+hz0aefKmjF3yf156Nv1JvfYg6p+DwFFsPOp6qCa0N7yihAnnoNlRH9R
703P0Zjb6qrztewwZawRJkhOb8gH7I9lQTwWV2Mv2FgK3PfC0HtwehIcE5MkNyUu
VBIcCMGOG4pBY0XY21jW2863V2/25hmebnZg/mwRVzSe40Z1o8wa6mJneKsDHAZ1
jgQe0NHwpIfKd63XlA6vTHlGoOrGh1YUKVCEGfCrY5MtjNB1s4bCrFdFcFbfr6sT
9iO1ys8Q6g==
-----END CERTIFICATE-----
Generated at Thu Sep 18 13:14:43 2025 by rpki-client