Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3137372e31322e3131322e302f32302d3234203d3e203533313138.roa
File:                     3137372e31322e3131322e302f32302d3234203d3e203533313138.roa (raw, json)
Hash identifier:          V+sHb/70BnlYO+tHn2LPf6u1XHLARNcW5bnvr7GX6SQ=
Subject key identifier:   D7:34:8B:58:A2:68:B5:02:DA:C6:B1:77:C0:F0:83:D9:64:70:76:B3
Certificate issuer:       /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
Certificate serial:       19119CA8BF84CBCB9493CADDD299AC6C54440D97
Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3137372e31322e3131322e302f32302d3234203d3e203533313138.roa
Signing time:             Tue 19 Aug 2025 14:39:04 +0000
ROA not before:           Tue 19 Aug 2025 14:34:04 +0000
ROA not after:            Tue 18 Aug 2026 14:39:04 +0000
asID:                     53118
IP address blocks:        177.12.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl
                          rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 02:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:11:9c:a8:bf:84:cb:cb:94:93:ca:dd:d2:99:ac:6c:54:44:0d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
        Validity
            Not Before: Aug 19 14:34:04 2025 GMT
            Not After : Aug 18 14:39:04 2026 GMT
        Subject: CN=D7348B58A268B502DAC6B177C0F083D9647076B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f6:6b:7f:87:60:fd:83:ab:75:4a:4c:4c:69:
                    37:06:34:8b:2d:fe:fd:e0:ff:f3:24:8f:26:f0:e9:
                    6d:cc:75:06:4f:88:5f:4d:0a:84:8a:e8:d2:3d:23:
                    06:36:cd:25:7d:1f:2c:85:9e:27:db:2a:ec:60:d1:
                    f0:5c:9e:16:31:bf:47:f7:37:d1:35:82:c0:a0:3c:
                    8d:48:10:c8:11:75:32:f0:66:bd:b6:bb:ce:c0:1b:
                    bc:e0:b6:54:ce:c1:72:49:7a:61:35:89:f3:1a:b0:
                    d8:5d:41:3a:8c:26:82:dc:b2:8d:28:53:3f:97:0f:
                    09:f5:ab:0a:17:34:4a:b1:86:e7:11:9e:f0:90:65:
                    f0:ae:3b:e6:fe:fb:a7:ee:04:da:70:2d:9b:76:d7:
                    7c:80:29:78:cd:6b:0c:3a:da:77:14:5f:27:b1:f1:
                    29:c6:ae:f1:a1:88:b2:af:97:f3:44:03:64:d2:73:
                    20:0d:86:9d:e2:f5:2b:0b:74:37:af:6d:bf:5d:f9:
                    16:6d:0b:78:0f:be:f2:6c:54:98:c7:c1:ab:85:fc:
                    e2:72:6f:2f:50:e0:d8:76:fb:8f:b4:48:19:4d:00:
                    04:25:b8:0c:eb:94:b8:79:fa:35:70:c4:6e:35:b2:
                    95:dc:81:2b:ab:77:5c:52:db:8e:2f:c2:9a:93:44:
                    17:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:34:8B:58:A2:68:B5:02:DA:C6:B1:77:C0:F0:83:D9:64:70:76:B3
            X509v3 Authority Key Identifier:
                keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3137372e31322e3131322e302f32302d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:35:94:77:55:3d:a1:33:fa:04:d7:d4:19:91:d1:21:89:40:
         1f:a7:bf:98:a8:0b:2c:38:e7:25:24:bb:40:ee:cf:ef:a2:74:
         bf:8e:0a:77:ae:79:8c:ce:e8:a4:06:f0:fc:5b:55:53:ce:b9:
         52:2c:06:fd:9e:3f:d4:84:c2:5e:ca:95:a6:43:01:aa:a7:be:
         32:91:e3:ab:28:b8:3c:9a:c2:03:bc:c0:3a:d6:f4:fe:21:66:
         47:21:f0:20:a1:b6:26:0e:37:ba:fc:2b:4e:82:b7:fd:d9:4b:
         8b:51:ee:82:7e:42:48:db:18:f2:46:0e:14:09:a8:d1:ff:94:
         04:be:38:d0:a4:50:d8:b6:0b:8c:2f:51:5b:d5:08:4d:1f:bb:
         7d:cb:a6:31:d0:71:4d:e0:9f:b0:9d:2b:9d:4f:ca:5d:4a:39:
         68:c9:d0:77:f3:8d:09:3b:e1:ba:03:d1:ba:11:14:87:b4:49:
         f9:7a:e4:f1:f5:40:9a:93:c3:4a:cd:95:a7:5a:88:44:f5:90:
         3c:0a:cd:2a:af:df:ee:8f:56:2e:aa:fc:55:9a:8a:14:cc:6b:
         c9:b1:d6:a6:60:f4:6b:dc:46:27:bc:69:6d:c8:40:48:54:ef:
         0d:8b:cc:8c:fd:48:b6:17:0d:b4:3b:9e:dc:71:e1:e9:d2:ef:
         a5:d9:0d:5b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGRGcqL+Ey8uUk8rd0pmsbFREDZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZGNjAwRUEwODhDMEMwQzMxNjBENzVBOTUyNTA2QTk0
OTEzQzhBODAeFw0yNTA4MTkxNDM0MDRaFw0yNjA4MTgxNDM5MDRaMDMxMTAvBgNV
BAMTKEQ3MzQ4QjU4QTI2OEI1MDJEQUM2QjE3N0MwRjA4M0Q5NjQ3MDc2QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn9mt/h2D9g6t1SkxMaTcGNIst
/v3g//Mkjybw6W3MdQZPiF9NCoSK6NI9IwY2zSV9HyyFnifbKuxg0fBcnhYxv0f3
N9E1gsCgPI1IEMgRdTLwZr22u87AG7zgtlTOwXJJemE1ifMasNhdQTqMJoLcso0o
Uz+XDwn1qwoXNEqxhucRnvCQZfCuO+b++6fuBNpwLZt213yAKXjNaww62ncUXyex
8SnGrvGhiLKvl/NEA2TScyANhp3i9SsLdDevbb9d+RZtC3gPvvJsVJjHwauF/OJy
by9Q4Nh2+4+0SBlNAAQluAzrlLh5+jVwxG41spXcgSurd1xS244vwpqTRBc5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1zSLWKJotQLaxrF3wPCD2WRwdrMwHwYDVR0j
BBgwFoAUr/YA6giMDAwxYNdalSUGqUkTyKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ
Y2ovMS9BRkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjYwMEVBMDg4QzBDMEMz
MTYwRDc1QTk1MjUwNkE5NDkxM0M4QTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FURzFzTDlyRFg2aGpYUjM3YXhzWG5TaHJFUWh1alpnVndCU0phaWFKUGNqLzEv
MzEzNzM3MmUzMTMyMmUzMTMxMzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMz
MzEzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsQxwMA0GCSqGSIb3DQEBCwUAA4IBAQAlNZR3VT2h
M/oE19QZkdEhiUAfp7+YqAssOOclJLtA7s/vonS/jgp3rnmMzuikBvD8W1VTzrlS
LAb9nj/UhMJeypWmQwGqp74ykeOrKLg8msIDvMA61vT+IWZHIfAgobYmDje6/CtO
grf92UuLUe6CfkJI2xjyRg4UCajR/5QEvjjQpFDYtguML1Fb1QhNH7t9y6Yx0HFN
4J+wnSudT8pdSjloydB3840JO+G6A9G6ERSHtEn5euTx9UCak8NKzZWnWohE9ZA8
Cs0qr9/uj1YuqvxVmooUzGvJsdamYPRr3EYnvGltyEBIVO8Ni8yM/Ui2Fw20O57c
ceHp0u+l2Q1b
-----END CERTIFICATE-----
Generated at Thu Sep 18 16:57:09 2025 by rpki-client