Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa
File:                     3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa (raw, json)
Hash identifier:          XhQtGkmxlIoTQ7XqEuCKGZLcMg+a7EX+70TZqKNxv0w=
Subject key identifier:   C3:A5:28:5E:B3:AD:D4:D3:72:BB:2D:B4:3F:58:81:89:9C:8D:EC:13
Certificate issuer:       /CN=DAC0A6260B90EE6F2F66BFB998F6D6370B219C76
Certificate serial:       4C835CB25831E0C2D934999AEF7138315040AFE7
Authority key identifier: DA:C0:A6:26:0B:90:EE:6F:2F:66:BF:B9:98:F6:D6:37:0B:21:9C:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa
Signing time:             Tue 16 Sep 2025 15:52:48 +0000
ROA not before:           Tue 16 Sep 2025 15:47:48 +0000
ROA not after:            Tue 15 Sep 2026 15:52:48 +0000
asID:                     264878
IP address blocks:        168.227.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.crl
                          rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:83:5c:b2:58:31:e0:c2:d9:34:99:9a:ef:71:38:31:50:40:af:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAC0A6260B90EE6F2F66BFB998F6D6370B219C76
        Validity
            Not Before: Sep 16 15:47:48 2025 GMT
            Not After : Sep 15 15:52:48 2026 GMT
        Subject: CN=C3A5285EB3ADD4D372BB2DB43F5881899C8DEC13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:47:a4:36:b3:ab:ee:3a:6d:55:23:74:c6:65:
                    d3:0e:db:12:d5:57:a9:56:d2:d4:b0:ba:00:0f:0f:
                    f2:6c:c0:74:ba:a8:9b:9d:e1:34:2e:f4:52:b2:24:
                    8a:c8:16:89:3a:4e:f0:b5:f9:ec:44:4d:f2:21:4f:
                    e2:92:e9:fd:d5:c7:12:f7:1a:d6:b0:57:0f:64:ca:
                    61:8e:3a:0d:49:f8:90:52:64:1a:43:8e:48:40:d1:
                    46:1b:6b:10:2c:cc:d4:48:24:32:10:8f:f7:8c:6d:
                    80:9b:f5:d6:f5:07:92:ab:33:3f:ab:05:e2:0f:c3:
                    76:b6:7d:0e:85:f1:29:65:90:f1:9c:07:64:16:74:
                    e5:0c:30:da:e8:47:35:7a:f3:1a:0f:a2:69:58:d7:
                    1f:83:46:0d:09:ad:5d:a0:87:9e:59:01:bc:4a:fe:
                    71:2c:ba:80:ba:4a:fa:6b:0b:ee:5a:e8:87:bc:a4:
                    3f:d7:09:41:49:db:24:7a:b5:30:b3:96:76:27:7f:
                    b8:8c:85:91:f8:02:fb:1f:3a:ec:d3:fb:de:d5:a1:
                    f4:0b:d3:c3:35:43:99:fa:14:27:af:00:13:95:2f:
                    65:8e:75:ed:4c:e0:68:11:ea:f4:e4:e2:80:b7:0c:
                    9f:87:d7:4a:c1:c4:aa:ea:cf:16:92:98:07:d9:b8:
                    7c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A5:28:5E:B3:AD:D4:D3:72:BB:2D:B4:3F:58:81:89:9C:8D:EC:13
            X509v3 Authority Key Identifier:
                keyid:DA:C0:A6:26:0B:90:EE:6F:2F:66:BF:B9:98:F6:D6:37:0B:21:9C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:1b:b7:d0:1f:30:c4:9c:53:04:a1:df:db:64:09:64:25:af:
         92:05:4f:b0:65:12:5a:0d:9c:de:df:bc:bd:3a:d4:c8:70:ed:
         0f:a0:65:ef:0e:74:b2:ea:05:36:3a:07:da:8c:0b:e7:0d:87:
         61:26:36:24:1d:67:56:11:b7:ff:79:2a:83:c0:04:9d:d6:ea:
         08:a2:ac:ed:4e:02:59:26:23:44:32:78:4c:a9:3e:6b:7a:7d:
         06:d6:5d:e1:de:df:63:e7:44:12:d2:c9:e9:f7:43:c9:f1:88:
         5a:25:49:25:d4:0e:fd:97:e0:4f:9e:f6:6b:75:d0:8f:2a:22:
         53:74:93:d1:b5:15:dc:33:e6:89:08:1f:6f:a7:e8:13:8a:76:
         97:66:66:c4:84:81:a8:7d:e7:11:6f:68:53:be:6e:a4:30:17:
         aa:d3:4c:23:8b:59:b6:88:65:c4:8f:6c:cd:df:37:57:9f:a7:
         b9:46:ff:d5:99:fe:f9:fc:50:d5:70:e8:65:8f:0f:11:62:90:
         d9:b6:47:cd:7c:f9:0d:36:56:8a:b3:cb:11:26:fc:1f:81:7e:
         5e:a9:cd:f1:c5:ff:b9:e6:77:a6:1d:e3:ea:2c:ae:ab:fd:e8:
         07:c8:48:c7:ae:3b:05:d2:b8:ac:0b:7c:50:2b:cd:b1:87:34:
         23:5f:b0:f6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTINcslgx4MLZNJma73E4MVBAr+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREFDMEE2MjYwQjkwRUU2RjJGNjZCRkI5OThGNkQ2Mzcw
QjIxOUM3NjAeFw0yNTA5MTYxNTQ3NDhaFw0yNjA5MTUxNTUyNDhaMDMxMTAvBgNV
BAMTKEMzQTUyODVFQjNBREQ0RDM3MkJCMkRCNDNGNTg4MTg5OUM4REVDMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeR6Q2s6vuOm1VI3TGZdMO2xLV
V6lW0tSwugAPD/JswHS6qJud4TQu9FKyJIrIFok6TvC1+exETfIhT+KS6f3VxxL3
GtawVw9kymGOOg1J+JBSZBpDjkhA0UYbaxAszNRIJDIQj/eMbYCb9db1B5KrMz+r
BeIPw3a2fQ6F8SllkPGcB2QWdOUMMNroRzV68xoPomlY1x+DRg0JrV2gh55ZAbxK
/nEsuoC6SvprC+5a6Ie8pD/XCUFJ2yR6tTCzlnYnf7iMhZH4AvsfOuzT+97VofQL
08M1Q5n6FCevABOVL2WOde1M4GgR6vTk4oC3DJ+H10rBxKrqzxaSmAfZuHz7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUw6UoXrOt1NNyuy20P1iBiZyN7BMwHwYDVR0j
BBgwFoAU2sCmJguQ7m8vZr+5mPbWNwshnHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWU0TlRtTHJBamd4QlpLY3RZVXpBbVFCVEUyanpqVkVqb0dtOHg1cnhX
akQvMC9EQUMwQTYyNjBCOTBFRTZGMkY2NkJGQjk5OEY2RDYzNzBCMjE5Qzc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBQzBBNjI2MEI5MEVFNkYy
RjY2QkZCOTk4RjZENjM3MEIyMTlDNzYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FlNE5UbUxyQWpneEJaS2N0WVV6QW1RQlRFMmp6alZFam9HbTh4NXJ4V2pELzAv
MzEzNjM4MmUzMjMyMzcyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDM4MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjjeDANBgkqhkiG9w0BAQsFAAOCAQEAiBu3
0B8wxJxTBKHf22QJZCWvkgVPsGUSWg2c3t+8vTrUyHDtD6Bl7w50suoFNjoH2owL
5w2HYSY2JB1nVhG3/3kqg8AEndbqCKKs7U4CWSYjRDJ4TKk+a3p9BtZd4d7fY+dE
EtLJ6fdDyfGIWiVJJdQO/ZfgT572a3XQjyoiU3ST0bUV3DPmiQgfb6foE4p2l2Zm
xISBqH3nEW9oU75upDAXqtNMI4tZtohlxI9szd83V5+nuUb/1Zn++fxQ1XDoZY8P
EWKQ2bZHzXz5DTZWirPLESb8H4F+XqnN8cX/ueZ3ph3j6iyuq/3oB8hIx647BdK4
rAt8UCvNsYc0I1+w9g==
-----END CERTIFICATE-----
Generated at Fri Sep 19 04:46:11 2025 by rpki-client