Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3133382e302e39322e302f32322d3234203d3e20323632343037.roa
File:                     3133382e302e39322e302f32322d3234203d3e20323632343037.roa (raw, json)
Hash identifier:          zppZLonR7kxWlEC5Toxk411zmoazzOI84wmtaA+WrHs=
Subject key identifier:   BC:1D:DE:CB:EB:6F:2B:0E:78:12:33:C3:8F:EA:CF:E2:21:25:31:DC
Certificate issuer:       /CN=6D31497D50F2E7BCADD55F9BBCC79046B5989FD9
Certificate serial:       0B208DBF8EA3E6AA33F0AC3CE0A63D0733F0F55E
Authority key identifier: 6D:31:49:7D:50:F2:E7:BC:AD:D5:5F:9B:BC:C7:90:46:B5:98:9F:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3133382e302e39322e302f32322d3234203d3e20323632343037.roa
Signing time:             Thu 11 Sep 2025 20:14:09 +0000
ROA not before:           Thu 11 Sep 2025 20:09:09 +0000
ROA not after:            Thu 10 Sep 2026 20:14:09 +0000
asID:                     262407
IP address blocks:        138.0.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.crl
                          rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 14:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:20:8d:bf:8e:a3:e6:aa:33:f0:ac:3c:e0:a6:3d:07:33:f0:f5:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D31497D50F2E7BCADD55F9BBCC79046B5989FD9
        Validity
            Not Before: Sep 11 20:09:09 2025 GMT
            Not After : Sep 10 20:14:09 2026 GMT
        Subject: CN=BC1DDECBEB6F2B0E781233C38FEACFE2212531DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e0:62:91:0d:e4:9b:7a:c6:a8:8f:79:e6:a1:
                    7f:69:5f:39:7b:03:2e:ca:d8:10:3a:3c:73:70:97:
                    0e:4b:3e:72:77:d8:fa:48:bf:3e:30:bd:35:d6:b6:
                    0d:3c:81:50:5d:c4:06:ed:3e:8a:40:1f:ab:9d:6b:
                    e0:91:92:29:ae:7d:67:58:aa:6f:8c:27:f9:82:68:
                    e1:34:19:39:86:59:db:8d:dc:b9:a7:21:c1:73:33:
                    3a:78:7a:ce:20:cd:98:36:2f:a8:69:0e:c6:36:6a:
                    9e:2d:a4:45:94:c0:b5:c9:e4:a1:9b:e0:16:1b:bf:
                    de:cf:46:e2:f6:ef:76:b5:8c:d6:98:cf:a8:20:67:
                    27:43:c6:89:02:a3:b5:23:dd:c7:2d:84:4f:cc:4d:
                    2a:d5:e3:5a:e7:dd:86:9d:66:92:dc:0e:c7:e1:98:
                    a1:76:63:f5:1f:7e:22:5e:55:0e:ff:0a:a6:97:0a:
                    78:0f:17:43:8c:60:86:f9:b8:49:ff:84:37:8b:08:
                    49:6f:ed:59:fb:62:10:f1:3c:03:33:49:73:1b:3d:
                    90:1f:0b:b4:4b:c3:e9:4f:18:09:22:41:c5:50:e2:
                    5e:8a:ef:85:4b:da:64:cb:82:bd:a3:ab:eb:90:ea:
                    b8:4c:36:2d:05:74:c0:0a:01:db:4d:d0:fc:b6:67:
                    c9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1D:DE:CB:EB:6F:2B:0E:78:12:33:C3:8F:EA:CF:E2:21:25:31:DC
            X509v3 Authority Key Identifier:
                keyid:6D:31:49:7D:50:F2:E7:BC:AD:D5:5F:9B:BC:C7:90:46:B5:98:9F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3133382e302e39322e302f32322d3234203d3e20323632343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:da:55:26:6d:49:ea:8c:74:7a:11:e6:d4:eb:b4:b2:e8:91:
         cb:7e:0d:7d:b9:fb:d3:29:7f:64:bc:08:3d:6d:79:bf:62:78:
         7a:ad:62:cc:90:82:1d:a3:93:30:1a:bb:2b:a0:fc:21:dc:f4:
         92:f6:45:76:fd:9f:6b:54:c9:1c:8c:5f:60:ce:11:6c:75:bf:
         17:f1:3b:6f:71:45:fd:b7:da:74:a9:9a:ca:f0:d9:ee:6c:33:
         ed:86:03:2f:68:6d:5b:6f:12:4f:08:83:0f:c8:9a:c9:2b:58:
         de:49:ad:30:44:91:1b:05:6b:91:a9:ef:f5:d5:53:c0:5e:c3:
         0f:01:f5:8c:23:ea:54:55:01:13:99:8e:f2:8d:ad:9e:18:96:
         49:72:c2:87:a9:16:50:c8:65:4b:b5:a8:a6:af:4e:c4:b4:01:
         e8:cb:b6:5f:bb:13:01:e9:15:1e:95:61:19:42:d2:62:4f:e5:
         a2:a4:b3:8a:98:06:56:7c:09:17:d0:53:dc:a8:46:52:63:4d:
         b5:23:26:f7:22:c3:08:91:31:50:4c:b7:1a:6d:ca:0f:87:ea:
         24:80:f8:32:02:8f:80:40:eb:6d:77:c4:f2:df:c4:5a:7f:96:
         60:42:a5:63:72:e7:7d:d8:1a:d9:ec:b2:0c:1e:6e:b5:70:a3:
         fa:0e:b8:23
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUCyCNv46j5qoz8Kw84KY9BzPw9V4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQzMTQ5N0Q1MEYyRTdCQ0FERDU1RjlCQkNDNzkwNDZC
NTk4OUZEOTAeFw0yNTA5MTEyMDA5MDlaFw0yNjA5MTAyMDE0MDlaMDMxMTAvBgNV
BAMTKEJDMURERUNCRUI2RjJCMEU3ODEyMzNDMzhGRUFDRkUyMjEyNTMxREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24GKRDeSbesaoj3nmoX9pXzl7
Ay7K2BA6PHNwlw5LPnJ32PpIvz4wvTXWtg08gVBdxAbtPopAH6uda+CRkimufWdY
qm+MJ/mCaOE0GTmGWduN3LmnIcFzMzp4es4gzZg2L6hpDsY2ap4tpEWUwLXJ5KGb
4BYbv97PRuL273a1jNaYz6ggZydDxokCo7Uj3ccthE/MTSrV41rn3YadZpLcDsfh
mKF2Y/UffiJeVQ7/CqaXCngPF0OMYIb5uEn/hDeLCElv7Vn7YhDxPAMzSXMbPZAf
C7RLw+lPGAkiQcVQ4l6K74VL2mTLgr2jq+uQ6rhMNi0FdMAKAdtN0Py2Z8mrAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUvB3ey+tvKw54EjPDj+rP4iElMdwwHwYDVR0j
BBgwFoAUbTFJfVDy57yt1V+bvMeQRrWYn9kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmF4dDlpZTZZRHA4MWlncmRjbzVYR2VkbXhzZ1l0dUhhMlAxV2RiVFpY
SEUvMC82RDMxNDk3RDUwRjJFN0JDQURENTVGOUJCQ0M3OTA0NkI1OTg5RkQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZEMzE0OTdENTBGMkU3QkNB
REQ1NUY5QkJDQzc5MDQ2QjU5ODlGRDkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JheHQ5aWU2WURwODFpZ3JkY281WEdlZG14c2dZdHVIYTJQMVdkYlRaWEhFLzAv
MzEzMzM4MmUzMDJlMzkzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMjM0
MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAooAXDANBgkqhkiG9w0BAQsFAAOCAQEATNpVJm1J6ox0
ehHm1Ou0suiRy34Nfbn70yl/ZLwIPW15v2J4eq1izJCCHaOTMBq7K6D8Idz0kvZF
dv2fa1TJHIxfYM4RbHW/F/E7b3FF/bfadKmayvDZ7mwz7YYDL2htW28STwiDD8ia
yStY3kmtMESRGwVrkanv9dVTwF7DDwH1jCPqVFUBE5mO8o2tnhiWSXLCh6kWUMhl
S7Wopq9OxLQB6Mu2X7sTAekVHpVhGULSYk/loqSzipgGVnwJF9BT3KhGUmNNtSMm
9yLDCJExUEy3Gm3KD4fqJID4MgKPgEDrbXfE8t/EWn+WYEKlY3Lnfdga2eyyDB5u
tXCj+g64Iw==
-----END CERTIFICATE-----
Generated at Thu Sep 18 16:01:00 2025 by rpki-client