Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3234302e302f32302d3234203d3e203238323630.roa
File:                     3138372e31362e3234302e302f32302d3234203d3e203238323630.roa (raw, json)
Hash identifier:          1SVXbFVjN8JtF2jCTVge2zltTBA7xJwnoGSDhWyCuto=
Subject key identifier:   46:FC:85:6E:DC:3E:D9:50:B2:A3:5A:91:84:2F:4C:AA:FA:B8:20:48
Certificate issuer:       /CN=2A63119ED3171CA655D3DBACD89FA128C88760E9
Certificate serial:       4DC7735148E679D896A0068FAF1F78BA7C7876EE
Authority key identifier: 2A:63:11:9E:D3:17:1C:A6:55:D3:DB:AC:D8:9F:A1:28:C8:87:60:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3234302e302f32302d3234203d3e203238323630.roa
Signing time:             Wed 10 Sep 2025 18:48:20 +0000
ROA not before:           Wed 10 Sep 2025 18:43:20 +0000
ROA not after:            Wed 09 Sep 2026 18:48:20 +0000
asID:                     28260
IP address blocks:        187.16.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.crl
                          rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 04:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c7:73:51:48:e6:79:d8:96:a0:06:8f:af:1f:78:ba:7c:78:76:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A63119ED3171CA655D3DBACD89FA128C88760E9
        Validity
            Not Before: Sep 10 18:43:20 2025 GMT
            Not After : Sep  9 18:48:20 2026 GMT
        Subject: CN=46FC856EDC3ED950B2A35A91842F4CAAFAB82048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:be:78:7f:03:de:4a:76:c0:00:9d:85:bf:
                    d3:3a:32:c5:e2:cb:a6:9e:5c:a7:38:fd:e4:0e:2d:
                    59:07:d1:27:f1:25:b5:9c:15:54:e0:f4:e0:cb:d1:
                    d0:19:52:fb:c7:d7:b8:fb:1d:6f:6e:0d:13:b7:13:
                    69:b3:24:fe:bf:1d:77:93:25:4d:ae:7e:86:c8:d5:
                    0b:9d:ef:28:8f:d4:8e:dc:d3:84:25:9a:7a:d8:9f:
                    55:77:24:8d:d4:70:d3:91:5d:6c:dc:8b:8a:0f:03:
                    77:e8:f5:66:9e:75:62:90:1f:01:f3:64:69:86:9a:
                    34:3a:0c:cb:70:48:dc:a9:cb:df:4c:91:49:ed:23:
                    8e:11:44:aa:a2:69:ac:93:5a:e6:5c:c5:db:bd:9a:
                    f4:20:1d:9b:17:d3:b6:92:05:3f:9e:12:91:34:96:
                    2b:0b:19:7e:5c:d7:03:72:df:b4:ab:60:3d:a4:9f:
                    89:5d:06:80:f2:44:0a:b4:55:fa:c9:c0:8a:89:58:
                    44:c0:2d:c6:d7:ad:ae:f6:2b:74:67:c3:36:b9:cd:
                    82:6c:c9:e6:ba:2c:4d:62:84:3a:6c:14:da:ea:97:
                    3e:03:15:52:1a:70:29:dc:b4:3c:9a:f7:0c:d8:7b:
                    20:3e:f1:97:3c:3b:b0:88:24:94:67:0f:08:19:e3:
                    e4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FC:85:6E:DC:3E:D9:50:B2:A3:5A:91:84:2F:4C:AA:FA:B8:20:48
            X509v3 Authority Key Identifier:
                keyid:2A:63:11:9E:D3:17:1C:A6:55:D3:DB:AC:D8:9F:A1:28:C8:87:60:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3234302e302f32302d3234203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.16.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:bd:8a:ab:f3:51:84:e3:15:28:88:8b:74:b4:ad:75:b2:c4:
         da:f8:84:a6:03:0c:0e:b3:87:a4:65:5c:d7:bd:4a:d0:5f:23:
         f5:89:e0:8f:c4:13:26:3f:11:37:d0:4c:e2:3d:fa:2a:51:e1:
         fc:a4:d0:24:27:fb:83:d0:8c:96:73:fd:fc:22:47:c1:4f:c3:
         e6:17:28:bc:20:41:b7:ba:d2:62:dc:f4:ad:3b:d3:7e:71:21:
         89:72:50:32:e6:fc:a1:54:cd:4f:97:80:99:1a:fd:44:c3:12:
         41:31:bb:15:ea:e5:e3:9f:b5:98:ce:80:81:0f:d0:3e:34:e8:
         19:5a:df:92:fa:f1:c6:84:50:5d:ab:42:0f:b5:a4:b5:6e:77:
         a2:4c:3d:71:0e:86:fe:d6:cd:e0:3d:cd:28:c3:82:cf:23:4b:
         8a:f0:47:63:71:3d:bf:bc:67:15:1a:33:2d:d5:de:7f:39:d9:
         bb:2f:78:84:c7:69:21:a1:c8:66:96:58:77:46:96:ad:cb:c5:
         b9:b2:76:a0:98:a0:6c:3d:b0:50:35:92:8e:08:73:b7:80:cf:
         8a:08:74:76:72:0d:7b:0f:0d:12:f6:18:7c:1b:30:e8:1c:d5:
         e0:b6:a8:ee:cf:51:26:e8:ea:c9:39:fd:87:85:aa:a2:c0:07:
         7c:7f:c7:1b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTcdzUUjmediWoAaPrx94unx4du4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2MzExOUVEMzE3MUNBNjU1RDNEQkFDRDg5RkExMjhD
ODg3NjBFOTAeFw0yNTA5MTAxODQzMjBaFw0yNjA5MDkxODQ4MjBaMDMxMTAvBgNV
BAMTKDQ2RkM4NTZFREMzRUQ5NTBCMkEzNUE5MTg0MkY0Q0FBRkFCODIwNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9nL54fwPeSnbAAJ2Fv9M6MsXi
y6aeXKc4/eQOLVkH0SfxJbWcFVTg9ODL0dAZUvvH17j7HW9uDRO3E2mzJP6/HXeT
JU2ufobI1Qud7yiP1I7c04QlmnrYn1V3JI3UcNORXWzci4oPA3fo9WaedWKQHwHz
ZGmGmjQ6DMtwSNypy99MkUntI44RRKqiaayTWuZcxdu9mvQgHZsX07aSBT+eEpE0
lisLGX5c1wNy37SrYD2kn4ldBoDyRAq0VfrJwIqJWETALcbXra72K3Rnwza5zYJs
yea6LE1ihDpsFNrqlz4DFVIacCnctDya9wzYeyA+8Zc8O7CIJJRnDwgZ4+SrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURvyFbtw+2VCyo1qRhC9Mqvq4IEgwHwYDVR0j
BBgwFoAUKmMRntMXHKZV09us2J+hKMiHYOkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDgxYWlYcERBdjVXQm1nRThvRXBmb3JkakdQNjJvdG4yZkhyaGFMNGNn
YnkvMC8yQTYzMTE5RUQzMTcxQ0E2NTVEM0RCQUNEODlGQTEyOEM4ODc2MEU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjMxMTlFRDMxNzFDQTY1
NUQzREJBQ0Q4OUZBMTI4Qzg4NzYwRTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4MWFpWHBEQXY1V0JtZ0U4b0VwZm9yZGpHUDYyb3RuMmZIcmhhTDRjZ2J5LzAv
MzEzODM3MmUzMTM2MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzIzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuxDwMA0GCSqGSIb3DQEBCwUAA4IBAQAsvYqr81GE
4xUoiIt0tK11ssTa+ISmAwwOs4ekZVzXvUrQXyP1ieCPxBMmPxE30EziPfoqUeH8
pNAkJ/uD0IyWc/38IkfBT8PmFyi8IEG3utJi3PStO9N+cSGJclAy5vyhVM1Pl4CZ
Gv1EwxJBMbsV6uXjn7WYzoCBD9A+NOgZWt+S+vHGhFBdq0IPtaS1bneiTD1xDob+
1s3gPc0ow4LPI0uK8EdjcT2/vGcVGjMt1d5/Odm7L3iEx2khochmllh3Rpaty8W5
snagmKBsPbBQNZKOCHO3gM+KCHR2cg17Dw0S9hh8GzDoHNXgtqjuz1Em6OrJOf2H
haqiwAd8f8cb
-----END CERTIFICATE-----
Generated at Fri Sep 19 19:01:35 2025 by rpki-client