Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/3139322e3130302e3232332e302f32342d3234203d3e20323637393931.roa
File:                     3139322e3130302e3232332e302f32342d3234203d3e20323637393931.roa (raw, json)
Hash identifier:          o7YwgV1UJqS28OrH1DSC1lTA4RlXxZEDcw1kzlkGgJo=
Subject key identifier:   A8:AF:84:5A:30:78:18:6B:7C:1B:03:58:4B:BB:81:3F:72:3F:49:49
Certificate issuer:       /CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
Certificate serial:       5B2575001403262337AF6B023FF834639C3DD31F
Authority key identifier: 18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/3139322e3130302e3232332e302f32342d3234203d3e20323637393931.roa
Signing time:             Tue 03 Jun 2025 16:01:53 +0000
ROA not before:           Tue 03 Jun 2025 15:56:53 +0000
ROA not after:            Tue 02 Jun 2026 16:01:53 +0000
asID:                     267991
IP address blocks:        192.100.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 10:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:25:75:00:14:03:26:23:37:af:6b:02:3f:f8:34:63:9c:3d:d3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
        Validity
            Not Before: Jun  3 15:56:53 2025 GMT
            Not After : Jun  2 16:01:53 2026 GMT
        Subject: CN=A8AF845A3078186B7C1B03584BBB813F723F4949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6b:23:b1:cc:69:6c:08:45:f3:95:5d:ff:da:
                    d8:5f:05:9d:46:b6:eb:4d:c1:3e:2e:f6:f1:a2:50:
                    06:8a:e7:a2:aa:cb:b4:25:7f:77:3e:38:31:fd:ee:
                    cd:f6:c8:99:74:10:11:ce:89:a9:97:bf:4c:25:9d:
                    9d:82:35:5a:a9:a8:9d:67:8e:ce:2c:c5:78:f3:11:
                    a5:f7:35:d3:2c:c5:c4:37:75:c8:f3:2d:7f:91:f9:
                    3b:2f:e3:93:4d:89:79:a1:da:15:97:ce:c0:57:61:
                    14:8d:55:bc:ff:3d:51:9e:41:39:a8:a9:65:08:b6:
                    36:b6:ce:d7:04:b3:2a:6b:f0:30:1a:52:e3:a9:a2:
                    2b:fc:f0:66:89:bc:58:10:8b:9d:54:b9:30:bd:78:
                    74:73:40:76:2d:e8:9f:77:6d:19:0c:a5:89:f1:f1:
                    0d:fe:81:73:4c:ab:8a:01:c9:a0:34:89:14:b3:3d:
                    ee:f3:c7:17:66:93:1f:0e:90:4d:a7:29:24:8a:9e:
                    1e:1e:83:61:6f:e1:6b:e7:75:c2:b3:38:a0:af:37:
                    21:7e:b2:b2:06:cb:da:5b:09:9a:5a:91:7c:f7:56:
                    e2:2a:6f:57:e7:c1:0b:a2:2e:60:b0:ef:6d:5e:e2:
                    b5:25:fb:d2:e8:b3:2d:79:87:d0:80:70:84:0d:8a:
                    dd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AF:84:5A:30:78:18:6B:7C:1B:03:58:4B:BB:81:3F:72:3F:49:49
            X509v3 Authority Key Identifier:
                keyid:18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/3139322e3130302e3232332e302f32342d3234203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:3c:ea:b2:44:25:28:b4:1f:50:a3:2f:b5:2d:8f:87:0f:5e:
         47:a6:45:fa:34:cd:fd:1b:a5:18:91:e2:38:b8:98:cb:3e:3b:
         ee:5d:15:92:6d:e1:22:ac:12:d4:f9:39:9e:f7:76:1c:a2:ec:
         0b:cf:6b:5c:8f:6a:12:53:84:66:36:9f:cb:0f:69:be:e9:21:
         a9:98:49:29:5b:e8:e7:9c:ec:03:d5:52:8d:26:15:d6:c5:59:
         e4:61:70:63:fa:9f:08:d5:ef:9b:cb:e6:6d:e4:6e:57:a8:80:
         73:e7:7b:d4:c4:c8:f6:3b:7d:7e:25:43:ef:43:23:32:07:bd:
         9b:c6:15:79:df:a1:4e:bd:66:b9:8c:a0:9d:30:ed:4f:e3:ac:
         93:d1:7a:a8:f1:b0:ea:0e:7e:8c:0b:3c:d1:24:76:17:fb:18:
         e0:b2:f5:c3:44:07:17:be:74:44:5e:bc:2c:4e:0e:e8:eb:1b:
         84:1f:69:05:26:65:e7:53:21:58:4f:e0:52:d8:4d:26:43:bc:
         22:ae:1e:4a:af:86:ab:e0:54:b5:a5:58:13:bc:94:08:40:90:
         64:3e:b8:34:fe:e4:56:d6:7f:5c:52:e4:41:76:d4:85:40:02:
         bc:8e:6e:6f:0f:ab:f1:49:74:9f:c4:7b:8a:ab:81:cb:97:10:
         b0:13:70:38
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUWyV1ABQDJiM3r2sCP/g0Y5w90x8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg0NDBFNDdFRTFBOUYyNTIxMTgxRkIzNUEyMzk0QTBE
RTkyQ0M3QzAeFw0yNTA2MDMxNTU2NTNaFw0yNjA2MDIxNjAxNTNaMDMxMTAvBgNV
BAMTKEE4QUY4NDVBMzA3ODE4NkI3QzFCMDM1ODRCQkI4MTNGNzIzRjQ5NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMayOxzGlsCEXzlV3/2thfBZ1G
tutNwT4u9vGiUAaK56Kqy7Qlf3c+ODH97s32yJl0EBHOiamXv0wlnZ2CNVqpqJ1n
js4sxXjzEaX3NdMsxcQ3dcjzLX+R+Tsv45NNiXmh2hWXzsBXYRSNVbz/PVGeQTmo
qWUItja2ztcEsypr8DAaUuOpoiv88GaJvFgQi51UuTC9eHRzQHYt6J93bRkMpYnx
8Q3+gXNMq4oByaA0iRSzPe7zxxdmkx8OkE2nKSSKnh4eg2Fv4WvndcKzOKCvNyF+
srIGy9pbCZpakXz3VuIqb1fnwQuiLmCw721e4rUl+9Losy15h9CAcIQNit2bAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUqK+EWjB4GGt8GwNYS7uBP3I/SUkwHwYDVR0j
BBgwFoAUGEQOR+4anyUhGB+zWiOUoN6SzHwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5
Mk4vMC8xODQ0MEU0N0VFMUE5RjI1MjExODFGQjM1QTIzOTRBMERFOTJDQzdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4NDQwRTQ3RUUxQTlGMjUy
MTE4MUZCMzVBMjM5NEEwREU5MkNDN0MuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAv
MzEzOTMyMmUzMTMwMzAyZTMyMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNzM5MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBk3zANBgkqhkiG9w0BAQsFAAOCAQEATDzq
skQlKLQfUKMvtS2Phw9eR6ZF+jTN/RulGJHiOLiYyz477l0Vkm3hIqwS1Pk5nvd2
HKLsC89rXI9qElOEZjafyw9pvukhqZhJKVvo55zsA9VSjSYV1sVZ5GFwY/qfCNXv
m8vmbeRuV6iAc+d71MTI9jt9fiVD70MjMge9m8YVed+hTr1muYygnTDtT+Osk9F6
qPGw6g5+jAs80SR2F/sY4LL1w0QHF750RF68LE4O6OsbhB9pBSZl51MhWE/gUthN
JkO8Iq4eSq+Gq+BUtaVYE7yUCECQZD64NP7kVtZ/XFLkQXbUhUACvI5ubw+r8Ul0
n8R7iquBy5cQsBNwOA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 12:00:04 2025 by rpki-client