Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32322d3234203d3e20323632383238.roa
File:                     3138362e3235312e39362e302f32322d3234203d3e20323632383238.roa (raw, json)
Hash identifier:          hmwBa0KJxdYhozm/Kg2HrkFKNqOSfKRaSQXlJZVN0Bc=
Subject key identifier:   4F:C6:F6:1C:89:30:92:51:C0:3E:45:47:82:0D:40:9D:40:DC:EC:DB
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       273F20FF20F1A67923D3946D0E1C9BA4D86F0056
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32322d3234203d3e20323632383238.roa
Signing time:             Thu 28 Aug 2025 12:06:40 +0000
ROA not before:           Thu 28 Aug 2025 12:01:40 +0000
ROA not after:            Thu 27 Aug 2026 12:06:40 +0000
asID:                     262828
IP address blocks:        186.251.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl
                          rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Sep 2025 05:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:3f:20:ff:20:f1:a6:79:23:d3:94:6d:0e:1c:9b:a4:d8:6f:00:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Aug 28 12:01:40 2025 GMT
            Not After : Aug 27 12:06:40 2026 GMT
        Subject: CN=4FC6F61C89309251C03E4547820D409D40DCECDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:59:d4:a8:56:c5:74:83:9d:08:f5:cf:86:12:
                    45:00:86:ca:d9:e1:55:7a:a5:8c:62:19:9b:9a:64:
                    7b:91:8e:a1:b8:2f:09:dd:27:b8:98:49:b7:34:9a:
                    1e:21:a8:05:75:07:74:ce:77:55:ee:1c:0c:b5:e4:
                    9a:c2:88:9e:c0:cf:f0:61:77:d7:f9:95:22:90:b9:
                    c8:e0:a2:12:ca:45:52:a3:62:e0:f3:4c:82:a8:bb:
                    d9:b6:10:ec:c1:62:e4:18:ea:3d:57:be:9f:5e:02:
                    8c:fe:72:78:df:72:d5:3b:0b:4e:50:00:2a:58:fc:
                    5e:92:d4:7c:5c:5e:68:06:66:23:2f:b0:24:19:7a:
                    bc:fc:07:93:78:ae:54:d7:8f:e6:4c:9a:53:c0:b3:
                    01:68:cf:b7:5c:5a:c3:cb:7d:98:f2:66:8d:f5:cf:
                    d6:1c:be:bf:ba:62:c5:2c:74:a5:18:13:e7:e0:b8:
                    e1:c4:9a:3e:10:b3:bd:ea:31:b5:aa:a4:f1:af:aa:
                    d2:ac:33:f8:df:a6:74:0d:f1:05:4b:de:16:79:0e:
                    a4:4d:bc:7c:9e:02:04:55:2f:1a:38:fc:ff:21:f1:
                    34:ad:c3:58:16:5e:5e:05:8d:4d:05:d0:61:3d:1c:
                    d6:2c:f9:70:1b:ec:14:b7:c2:1f:63:99:76:91:00:
                    6f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C6:F6:1C:89:30:92:51:C0:3E:45:47:82:0D:40:9D:40:DC:EC:DB
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32322d3234203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:28:ac:5d:99:25:94:2c:9d:f5:36:9c:0c:6f:18:ac:a8:e9:
         81:e9:83:bb:1c:1a:c1:0b:80:74:36:d7:09:bf:50:ed:b8:28:
         0a:8b:5c:fa:75:98:54:4e:41:6f:56:09:da:3d:b7:30:8b:e2:
         c6:51:98:f2:fe:cf:39:79:42:bd:a1:1a:5b:7a:61:6e:40:68:
         0b:3b:58:1f:cc:8f:ce:ab:2f:86:df:78:2c:06:e4:55:0c:62:
         7a:f8:b5:7c:5f:66:69:78:1b:f5:f2:05:00:23:47:ef:b5:c4:
         71:75:6a:35:92:c3:73:27:fc:4c:ef:7a:89:71:1d:c0:18:ac:
         d9:49:c6:d6:4d:0e:9a:4a:12:b6:0f:dd:96:ad:76:f1:df:9c:
         c0:92:ce:28:49:55:dc:74:ad:ec:b8:e5:29:af:0b:c5:7b:14:
         b7:3e:25:27:cb:8e:00:ff:e7:fa:16:01:29:90:1f:8c:e6:23:
         3f:5c:19:a4:bc:3a:b0:32:48:3f:71:d7:6e:ab:49:06:c6:8e:
         99:8e:5c:55:78:20:13:c0:f3:1e:a8:bf:19:91:31:ab:7a:7c:
         10:0b:b1:1a:80:aa:a5:ce:ea:33:94:fb:d5:dc:db:84:2b:16:
         a0:9b:85:fc:93:48:69:77:f1:e0:7a:c8:29:29:ce:82:45:e4:
         bf:55:34:9a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJz8g/yDxpnkj05RtDhybpNhvAFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFDQTI3NzE3RTgyQzQ2MThCOEM5Qjg4MDkyMDlGRDQ4
RTI2ODQ3QjAeFw0yNTA4MjgxMjAxNDBaFw0yNjA4MjcxMjA2NDBaMDMxMTAvBgNV
BAMTKDRGQzZGNjFDODkzMDkyNTFDMDNFNDU0NzgyMEQ0MDlENDBEQ0VDREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtWdSoVsV0g50I9c+GEkUAhsrZ
4VV6pYxiGZuaZHuRjqG4LwndJ7iYSbc0mh4hqAV1B3TOd1XuHAy15JrCiJ7Az/Bh
d9f5lSKQucjgohLKRVKjYuDzTIKou9m2EOzBYuQY6j1Xvp9eAoz+cnjfctU7C05Q
ACpY/F6S1HxcXmgGZiMvsCQZerz8B5N4rlTXj+ZMmlPAswFoz7dcWsPLfZjyZo31
z9Ycvr+6YsUsdKUYE+fguOHEmj4Qs73qMbWqpPGvqtKsM/jfpnQN8QVL3hZ5DqRN
vHyeAgRVLxo4/P8h8TStw1gWXl4FjU0F0GE9HNYs+XAb7BS3wh9jmXaRAG/vAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUT8b2HIkwklHAPkVHgg1AnUDc7NswHwYDVR0j
BBgwFoAUKsoncX6CxGGLjJuICSCf1I4mhHswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZGWDVzRUp5UTdVZU5SeXRwdTdjODFLdDhYZ0RwN1NyTk1tU0xVZlEx
OGYvMC8yQUNBMjc3MTdFODJDNDYxOEI4QzlCODgwOTIwOUZENDhFMjY4NDdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQ0EyNzcxN0U4MkM0NjE4
QjhDOUI4ODA5MjA5RkQ0OEUyNjg0N0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGRlg1c0VKeVE3VWVOUnl0cHU3YzgxS3Q4WGdEcDdTck5NbVNMVWZRMThmLzAv
MzEzODM2MmUzMjM1MzEyZTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzODMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK6+2AwDQYJKoZIhvcNAQELBQADggEBAKQorF2Z
JZQsnfU2nAxvGKyo6YHpg7scGsELgHQ21wm/UO24KAqLXPp1mFROQW9WCdo9tzCL
4sZRmPL+zzl5Qr2hGlt6YW5AaAs7WB/Mj86rL4bfeCwG5FUMYnr4tXxfZml4G/Xy
BQAjR++1xHF1ajWSw3Mn/EzveolxHcAYrNlJxtZNDppKErYP3ZatdvHfnMCSzihJ
Vdx0rey45SmvC8V7FLc+JSfLjgD/5/oWASmQH4zmIz9cGaS8OrAySD9x126rSQbG
jpmOXFV4IBPA8x6ovxmRMat6fBALsRqAqqXO6jOU+9Xc24QrFqCbhfyTSGl38eB6
yCkpzoJF5L9VNJo=
-----END CERTIFICATE-----
Generated at Tue Sep 9 06:19:04 2025 by rpki-client