Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/3138362e3139342e302e302f32322d3232203d3e20323730383738.roa
File:                     3138362e3139342e302e302f32322d3232203d3e20323730383738.roa (raw, json)
Hash identifier:          CA612yzbK+hSPkvh5YTHuIehuA68jhAPQinl3kvRW9Q=
Subject key identifier:   31:C6:D6:F9:61:6B:B6:A3:BA:FA:13:28:68:0A:90:3C:86:88:3A:15
Certificate issuer:       /CN=F323C8A2CD672636B55EC43AB298AEB42D849558
Certificate serial:       6647102538CEBBC71A498EF13090019176021888
Authority key identifier: F3:23:C8:A2:CD:67:26:36:B5:5E:C4:3A:B2:98:AE:B4:2D:84:95:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F323C8A2CD672636B55EC43AB298AEB42D849558.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/3138362e3139342e302e302f32322d3232203d3e20323730383738.roa
Signing time:             Tue 02 Sep 2025 22:20:02 +0000
ROA not before:           Tue 02 Sep 2025 22:15:02 +0000
ROA not after:            Tue 01 Sep 2026 22:20:02 +0000
asID:                     270878
IP address blocks:        186.194.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/F323C8A2CD672636B55EC43AB298AEB42D849558.crl
                          rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/F323C8A2CD672636B55EC43AB298AEB42D849558.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F323C8A2CD672636B55EC43AB298AEB42D849558.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:47:10:25:38:ce:bb:c7:1a:49:8e:f1:30:90:01:91:76:02:18:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F323C8A2CD672636B55EC43AB298AEB42D849558
        Validity
            Not Before: Sep  2 22:15:02 2025 GMT
            Not After : Sep  1 22:20:02 2026 GMT
        Subject: CN=31C6D6F9616BB6A3BAFA1328680A903C86883A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:64:98:c6:5e:b4:8b:fa:05:ff:68:93:12:e9:
                    64:3f:7e:b2:ea:53:65:47:b6:ee:05:a4:21:3a:18:
                    5d:1e:25:2d:dc:4a:f8:84:5d:bc:d5:54:49:26:09:
                    47:c7:f6:fa:6e:d2:16:36:d0:58:d2:53:a0:be:08:
                    b3:21:4a:96:d8:ed:93:51:f7:6a:a5:7e:8c:32:08:
                    3e:0c:da:b4:f6:ef:0a:cd:68:ca:a7:10:c0:e8:5d:
                    eb:c7:43:f2:3a:4f:c6:47:c1:9f:0d:2f:e7:20:bd:
                    24:89:1f:e4:11:fc:a6:ed:81:6a:f0:ac:4d:db:39:
                    83:d7:13:78:8c:21:61:58:1b:79:b0:9c:cd:19:75:
                    ba:44:08:ed:88:71:58:2b:9c:65:74:05:e1:b8:4b:
                    2f:3b:3f:bc:12:28:f1:91:f4:7c:b9:e0:a2:2c:6c:
                    39:d7:83:27:4c:80:5c:67:35:30:fb:de:f0:33:9e:
                    60:9d:d9:88:68:70:d2:56:f4:46:70:be:47:84:64:
                    af:9b:36:83:af:51:b3:59:e0:47:a8:ab:bd:ff:5c:
                    e3:53:c7:c6:f1:48:8d:b2:ff:8c:d0:d1:f1:00:4b:
                    60:88:88:a8:aa:85:95:3e:7e:f9:53:ba:a2:1c:81:
                    fd:a4:93:02:42:f0:39:dc:3e:9b:2f:48:a9:2f:58:
                    65:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C6:D6:F9:61:6B:B6:A3:BA:FA:13:28:68:0A:90:3C:86:88:3A:15
            X509v3 Authority Key Identifier:
                keyid:F3:23:C8:A2:CD:67:26:36:B5:5E:C4:3A:B2:98:AE:B4:2D:84:95:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/F323C8A2CD672636B55EC43AB298AEB42D849558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F323C8A2CD672636B55EC43AB298AEB42D849558.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/3138362e3139342e302e302f32322d3232203d3e20323730383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:5a:7c:57:a3:24:43:df:49:8c:4c:1d:7c:93:23:70:e4:f2:
         3e:72:dc:fd:b3:f7:7c:48:0e:a4:e6:43:ca:af:68:34:5a:15:
         5a:2c:64:8c:97:ae:f8:10:73:72:f3:60:01:b8:e8:8e:99:f9:
         5f:25:37:0c:41:64:8b:11:ee:a3:e8:20:fd:01:3e:a1:03:8b:
         62:26:b2:8b:b5:93:e2:2e:25:78:07:a8:82:f9:3d:16:0d:c6:
         01:82:cd:b0:4c:5d:7a:9b:31:7e:3a:5b:70:a2:6a:a1:48:04:
         3f:50:ae:74:40:52:0a:c6:56:04:c9:5e:b9:14:ae:58:84:3c:
         1e:3c:73:d4:cd:6e:02:78:1b:6b:f0:59:f1:01:7e:f3:c3:ce:
         51:cd:8e:d2:73:58:cb:a6:e2:53:3a:c0:db:ca:90:f3:f2:6e:
         58:2e:3f:bd:5d:2d:ed:ef:5e:cc:d5:80:a7:cf:4f:ff:81:dd:
         a2:30:c5:dd:bc:de:f4:1c:49:c7:45:0b:78:86:bb:10:74:6e:
         3d:b5:9e:ef:e2:39:c5:ae:72:f7:d4:78:a5:4c:07:3a:ec:03:
         f8:5f:71:ad:67:04:93:a8:b6:33:b8:88:4e:c2:c3:06:6b:f7:
         ca:ce:f6:bf:33:ac:c3:da:37:6d:b4:46:4d:e4:56:56:30:02:
         0e:61:44:d2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZkcQJTjOu8caSY7xMJABkXYCGIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMyM0M4QTJDRDY3MjYzNkI1NUVDNDNBQjI5OEFFQjQy
RDg0OTU1ODAeFw0yNTA5MDIyMjE1MDJaFw0yNjA5MDEyMjIwMDJaMDMxMTAvBgNV
BAMTKDMxQzZENkY5NjE2QkI2QTNCQUZBMTMyODY4MEE5MDNDODY4ODNBMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeZJjGXrSL+gX/aJMS6WQ/frLq
U2VHtu4FpCE6GF0eJS3cSviEXbzVVEkmCUfH9vpu0hY20FjSU6C+CLMhSpbY7ZNR
92qlfowyCD4M2rT27wrNaMqnEMDoXevHQ/I6T8ZHwZ8NL+cgvSSJH+QR/KbtgWrw
rE3bOYPXE3iMIWFYG3mwnM0ZdbpECO2IcVgrnGV0BeG4Sy87P7wSKPGR9Hy54KIs
bDnXgydMgFxnNTD73vAznmCd2YhocNJW9EZwvkeEZK+bNoOvUbNZ4Eeoq73/XONT
x8bxSI2y/4zQ0fEAS2CIiKiqhZU+fvlTuqIcgf2kkwJC8DncPpsvSKkvWGUDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMcbW+WFrtqO6+hMoaAqQPIaIOhUwHwYDVR0j
BBgwFoAU8yPIos1nJja1XsQ6spiutC2ElVgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVFqU0EzeUJCa3Y3dGcyTjNMYWphcUpFWng4UjdvTk45dmNyNm5YZ3pz
YWUvMC9GMzIzQzhBMkNENjcyNjM2QjU1RUM0M0FCMjk4QUVCNDJEODQ5NTU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzMjNDOEEyQ0Q2NzI2MzZC
NTVFQzQzQUIyOThBRUI0MkQ4NDk1NTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VRalNBM3lCQmt2N3RnMk4zTGFqYXFKRVp4OFI3b05OOXZjcjZuWGd6c2FlLzAv
MzEzODM2MmUzMTM5MzQyZTMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMw
MzgzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCusIAMA0GCSqGSIb3DQEBCwUAA4IBAQB5WnxXoyRD
30mMTB18kyNw5PI+ctz9s/d8SA6k5kPKr2g0WhVaLGSMl674EHNy82ABuOiOmflf
JTcMQWSLEe6j6CD9AT6hA4tiJrKLtZPiLiV4B6iC+T0WDcYBgs2wTF16mzF+Oltw
omqhSAQ/UK50QFIKxlYEyV65FK5YhDwePHPUzW4CeBtr8FnxAX7zw85RzY7Sc1jL
puJTOsDbypDz8m5YLj+9XS3t717M1YCnz0//gd2iMMXdvN70HEnHRQt4hrsQdG49
tZ7v4jnFrnL31HilTAc67AP4X3GtZwSTqLYzuIhOwsMGa/fKzva/M6zD2jdttEZN
5FZWMAIOYUTS
-----END CERTIFICATE-----
Generated at Fri Sep 19 05:31:29 2025 by rpki-client