Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/3133382e3131372e3231362e302f32322d3332203d3e20323634323534.roa
File:                     3133382e3131372e3231362e302f32322d3332203d3e20323634323534.roa (raw, json)
Hash identifier:          I1FlE/fGR9JIRPnHAESfPVJvBZSubhAH3U0JIXBH57o=
Subject key identifier:   53:21:65:78:5F:4E:8B:EF:53:26:40:A1:D8:E3:F8:E5:F2:0F:65:EE
Certificate issuer:       /CN=912CF9DD19CB8C7AEBA52C1C0359148066BAC4EB
Certificate serial:       4ACAF4E9B5D246644BE53FAFE57316AB48B0868F
Authority key identifier: 91:2C:F9:DD:19:CB:8C:7A:EB:A5:2C:1C:03:59:14:80:66:BA:C4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912CF9DD19CB8C7AEBA52C1C0359148066BAC4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/3133382e3131372e3231362e302f32322d3332203d3e20323634323534.roa
Signing time:             Wed 10 Sep 2025 02:01:04 +0000
ROA not before:           Wed 10 Sep 2025 01:56:04 +0000
ROA not after:            Wed 09 Sep 2026 02:01:04 +0000
asID:                     264254
IP address blocks:        138.117.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/912CF9DD19CB8C7AEBA52C1C0359148066BAC4EB.crl
                          rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/912CF9DD19CB8C7AEBA52C1C0359148066BAC4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912CF9DD19CB8C7AEBA52C1C0359148066BAC4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 10:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ca:f4:e9:b5:d2:46:64:4b:e5:3f:af:e5:73:16:ab:48:b0:86:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=912CF9DD19CB8C7AEBA52C1C0359148066BAC4EB
        Validity
            Not Before: Sep 10 01:56:04 2025 GMT
            Not After : Sep  9 02:01:04 2026 GMT
        Subject: CN=532165785F4E8BEF532640A1D8E3F8E5F20F65EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c1:cc:38:20:77:58:7e:ae:81:73:ac:ec:ba:
                    23:b7:12:e4:c3:6f:a6:fd:a5:68:fb:08:a5:2b:aa:
                    85:58:b0:59:94:a5:01:89:31:08:36:5e:d3:3a:e4:
                    b1:b0:20:5e:25:6b:f0:41:c9:c4:61:34:0d:bc:58:
                    b9:cc:0d:a2:88:65:f0:d2:6c:6a:87:5c:fc:7b:c6:
                    d1:da:22:14:c0:29:78:19:77:82:30:a6:ee:34:40:
                    64:93:2d:81:2a:32:7e:12:b8:62:1f:8a:76:da:f6:
                    78:4f:8a:8b:1e:d9:fd:c7:0d:93:ce:75:40:5d:c9:
                    10:56:d7:2c:03:e5:f0:fe:11:6e:bf:cd:08:e4:c8:
                    5a:84:34:6e:eb:aa:e5:a1:bc:10:79:cb:bf:9b:72:
                    db:5b:7c:17:67:36:92:bf:d8:cd:7e:b0:c0:31:78:
                    c2:97:22:25:01:03:94:52:a6:5e:a9:19:39:64:ba:
                    21:c8:ed:12:7f:ce:68:fb:dd:24:12:18:0a:c9:cd:
                    31:0d:d4:39:a2:a9:88:37:0a:81:6d:5f:c1:bc:2f:
                    1d:f8:24:e2:f8:ec:88:83:8f:50:6c:d7:c9:bb:03:
                    99:f9:a1:39:24:71:43:ba:7d:d8:a2:b7:36:79:3b:
                    c7:3b:04:8a:f5:fa:e0:b8:9a:5d:06:f6:17:19:8b:
                    ef:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:21:65:78:5F:4E:8B:EF:53:26:40:A1:D8:E3:F8:E5:F2:0F:65:EE
            X509v3 Authority Key Identifier:
                keyid:91:2C:F9:DD:19:CB:8C:7A:EB:A5:2C:1C:03:59:14:80:66:BA:C4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/912CF9DD19CB8C7AEBA52C1C0359148066BAC4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912CF9DD19CB8C7AEBA52C1C0359148066BAC4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/3133382e3131372e3231362e302f32322d3332203d3e20323634323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:9c:97:6f:8e:0e:67:e8:95:2b:39:54:4d:68:14:61:5b:98:
         ba:96:4d:d1:0e:69:94:2f:1a:b5:3f:46:2b:e0:cc:ae:a7:5c:
         99:85:02:71:dc:b4:93:24:55:c8:a6:2c:11:cb:b5:f7:8b:aa:
         7f:9f:60:e0:3d:49:b1:28:1b:ae:fb:37:e2:26:6a:23:37:c4:
         89:a7:bf:a3:5e:de:9a:91:89:af:0e:4c:7b:da:88:b7:69:97:
         c2:b3:95:b2:65:2a:15:5c:fc:4d:44:43:47:fb:5a:76:bb:5c:
         60:18:b0:b8:19:bb:41:83:bc:6a:b2:50:ed:69:05:90:e8:23:
         8e:78:83:fd:64:89:64:b1:d5:ce:d5:94:63:43:7b:97:35:0a:
         04:c9:78:02:f6:1b:14:05:d4:4d:53:a9:8a:9d:c7:64:be:5a:
         90:43:a8:b0:7b:2c:c2:59:24:1a:2f:f2:c1:96:d4:09:fc:fb:
         92:ee:73:69:bd:b8:f5:4c:75:49:e2:e7:29:c0:63:29:18:e5:
         6b:0f:80:6d:8a:21:0d:15:36:d5:57:61:2e:77:0a:aa:1d:f3:
         e9:86:61:96:4e:fe:e7:3a:36:40:99:c1:db:5a:e1:8d:1a:97:
         8e:11:5b:d3:fd:26:3b:10:e6:81:07:91:c1:5a:79:ae:be:5e:
         59:84:3d:e3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSsr06bXSRmRL5T+v5XMWq0iwho8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTEyQ0Y5REQxOUNCOEM3QUVCQTUyQzFDMDM1OTE0ODA2
NkJBQzRFQjAeFw0yNTA5MTAwMTU2MDRaFw0yNjA5MDkwMjAxMDRaMDMxMTAvBgNV
BAMTKDUzMjE2NTc4NUY0RThCRUY1MzI2NDBBMUQ4RTNGOEU1RjIwRjY1RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgwcw4IHdYfq6Bc6zsuiO3EuTD
b6b9pWj7CKUrqoVYsFmUpQGJMQg2XtM65LGwIF4la/BBycRhNA28WLnMDaKIZfDS
bGqHXPx7xtHaIhTAKXgZd4Iwpu40QGSTLYEqMn4SuGIfinba9nhPiose2f3HDZPO
dUBdyRBW1ywD5fD+EW6/zQjkyFqENG7rquWhvBB5y7+bcttbfBdnNpK/2M1+sMAx
eMKXIiUBA5RSpl6pGTlkuiHI7RJ/zmj73SQSGArJzTEN1DmiqYg3CoFtX8G8Lx34
JOL47IiDj1Bs18m7A5n5oTkkcUO6fdiitzZ5O8c7BIr1+uC4ml0G9hcZi+/ZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUUyFleF9Oi+9TJkCh2OP45fIPZe4wHwYDVR0j
BBgwFoAUkSz53RnLjHrrpSwcA1kUgGa6xOswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRW5xeTdyd2RVMVFuMzZHdDZ4YUZyc2g4TTY0WXNUM3oxOUFScGYxdThj
b1kvMC85MTJDRjlERDE5Q0I4QzdBRUJBNTJDMUMwMzU5MTQ4MDY2QkFDNEVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxMkNGOUREMTlDQjhDN0FF
QkE1MkMxQzAzNTkxNDgwNjZCQUM0RUIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VucXk3cndkVTFRbjM2R3Q2eGFGcnNoOE02NFlzVDN6MTlBUnBmMXU4Y29ZLzAv
MzEzMzM4MmUzMTMxMzcyZTMyMzEzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNDMyMzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop12DANBgkqhkiG9w0BAQsFAAOCAQEASJyX
b44OZ+iVKzlUTWgUYVuYupZN0Q5plC8atT9GK+DMrqdcmYUCcdy0kyRVyKYsEcu1
94uqf59g4D1JsSgbrvs34iZqIzfEiae/o17empGJrw5Me9qIt2mXwrOVsmUqFVz8
TURDR/tadrtcYBiwuBm7QYO8arJQ7WkFkOgjjniD/WSJZLHVztWUY0N7lzUKBMl4
AvYbFAXUTVOpip3HZL5akEOosHsswlkkGi/ywZbUCfz7ku5zab249Ux1SeLnKcBj
KRjlaw+AbYohDRU21VdhLncKqh3z6YZhlk7+5zo2QJnB21rhjRqXjhFb0/0mOxDm
gQeRwVp5rr5eWYQ94w==
-----END CERTIFICATE-----
Generated at Thu Sep 18 11:43:34 2025 by rpki-client