Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa
File:                     3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa (raw, json)
Hash identifier:          FWZ3ripVTBysTD64be5SCnjZettB/hGaEup19vCH8Wg=
Subject key identifier:   2F:C7:59:1B:0E:58:8E:72:05:C4:A4:9B:EE:64:D1:7A:FB:8F:F9:66
Certificate issuer:       /CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
Certificate serial:       145B6DD8FC0C6144ADF67C2B77ADC09A9E0E8CEA
Authority key identifier: AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa
Signing time:             Wed 10 Sep 2025 12:35:01 +0000
ROA not before:           Wed 10 Sep 2025 12:30:01 +0000
ROA not after:            Wed 09 Sep 2026 12:35:01 +0000
asID:                     271111
IP address blocks:        192.140.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl
                          rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 21:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5b:6d:d8:fc:0c:61:44:ad:f6:7c:2b:77:ad:c0:9a:9e:0e:8c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
        Validity
            Not Before: Sep 10 12:30:01 2025 GMT
            Not After : Sep  9 12:35:01 2026 GMT
        Subject: CN=2FC7591B0E588E7205C4A49BEE64D17AFB8FF966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fa:0d:4e:1f:e1:3b:4c:27:b5:5b:a6:30:42:
                    c6:53:0b:d3:f2:26:f3:2e:8f:5a:a8:f0:0a:01:9e:
                    0a:7e:3c:aa:fe:22:8a:5c:a2:71:0e:4b:4d:b8:12:
                    82:75:1d:d0:c2:fe:87:18:91:3b:77:f6:2f:72:4d:
                    96:d8:58:c4:fe:97:de:47:61:f6:30:c6:ee:07:cf:
                    c7:05:26:39:7f:a2:f3:0e:a4:b2:f1:92:3b:b9:04:
                    c9:13:92:1b:d8:8b:ae:9a:0a:b5:63:53:f2:10:b2:
                    e0:f5:c0:be:b6:28:52:3f:2b:dc:f2:81:5d:6d:d5:
                    c7:02:45:61:a1:e9:64:df:a2:3e:dc:38:4a:59:e9:
                    c3:73:2c:3b:9d:f2:99:2e:c5:a7:68:27:52:cb:d0:
                    b9:2a:4f:da:15:c9:4c:42:cb:dc:e7:43:cb:10:2b:
                    76:bc:22:2d:2a:32:6e:3f:79:51:07:48:37:ba:7a:
                    5b:94:58:52:41:63:0e:4e:ce:77:e1:70:cf:5b:9a:
                    58:c2:9e:f5:22:09:45:12:ed:7e:60:6e:43:fa:88:
                    c9:dd:d9:2c:4c:c7:5e:82:cf:26:be:fd:74:07:6e:
                    31:cc:95:72:f8:fb:95:d9:0d:d5:7e:b7:70:2c:05:
                    1c:42:5d:c9:f1:8f:b2:5b:03:4a:1b:28:d7:fb:3c:
                    fe:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C7:59:1B:0E:58:8E:72:05:C4:A4:9B:EE:64:D1:7A:FB:8F:F9:66
            X509v3 Authority Key Identifier:
                keyid:AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:97:a5:0a:15:5e:95:9e:15:a7:29:9d:30:77:dc:44:1b:b9:
         82:88:0c:4b:d8:78:e2:db:25:f6:67:bd:ad:c2:8b:1a:d3:2c:
         e1:fe:9d:c9:f0:8f:51:4f:9a:a8:64:87:84:d5:cb:45:25:9a:
         ce:91:89:09:a9:ad:4e:5a:f9:34:f0:05:68:84:5c:f4:7e:7c:
         d9:57:b2:da:ae:16:de:c0:c4:5a:4a:07:fe:8b:c8:56:88:dc:
         83:3b:c0:89:d5:f8:4d:34:32:7f:45:45:56:52:a1:1a:ac:ed:
         7e:23:d7:dc:42:2f:a5:d7:58:f7:9a:48:d1:23:8e:b4:9c:de:
         04:22:d4:5a:8f:65:43:91:cc:c0:dc:88:19:a5:54:6b:1f:21:
         52:00:cd:f9:b1:3e:3e:85:4e:ee:3e:e6:04:c7:3d:e9:41:d4:
         e9:9d:c1:b7:7d:04:ac:85:e7:b2:0b:fb:e1:c1:29:61:51:85:
         a5:81:85:d7:26:4d:5b:65:96:0e:70:93:39:e9:fa:41:4c:e5:
         77:2e:d3:16:32:56:e9:db:83:f4:23:57:fb:6e:67:b5:33:47:
         3e:3f:f3:f5:4f:35:43:0c:b8:4d:ee:06:08:b4:0b:f2:5b:2e:
         be:dd:2a:a0:a2:76:e0:9b:fe:16:9c:de:9a:7b:bb:52:94:8d:
         90:68:ba:41
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFFtt2PwMYUSt9nwrd63Amp4OjOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNUVFRjdFNkVFODk0QzE5N0RCRDc4MzdDQjNDMDVE
RkI5RThFMDAeFw0yNTA5MTAxMjMwMDFaFw0yNjA5MDkxMjM1MDFaMDMxMTAvBgNV
BAMTKDJGQzc1OTFCMEU1ODhFNzIwNUM0QTQ5QkVFNjREMTdBRkI4RkY5NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR+g1OH+E7TCe1W6YwQsZTC9Py
JvMuj1qo8AoBngp+PKr+IopconEOS024EoJ1HdDC/ocYkTt39i9yTZbYWMT+l95H
YfYwxu4Hz8cFJjl/ovMOpLLxkju5BMkTkhvYi66aCrVjU/IQsuD1wL62KFI/K9zy
gV1t1ccCRWGh6WTfoj7cOEpZ6cNzLDud8pkuxadoJ1LL0LkqT9oVyUxCy9znQ8sQ
K3a8Ii0qMm4/eVEHSDe6eluUWFJBYw5OznfhcM9bmljCnvUiCUUS7X5gbkP6iMnd
2SxMx16Czya+/XQHbjHMlXL4+5XZDdV+t3AsBRxCXcnxj7JbA0obKNf7PP5rAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUL8dZGw5YjnIFxKSb7mTRevuP+WYwHwYDVR0j
BBgwFoAUriXu9+buiUwZfb14N8s8Bd+56OAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhrTGdjZ0JGVFdHU2NOYk0zb1NCNHRSakJVUm1xYUV5Y2lxRXlvRDJ5
NmIvMC9BRTI1RUVGN0U2RUU4OTRDMTk3REJENzgzN0NCM0MwNURGQjlFOEUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFMjVFRUY3RTZFRTg5NEMx
OTdEQkQ3ODM3Q0IzQzA1REZCOUU4RTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZIa0xnY2dCRlRXR1NjTmJNM29TQjR0UmpCVVJtcWFFeWNpcUV5b0QyeTZiLzAv
MzEzOTMyMmUzMTM0MzAyZTM4MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAjFUwDQYJKoZIhvcNAQELBQADggEBAK+XpQoV
XpWeFacpnTB33EQbuYKIDEvYeOLbJfZnva3CixrTLOH+ncnwj1FPmqhkh4TVy0Ul
ms6RiQmprU5a+TTwBWiEXPR+fNlXstquFt7AxFpKB/6LyFaI3IM7wInV+E00Mn9F
RVZSoRqs7X4j19xCL6XXWPeaSNEjjrSc3gQi1FqPZUORzMDciBmlVGsfIVIAzfmx
Pj6FTu4+5gTHPelB1Omdwbd9BKyF57IL++HBKWFRhaWBhdcmTVtllg5wkznp+kFM
5Xcu0xYyVunbg/QjV/tuZ7UzRz4/8/VPNUMMuE3uBgi0C/JbLr7dKqCiduCb/hac
3pp7u1KUjZBoukE=
-----END CERTIFICATE-----
Generated at Thu Sep 18 14:14:28 2025 by rpki-client