Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/3136382e3233322e3133342e302f32342d3234203d3e20323634393431.roa
File:                     3136382e3233322e3133342e302f32342d3234203d3e20323634393431.roa (raw, json)
Hash identifier:          CmpaYLxHWbZFm7Dw98MdxRD6+huNK5o6uvGwA6CcMZc=
Subject key identifier:   3E:EA:8E:21:F5:8A:18:13:B3:43:96:81:79:DE:1E:79:B1:53:DF:41
Certificate issuer:       /CN=E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D
Certificate serial:       4869C5BEFD0BF68BF964CE53865A4F777E456200
Authority key identifier: E5:79:D9:FF:63:D9:A4:8D:BD:6C:7C:9A:21:1C:5A:62:53:89:1E:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/3136382e3233322e3133342e302f32342d3234203d3e20323634393431.roa
Signing time:             Tue 02 Sep 2025 00:31:09 +0000
ROA not before:           Tue 02 Sep 2025 00:26:09 +0000
ROA not after:            Tue 01 Sep 2026 00:31:09 +0000
asID:                     264941
IP address blocks:        168.232.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.crl
                          rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 06:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:69:c5:be:fd:0b:f6:8b:f9:64:ce:53:86:5a:4f:77:7e:45:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D
        Validity
            Not Before: Sep  2 00:26:09 2025 GMT
            Not After : Sep  1 00:31:09 2026 GMT
        Subject: CN=3EEA8E21F58A1813B343968179DE1E79B153DF41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:d5:a2:f4:2a:a1:d2:2a:7a:00:94:fe:c9:
                    1d:7d:f7:d6:09:da:e7:2e:36:da:a5:f4:26:de:07:
                    6c:48:5f:94:2f:29:44:e1:d0:34:c7:eb:d0:90:6f:
                    44:e0:15:e1:77:59:af:99:5c:f3:c7:53:a0:a6:e2:
                    2d:d7:3a:8f:70:73:6c:b1:8a:a3:2f:39:43:d2:47:
                    6c:23:16:70:de:c4:68:ae:f4:0f:d2:75:32:69:1b:
                    14:05:c0:a2:2d:01:59:73:ec:8e:26:28:a1:1b:ca:
                    b9:02:94:26:e2:c6:5a:cf:73:b2:df:d9:e4:73:44:
                    d9:0d:27:6f:9b:e0:23:ba:a6:e1:d5:c2:61:a8:7d:
                    91:f6:91:37:f7:de:09:f6:45:f5:70:72:e0:fa:9b:
                    d3:96:6a:00:5e:12:9a:83:f7:49:38:b3:59:a1:37:
                    fb:a8:39:f5:39:79:e3:d4:37:55:c7:8b:a6:97:95:
                    c9:54:90:17:69:c6:25:ee:95:42:9c:76:c5:a4:39:
                    b3:51:67:b6:f4:f3:15:3d:f1:ed:10:f0:c8:14:85:
                    f2:76:1c:05:b2:07:eb:fa:4c:ca:01:f7:83:e5:0a:
                    be:04:bd:25:99:11:62:12:18:de:14:fa:23:84:6b:
                    11:49:a3:49:c9:b4:15:0d:dc:9c:72:92:f3:05:0a:
                    65:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EA:8E:21:F5:8A:18:13:B3:43:96:81:79:DE:1E:79:B1:53:DF:41
            X509v3 Authority Key Identifier:
                keyid:E5:79:D9:FF:63:D9:A4:8D:BD:6C:7C:9A:21:1C:5A:62:53:89:1E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/3136382e3233322e3133342e302f32342d3234203d3e20323634393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:43:aa:65:1f:50:e2:b6:cc:f0:d8:9b:a1:40:a9:87:7a:ec:
         2b:96:5a:92:fb:38:1d:04:80:76:59:40:65:b1:f7:3b:84:4a:
         fa:e9:20:86:8a:19:cc:c0:2b:f5:d6:1c:36:06:37:a3:d6:e6:
         1a:dd:fd:4e:15:32:c7:59:77:19:c0:ad:6e:69:e1:b2:9e:48:
         05:81:76:81:44:b0:4e:92:f1:db:cf:9b:54:ae:4a:a4:58:51:
         76:4e:74:d0:8c:5b:86:8f:d0:f8:35:4f:3a:95:92:a4:7b:e0:
         d6:2e:b4:64:4a:7f:e1:54:5e:e8:18:36:7d:42:d3:82:72:ae:
         c7:b5:61:4e:fe:f2:3f:9e:bf:26:81:4a:45:85:95:4a:8b:68:
         c1:4a:72:5c:ca:0e:c3:d6:f7:af:a9:ca:e3:48:f9:cf:53:03:
         2d:41:10:f2:a9:fa:96:63:c5:8d:d4:dd:24:f8:27:b8:42:ec:
         71:99:ae:24:ba:e2:5b:7b:76:4b:79:cd:83:fd:d3:4a:6f:3c:
         ef:76:5d:32:31:8f:c3:8b:7b:49:7e:41:57:f6:57:a5:2d:d3:
         e5:d2:d2:79:dc:5c:78:cd:e6:9e:e1:d2:b9:3e:5d:5c:58:ff:
         98:b6:57:b5:8d:37:d0:a6:7f:59:41:d5:23:1f:d6:c6:54:d0:
         79:4c:14:c3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSGnFvv0L9ov5ZM5ThlpPd35FYgAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU3OUQ5RkY2M0Q5QTQ4REJENkM3QzlBMjExQzVBNjI1
Mzg5MUUzRDAeFw0yNTA5MDIwMDI2MDlaFw0yNjA5MDEwMDMxMDlaMDMxMTAvBgNV
BAMTKDNFRUE4RTIxRjU4QTE4MTNCMzQzOTY4MTc5REUxRTc5QjE1M0RGNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyzNWi9Cqh0ip6AJT+yR1999YJ
2ucuNtql9CbeB2xIX5QvKUTh0DTH69CQb0TgFeF3Wa+ZXPPHU6Cm4i3XOo9wc2yx
iqMvOUPSR2wjFnDexGiu9A/SdTJpGxQFwKItAVlz7I4mKKEbyrkClCbixlrPc7Lf
2eRzRNkNJ2+b4CO6puHVwmGofZH2kTf33gn2RfVwcuD6m9OWagBeEpqD90k4s1mh
N/uoOfU5eePUN1XHi6aXlclUkBdpxiXulUKcdsWkObNRZ7b08xU98e0Q8MgUhfJ2
HAWyB+v6TMoB94PlCr4EvSWZEWISGN4U+iOEaxFJo0nJtBUN3JxykvMFCmUlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPuqOIfWKGBOzQ5aBed4eebFT30EwHwYDVR0j
BBgwFoAU5XnZ/2PZpI29bHyaIRxaYlOJHj0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlY0cHZmVFZBUEdTd1VGMTZiaHo3dXhvQWhyNERKMXhTRlNQUWFIUWl5
d1UvMC9FNTc5RDlGRjYzRDlBNDhEQkQ2QzdDOUEyMTFDNUE2MjUzODkxRTNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1NzlEOUZGNjNEOUE0OERC
RDZDN0M5QTIxMUM1QTYyNTM4OTFFM0QuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZWNHB2ZlRWQVBHU3dVRjE2Ymh6N3V4b0FocjRESjF4U0ZTUFFhSFFpeXdVLzAv
MzEzNjM4MmUzMjMzMzIyZTMxMzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM5MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjohjANBgkqhkiG9w0BAQsFAAOCAQEAE0Oq
ZR9Q4rbM8NiboUCph3rsK5Zakvs4HQSAdllAZbH3O4RK+ukghooZzMAr9dYcNgY3
o9bmGt39ThUyx1l3GcCtbmnhsp5IBYF2gUSwTpLx28+bVK5KpFhRdk500Ixbho/Q
+DVPOpWSpHvg1i60ZEp/4VRe6Bg2fULTgnKux7VhTv7yP56/JoFKRYWVSotowUpy
XMoOw9b3r6nK40j5z1MDLUEQ8qn6lmPFjdTdJPgnuELscZmuJLriW3t2S3nNg/3T
Sm8873ZdMjGPw4t7SX5BV/ZXpS3T5dLSedxceM3mnuHSuT5dXFj/mLZXtY030KZ/
WUHVIx/WxlTQeUwUww==
-----END CERTIFICATE-----
Generated at Thu Sep 18 16:05:28 2025 by rpki-client