Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/3230312e35352e3132382e302f31392d3332203d3e203238363230.roa
File:                     3230312e35352e3132382e302f31392d3332203d3e203238363230.roa (raw, json)
Hash identifier:          9cfxWYleeqMnsax/Y67rUWcUmbHBebsZJ3inWugTyL4=
Subject key identifier:   E5:EA:01:BA:3B:9A:5F:ED:20:2E:06:E0:16:46:9E:B7:6C:4D:8D:06
Certificate issuer:       /CN=18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B
Certificate serial:       1E853D39641887A8338A5E8F3EB43AB91CD9B230
Authority key identifier: 18:EC:B5:AE:B5:0F:51:D6:D9:3C:7B:F4:92:29:D6:9F:DC:AE:21:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/3230312e35352e3132382e302f31392d3332203d3e203238363230.roa
Signing time:             Thu 11 Sep 2025 14:25:10 +0000
ROA not before:           Thu 11 Sep 2025 14:20:10 +0000
ROA not after:            Thu 10 Sep 2026 14:25:10 +0000
asID:                     28620
IP address blocks:        201.55.128.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.crl
                          rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 02:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:85:3d:39:64:18:87:a8:33:8a:5e:8f:3e:b4:3a:b9:1c:d9:b2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B
        Validity
            Not Before: Sep 11 14:20:10 2025 GMT
            Not After : Sep 10 14:25:10 2026 GMT
        Subject: CN=E5EA01BA3B9A5FED202E06E016469EB76C4D8D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ec:f1:1b:0b:4b:e0:c7:b7:6c:54:17:5f:75:
                    fa:f1:8f:b2:d7:8a:62:de:b3:07:1a:99:d9:67:e8:
                    85:51:7b:7c:a8:ae:5f:66:51:01:8a:2b:ff:1f:03:
                    13:51:95:de:bd:96:e3:e6:c6:99:1f:0e:40:b3:8b:
                    b9:23:35:21:c1:38:fc:55:8d:c5:ec:86:02:da:09:
                    18:d4:ab:6b:c4:c2:98:f3:ba:65:95:79:03:4b:10:
                    55:f0:fd:73:cd:6f:e4:f4:8a:d7:ba:47:f0:c3:2c:
                    fe:da:9c:bc:7c:39:b3:6a:1b:8d:db:fc:3b:da:b7:
                    d5:d1:8f:c8:8e:ce:c9:7b:15:29:ee:a6:9d:4b:50:
                    02:12:be:8d:cd:f9:2e:16:82:46:33:9f:f5:f5:4d:
                    0d:25:05:b2:ff:75:34:d3:65:2a:e4:1a:42:85:93:
                    a3:b2:b3:00:2d:1b:1b:9d:ba:fb:e2:4c:b9:9d:13:
                    ad:f8:b4:d2:33:1a:ba:b1:a8:3a:d0:1d:ed:42:31:
                    56:28:68:62:86:7c:f3:39:ba:18:de:f3:76:41:ff:
                    9d:fc:69:ad:df:75:5a:e7:83:dc:76:ab:cb:94:f4:
                    65:79:51:f1:31:f6:97:94:2e:2f:78:77:52:7c:56:
                    94:c8:33:e6:d1:df:a3:4b:db:f2:f3:95:f1:b8:5b:
                    45:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EA:01:BA:3B:9A:5F:ED:20:2E:06:E0:16:46:9E:B7:6C:4D:8D:06
            X509v3 Authority Key Identifier:
                keyid:18:EC:B5:AE:B5:0F:51:D6:D9:3C:7B:F4:92:29:D6:9F:DC:AE:21:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/3230312e35352e3132382e302f31392d3332203d3e203238363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3b:10:df:e4:11:7c:3b:5d:f8:98:8f:cd:64:29:cf:ec:b5:2a:
         bd:dd:87:42:55:51:7e:a0:4f:f1:04:08:09:5d:c2:82:f5:c8:
         6e:52:3a:4b:b3:59:e0:57:e1:86:a2:78:db:ed:6e:6a:63:bf:
         97:f0:b3:07:ae:ca:5d:9b:0a:34:8b:ad:5a:99:00:ec:c3:6b:
         ad:f9:2e:8b:a1:6d:1d:5d:75:36:58:1b:73:29:63:7c:f8:87:
         15:a5:2b:31:e5:7c:95:1b:af:f0:74:fe:e5:7e:0e:6e:c4:8d:
         13:89:01:a0:63:c1:ce:43:37:f6:71:82:8e:41:cf:b1:bf:99:
         2a:9d:db:1b:00:61:06:b1:9a:8c:04:2c:87:56:1b:90:7d:32:
         68:e4:63:bb:00:9f:94:86:23:76:ee:19:e3:ae:8f:55:88:8c:
         c4:d8:b6:88:3c:ae:57:ae:22:e4:68:27:a3:66:ca:36:1c:5e:
         a4:d1:76:38:89:07:1e:1f:97:a1:51:4e:db:a4:d2:4c:8d:72:
         e6:ce:1b:6a:42:73:72:3b:42:7f:11:75:37:e6:57:e8:63:cf:
         78:30:d4:97:a6:05:ca:91:c8:e7:74:e7:ee:e8:b3:20:35:59:
         b1:2a:55:56:b9:73:a8:3b:bd:0c:fd:49:6c:13:23:47:6e:ad:
         6a:dd:ae:89
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHoU9OWQYh6gzil6PPrQ6uRzZsjAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThFQ0I1QUVCNTBGNTFENkQ5M0M3QkY0OTIyOUQ2OUZE
Q0FFMjE2QjAeFw0yNTA5MTExNDIwMTBaFw0yNjA5MTAxNDI1MTBaMDMxMTAvBgNV
BAMTKEU1RUEwMUJBM0I5QTVGRUQyMDJFMDZFMDE2NDY5RUI3NkM0RDhEMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy7PEbC0vgx7dsVBdfdfrxj7LX
imLeswcamdln6IVRe3yorl9mUQGKK/8fAxNRld69luPmxpkfDkCzi7kjNSHBOPxV
jcXshgLaCRjUq2vEwpjzumWVeQNLEFXw/XPNb+T0ite6R/DDLP7anLx8ObNqG43b
/Dvat9XRj8iOzsl7FSnupp1LUAISvo3N+S4WgkYzn/X1TQ0lBbL/dTTTZSrkGkKF
k6OyswAtGxuduvviTLmdE634tNIzGrqxqDrQHe1CMVYoaGKGfPM5uhje83ZB/538
aa3fdVrng9x2q8uU9GV5UfEx9peULi94d1J8VpTIM+bR36NL2/LzlfG4W0VxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5eoBujuaX+0gLgbgFkaet2xNjQYwHwYDVR0j
BBgwFoAUGOy1rrUPUdbZPHv0kinWn9yuIWswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FRckFCMlhqYVRVU3FpRmp4MnlacHV4RXNlUHBkUjdLVWh5eGRzVFNB
OHAvMC8xOEVDQjVBRUI1MEY1MUQ2RDkzQzdCRjQ5MjI5RDY5RkRDQUUyMTZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4RUNCNUFFQjUwRjUxRDZE
OTNDN0JGNDkyMjlENjlGRENBRTIxNkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBUXJBQjJYamFUVVNxaUZqeDJ5WnB1eEVzZVBwZFI3S1VoeXhkc1RTQThwLzAv
MzIzMDMxMmUzNTM1MmUzMTMyMzgyZTMwMmYzMTM5MmQzMzMyMjAzZDNlMjAzMjM4
MzYzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQFyTeAMA0GCSqGSIb3DQEBCwUAA4IBAQA7EN/kEXw7
XfiYj81kKc/stSq93YdCVVF+oE/xBAgJXcKC9chuUjpLs1ngV+GGonjb7W5qY7+X
8LMHrspdmwo0i61amQDsw2ut+S6LoW0dXXU2WBtzKWN8+IcVpSsx5XyVG6/wdP7l
fg5uxI0TiQGgY8HOQzf2cYKOQc+xv5kqndsbAGEGsZqMBCyHVhuQfTJo5GO7AJ+U
hiN27hnjro9ViIzE2LaIPK5XriLkaCejZso2HF6k0XY4iQceH5ehUU7bpNJMjXLm
zhtqQnNyO0J/EXU35lfoY894MNSXpgXKkcjndOfu6LMgNVmxKlVWuXOoO70M/Uls
EyNHbq1q3a6J
-----END CERTIFICATE-----
Generated at Thu Sep 18 09:49:13 2025 by rpki-client