Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/3138362e3139322e3232342e302f32302d3332203d3e203238313435.roa
File:                     3138362e3139322e3232342e302f32302d3332203d3e203238313435.roa (raw, json)
Hash identifier:          kJllZa0t/Yy99BkYURTfpoPdzhgeVzrAnewtz9NE4+E=
Subject key identifier:   24:F9:67:65:F4:56:3A:9D:7D:AB:C0:CD:FF:FE:02:2F:ED:63:67:9F
Certificate issuer:       /CN=A347F5D0945998093ADA03E9513EA096318126D4
Certificate serial:       6A418C1B1CB7CB539B959B3CD32AF99A9D14B0C7
Authority key identifier: A3:47:F5:D0:94:59:98:09:3A:DA:03:E9:51:3E:A0:96:31:81:26:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A347F5D0945998093ADA03E9513EA096318126D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/3138362e3139322e3232342e302f32302d3332203d3e203238313435.roa
Signing time:             Wed 04 Jun 2025 19:07:46 +0000
ROA not before:           Wed 04 Jun 2025 19:02:46 +0000
ROA not after:            Wed 03 Jun 2026 19:07:46 +0000
asID:                     28145
IP address blocks:        186.192.224.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.crl
                          rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A347F5D0945998093ADA03E9513EA096318126D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 00:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:41:8c:1b:1c:b7:cb:53:9b:95:9b:3c:d3:2a:f9:9a:9d:14:b0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A347F5D0945998093ADA03E9513EA096318126D4
        Validity
            Not Before: Jun  4 19:02:46 2025 GMT
            Not After : Jun  3 19:07:46 2026 GMT
        Subject: CN=24F96765F4563A9D7DABC0CDFFFE022FED63679F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a3:b6:6c:44:f7:b4:7f:f0:b0:9b:52:f0:9e:
                    4f:08:e2:3a:8d:78:7f:69:4b:3f:0d:d7:bd:95:27:
                    ef:67:5a:89:05:3f:0d:80:af:70:b5:ae:ce:d7:f1:
                    ab:19:e1:f8:44:48:f3:72:f9:3b:e8:a9:93:9d:22:
                    e7:d6:83:93:5b:15:f9:49:ee:10:98:48:a4:47:22:
                    f0:41:d4:cb:37:35:17:b1:8c:1b:e8:dc:99:54:4d:
                    da:ae:bd:93:57:17:35:7c:48:43:2e:22:69:c4:ef:
                    3c:5a:23:77:6c:3e:66:c6:d0:4e:4e:e9:05:1d:38:
                    a2:a9:ff:0e:57:b8:e8:6b:76:a5:a8:6e:6b:d9:fd:
                    71:f2:21:f7:81:18:6d:bf:7c:12:5f:81:4a:af:1f:
                    85:90:b7:32:a6:8a:f0:0c:a2:91:16:6d:4c:cb:f2:
                    53:08:76:ac:a7:ff:42:85:42:a6:b6:9b:36:e0:d9:
                    76:83:12:a9:be:47:59:83:ae:71:eb:aa:9f:b4:17:
                    26:1a:9b:d2:d7:f0:0e:de:ce:a2:20:91:51:08:c3:
                    b4:12:98:97:ef:79:c8:3d:c1:a0:04:6d:bd:95:3f:
                    21:ae:c8:2d:2e:fd:71:b3:2a:53:31:e8:bf:69:00:
                    2b:43:b6:9e:c9:09:9b:98:4d:fc:70:f2:20:a3:30:
                    4b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F9:67:65:F4:56:3A:9D:7D:AB:C0:CD:FF:FE:02:2F:ED:63:67:9F
            X509v3 Authority Key Identifier:
                keyid:A3:47:F5:D0:94:59:98:09:3A:DA:03:E9:51:3E:A0:96:31:81:26:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A347F5D0945998093ADA03E9513EA096318126D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/3138362e3139322e3232342e302f32302d3332203d3e203238313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:46:ed:4a:c8:24:8a:6c:94:a9:07:68:51:68:a8:dd:c7:86:
         ac:d0:21:2f:be:9e:a7:b7:96:68:18:5d:fb:d8:6c:c2:5b:51:
         f7:08:16:7f:1d:da:9e:f9:f9:5f:3d:ed:d5:f7:d3:08:01:43:
         84:88:15:6f:fc:4c:97:ac:9d:08:96:27:5b:29:5c:74:88:e3:
         72:af:b8:ad:4a:9c:6f:fe:81:fe:15:4b:7e:77:42:57:1d:61:
         fa:f4:74:a3:dc:44:80:20:76:ba:5e:bc:3a:ac:a5:f7:b3:00:
         2a:33:45:3e:00:ec:91:f3:51:d3:26:17:88:a0:e7:9c:f6:75:
         af:46:68:f3:a8:8e:83:02:dc:03:d7:61:a5:35:cd:ba:59:3d:
         4d:23:ab:41:b3:67:3e:08:63:10:0b:7a:53:48:18:6c:58:18:
         54:4f:5f:ab:ea:6c:20:42:94:fe:fb:b9:aa:9b:75:84:f1:e6:
         e8:cd:fb:2c:50:e5:b1:c0:c7:14:fb:ad:5c:ce:25:d4:a8:bd:
         a9:c3:d7:c6:1c:93:26:d8:17:fb:7e:36:42:1f:ff:3a:0a:ec:
         60:6f:82:b8:c6:38:3f:ef:6f:29:83:09:12:99:ac:6e:7b:04:
         07:5e:2b:da:9e:5b:af:15:65:48:ad:f8:e9:0c:ff:f6:9b:02:
         8c:bf:63:17
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUakGMGxy3y1OblZs80yr5mp0UsMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM0N0Y1RDA5NDU5OTgwOTNBREEwM0U5NTEzRUEwOTYz
MTgxMjZENDAeFw0yNTA2MDQxOTAyNDZaFw0yNjA2MDMxOTA3NDZaMDMxMTAvBgNV
BAMTKDI0Rjk2NzY1RjQ1NjNBOUQ3REFCQzBDREZGRkUwMjJGRUQ2MzY3OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDio7ZsRPe0f/Cwm1Lwnk8I4jqN
eH9pSz8N172VJ+9nWokFPw2Ar3C1rs7X8asZ4fhESPNy+TvoqZOdIufWg5NbFflJ
7hCYSKRHIvBB1Ms3NRexjBvo3JlUTdquvZNXFzV8SEMuImnE7zxaI3dsPmbG0E5O
6QUdOKKp/w5XuOhrdqWobmvZ/XHyIfeBGG2/fBJfgUqvH4WQtzKmivAMopEWbUzL
8lMIdqyn/0KFQqa2mzbg2XaDEqm+R1mDrnHrqp+0FyYam9LX8A7ezqIgkVEIw7QS
mJfvecg9waAEbb2VPyGuyC0u/XGzKlMx6L9pACtDtp7JCZuYTfxw8iCjMEuZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJPlnZfRWOp19q8DN//4CL+1jZ58wHwYDVR0j
BBgwFoAUo0f10JRZmAk62gPpUT6gljGBJtQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1dGaG03aE1panV6M0Raa1EyUnQ0NWZtZW5DWDQyNGJqOW5OUFoyd0wx
RVUvMC9BMzQ3RjVEMDk0NTk5ODA5M0FEQTAzRTk1MTNFQTA5NjMxODEyNkQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzNDdGNUQwOTQ1OTk4MDkz
QURBMDNFOTUxM0VBMDk2MzE4MTI2RDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dXRmhtN2hNaWp1ejNEWmtRMlJ0NDVmbWVuQ1g0MjRiajluTlBaMndMMUVVLzAv
MzEzODM2MmUzMTM5MzIyZTMyMzIzNDJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMy
MzgzMTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS6wOAwDQYJKoZIhvcNAQELBQADggEBABxG7UrI
JIpslKkHaFFoqN3HhqzQIS++nqe3lmgYXfvYbMJbUfcIFn8d2p75+V897dX30wgB
Q4SIFW/8TJesnQiWJ1spXHSI43KvuK1KnG/+gf4VS353QlcdYfr0dKPcRIAgdrpe
vDqspfezACozRT4A7JHzUdMmF4ig55z2da9GaPOojoMC3APXYaU1zbpZPU0jq0Gz
Zz4IYxALelNIGGxYGFRPX6vqbCBClP77uaqbdYTx5ujN+yxQ5bHAxxT7rVzOJdSo
vanD18YckybYF/t+NkIf/zoK7GBvgrjGOD/vbymDCRKZrG57BAdeK9qeW68VZUit
+OkM//abAoy/Yxc=
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:49:13 2025 by rpki-client