Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/3138372e34392e3132382e302f32302d3332203d3e203238313435.roa
File:                     3138372e34392e3132382e302f32302d3332203d3e203238313435.roa (raw, json)
Hash identifier:          0B3n7GtdXPWtZcFZhRHprI53kPiha8GhyMu76EbJdyE=
Subject key identifier:   6F:26:77:F8:D8:8E:AB:67:9C:E5:B8:65:DE:AA:91:FF:CB:B5:FE:CC
Certificate issuer:       /CN=A347F5D0945998093ADA03E9513EA096318126D4
Certificate serial:       64BD85692C735907BC2FE4A24ED489413E0D7FA4
Authority key identifier: A3:47:F5:D0:94:59:98:09:3A:DA:03:E9:51:3E:A0:96:31:81:26:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A347F5D0945998093ADA03E9513EA096318126D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/3138372e34392e3132382e302f32302d3332203d3e203238313435.roa
Signing time:             Wed 04 Jun 2025 19:07:30 +0000
ROA not before:           Wed 04 Jun 2025 19:02:30 +0000
ROA not after:            Wed 03 Jun 2026 19:07:30 +0000
asID:                     28145
IP address blocks:        187.49.128.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.crl
                          rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A347F5D0945998093ADA03E9513EA096318126D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 00:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:bd:85:69:2c:73:59:07:bc:2f:e4:a2:4e:d4:89:41:3e:0d:7f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A347F5D0945998093ADA03E9513EA096318126D4
        Validity
            Not Before: Jun  4 19:02:30 2025 GMT
            Not After : Jun  3 19:07:30 2026 GMT
        Subject: CN=6F2677F8D88EAB679CE5B865DEAA91FFCBB5FECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:be:09:31:7c:0a:cf:18:c6:fe:c6:e4:53:
                    cb:06:a8:28:12:d9:fc:65:d4:1e:3f:bd:0c:a1:ac:
                    cf:d9:9b:c1:6a:8e:4c:c8:4e:db:f0:aa:58:fc:cc:
                    35:69:82:ef:38:82:11:f2:be:ca:6f:ae:9d:b3:1f:
                    09:7d:c9:bb:82:83:4d:79:f7:68:6d:b2:63:03:4f:
                    34:63:9a:ee:67:78:06:cf:e0:dc:5a:d2:c4:07:98:
                    6f:ce:c9:3e:12:be:ec:42:93:98:9f:97:b8:8b:5c:
                    b8:dd:b8:76:26:b2:f1:75:a7:39:9d:e5:7a:61:3f:
                    2a:8f:94:38:7c:94:58:7a:65:95:90:c1:0e:bd:fb:
                    b7:d6:b2:43:ea:2d:8e:67:67:3f:5c:43:39:cc:eb:
                    9a:a6:77:be:57:47:88:94:16:f7:cb:45:03:d8:ca:
                    e1:ac:20:db:9d:2f:d0:ab:34:0b:dc:bc:0d:91:a7:
                    cc:7e:99:81:07:75:5a:0b:7e:43:bd:57:42:96:f3:
                    ba:6e:b3:be:df:47:b5:5e:dc:be:11:8d:01:58:fa:
                    e0:6c:da:77:1d:03:3e:5b:56:78:f0:ed:ff:61:09:
                    40:2a:8f:50:6a:11:8f:50:b4:6c:38:0c:43:02:39:
                    a9:7d:2a:5a:89:80:91:13:21:f6:a6:64:50:87:f4:
                    5d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:26:77:F8:D8:8E:AB:67:9C:E5:B8:65:DE:AA:91:FF:CB:B5:FE:CC
            X509v3 Authority Key Identifier:
                keyid:A3:47:F5:D0:94:59:98:09:3A:DA:03:E9:51:3E:A0:96:31:81:26:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A347F5D0945998093ADA03E9513EA096318126D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/3138372e34392e3132382e302f32302d3332203d3e203238313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:dc:7b:3e:49:ad:aa:ff:40:1e:f8:cf:5c:15:43:20:b0:39:
         c3:43:cc:25:d8:d6:43:46:46:52:74:46:c5:3e:0c:ca:38:2d:
         b2:4d:fa:33:c2:70:5b:51:52:3b:2d:bf:d4:00:d7:0c:85:a7:
         2a:a7:d4:53:c1:51:cb:12:85:16:b9:ca:ed:b8:47:c8:0c:59:
         14:cb:5a:35:8c:c7:d0:75:ac:13:39:9f:1e:d4:58:d4:fc:b4:
         97:97:68:1c:5f:f0:fc:4f:79:3c:79:c5:b9:8c:5d:4b:8c:cf:
         5b:8d:b2:45:a3:05:58:d1:52:e4:c7:e7:57:5f:af:84:7a:5f:
         62:5b:f0:ec:fa:fc:20:45:c1:a0:49:0b:72:f7:39:12:1c:9e:
         09:89:85:c8:4e:07:c7:eb:d1:f0:19:b4:be:22:3b:dd:f3:d8:
         16:c5:79:ee:b9:42:8d:82:04:72:ff:3b:ed:5e:19:e3:f9:d8:
         3c:af:bd:64:b3:0a:ac:57:4c:7c:33:94:5d:ed:c6:97:7a:26:
         f9:0a:ff:af:52:0e:c0:2f:68:0a:fc:68:05:15:db:82:d1:d8:
         ba:5e:8f:5b:19:7e:50:ec:f4:61:7b:36:c5:a9:f8:8f:75:fd:
         50:ae:fb:62:e9:32:fc:e4:ee:41:73:99:4d:cd:8d:f9:f2:f3:
         d6:5f:c3:47
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZL2FaSxzWQe8L+SiTtSJQT4Nf6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM0N0Y1RDA5NDU5OTgwOTNBREEwM0U5NTEzRUEwOTYz
MTgxMjZENDAeFw0yNTA2MDQxOTAyMzBaFw0yNjA2MDMxOTA3MzBaMDMxMTAvBgNV
BAMTKDZGMjY3N0Y4RDg4RUFCNjc5Q0U1Qjg2NURFQUE5MUZGQ0JCNUZFQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2S74JMXwKzxjG/sbkU8sGqCgS
2fxl1B4/vQyhrM/Zm8FqjkzITtvwqlj8zDVpgu84ghHyvspvrp2zHwl9ybuCg015
92htsmMDTzRjmu5neAbP4Nxa0sQHmG/OyT4SvuxCk5ifl7iLXLjduHYmsvF1pzmd
5XphPyqPlDh8lFh6ZZWQwQ69+7fWskPqLY5nZz9cQznM65qmd75XR4iUFvfLRQPY
yuGsINudL9CrNAvcvA2Rp8x+mYEHdVoLfkO9V0KW87pus77fR7Ve3L4RjQFY+uBs
2ncdAz5bVnjw7f9hCUAqj1BqEY9QtGw4DEMCOal9KlqJgJETIfamZFCH9F3pAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbyZ3+NiOq2ec5bhl3qqR/8u1/swwHwYDVR0j
BBgwFoAUo0f10JRZmAk62gPpUT6gljGBJtQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1dGaG03aE1panV6M0Raa1EyUnQ0NWZtZW5DWDQyNGJqOW5OUFoyd0wx
RVUvMC9BMzQ3RjVEMDk0NTk5ODA5M0FEQTAzRTk1MTNFQTA5NjMxODEyNkQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzNDdGNUQwOTQ1OTk4MDkz
QURBMDNFOTUxM0VBMDk2MzE4MTI2RDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dXRmhtN2hNaWp1ejNEWmtRMlJ0NDVmbWVuQ1g0MjRiajluTlBaMndMMUVVLzAv
MzEzODM3MmUzNDM5MmUzMTMyMzgyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMjM4
MzEzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuzGAMA0GCSqGSIb3DQEBCwUAA4IBAQBT3Hs+Sa2q
/0Ae+M9cFUMgsDnDQ8wl2NZDRkZSdEbFPgzKOC2yTfozwnBbUVI7Lb/UANcMhacq
p9RTwVHLEoUWucrtuEfIDFkUy1o1jMfQdawTOZ8e1FjU/LSXl2gcX/D8T3k8ecW5
jF1LjM9bjbJFowVY0VLkx+dXX6+Eel9iW/Ds+vwgRcGgSQty9zkSHJ4JiYXITgfH
69HwGbS+Ijvd89gWxXnuuUKNggRy/zvtXhnj+dg8r71kswqsV0x8M5Rd7caXeib5
Cv+vUg7AL2gK/GgFFduC0di6Xo9bGX5Q7PRhezbFqfiPdf1Qrvti6TL85O5Bc5lN
zY358vPWX8NH
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:43:56 2025 by rpki-client