Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/3133382e3131382e3137342e302f32342d3234203d3e20323632343438.roa
File:                     3133382e3131382e3137342e302f32342d3234203d3e20323632343438.roa (raw, json)
Hash identifier:          bqh4pobkK8PrUKHML9W68Qti8pfoYxhyaZaqT9vh5l0=
Subject key identifier:   9F:D8:56:B4:C3:B4:F3:72:5F:A4:B4:E7:1A:10:6B:9A:73:91:9C:6D
Certificate issuer:       /CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
Certificate serial:       4749520E658111B4EF487B8FB7DAE1487DAD8C7F
Authority key identifier: 4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/3133382e3131382e3137342e302f32342d3234203d3e20323632343438.roa
Signing time:             Thu 07 Aug 2025 03:44:43 +0000
ROA not before:           Thu 07 Aug 2025 03:39:43 +0000
ROA not after:            Thu 06 Aug 2026 03:44:43 +0000
asID:                     262448
IP address blocks:        138.118.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl
                          rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 04:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:49:52:0e:65:81:11:b4:ef:48:7b:8f:b7:da:e1:48:7d:ad:8c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97
        Validity
            Not Before: Aug  7 03:39:43 2025 GMT
            Not After : Aug  6 03:44:43 2026 GMT
        Subject: CN=9FD856B4C3B4F3725FA4B4E71A106B9A73919C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:f8:b1:36:e4:de:6f:56:5b:c7:36:1f:b7:
                    70:51:71:4c:ef:16:37:86:8d:93:b3:6b:7b:27:c6:
                    6d:92:6e:f0:74:35:da:e2:d3:7b:99:53:88:55:b6:
                    98:07:a2:13:54:b4:15:54:d4:21:67:53:82:ec:00:
                    a2:47:0b:ab:92:30:f5:c7:2a:ce:5a:68:17:df:1c:
                    f7:40:f6:9c:78:61:f9:48:0d:69:f5:c2:0b:a7:31:
                    12:a3:73:65:b8:75:c7:0b:9e:52:ab:13:6e:e6:b0:
                    f7:90:b6:eb:a9:c2:95:8d:d5:ec:16:97:61:b4:2d:
                    97:54:67:ea:e6:de:f4:53:f7:41:d5:16:69:8a:77:
                    f2:65:91:3a:31:d6:71:e8:41:b3:4d:3c:6a:0b:58:
                    51:a7:be:e0:23:1a:5d:53:aa:a0:b6:60:1a:42:88:
                    c2:44:50:1c:8d:ec:f6:db:8a:1a:9e:50:e7:ac:0f:
                    be:e1:87:ad:88:7a:b0:2e:54:9f:5a:1a:8a:30:be:
                    f3:31:da:09:e6:5c:18:0c:a0:98:7a:d3:38:bb:8b:
                    10:fe:f2:3d:28:cc:ae:36:47:08:73:3b:c9:8c:ae:
                    17:51:fc:56:26:f6:dd:7a:5f:da:77:5a:ce:47:ff:
                    db:12:1d:5a:31:92:0e:98:b3:98:30:f7:cb:d6:0d:
                    5b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D8:56:B4:C3:B4:F3:72:5F:A4:B4:E7:1A:10:6B:9A:73:91:9C:6D
            X509v3 Authority Key Identifier:
                keyid:4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/3133382e3131382e3137342e302f32342d3234203d3e20323632343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:0a:ee:cf:9b:6a:79:68:ef:17:00:ac:f7:8f:c0:31:ce:11:
         28:3d:cb:e2:c2:54:5e:cb:a3:17:a7:29:d5:13:13:b7:72:19:
         20:fb:f6:d2:bd:48:c0:5e:89:d8:bf:be:bf:02:8a:6d:35:4c:
         76:19:15:64:da:bd:e3:2e:b0:99:93:30:a1:f9:24:23:77:49:
         4c:87:06:03:df:15:cc:18:ac:89:9b:70:a9:4e:e1:34:32:36:
         34:d6:58:3d:53:e1:a3:86:57:b4:4c:a3:c2:52:f5:a8:8d:e7:
         df:14:9a:53:98:7b:ec:67:6b:48:10:8e:dd:a3:2e:33:0c:0f:
         d4:11:85:c7:13:f5:56:45:33:1d:cc:d1:1b:6b:f4:91:db:35:
         be:6f:41:56:ba:44:27:fe:25:b0:67:aa:a9:90:26:aa:d0:21:
         41:0a:62:33:b8:b6:a9:88:86:68:2b:42:ef:20:ac:c8:6d:62:
         ba:c5:01:94:b7:1e:db:b4:51:d4:1f:4e:2f:65:ce:9f:47:2e:
         1c:ad:ef:95:40:d6:8e:96:d1:eb:62:83:bb:5d:79:9a:ba:df:
         1c:30:c2:e1:2c:76:65:2c:64:1f:82:33:ca:22:33:22:66:f8:
         bc:c4:cc:87:9c:eb:73:01:ff:2c:68:3c:e5:23:14:6e:38:66:
         b2:ef:74:e2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUR0lSDmWBEbTvSHuPt9rhSH2tjH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEYxMEQyMjBCN0Q1NTdBOTY1QUU4QjI2RERFQjFCRERC
MTY2QUU5NzAeFw0yNTA4MDcwMzM5NDNaFw0yNjA4MDYwMzQ0NDNaMDMxMTAvBgNV
BAMTKDlGRDg1NkI0QzNCNEYzNzI1RkE0QjRFNzFBMTA2QjlBNzM5MTlDNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vPixNuTeb1ZbxzYft3BRcUzv
FjeGjZOza3snxm2SbvB0Ndri03uZU4hVtpgHohNUtBVU1CFnU4LsAKJHC6uSMPXH
Ks5aaBffHPdA9px4YflIDWn1wgunMRKjc2W4dccLnlKrE27msPeQtuupwpWN1ewW
l2G0LZdUZ+rm3vRT90HVFmmKd/JlkTox1nHoQbNNPGoLWFGnvuAjGl1TqqC2YBpC
iMJEUByN7PbbihqeUOesD77hh62IerAuVJ9aGoowvvMx2gnmXBgMoJh60zi7ixD+
8j0ozK42RwhzO8mMrhdR/FYm9t16X9p3Ws5H/9sSHVoxkg6Ys5gw98vWDVs1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUn9hWtMO083JfpLTnGhBrmnORnG0wHwYDVR0j
BBgwFoAUTxDSILfVV6llrosm3esb3bFmrpcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ZQYU1FZlBXOFl1WXpHTFYxTXR1U3dwNUw0Skhuc3FiWmdXNG9FWkpN
Uk0vMC80RjEwRDIyMEI3RDU1N0E5NjVBRThCMjZEREVCMUJEREIxNjZBRTk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGMTBEMjIwQjdENTU3QTk2
NUFFOEIyNkRERUIxQkREQjE2NkFFOTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d2UGFNRWZQVzhZdVl6R0xWMU10dVN3cDVMNEpIbnNxYlpnVzRvRVpKTVJNLzAv
MzEzMzM4MmUzMTMxMzgyZTMxMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM0MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp2rjANBgkqhkiG9w0BAQsFAAOCAQEAhwru
z5tqeWjvFwCs94/AMc4RKD3L4sJUXsujF6cp1RMTt3IZIPv20r1IwF6J2L++vwKK
bTVMdhkVZNq94y6wmZMwofkkI3dJTIcGA98VzBisiZtwqU7hNDI2NNZYPVPho4ZX
tEyjwlL1qI3n3xSaU5h77GdrSBCO3aMuMwwP1BGFxxP1VkUzHczRG2v0kds1vm9B
VrpEJ/4lsGeqqZAmqtAhQQpiM7i2qYiGaCtC7yCsyG1iusUBlLce27RR1B9OL2XO
n0cuHK3vlUDWjpbR62KDu115mrrfHDDC4Sx2ZSxkH4IzyiIzImb4vMTMh5zrcwH/
LGg85SMUbjhmsu904g==
-----END CERTIFICATE-----
Generated at Wed Aug 20 20:20:18 2025 by rpki-client