Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JNPieZYSkViezfdBQzBmFefBmrBVipYsa4FsLqowp7h/0/3133382e35392e34382e302f32322d3234203d3e20323634353937.roa
File:                     3133382e35392e34382e302f32322d3234203d3e20323634353937.roa (raw, json)
Hash identifier:          1QmmrH5TgQ93FpvXKYJZ3bR4TIDap9Z/phmBA883j9I=
Subject key identifier:   D4:6C:2F:AA:75:78:8B:ED:C0:61:7C:AB:B3:F8:33:6B:6B:22:81:BD
Certificate issuer:       /CN=A15548E56C7EDE5C824C54387439E16BEA8D7F12
Certificate serial:       73DB52A1591F7F5CB28755AC55A04F11E886E1BA
Authority key identifier: A1:55:48:E5:6C:7E:DE:5C:82:4C:54:38:74:39:E1:6B:EA:8D:7F:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15548E56C7EDE5C824C54387439E16BEA8D7F12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JNPieZYSkViezfdBQzBmFefBmrBVipYsa4FsLqowp7h/0/3133382e35392e34382e302f32322d3234203d3e20323634353937.roa
Signing time:             Mon 03 Nov 2025 19:38:33 +0000
ROA not before:           Mon 03 Nov 2025 19:33:33 +0000
ROA not after:            Mon 02 Nov 2026 19:38:33 +0000
asID:                     264597
IP address blocks:        138.59.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JNPieZYSkViezfdBQzBmFefBmrBVipYsa4FsLqowp7h/0/A15548E56C7EDE5C824C54387439E16BEA8D7F12.crl
                          rsync://rpki-repo.registro.br/repo/JNPieZYSkViezfdBQzBmFefBmrBVipYsa4FsLqowp7h/0/A15548E56C7EDE5C824C54387439E16BEA8D7F12.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15548E56C7EDE5C824C54387439E16BEA8D7F12.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:db:52:a1:59:1f:7f:5c:b2:87:55:ac:55:a0:4f:11:e8:86:e1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A15548E56C7EDE5C824C54387439E16BEA8D7F12
        Validity
            Not Before: Nov  3 19:33:33 2025 GMT
            Not After : Nov  2 19:38:33 2026 GMT
        Subject: CN=D46C2FAA75788BEDC0617CABB3F8336B6B2281BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:69:36:ba:4b:c9:63:48:39:32:77:3b:98:db:
                    13:74:76:90:65:88:fe:4f:3d:80:57:e9:c1:21:c7:
                    32:80:a4:97:78:cf:64:df:21:58:14:b8:49:a9:1f:
                    40:f1:08:e4:b9:a3:f1:88:f6:1a:eb:22:ce:6a:dc:
                    3b:70:50:58:de:84:43:37:0e:c4:c8:df:16:1f:f1:
                    b2:aa:ee:d2:9e:21:b2:7f:a4:77:6b:ef:37:b0:14:
                    f4:d3:c2:8e:4f:4b:c1:8a:75:5b:96:f6:92:06:7f:
                    20:ba:27:8a:5a:f1:65:23:2a:b4:cb:25:c5:53:fb:
                    cd:87:f1:bc:36:e8:60:86:17:2a:2c:be:f7:05:58:
                    5d:17:7e:19:0f:66:c2:a4:7a:9a:51:f4:cb:d8:71:
                    25:ac:de:29:fb:1e:35:b3:96:69:ab:a5:92:07:bf:
                    3f:ef:4c:33:e1:d5:3b:1e:e7:e2:83:83:2d:6f:a0:
                    dd:3f:de:3b:d1:b3:d6:5b:42:70:f7:07:c2:79:3e:
                    27:e2:9a:33:1c:b1:ee:8c:9a:78:7c:3b:df:76:e3:
                    7f:76:c9:76:9b:4f:da:38:a3:98:09:05:7f:73:a7:
                    ba:54:49:78:d3:d6:26:f3:3f:ee:f9:72:be:3b:1a:
                    d3:a2:c6:1b:79:f9:10:12:c8:f0:d8:9e:e6:f5:1f:
                    e5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6C:2F:AA:75:78:8B:ED:C0:61:7C:AB:B3:F8:33:6B:6B:22:81:BD
            X509v3 Authority Key Identifier:
                keyid:A1:55:48:E5:6C:7E:DE:5C:82:4C:54:38:74:39:E1:6B:EA:8D:7F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JNPieZYSkViezfdBQzBmFefBmrBVipYsa4FsLqowp7h/0/A15548E56C7EDE5C824C54387439E16BEA8D7F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15548E56C7EDE5C824C54387439E16BEA8D7F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JNPieZYSkViezfdBQzBmFefBmrBVipYsa4FsLqowp7h/0/3133382e35392e34382e302f32322d3234203d3e20323634353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:c1:c4:0a:90:f6:43:ef:78:20:c1:78:1c:3b:65:dd:01:7f:
         e0:47:8c:12:e0:0e:94:d0:70:28:b8:76:40:e8:e2:f6:fc:d9:
         bc:0d:05:a3:cd:a4:48:6c:46:d7:69:76:5b:de:0d:a0:bb:ad:
         89:f0:ce:15:75:65:cf:c4:11:33:e7:40:10:cd:53:6a:41:72:
         4f:74:ff:79:a5:eb:08:dd:81:51:a5:e8:46:a9:66:b1:a5:54:
         96:e5:54:02:87:c0:cd:bd:1f:f0:17:77:bb:82:88:0d:09:ab:
         76:d1:82:09:76:75:0d:69:d1:b0:f4:a7:ff:42:e8:fd:14:a7:
         d1:de:ff:10:60:7d:3c:be:2a:a7:a5:6d:30:76:64:cb:7b:5b:
         e2:5d:7c:4e:2c:f7:b9:51:b1:25:46:bb:d7:ee:7f:ca:94:fc:
         f0:be:a7:80:08:a8:cd:e9:18:6d:40:83:e1:ed:25:bd:cc:17:
         e3:cd:89:c2:2e:b5:b8:9d:ba:66:d4:e2:99:4f:c0:8d:f5:6d:
         c0:e4:c7:3d:ae:c1:5b:e8:2a:c7:17:05:6b:b0:a0:7d:d1:bb:
         2b:62:58:97:df:8f:d5:5e:e2:bb:cf:8d:f6:47:5c:c2:18:a5:
         09:61:ed:71:b6:fa:87:04:50:3c:94:44:10:28:93:a3:fa:4e:
         da:c3:11:e9
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUc9tSoVkff1yyh1WsVaBPEeiG4bowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE1NTQ4RTU2QzdFREU1QzgyNEM1NDM4NzQzOUUxNkJF
QThEN0YxMjAeFw0yNTExMDMxOTMzMzNaFw0yNjExMDIxOTM4MzNaMDMxMTAvBgNV
BAMTKEQ0NkMyRkFBNzU3ODhCRURDMDYxN0NBQkIzRjgzMzZCNkIyMjgxQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdaTa6S8ljSDkydzuY2xN0dpBl
iP5PPYBX6cEhxzKApJd4z2TfIVgUuEmpH0DxCOS5o/GI9hrrIs5q3DtwUFjehEM3
DsTI3xYf8bKq7tKeIbJ/pHdr7zewFPTTwo5PS8GKdVuW9pIGfyC6J4pa8WUjKrTL
JcVT+82H8bw26GCGFyosvvcFWF0XfhkPZsKkeppR9MvYcSWs3in7HjWzlmmrpZIH
vz/vTDPh1Tse5+KDgy1voN0/3jvRs9ZbQnD3B8J5PifimjMcse6Mmnh8O9924392
yXabT9o4o5gJBX9zp7pUSXjT1ibzP+75cr47GtOixht5+RASyPDYnub1H+V1AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU1GwvqnV4i+3AYXyrs/gza2sigb0wHwYDVR0j
BBgwFoAUoVVI5Wx+3lyCTFQ4dDnha+qNfxIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KTlBpZVpZU2tWaWV6ZmRCUXpCbUZlZkJtckJWaXBZc2E0RnNMcW93cDdo
LzAvQTE1NTQ4RTU2QzdFREU1QzgyNEM1NDM4NzQzOUUxNkJFQThEN0YxMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BMTU1NDhFNTZDN0VERTVDODI0
QzU0Mzg3NDM5RTE2QkVBOEQ3RjEyLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9K
TlBpZVpZU2tWaWV6ZmRCUXpCbUZlZkJtckJWaXBZc2E0RnNMcW93cDdoLzAvMzEz
MzM4MmUzNTM5MmUzNDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzUz
OTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCijswMA0GCSqGSIb3DQEBCwUAA4IBAQCgwcQKkPZD73gg
wXgcO2XdAX/gR4wS4A6U0HAouHZA6OL2/Nm8DQWjzaRIbEbXaXZb3g2gu62J8M4V
dWXPxBEz50AQzVNqQXJPdP95pesI3YFRpehGqWaxpVSW5VQCh8DNvR/wF3e7gogN
Cat20YIJdnUNadGw9Kf/Quj9FKfR3v8QYH08viqnpW0wdmTLe1viXXxOLPe5UbEl
RrvX7n/KlPzwvqeACKjN6RhtQIPh7SW9zBfjzYnCLrW4nbpm1OKZT8CN9W3A5Mc9
rsFb6CrHFwVrsKB90bsrYliX34/VXuK7z432R1zCGKUJYe1xtvqHBFA8lEQQKJOj
+k7awxHp
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:49:59 2025 by rpki-client