Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32332d3233203d3e20323633393430.roa
File:                     3133382e3138352e3235322e302f32332d3233203d3e20323633393430.roa (raw, json)
Hash identifier:          koJs57Nrs1LlrydC3lWkgXscoCjx65J74iJ7Va5NOXY=
Subject key identifier:   60:6C:49:4F:DC:EE:2D:5F:89:A7:B8:11:78:96:99:B7:36:9E:85:F6
Certificate issuer:       /CN=578E16FCC816747804043A0671C73FD1B9B9A6A5
Certificate serial:       2A97666B9BF54B2D34BA2A68329890E4C67867B8
Authority key identifier: 57:8E:16:FC:C8:16:74:78:04:04:3A:06:71:C7:3F:D1:B9:B9:A6:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32332d3233203d3e20323633393430.roa
Signing time:             Wed 01 Oct 2025 17:59:34 +0000
ROA not before:           Wed 01 Oct 2025 17:54:34 +0000
ROA not after:            Wed 30 Sep 2026 17:59:34 +0000
asID:                     263940
IP address blocks:        138.185.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.crl
                          rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 13:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:97:66:6b:9b:f5:4b:2d:34:ba:2a:68:32:98:90:e4:c6:78:67:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578E16FCC816747804043A0671C73FD1B9B9A6A5
        Validity
            Not Before: Oct  1 17:54:34 2025 GMT
            Not After : Sep 30 17:59:34 2026 GMT
        Subject: CN=606C494FDCEE2D5F89A7B811789699B7369E85F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:da:5c:d6:1c:aa:d3:e4:7e:19:2c:70:4b:9b:
                    3b:6f:02:7d:38:f7:94:fd:bf:88:ab:1e:d4:08:38:
                    7a:24:3e:01:81:af:d1:4b:8f:19:2a:f1:35:52:f4:
                    80:62:12:41:cd:53:a0:11:ea:a8:24:73:6f:bf:00:
                    c5:46:69:2c:6b:c0:13:20:d5:34:c0:2e:53:59:a1:
                    44:3b:2b:e8:f4:4e:78:b3:52:7e:b2:ae:43:8b:35:
                    9d:66:4d:81:62:f0:8e:94:41:96:15:ae:3a:25:3b:
                    19:5a:86:78:0f:f7:02:68:65:2b:51:97:54:ab:31:
                    17:93:98:2c:a2:f7:bf:63:08:48:16:7e:34:55:64:
                    a3:61:48:f7:88:b5:a0:f8:38:3e:10:95:87:3e:c6:
                    bf:69:4d:57:70:11:2c:f8:8d:60:be:17:2b:84:bd:
                    22:fe:a4:a6:49:85:cc:d7:ed:a8:6b:09:5d:08:a6:
                    a2:cf:75:19:87:09:ee:04:05:d9:ec:7b:8b:96:43:
                    f1:31:71:38:49:33:b3:e0:a1:d9:1e:cf:d6:84:88:
                    51:76:64:f3:ef:cd:fe:4a:32:3b:6a:a0:ea:e3:48:
                    14:b1:87:c3:2b:d8:20:5b:cb:1d:7d:d3:92:f5:dd:
                    3f:12:cf:1d:e6:94:d0:f0:ae:ba:7c:a8:6f:13:63:
                    ba:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6C:49:4F:DC:EE:2D:5F:89:A7:B8:11:78:96:99:B7:36:9E:85:F6
            X509v3 Authority Key Identifier:
                keyid:57:8E:16:FC:C8:16:74:78:04:04:3A:06:71:C7:3F:D1:B9:B9:A6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32332d3233203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:89:a7:99:49:e6:1b:69:cd:ed:bc:84:9f:12:5c:8f:9d:8e:
         60:e0:d3:7c:6f:de:05:10:5e:85:e6:13:64:75:b5:4d:8e:d9:
         20:5e:1f:d0:21:97:7f:48:6c:48:c5:8c:32:8e:73:eb:2c:63:
         3c:a2:39:ff:18:77:26:34:fc:c9:54:03:52:b8:6b:33:dc:25:
         bd:25:00:a5:0e:c0:c1:a7:84:1d:78:78:d2:8b:f1:e6:a6:46:
         c6:ca:b6:da:50:75:76:a3:fa:eb:f1:b1:95:9e:98:b9:c2:84:
         5c:38:e4:9c:2e:59:ec:79:1d:de:52:8d:ea:63:01:91:8b:43:
         5c:60:f1:5d:c8:27:ef:ab:65:9d:fd:d8:f5:26:83:3c:5a:84:
         30:79:92:2b:9f:1d:96:41:d7:e8:ff:c3:3e:ce:ad:48:3b:31:
         07:4b:ee:9b:49:25:97:a9:89:51:ae:4a:7e:2a:3e:9f:1a:8d:
         b4:de:a9:92:91:ab:96:37:a6:8c:58:94:42:cc:8e:a0:cf:0e:
         27:14:52:54:e9:06:aa:7a:9f:38:c0:f2:f5:95:40:69:45:a0:
         80:e3:4c:3a:17:ec:61:48:10:c9:85:fe:d7:c7:0d:25:1a:6f:
         59:dd:e8:fd:ea:02:77:fe:64:89:a8:85:80:22:07:c1:4d:be:
         dd:c3:6f:d3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUKpdma5v1Sy00uipoMpiQ5MZ4Z7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc4RTE2RkNDODE2NzQ3ODA0MDQzQTA2NzFDNzNGRDFC
OUI5QTZBNTAeFw0yNTEwMDExNzU0MzRaFw0yNjA5MzAxNzU5MzRaMDMxMTAvBgNV
BAMTKDYwNkM0OTRGRENFRTJENUY4OUE3QjgxMTc4OTY5OUI3MzY5RTg1RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf2lzWHKrT5H4ZLHBLmztvAn04
95T9v4irHtQIOHokPgGBr9FLjxkq8TVS9IBiEkHNU6AR6qgkc2+/AMVGaSxrwBMg
1TTALlNZoUQ7K+j0TnizUn6yrkOLNZ1mTYFi8I6UQZYVrjolOxlahngP9wJoZStR
l1SrMReTmCyi979jCEgWfjRVZKNhSPeItaD4OD4QlYc+xr9pTVdwESz4jWC+FyuE
vSL+pKZJhczX7ahrCV0IpqLPdRmHCe4EBdnse4uWQ/ExcThJM7Pgodkez9aEiFF2
ZPPvzf5KMjtqoOrjSBSxh8Mr2CBbyx1905L13T8Szx3mlNDwrrp8qG8TY7q5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUYGxJT9zuLV+Jp7gReJaZtzaehfYwHwYDVR0j
BBgwFoAUV44W/MgWdHgEBDoGccc/0bm5pqUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZbzhRZVRidUtaMjU5aTVxU1lqZWVVOG9rS0FLVTZMOFpGdTFHNVdMVDFI
LzAvNTc4RTE2RkNDODE2NzQ3ODA0MDQzQTA2NzFDNzNGRDFCOUI5QTZBNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81NzhFMTZGQ0M4MTY3NDc4MDQw
NDNBMDY3MUM3M0ZEMUI5QjlBNkE1LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z
bzhRZVRidUtaMjU5aTVxU1lqZWVVOG9rS0FLVTZMOFpGdTFHNVdMVDFILzAvMzEz
MzM4MmUzMTM4MzUyZTMyMzUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYz
MzM5MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAYq5/DANBgkqhkiG9w0BAQsFAAOCAQEAjImnmUnm
G2nN7byEnxJcj52OYODTfG/eBRBeheYTZHW1TY7ZIF4f0CGXf0hsSMWMMo5z6yxj
PKI5/xh3JjT8yVQDUrhrM9wlvSUApQ7AwaeEHXh40ovx5qZGxsq22lB1dqP66/Gx
lZ6YucKEXDjknC5Z7Hkd3lKN6mMBkYtDXGDxXcgn76tlnf3Y9SaDPFqEMHmSK58d
lkHX6P/DPs6tSDsxB0vum0kll6mJUa5Kfio+nxqNtN6pkpGrljemjFiUQsyOoM8O
JxRSVOkGqnqfOMDy9ZVAaUWggONMOhfsYUgQyYX+18cNJRpvWd3o/eoCd/5kiaiF
gCIHwU2+3cNv0w==
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:14:43 2025 by rpki-client