Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235342e302f32342d3234203d3e20323633393430.roa
File:                     3133382e3138352e3235342e302f32342d3234203d3e20323633393430.roa (raw, json)
Hash identifier:          Z4tOm5Ah2Pb9JiU9HFyP1GEIkf46ROOyf9CRLSCVrpY=
Subject key identifier:   AE:89:EB:85:36:C2:16:84:40:29:2B:30:2D:2E:8B:FD:CF:49:26:04
Certificate issuer:       /CN=578E16FCC816747804043A0671C73FD1B9B9A6A5
Certificate serial:       2EE09D8478F15FB87B90C6D879B8F2DD0E6E9672
Authority key identifier: 57:8E:16:FC:C8:16:74:78:04:04:3A:06:71:C7:3F:D1:B9:B9:A6:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235342e302f32342d3234203d3e20323633393430.roa
Signing time:             Wed 01 Oct 2025 17:59:35 +0000
ROA not before:           Wed 01 Oct 2025 17:54:35 +0000
ROA not after:            Wed 30 Sep 2026 17:59:35 +0000
asID:                     263940
IP address blocks:        138.185.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.crl
                          rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 13:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e0:9d:84:78:f1:5f:b8:7b:90:c6:d8:79:b8:f2:dd:0e:6e:96:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578E16FCC816747804043A0671C73FD1B9B9A6A5
        Validity
            Not Before: Oct  1 17:54:35 2025 GMT
            Not After : Sep 30 17:59:35 2026 GMT
        Subject: CN=AE89EB8536C2168440292B302D2E8BFDCF492604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e1:ff:28:0c:59:16:ca:a0:eb:89:59:63:02:
                    69:66:ee:da:37:a3:0a:be:66:35:5b:0c:dd:ed:5e:
                    2f:8f:fa:a1:ba:79:c2:01:d4:01:33:9b:7d:6f:6c:
                    58:40:1e:ef:34:d5:e2:19:7e:78:2b:93:d4:e8:02:
                    13:be:77:6a:99:14:81:17:01:30:d4:d6:54:c6:35:
                    fb:d6:ad:71:41:a7:89:0f:ee:2d:98:ad:ff:77:bd:
                    68:a7:a2:c2:39:27:6b:47:aa:96:3d:48:37:b1:88:
                    e6:15:c1:f2:ce:84:02:83:50:f8:61:62:08:e5:08:
                    0b:eb:fc:72:82:60:b2:84:af:e9:30:e9:d9:26:11:
                    21:aa:37:f2:eb:a6:6e:d8:8b:30:61:2a:ee:c2:6e:
                    0e:fa:1b:50:fe:d4:d2:20:dd:13:4a:61:5d:85:9b:
                    4f:4e:5d:8c:b7:39:94:d8:e7:6a:3f:66:2e:d9:8e:
                    a7:b9:bb:c0:49:00:60:f7:b4:bc:90:4c:4a:b8:3b:
                    d8:c1:57:7f:6e:2e:a6:e6:c5:90:14:ed:b5:a0:4b:
                    fc:4e:8c:9d:f8:86:22:32:c9:c5:9e:93:2e:b4:47:
                    17:a9:f1:67:6e:9e:f7:49:6a:43:c9:72:e4:8d:c2:
                    75:14:46:6c:67:56:00:88:57:63:0c:b2:83:1e:8e:
                    9d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:89:EB:85:36:C2:16:84:40:29:2B:30:2D:2E:8B:FD:CF:49:26:04
            X509v3 Authority Key Identifier:
                keyid:57:8E:16:FC:C8:16:74:78:04:04:3A:06:71:C7:3F:D1:B9:B9:A6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235342e302f32342d3234203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:fa:b3:17:34:e8:17:42:7b:7f:e6:b2:d9:17:b4:b6:ff:80:
         a8:f6:2f:78:8c:82:00:99:ae:c3:59:04:49:2b:44:3f:66:37:
         f2:b1:9e:be:17:6e:3c:65:03:91:21:2d:9d:55:61:c7:91:9e:
         1d:55:f1:da:7d:f3:4d:9b:c3:95:7c:a5:7a:f3:7f:d3:64:72:
         c8:75:45:8f:29:52:26:6a:35:34:75:fd:5d:4b:b3:a8:e6:01:
         39:d6:ac:40:8e:7f:67:22:71:f7:df:a7:06:4b:04:f4:0b:eb:
         e2:df:98:3f:82:35:ff:6f:50:cd:cd:d3:c0:31:2c:00:b3:d6:
         c8:f9:84:51:67:39:3d:ec:46:fc:80:eb:f2:5e:ad:ae:c3:c3:
         5c:f9:02:f8:8d:6f:d5:2e:ac:e8:e8:f2:5c:b4:50:65:6b:01:
         15:33:d8:70:f9:0d:4b:55:32:ce:25:65:59:5f:a8:48:9e:8b:
         1b:7d:64:0c:37:43:3e:61:f5:77:67:4f:e3:ec:c5:c9:75:0f:
         be:cf:b1:42:52:14:4c:1c:41:12:db:da:c9:2c:fb:88:ed:d9:
         d4:bd:9a:92:c7:8c:fe:f0:b5:7d:81:a0:78:88:a5:6e:2d:d9:
         db:da:22:73:8d:da:73:32:a7:c6:55:db:55:7d:db:d8:bc:e1:
         5b:3e:78:83
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULuCdhHjxX7h7kMbYebjy3Q5ulnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc4RTE2RkNDODE2NzQ3ODA0MDQzQTA2NzFDNzNGRDFC
OUI5QTZBNTAeFw0yNTEwMDExNzU0MzVaFw0yNjA5MzAxNzU5MzVaMDMxMTAvBgNV
BAMTKEFFODlFQjg1MzZDMjE2ODQ0MDI5MkIzMDJEMkU4QkZEQ0Y0OTI2MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh4f8oDFkWyqDriVljAmlm7to3
owq+ZjVbDN3tXi+P+qG6ecIB1AEzm31vbFhAHu801eIZfngrk9ToAhO+d2qZFIEX
ATDU1lTGNfvWrXFBp4kP7i2Yrf93vWinosI5J2tHqpY9SDexiOYVwfLOhAKDUPhh
YgjlCAvr/HKCYLKEr+kw6dkmESGqN/Lrpm7YizBhKu7Cbg76G1D+1NIg3RNKYV2F
m09OXYy3OZTY52o/Zi7Zjqe5u8BJAGD3tLyQTEq4O9jBV39uLqbmxZAU7bWgS/xO
jJ34hiIyycWeky60Rxep8WdunvdJakPJcuSNwnUURmxnVgCIV2MMsoMejp0BAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUronrhTbCFoRAKSswLS6L/c9JJgQwHwYDVR0j
BBgwFoAUV44W/MgWdHgEBDoGccc/0bm5pqUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZbzhRZVRidUtaMjU5aTVxU1lqZWVVOG9rS0FLVTZMOFpGdTFHNVdMVDFI
LzAvNTc4RTE2RkNDODE2NzQ3ODA0MDQzQTA2NzFDNzNGRDFCOUI5QTZBNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81NzhFMTZGQ0M4MTY3NDc4MDQw
NDNBMDY3MUM3M0ZEMUI5QjlBNkE1LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z
bzhRZVRidUtaMjU5aTVxU1lqZWVVOG9rS0FLVTZMOFpGdTFHNVdMVDFILzAvMzEz
MzM4MmUzMTM4MzUyZTMyMzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
MzM5MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAIq5/jANBgkqhkiG9w0BAQsFAAOCAQEAkfqzFzTo
F0J7f+ay2Re0tv+AqPYveIyCAJmuw1kESStEP2Y38rGevhduPGUDkSEtnVVhx5Ge
HVXx2n3zTZvDlXylevN/02RyyHVFjylSJmo1NHX9XUuzqOYBOdasQI5/ZyJx99+n
BksE9Avr4t+YP4I1/29Qzc3TwDEsALPWyPmEUWc5PexG/IDr8l6trsPDXPkC+I1v
1S6s6OjyXLRQZWsBFTPYcPkNS1UyziVlWV+oSJ6LG31kDDdDPmH1d2dP4+zFyXUP
vs+xQlIUTBxBEtvaySz7iO3Z1L2akseM/vC1fYGgeIilbi3Z29oic43aczKnxlXb
VX3b2LzhWz54gw==
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:14:31 2025 by rpki-client