Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/3139302e382e3136302e302f32322d3332203d3e20323730363138.roa
File:                     3139302e382e3136302e302f32322d3332203d3e20323730363138.roa (raw, json)
Hash identifier:          NFOlwNRCMdO9B97BInd7TuPA7qaYKAf/pG9TnCSjm5w=
Subject key identifier:   85:88:CE:7F:85:70:B9:21:F1:E1:7A:05:F1:9F:21:74:AA:4A:8F:84
Certificate issuer:       /CN=1A384BFA8860D53ABCEDBC8A91B37A972B89181B
Certificate serial:       0B6B4F6085943E55C2DCC62A229B8C5C6B239B86
Authority key identifier: 1A:38:4B:FA:88:60:D5:3A:BC:ED:BC:8A:91:B3:7A:97:2B:89:18:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/3139302e382e3136302e302f32322d3332203d3e20323730363138.roa
Signing time:             Sun 31 Aug 2025 17:08:54 +0000
ROA not before:           Sun 31 Aug 2025 17:03:54 +0000
ROA not after:            Sun 30 Aug 2026 17:08:54 +0000
asID:                     270618
IP address blocks:        190.8.160.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.crl
                          rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6b:4f:60:85:94:3e:55:c2:dc:c6:2a:22:9b:8c:5c:6b:23:9b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A384BFA8860D53ABCEDBC8A91B37A972B89181B
        Validity
            Not Before: Aug 31 17:03:54 2025 GMT
            Not After : Aug 30 17:08:54 2026 GMT
        Subject: CN=8588CE7F8570B921F1E17A05F19F2174AA4A8F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:82:c1:17:88:8d:b6:c7:03:e9:30:23:71:24:
                    9c:dd:b9:30:a3:30:42:69:42:ae:10:c5:f6:ad:f5:
                    1f:d0:f8:8f:86:70:a7:25:04:b5:f2:a3:e3:7e:85:
                    7f:35:1e:82:31:db:07:3b:58:8b:63:4f:78:d3:78:
                    9a:13:36:d6:03:5c:44:d6:52:a6:6f:62:23:70:7d:
                    9c:a3:0c:07:96:d8:73:24:88:42:a3:45:54:34:be:
                    5d:e5:79:58:01:a9:70:bb:ed:45:ce:e0:45:a0:ba:
                    f2:09:97:cd:56:72:70:39:44:08:bb:83:74:41:59:
                    7e:c4:f2:80:33:e3:88:dd:bc:46:a5:ca:17:af:9a:
                    02:89:92:e7:14:62:fd:07:12:40:03:5c:4e:f9:71:
                    90:8a:ed:2f:33:72:40:4a:cd:b2:88:24:56:72:6f:
                    40:19:07:af:b5:f7:21:5d:cc:d7:99:a5:94:97:45:
                    bd:6e:09:07:bd:eb:54:cb:aa:8e:bb:bb:5f:47:f6:
                    5a:ef:af:d5:ed:17:0d:ec:ad:68:39:ed:f7:b5:ed:
                    70:03:e8:f4:6b:1a:ba:96:2a:de:59:3a:e9:67:e2:
                    24:09:e1:fa:18:2d:08:6d:8d:75:9e:1d:46:42:2d:
                    d0:7b:ae:d2:7e:d3:ec:15:d0:97:82:e0:15:42:af:
                    15:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:88:CE:7F:85:70:B9:21:F1:E1:7A:05:F1:9F:21:74:AA:4A:8F:84
            X509v3 Authority Key Identifier:
                keyid:1A:38:4B:FA:88:60:D5:3A:BC:ED:BC:8A:91:B3:7A:97:2B:89:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/3139302e382e3136302e302f32322d3332203d3e20323730363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:3c:41:9b:d3:ea:69:bc:63:93:cb:2d:b7:02:d8:40:f3:33:
         62:62:47:84:d9:6e:86:cf:2f:d5:37:dd:c7:97:a7:65:c5:9a:
         30:01:b9:0b:dd:f9:d6:db:ee:9f:fc:de:fd:ff:9b:27:28:cb:
         0c:90:fa:bd:d0:bf:0e:31:9c:59:97:02:61:a2:39:5a:5b:f7:
         fe:a4:9f:cf:0b:5e:14:0b:e6:56:8d:7c:4a:87:c5:2b:e6:11:
         34:6e:61:0d:b4:85:a0:e7:2e:d0:ae:0b:28:ad:fa:78:72:12:
         71:8f:2b:5e:47:32:a5:91:16:42:fe:49:4d:87:54:e0:82:42:
         0a:1a:0a:8f:5a:ff:eb:2d:95:93:8c:a3:98:33:9e:28:cf:7b:
         08:a4:4e:b7:02:c2:a0:96:b3:1e:4e:15:b7:59:04:f0:6d:fb:
         a6:38:b2:ac:bf:a5:4c:09:78:04:e9:ca:7a:db:8a:69:c6:ca:
         b0:f5:0c:74:de:0b:84:ec:ea:93:7c:b9:01:04:1d:fa:ee:e3:
         5d:48:81:eb:ad:98:da:c8:cd:6c:1f:e9:bf:2f:20:ba:1d:49:
         7f:2d:0c:ba:60:7d:f2:e5:cd:ad:65:ea:bc:f7:67:52:3c:14:
         7f:1e:45:c4:d6:c9:a4:ba:c7:a7:b6:d8:f7:2c:ec:be:d9:ca:
         4a:70:21:88
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUC2tPYIWUPlXC3MYqIpuMXGsjm4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUEzODRCRkE4ODYwRDUzQUJDRURCQzhBOTFCMzdBOTcy
Qjg5MTgxQjAeFw0yNTA4MzExNzAzNTRaFw0yNjA4MzAxNzA4NTRaMDMxMTAvBgNV
BAMTKDg1ODhDRTdGODU3MEI5MjFGMUUxN0EwNUYxOUYyMTc0QUE0QThGODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtgsEXiI22xwPpMCNxJJzduTCj
MEJpQq4Qxfat9R/Q+I+GcKclBLXyo+N+hX81HoIx2wc7WItjT3jTeJoTNtYDXETW
UqZvYiNwfZyjDAeW2HMkiEKjRVQ0vl3leVgBqXC77UXO4EWguvIJl81WcnA5RAi7
g3RBWX7E8oAz44jdvEalyhevmgKJkucUYv0HEkADXE75cZCK7S8zckBKzbKIJFZy
b0AZB6+19yFdzNeZpZSXRb1uCQe961TLqo67u19H9lrvr9XtFw3srWg57fe17XAD
6PRrGrqWKt5ZOuln4iQJ4foYLQhtjXWeHUZCLdB7rtJ+0+wV0JeC4BVCrxV1AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUhYjOf4VwuSHx4XoF8Z8hdKpKj4QwHwYDVR0j
BBgwFoAUGjhL+ohg1Tq87byKkbN6lyuJGBswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9taEdFSEVvRlRGZTNOY2NVRkY0M3pBaTFBcEhqN2VXQ3Y1cmJheVkzQlNa
LzEvMUEzODRCRkE4ODYwRDUzQUJDRURCQzhBOTFCMzdBOTcyQjg5MTgxQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xQTM4NEJGQTg4NjBENTNBQkNF
REJDOEE5MUIzN0E5NzJCODkxODFCLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9t
aEdFSEVvRlRGZTNOY2NVRkY0M3pBaTFBcEhqN2VXQ3Y1cmJheVkzQlNaLzEvMzEz
OTMwMmUzODJlMzEzNjMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMwMzYz
MTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCvgigMA0GCSqGSIb3DQEBCwUAA4IBAQB8PEGb0+ppvGOT
yy23AthA8zNiYkeE2W6Gzy/VN93Hl6dlxZowAbkL3fnW2+6f/N79/5snKMsMkPq9
0L8OMZxZlwJhojlaW/f+pJ/PC14UC+ZWjXxKh8Ur5hE0bmENtIWg5y7Qrgsorfp4
chJxjyteRzKlkRZC/klNh1TggkIKGgqPWv/rLZWTjKOYM54oz3sIpE63AsKglrMe
ThW3WQTwbfumOLKsv6VMCXgE6cp624ppxsqw9Qx03guE7OqTfLkBBB367uNdSIHr
rZjayM1sH+m/LyC6HUl/LQy6YH3y5c2tZeq892dSPBR/HkXE1smkusenttj3LOy+
2cpKcCGI
-----END CERTIFICATE-----
Generated at Thu Sep 18 23:45:46 2025 by rpki-client