Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/3136382e3138312e3135322e302f32322d3234203d3e20323634323935.roa
File:                     3136382e3138312e3135322e302f32322d3234203d3e20323634323935.roa (raw, json)
Hash identifier:          enA5gqxijJvyrQexiJtkq9Jp65o5Wz64+J9yGOE4DhM=
Subject key identifier:   47:BE:A3:92:46:9E:81:8A:50:7E:9F:D9:15:D1:DB:A1:9F:C9:10:89
Certificate issuer:       /CN=89DCCC087983CCF309AB03F388DFD612618A10BC
Certificate serial:       736D6BC839D0CB4C3B3B5206009D1FDC714FED2E
Authority key identifier: 89:DC:CC:08:79:83:CC:F3:09:AB:03:F3:88:DF:D6:12:61:8A:10:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89DCCC087983CCF309AB03F388DFD612618A10BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/3136382e3138312e3135322e302f32322d3234203d3e20323634323935.roa
Signing time:             Mon 20 Oct 2025 19:03:18 +0000
ROA not before:           Mon 20 Oct 2025 18:58:18 +0000
ROA not after:            Mon 19 Oct 2026 19:03:18 +0000
asID:                     264295
IP address blocks:        168.181.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.crl
                          rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89DCCC087983CCF309AB03F388DFD612618A10BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:6d:6b:c8:39:d0:cb:4c:3b:3b:52:06:00:9d:1f:dc:71:4f:ed:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89DCCC087983CCF309AB03F388DFD612618A10BC
        Validity
            Not Before: Oct 20 18:58:18 2025 GMT
            Not After : Oct 19 19:03:18 2026 GMT
        Subject: CN=47BEA392469E818A507E9FD915D1DBA19FC91089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0a:78:2d:03:f8:6d:94:b7:15:86:3f:a7:d1:
                    8c:bc:1a:92:ff:ae:79:a0:ea:43:cd:85:1e:6b:94:
                    40:34:73:d3:a9:b8:5a:89:fa:ee:80:d1:e7:af:97:
                    fc:c1:3b:b3:51:41:69:2e:95:f1:58:40:bc:13:aa:
                    2f:09:cf:da:7b:aa:60:d2:6d:21:d9:d8:69:b7:2e:
                    ba:c3:bb:e5:0b:f1:45:fc:4a:35:75:bb:f9:1b:22:
                    8d:be:03:48:72:78:c2:17:79:3e:d7:54:1d:81:fa:
                    2e:d6:0f:93:59:92:5f:f2:99:77:e1:2e:4c:70:82:
                    6b:d8:65:9d:9b:a9:9d:f9:c8:63:6b:52:be:4f:69:
                    62:26:27:cd:11:f3:bb:00:30:d6:2b:b5:fd:7c:25:
                    0d:9d:79:89:7f:ec:46:74:28:04:c7:5b:27:56:05:
                    be:b0:d6:8c:97:32:e0:a1:49:78:f2:73:0d:eb:5b:
                    d9:cf:6c:90:54:d8:3d:04:51:30:5a:b4:a1:a8:d3:
                    74:d6:9d:4e:32:f4:83:ec:6d:81:52:9e:b9:af:e6:
                    70:6f:32:66:43:a3:6f:61:aa:93:a2:c8:94:d3:a6:
                    e0:02:27:f3:9f:9c:26:cf:58:99:56:2e:f0:11:cb:
                    ed:54:23:92:d1:11:73:bf:ba:6c:d3:83:64:23:cb:
                    ed:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BE:A3:92:46:9E:81:8A:50:7E:9F:D9:15:D1:DB:A1:9F:C9:10:89
            X509v3 Authority Key Identifier:
                keyid:89:DC:CC:08:79:83:CC:F3:09:AB:03:F3:88:DF:D6:12:61:8A:10:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89DCCC087983CCF309AB03F388DFD612618A10BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/3136382e3138312e3135322e302f32322d3234203d3e20323634323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:86:e9:ef:3a:2a:d0:18:63:18:fb:3c:01:d8:a4:6a:b9:05:
         0b:4c:79:4b:cd:ec:d1:e5:b5:df:4c:9c:24:f7:c0:ee:e5:fa:
         7e:4b:e4:50:b2:86:92:92:bd:0c:09:14:e6:7c:90:1b:55:ba:
         77:0b:2a:d4:25:cb:80:53:1a:c5:a0:dd:1b:6a:21:84:f7:d2:
         dc:04:ad:56:35:a6:4f:95:3e:ea:98:0c:10:97:87:75:c4:ed:
         6e:50:35:96:ee:23:29:e0:52:20:4b:93:2a:2f:37:3f:bb:a6:
         8a:fa:03:cd:33:e5:13:b7:67:f5:ec:7c:8c:91:0c:e6:80:a3:
         02:94:8c:a5:30:a0:b6:62:33:f4:b3:ad:0c:ed:a4:fe:39:3c:
         77:d6:06:84:23:c0:f6:97:87:7a:40:66:7a:45:e6:b1:bc:87:
         eb:e8:0c:51:97:3b:12:14:6a:31:a3:af:28:ff:39:9c:3e:89:
         09:b7:60:97:6b:dc:b4:d6:b2:4a:ca:c4:67:62:98:f8:c6:35:
         2e:34:16:20:94:66:6f:b5:a1:6c:92:f3:85:9a:8b:0a:55:a6:
         fa:65:bb:4f:63:06:a1:bc:07:e2:94:22:80:6a:05:a2:2e:47:
         b8:7c:fd:bd:a9:e8:94:24:44:4f:2b:fc:ed:0b:f8:0f:67:5e:
         dc:19:9a:8b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUc21ryDnQy0w7O1IGAJ0f3HFP7S4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlEQ0NDMDg3OTgzQ0NGMzA5QUIwM0YzODhERkQ2MTI2
MThBMTBCQzAeFw0yNTEwMjAxODU4MThaFw0yNjEwMTkxOTAzMThaMDMxMTAvBgNV
BAMTKDQ3QkVBMzkyNDY5RTgxOEE1MDdFOUZEOTE1RDFEQkExOUZDOTEwODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcCngtA/htlLcVhj+n0Yy8GpL/
rnmg6kPNhR5rlEA0c9OpuFqJ+u6A0eevl/zBO7NRQWkulfFYQLwTqi8Jz9p7qmDS
bSHZ2Gm3LrrDu+UL8UX8SjV1u/kbIo2+A0hyeMIXeT7XVB2B+i7WD5NZkl/ymXfh
LkxwgmvYZZ2bqZ35yGNrUr5PaWImJ80R87sAMNYrtf18JQ2deYl/7EZ0KATHWydW
Bb6w1oyXMuChSXjycw3rW9nPbJBU2D0EUTBatKGo03TWnU4y9IPsbYFSnrmv5nBv
MmZDo29hqpOiyJTTpuACJ/OfnCbPWJlWLvARy+1UI5LREXO/umzTg2Qjy+3xAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUR76jkkaegYpQfp/ZFdHboZ/JEIkwHwYDVR0j
BBgwFoAUidzMCHmDzPMJqwPziN/WEmGKELwwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ybjRYb0htTlpuZ25kR2JGb0RBOUc3WDV0WkxjU2hEY3ZOTjN0NUI0UXh3
LzAvODlEQ0NDMDg3OTgzQ0NGMzA5QUIwM0YzODhERkQ2MTI2MThBMTBCQy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84OURDQ0MwODc5ODNDQ0YzMDlB
QjAzRjM4OERGRDYxMjYxOEExMEJDLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9y
bjRYb0htTlpuZ25kR2JGb0RBOUc3WDV0WkxjU2hEY3ZOTjN0NUI0UXh3LzAvMzEz
NjM4MmUzMTM4MzEyZTMxMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYz
NDMyMzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAqi1mDANBgkqhkiG9w0BAQsFAAOCAQEAZYbp7zoq
0BhjGPs8AdikarkFC0x5S83s0eW130ycJPfA7uX6fkvkULKGkpK9DAkU5nyQG1W6
dwsq1CXLgFMaxaDdG2ohhPfS3AStVjWmT5U+6pgMEJeHdcTtblA1lu4jKeBSIEuT
Ki83P7umivoDzTPlE7dn9ex8jJEM5oCjApSMpTCgtmIz9LOtDO2k/jk8d9YGhCPA
9peHekBmekXmsbyH6+gMUZc7EhRqMaOvKP85nD6JCbdgl2vctNaySsrEZ2KY+MY1
LjQWIJRmb7WhbJLzhZqLClWm+mW7T2MGobwH4pQigGoFoi5HuHz9vanolCRETyv8
7Qv4D2de3Bmaiw==
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:16:17 2025 by rpki-client