Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/3230312e37372e3132382e302f32302d3234203d3e203238363534.roa
File:                     3230312e37372e3132382e302f32302d3234203d3e203238363534.roa (raw, json)
Hash identifier:          P/JsQYXeB21c39kUxPHcd6d3z594JOq/A5xWCnGxRmk=
Subject key identifier:   E5:66:58:59:DC:85:31:72:5C:A8:30:75:4A:27:7A:A0:74:B5:B6:B4
Certificate issuer:       /CN=930909AA3662DF88849EF968F649C7749F3E8DAF
Certificate serial:       361949B1C29A048A7E92A066DCBEA82C4070CBC0
Authority key identifier: 93:09:09:AA:36:62:DF:88:84:9E:F9:68:F6:49:C7:74:9F:3E:8D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/930909AA3662DF88849EF968F649C7749F3E8DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/3230312e37372e3132382e302f32302d3234203d3e203238363534.roa
Signing time:             Wed 23 Jul 2025 14:59:55 +0000
ROA not before:           Wed 23 Jul 2025 14:54:55 +0000
ROA not after:            Wed 22 Jul 2026 14:59:55 +0000
asID:                     28654
IP address blocks:        201.77.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/930909AA3662DF88849EF968F649C7749F3E8DAF.crl
                          rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/930909AA3662DF88849EF968F649C7749F3E8DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/930909AA3662DF88849EF968F649C7749F3E8DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 13:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:19:49:b1:c2:9a:04:8a:7e:92:a0:66:dc:be:a8:2c:40:70:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930909AA3662DF88849EF968F649C7749F3E8DAF
        Validity
            Not Before: Jul 23 14:54:55 2025 GMT
            Not After : Jul 22 14:59:55 2026 GMT
        Subject: CN=E5665859DC8531725CA830754A277AA074B5B6B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:58:6a:08:0a:6e:b4:9a:e2:d3:b8:15:58:e6:
                    e9:ba:bf:99:3f:91:dd:1b:7f:c6:e7:7d:17:f1:55:
                    e1:96:6a:33:e0:6c:5d:5e:b3:55:6d:6f:88:46:e1:
                    cb:29:9f:46:57:7d:69:a3:87:1e:e5:9f:06:a5:d7:
                    a6:37:a7:69:97:70:65:18:6c:c1:cf:b0:86:34:2f:
                    6c:94:72:fd:e5:a7:8a:56:99:42:44:c7:43:ac:b3:
                    f3:c2:5e:92:61:4f:88:42:c1:a2:ba:d3:94:a5:0f:
                    15:6e:b2:32:a5:f9:f8:00:c5:f7:0d:aa:1f:ed:70:
                    d5:1f:84:4b:7a:ff:35:d9:f8:df:fb:06:e8:8d:cd:
                    ea:78:97:df:94:6b:6d:3f:c2:37:38:aa:9f:23:64:
                    29:60:ef:95:f8:d6:60:06:e1:84:9a:51:1b:9e:2f:
                    31:c7:89:18:4f:cf:7f:63:12:9b:77:95:db:e3:3d:
                    f3:56:8f:07:f4:25:0c:b3:cf:20:fa:df:50:06:e8:
                    29:3f:22:48:7f:58:ab:df:b6:e0:8e:f0:65:01:df:
                    4b:cb:4a:54:79:9e:0d:31:9f:3a:c4:a5:2c:14:6e:
                    55:82:fd:22:7a:d6:0f:3f:17:22:fc:1a:87:77:68:
                    f1:b1:40:52:91:a5:a9:8e:ab:d7:a3:4f:ad:46:85:
                    ba:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:66:58:59:DC:85:31:72:5C:A8:30:75:4A:27:7A:A0:74:B5:B6:B4
            X509v3 Authority Key Identifier:
                keyid:93:09:09:AA:36:62:DF:88:84:9E:F9:68:F6:49:C7:74:9F:3E:8D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/930909AA3662DF88849EF968F649C7749F3E8DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/930909AA3662DF88849EF968F649C7749F3E8DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/3230312e37372e3132382e302f32302d3234203d3e203238363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:58:a5:b6:bc:2b:a0:43:38:31:09:db:6d:58:33:ab:40:89:
         fa:27:2f:b1:f1:e5:4e:53:bc:02:84:2a:5a:b0:2c:08:5f:5d:
         f5:75:d5:01:bb:95:0c:82:1c:c8:e1:af:b7:ee:46:1b:c3:58:
         0c:31:da:53:25:60:dd:70:72:67:d9:de:d2:98:68:92:eb:96:
         ff:b2:74:c4:83:ac:53:ad:b5:cf:b4:fc:ed:c3:d3:18:f1:0f:
         04:06:74:31:90:36:9d:eb:e6:cc:f6:53:03:27:53:be:38:6c:
         79:18:73:cf:17:0e:5e:50:ee:fa:f6:fe:e4:84:fa:85:87:a8:
         5a:bd:c7:46:5f:fe:36:1f:c1:ad:99:b3:df:77:85:a3:94:70:
         77:a3:64:4f:91:11:1e:31:6d:d7:1e:b1:cd:3d:75:a0:23:d0:
         90:5e:60:dc:ff:75:3a:2d:31:de:79:cd:95:c9:1c:eb:f2:03:
         8f:6a:4c:6d:0b:58:5f:ad:e0:8f:df:2c:be:61:c6:78:f9:14:
         60:4b:e9:e2:68:0c:ee:c8:12:17:7d:db:8f:ef:9c:6c:cf:ab:
         d1:fa:ac:a6:a2:8c:31:79:dc:62:d0:d0:9e:ad:57:0e:2a:78:
         63:a9:48:b6:4a:a3:31:4e:65:76:80:a0:72:56:61:33:da:8d:
         fd:96:f0:aa
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNhlJscKaBIp+kqBm3L6oLEBwy8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMwOTA5QUEzNjYyREY4ODg0OUVGOTY4RjY0OUM3NzQ5
RjNFOERBRjAeFw0yNTA3MjMxNDU0NTVaFw0yNjA3MjIxNDU5NTVaMDMxMTAvBgNV
BAMTKEU1NjY1ODU5REM4NTMxNzI1Q0E4MzA3NTRBMjc3QUEwNzRCNUI2QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2WGoICm60muLTuBVY5um6v5k/
kd0bf8bnfRfxVeGWajPgbF1es1Vtb4hG4cspn0ZXfWmjhx7lnwal16Y3p2mXcGUY
bMHPsIY0L2yUcv3lp4pWmUJEx0Oss/PCXpJhT4hCwaK605SlDxVusjKl+fgAxfcN
qh/tcNUfhEt6/zXZ+N/7BuiNzep4l9+Ua20/wjc4qp8jZClg75X41mAG4YSaURue
LzHHiRhPz39jEpt3ldvjPfNWjwf0JQyzzyD631AG6Ck/Ikh/WKvftuCO8GUB30vL
SlR5ng0xnzrEpSwUblWC/SJ61g8/FyL8God3aPGxQFKRpamOq9ejT61GhbrRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5WZYWdyFMXJcqDB1Sid6oHS1trQwHwYDVR0j
BBgwFoAUkwkJqjZi34iEnvlo9knHdJ8+ja8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFBQRWR4Y2ZoYUdHM0ZvejNqTXRqRU5QZkc5S25RNUoyRjVzQkpMZXhY
NEovMC85MzA5MDlBQTM2NjJERjg4ODQ5RUY5NjhGNjQ5Qzc3NDlGM0U4REFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzMDkwOUFBMzY2MkRGODg4
NDlFRjk2OEY2NDlDNzc0OUYzRThEQUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRQUEVkeGNmaGFHRzNGb3ozak10akVOUGZHOUtuUTVKMkY1c0JKTGV4WDRKLzAv
MzIzMDMxMmUzNzM3MmUzMTMyMzgyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzYzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEyU2AMA0GCSqGSIb3DQEBCwUAA4IBAQAwWKW2vCug
QzgxCdttWDOrQIn6Jy+x8eVOU7wChCpasCwIX131ddUBu5UMghzI4a+37kYbw1gM
MdpTJWDdcHJn2d7SmGiS65b/snTEg6xTrbXPtPztw9MY8Q8EBnQxkDad6+bM9lMD
J1O+OGx5GHPPFw5eUO769v7khPqFh6havcdGX/42H8GtmbPfd4WjlHB3o2RPkREe
MW3XHrHNPXWgI9CQXmDc/3U6LTHeec2VyRzr8gOPakxtC1hfreCP3yy+YcZ4+RRg
S+niaAzuyBIXfduP75xsz6vR+qymoowxedxi0NCerVcOKnhjqUi2SqMxTmV2gKBy
VmEz2o39lvCq
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:00 2025 by rpki-client