Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137352e302f32342d3234203d3e20323635333432.roa
File:                     3136382e3138312e3137352e302f32342d3234203d3e20323635333432.roa (raw, json)
Hash identifier:          UagkNYkQxxauGlmhfzGx64sB+plJcFtBjxUskcWqzmk=
Subject key identifier:   7A:51:E5:D9:59:A3:B3:4B:AF:D7:31:62:46:B2:EF:11:B7:16:4F:29
Certificate issuer:       /CN=5C28C8BDEE4FDF127415721B31B1D9098DD6E851
Certificate serial:       607D9A7D1E941D19A1163EFD250859D1CA893C70
Authority key identifier: 5C:28:C8:BD:EE:4F:DF:12:74:15:72:1B:31:B1:D9:09:8D:D6:E8:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137352e302f32342d3234203d3e20323635333432.roa
Signing time:             Mon 21 Jul 2025 16:56:24 +0000
ROA not before:           Mon 21 Jul 2025 16:51:24 +0000
ROA not after:            Mon 20 Jul 2026 16:56:24 +0000
asID:                     265342
IP address blocks:        168.181.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.crl
                          rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 00:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7d:9a:7d:1e:94:1d:19:a1:16:3e:fd:25:08:59:d1:ca:89:3c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C28C8BDEE4FDF127415721B31B1D9098DD6E851
        Validity
            Not Before: Jul 21 16:51:24 2025 GMT
            Not After : Jul 20 16:56:24 2026 GMT
        Subject: CN=7A51E5D959A3B34BAFD7316246B2EF11B7164F29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:df:c9:85:e7:f6:4a:10:64:7a:23:9e:ee:68:
                    c0:5d:88:97:78:2b:56:57:62:80:67:f3:8e:64:54:
                    84:44:cc:32:fc:62:4c:a7:05:d6:67:55:08:61:3b:
                    2a:26:4d:33:a2:f3:68:44:da:8c:02:da:04:7a:be:
                    b9:16:99:3c:03:cc:d1:8f:6c:b7:c3:17:0a:b6:e0:
                    ed:5f:a9:64:5a:d0:ab:36:1d:1a:f3:ed:e9:ad:c4:
                    1c:01:da:bf:58:c7:3c:e7:0a:83:9d:b0:68:75:37:
                    88:b1:ec:3e:81:d4:9d:54:34:a7:9f:21:2a:cb:37:
                    fd:17:a0:8e:4e:ac:b1:5b:ec:04:66:e2:4a:89:f7:
                    2c:42:41:a5:16:fb:4c:78:15:41:fc:11:db:4d:30:
                    1a:f7:1c:e0:df:33:69:97:a1:ad:90:08:22:9b:32:
                    5c:28:96:17:ef:a8:fe:40:f7:66:6f:6c:36:bc:04:
                    05:42:87:74:94:cd:6e:c0:57:a8:40:5d:36:2b:fe:
                    fb:df:1f:9e:5f:0c:28:5e:91:7b:c3:40:a8:b7:8f:
                    cc:4a:03:96:c6:0a:ba:73:56:f6:e9:0c:d2:41:06:
                    e3:a0:fc:2d:7f:ac:12:0f:71:c9:8c:8e:a8:59:71:
                    0d:1a:12:07:e9:2c:18:c7:59:3c:a3:e6:48:9e:f7:
                    33:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:51:E5:D9:59:A3:B3:4B:AF:D7:31:62:46:B2:EF:11:B7:16:4F:29
            X509v3 Authority Key Identifier:
                keyid:5C:28:C8:BD:EE:4F:DF:12:74:15:72:1B:31:B1:D9:09:8D:D6:E8:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C28C8BDEE4FDF127415721B31B1D9098DD6E851.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3136382e3138312e3137352e302f32342d3234203d3e20323635333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:43:67:54:96:48:82:b4:8b:3f:91:03:5b:6b:1b:92:ec:f5:
         28:6a:14:d7:13:ab:60:94:24:ac:9c:16:28:1a:bd:5b:73:43:
         8b:ff:bc:74:a7:91:08:14:b8:71:b4:3e:3d:30:24:d0:61:73:
         13:4b:56:66:05:0d:ce:1f:ae:26:76:64:a4:71:84:33:ab:fa:
         c2:82:51:fe:ab:de:1f:f5:d5:27:c4:8a:81:9d:14:9f:e2:b1:
         64:6c:bc:11:4f:fd:31:a9:42:60:67:c5:c4:cd:5d:04:02:0a:
         fa:a6:6a:e9:5d:bc:e0:0e:cc:97:11:c5:46:08:15:af:73:c5:
         da:77:b8:c3:3e:ac:6f:8e:10:f8:77:97:14:48:f9:95:ba:de:
         22:76:f8:8a:10:7f:0a:ea:7b:5a:12:5d:4c:79:fe:b3:5f:6f:
         0c:71:5a:53:df:b2:54:39:37:ba:c9:ab:fc:8e:ec:d3:e5:99:
         65:4f:d7:50:6b:32:9a:95:4c:87:70:0f:fb:bc:4e:3f:25:27:
         52:13:f9:4d:ea:14:7a:4b:c4:54:45:6b:10:a2:ad:34:49:fb:
         8f:07:f8:e1:10:3c:0b:a4:a9:8a:c8:36:c8:40:70:0e:c3:e4:
         3b:69:50:aa:98:e9:60:c5:4e:e7:b3:43:2a:e7:71:80:b4:09:
         59:cb:72:a9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYH2afR6UHRmhFj79JQhZ0cqJPHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUMyOEM4QkRFRTRGREYxMjc0MTU3MjFCMzFCMUQ5MDk4
REQ2RTg1MTAeFw0yNTA3MjExNjUxMjRaFw0yNjA3MjAxNjU2MjRaMDMxMTAvBgNV
BAMTKDdBNTFFNUQ5NTlBM0IzNEJBRkQ3MzE2MjQ2QjJFRjExQjcxNjRGMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk38mF5/ZKEGR6I57uaMBdiJd4
K1ZXYoBn845kVIREzDL8YkynBdZnVQhhOyomTTOi82hE2owC2gR6vrkWmTwDzNGP
bLfDFwq24O1fqWRa0Ks2HRrz7emtxBwB2r9YxzznCoOdsGh1N4ix7D6B1J1UNKef
ISrLN/0XoI5OrLFb7ARm4kqJ9yxCQaUW+0x4FUH8EdtNMBr3HODfM2mXoa2QCCKb
MlwolhfvqP5A92ZvbDa8BAVCh3SUzW7AV6hAXTYr/vvfH55fDChekXvDQKi3j8xK
A5bGCrpzVvbpDNJBBuOg/C1/rBIPccmMjqhZcQ0aEgfpLBjHWTyj5kie9zPPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUelHl2Vmjs0uv1zFiRrLvEbcWTykwHwYDVR0j
BBgwFoAUXCjIve5P3xJ0FXIbMbHZCY3W6FEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFg3ZW9UV29rd2d2a0tKZ0R6SmpLUDY5aGhrUlJWTkNYUXR6VExqMVZ3
b0wvMC81QzI4QzhCREVFNEZERjEyNzQxNTcyMUIzMUIxRDkwOThERDZFODUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVDMjhDOEJERUU0RkRGMTI3
NDE1NzIxQjMxQjFEOTA5OERENkU4NTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRYN2VvVFdva3dndmtLSmdEekpqS1A2OWhoa1JSVk5DWFF0elRMajFWd29MLzAv
MzEzNjM4MmUzMTM4MzEyZTMxMzczNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMzMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKi1rzANBgkqhkiG9w0BAQsFAAOCAQEA0kNn
VJZIgrSLP5EDW2sbkuz1KGoU1xOrYJQkrJwWKBq9W3NDi/+8dKeRCBS4cbQ+PTAk
0GFzE0tWZgUNzh+uJnZkpHGEM6v6woJR/qveH/XVJ8SKgZ0Un+KxZGy8EU/9MalC
YGfFxM1dBAIK+qZq6V284A7MlxHFRggVr3PF2ne4wz6sb44Q+HeXFEj5lbreInb4
ihB/Cup7WhJdTHn+s19vDHFaU9+yVDk3usmr/I7s0+WZZU/XUGsympVMh3AP+7xO
PyUnUhP5TeoUekvEVEVrEKKtNEn7jwf44RA8C6Spisg2yEBwDsPkO2lQqpjpYMVO
57NDKudxgLQJWctyqQ==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:38 2025 by rpki-client