Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32302e302f32342d3234203d3e20323633303232.roa
File:                     3138362e3234392e32302e302f32342d3234203d3e20323633303232.roa (raw, json)
Hash identifier:          Lki/YcWXISBtZp8m0hT/WmTW3o3tgiELa8GnHsFTWUA=
Subject key identifier:   74:B0:D1:C6:66:ED:D7:72:C1:72:40:94:57:C2:42:1D:BC:D7:3B:B3
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       44F271D6FFC394E2D2D9C4C4F2CD66CE97DCEFAF
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32302e302f32342d3234203d3e20323633303232.roa
Signing time:             Mon 14 Jul 2025 14:27:15 +0000
ROA not before:           Mon 14 Jul 2025 14:22:15 +0000
ROA not after:            Mon 13 Jul 2026 14:27:15 +0000
asID:                     263022
IP address blocks:        186.249.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 00:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f2:71:d6:ff:c3:94:e2:d2:d9:c4:c4:f2:cd:66:ce:97:dc:ef:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: Jul 14 14:22:15 2025 GMT
            Not After : Jul 13 14:27:15 2026 GMT
        Subject: CN=74B0D1C666EDD772C172409457C2421DBCD73BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dd:68:df:88:e0:51:d0:3c:a5:40:52:ec:be:
                    47:69:3d:5f:65:9e:80:40:ae:eb:d3:4f:81:e7:f3:
                    1a:8a:85:09:c2:28:eb:78:c3:5e:2c:63:02:64:fe:
                    e9:c2:0c:87:f5:90:5b:c3:be:9d:24:b5:24:9f:f1:
                    3e:a2:f0:2f:0c:c8:52:02:9f:d4:6b:5a:ef:a0:0a:
                    93:a5:01:9f:bc:50:a6:8c:91:42:05:92:41:1e:9f:
                    82:3a:54:99:6e:73:bc:04:ce:ea:6b:93:fc:1c:80:
                    7d:62:ac:3e:2f:ac:d9:fb:95:13:8c:a7:4f:c0:bc:
                    b3:13:91:f3:3f:24:80:4f:42:9f:0f:99:09:2e:56:
                    09:18:ec:70:0a:ea:34:1e:65:01:99:09:e4:ca:be:
                    37:78:34:b5:68:6c:6c:49:f0:c5:3e:54:fe:f7:b0:
                    74:df:61:ea:62:c7:af:e0:6d:96:9a:90:38:ac:30:
                    28:3b:6f:ea:1e:f7:73:14:ec:75:a5:55:0b:22:49:
                    e8:05:36:d5:d5:3c:c2:b4:d8:d5:0d:b0:22:ba:66:
                    1d:60:e4:cc:b4:cb:2f:2c:94:9d:99:6e:96:b3:2d:
                    d3:47:fb:75:43:fd:66:39:6b:47:8c:ea:e6:57:32:
                    78:98:97:23:0e:fb:49:ce:47:6f:45:d6:b0:9b:bd:
                    2e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B0:D1:C6:66:ED:D7:72:C1:72:40:94:57:C2:42:1D:BC:D7:3B:B3
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32302e302f32342d3234203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:d1:22:b5:23:da:e0:8d:ce:e0:89:0d:bc:6c:35:5f:87:2b:
         1c:d3:a2:a7:31:c3:79:44:85:50:17:7d:76:37:8a:ed:b5:6e:
         3c:71:91:4d:16:6e:0e:f4:ae:fa:81:9c:33:4c:90:ca:08:93:
         21:5c:5a:44:7b:c9:08:11:cf:fc:69:a1:d9:5e:59:a3:35:f3:
         ae:87:26:e3:75:e4:7e:19:5a:75:7c:af:e1:fa:4b:5b:56:fa:
         79:3b:03:e1:fc:e4:23:b7:e6:66:9f:ac:49:77:34:cf:d9:a0:
         bb:ad:b4:3e:38:25:d4:ba:db:6a:71:f1:3f:91:ca:2b:4e:f0:
         06:d5:9e:f6:ba:0a:0d:71:81:ca:22:32:17:36:99:63:0f:42:
         7e:90:7f:84:4b:10:b4:0d:d8:ef:db:13:7b:4d:c2:d5:2e:81:
         34:02:e6:65:a2:19:69:70:06:df:7d:1b:dc:4b:57:b8:5f:4f:
         d0:9a:10:26:a7:14:b0:8e:89:38:07:59:17:f6:2d:da:d0:7f:
         63:45:2f:0f:7b:5b:cd:fc:3c:a9:18:65:5b:1f:8c:3c:c3:46:
         c1:55:ce:35:0b:1c:b4:14:99:61:86:a3:6b:5d:69:d6:e6:11:
         34:ab:2d:73:d4:c4:b5:1b:4f:98:a4:f9:bd:04:df:f0:8f:f9:
         0d:ce:e8:77
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURPJx1v/DlOLS2cTE8s1mzpfc768wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ4RDEzNzJGRDFEMkEzMkJGOUU5QTBGMTZDMkY2MERG
RjkyQUQ2QjAeFw0yNTA3MTQxNDIyMTVaFw0yNjA3MTMxNDI3MTVaMDMxMTAvBgNV
BAMTKDc0QjBEMUM2NjZFREQ3NzJDMTcyNDA5NDU3QzI0MjFEQkNENzNCQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33WjfiOBR0DylQFLsvkdpPV9l
noBAruvTT4Hn8xqKhQnCKOt4w14sYwJk/unCDIf1kFvDvp0ktSSf8T6i8C8MyFIC
n9RrWu+gCpOlAZ+8UKaMkUIFkkEen4I6VJluc7wEzuprk/wcgH1irD4vrNn7lROM
p0/AvLMTkfM/JIBPQp8PmQkuVgkY7HAK6jQeZQGZCeTKvjd4NLVobGxJ8MU+VP73
sHTfYepix6/gbZaakDisMCg7b+oe93MU7HWlVQsiSegFNtXVPMK02NUNsCK6Zh1g
5My0yy8slJ2ZbpazLdNH+3VD/WY5a0eM6uZXMniYlyMO+0nOR29F1rCbvS73AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdLDRxmbt13LBckCUV8JCHbzXO7MwHwYDVR0j
BBgwFoAUvY0Tcv0dKjK/npoPFsL2Df+SrWswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXB0M3JLeWVqTWVkNXhoOFA4dXhVQ29zeTVpaVFyY1ZGelpGeFhUNUJx
QkMvMC9CRDhEMTM3MkZEMUQyQTMyQkY5RTlBMEYxNkMyRjYwREZGOTJBRDZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEOEQxMzcyRkQxRDJBMzJC
RjlFOUEwRjE2QzJGNjBERkY5MkFENkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlwdDNyS3llak1lZDV4aDhQOHV4VUNvc3k1aWlRcmNWRnpaRnhYVDVCcUJDLzAv
MzEzODM2MmUzMjM0MzkyZTMyMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6+RQwDQYJKoZIhvcNAQELBQADggEBALbRIrUj
2uCNzuCJDbxsNV+HKxzToqcxw3lEhVAXfXY3iu21bjxxkU0Wbg70rvqBnDNMkMoI
kyFcWkR7yQgRz/xpodleWaM1866HJuN15H4ZWnV8r+H6S1tW+nk7A+H85CO35maf
rEl3NM/ZoLuttD44JdS622px8T+RyitO8AbVnva6Cg1xgcoiMhc2mWMPQn6Qf4RL
ELQN2O/bE3tNwtUugTQC5mWiGWlwBt99G9xLV7hfT9CaECanFLCOiTgHWRf2LdrQ
f2NFLw97W838PKkYZVsfjDzDRsFVzjULHLQUmWGGo2tdadbmETSrLXPUxLUbT5ik
+b0E3/CP+Q3O6Hc=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:05:38 2025 by rpki-client