Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3133382e35392e3135312e302f32342d3234203d3e203238313635.roa
File:                     3133382e35392e3135312e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          h0XIYkCQYiQyLn2BzFN6YwEBfmvk9QyeGMFd7oZQEJw=
Subject key identifier:   90:A3:33:72:64:2F:54:16:5D:A4:80:D5:1E:A8:38:22:B7:D3:0B:51
Certificate issuer:       /CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
Certificate serial:       7962CBCC380AB2A5C9A1CEEE139174A0172436FE
Authority key identifier: 80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3133382e35392e3135312e302f32342d3234203d3e203238313635.roa
Signing time:             Tue 29 Jul 2025 14:08:13 +0000
ROA not before:           Tue 29 Jul 2025 14:03:13 +0000
ROA not after:            Tue 28 Jul 2026 14:08:13 +0000
asID:                     28165
IP address blocks:        138.59.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl
                          rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 15:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:62:cb:cc:38:0a:b2:a5:c9:a1:ce:ee:13:91:74:a0:17:24:36:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
        Validity
            Not Before: Jul 29 14:03:13 2025 GMT
            Not After : Jul 28 14:08:13 2026 GMT
        Subject: CN=90A33372642F54165DA480D51EA83822B7D30B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:06:ce:07:d1:7b:f2:f6:d6:65:97:4c:ee:cb:
                    9b:3a:e9:db:f1:e1:49:df:bf:37:7c:ea:d4:42:77:
                    da:cc:ea:d5:76:18:79:3d:ac:fa:5e:b8:3e:7e:e6:
                    08:d6:d0:e6:0b:10:c2:2f:bd:0b:4d:62:a5:11:71:
                    89:66:71:fc:24:a3:b3:32:4f:28:72:ad:4a:d3:c8:
                    df:77:38:8f:b5:91:42:b6:9e:61:dd:4d:a6:8a:24:
                    fb:15:7a:1f:b2:7b:a9:0b:7b:4d:f8:7f:e7:11:f0:
                    09:23:1b:83:0d:3c:63:77:5c:79:0f:1a:16:4d:6e:
                    17:a8:a2:6b:13:af:22:8a:bd:c9:1b:47:35:77:4f:
                    90:12:f5:d1:c9:34:15:79:b8:f2:91:5e:b7:c1:5b:
                    16:8c:c3:cd:ed:03:b1:75:90:37:e5:7d:de:a5:e4:
                    6c:7a:9a:57:c0:ee:47:46:c0:9e:25:71:d8:fc:5a:
                    9f:57:3b:6f:47:33:8a:37:db:76:5d:cc:b6:19:37:
                    6a:26:67:a6:6c:22:3c:f6:31:8f:b0:a2:da:e9:5c:
                    99:1d:a7:b0:17:b8:96:7c:ab:d3:21:bf:61:12:56:
                    46:fb:f5:6e:48:50:c3:39:a6:a7:38:6c:f9:cf:22:
                    36:cf:2a:c8:21:c0:b8:5f:58:70:0a:02:57:59:6d:
                    d3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A3:33:72:64:2F:54:16:5D:A4:80:D5:1E:A8:38:22:B7:D3:0B:51
            X509v3 Authority Key Identifier:
                keyid:80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3133382e35392e3135312e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:79:8e:6a:ea:94:9b:a5:b1:17:d0:63:4e:52:71:4f:11:4a:
         df:93:73:f7:84:80:7f:6e:22:85:1b:11:51:29:b0:f1:83:3c:
         1b:ee:01:69:7d:a7:7b:98:d3:58:87:02:00:d1:7d:07:74:45:
         2e:a2:5c:13:6a:f9:18:51:40:42:69:c7:8c:18:d4:c7:f5:b5:
         11:0f:25:43:0b:ac:6d:1d:1c:32:a3:15:c4:90:ff:37:63:b1:
         a4:fa:ca:bf:2e:5a:f1:72:3b:27:a8:36:fd:2a:d8:15:e5:b1:
         bf:7b:86:c4:bc:a1:fc:83:c5:6c:eb:f6:38:d1:d5:2d:bb:fa:
         81:70:4e:1d:b1:de:af:6c:9a:26:53:1f:f5:7e:1a:4c:6c:ee:
         c7:e1:68:60:e5:ce:84:8b:e9:15:ba:d1:22:37:ea:e5:90:0a:
         eb:b5:02:d5:bc:a0:65:9f:bd:a2:3c:c0:cf:3b:9a:3d:a6:49:
         d9:8c:aa:2a:97:ae:47:d7:41:a4:12:c7:12:a4:d0:0e:58:72:
         61:b8:5d:60:f1:15:ab:ef:6f:9f:90:82:79:af:46:59:f8:76:
         0c:fb:f9:ea:3c:09:86:b2:a0:73:e5:5f:4e:6c:1f:ba:4f:20:
         34:f0:73:33:19:c4:0b:15:34:be:d8:76:da:33:27:00:60:58:
         51:44:20:2c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeWLLzDgKsqXJoc7uE5F0oBckNv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBEMTJCOEQxRkM0OTNEQzc4RDZBNkQyM0U5NEI2OEQ5
REFDNkE3NzAeFw0yNTA3MjkxNDAzMTNaFw0yNjA3MjgxNDA4MTNaMDMxMTAvBgNV
BAMTKDkwQTMzMzcyNjQyRjU0MTY1REE0ODBENTFFQTgzODIyQjdEMzBCNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzBs4H0Xvy9tZll0zuy5s66dvx
4Unfvzd86tRCd9rM6tV2GHk9rPpeuD5+5gjW0OYLEMIvvQtNYqURcYlmcfwko7My
TyhyrUrTyN93OI+1kUK2nmHdTaaKJPsVeh+ye6kLe034f+cR8AkjG4MNPGN3XHkP
GhZNbheoomsTryKKvckbRzV3T5AS9dHJNBV5uPKRXrfBWxaMw83tA7F1kDflfd6l
5Gx6mlfA7kdGwJ4lcdj8Wp9XO29HM4o323ZdzLYZN2omZ6ZsIjz2MY+wotrpXJkd
p7AXuJZ8q9Mhv2ESVkb79W5IUMM5pqc4bPnPIjbPKsghwLhfWHAKAldZbdMFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkKMzcmQvVBZdpIDVHqg4IrfTC1EwHwYDVR0j
BBgwFoAUgNErjR/Ek9x41qbSPpS2jZ2sancwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMy84MEQxMkI4RDFGQzQ5M0RDNzhENkE2RDIzRTk0QjY4RDlEQUM2QTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwRDEyQjhEMUZDNDkzREM3
OEQ2QTZEMjNFOTRCNjhEOURBQzZBNzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzMv
MzEzMzM4MmUzNTM5MmUzMTM1MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAijuXMA0GCSqGSIb3DQEBCwUAA4IBAQCLeY5q6pSb
pbEX0GNOUnFPEUrfk3P3hIB/biKFGxFRKbDxgzwb7gFpfad7mNNYhwIA0X0HdEUu
olwTavkYUUBCaceMGNTH9bURDyVDC6xtHRwyoxXEkP83Y7Gk+sq/LlrxcjsnqDb9
KtgV5bG/e4bEvKH8g8Vs6/Y40dUtu/qBcE4dsd6vbJomUx/1fhpMbO7H4Whg5c6E
i+kVutEiN+rlkArrtQLVvKBln72iPMDPO5o9pknZjKoql65H10GkEscSpNAOWHJh
uF1g8RWr72+fkIJ5r0ZZ+HYM+/nqPAmGsqBz5V9ObB+6TyA08HMzGcQLFTS+2Hba
MycAYFhRRCAs
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:56:20 2025 by rpki-client