Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/3136382e3138312e3138382e302f32322d3332203d3e20323635333436.roa
File:                     3136382e3138312e3138382e302f32322d3332203d3e20323635333436.roa (raw, json)
Hash identifier:          6TF3CAaX0wGFb3rLOkRyk6qcm4QXEm68gAYhXxsmUwI=
Subject key identifier:   BA:0D:48:7C:68:57:7C:55:7A:4F:A2:D1:DA:5F:6D:79:53:9D:EA:CE
Certificate issuer:       /CN=61355836BCE7745F7FD887251FDA3AE8CDED35FD
Certificate serial:       4963D940B69372D4DEA68ACBEC3B41A92B88D155
Authority key identifier: 61:35:58:36:BC:E7:74:5F:7F:D8:87:25:1F:DA:3A:E8:CD:ED:35:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61355836BCE7745F7FD887251FDA3AE8CDED35FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/3136382e3138312e3138382e302f32322d3332203d3e20323635333436.roa
Signing time:             Fri 01 Aug 2025 17:30:01 +0000
ROA not before:           Fri 01 Aug 2025 17:25:01 +0000
ROA not after:            Fri 31 Jul 2026 17:30:01 +0000
asID:                     265346
IP address blocks:        168.181.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/61355836BCE7745F7FD887251FDA3AE8CDED35FD.crl
                          rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/61355836BCE7745F7FD887251FDA3AE8CDED35FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61355836BCE7745F7FD887251FDA3AE8CDED35FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:63:d9:40:b6:93:72:d4:de:a6:8a:cb:ec:3b:41:a9:2b:88:d1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61355836BCE7745F7FD887251FDA3AE8CDED35FD
        Validity
            Not Before: Aug  1 17:25:01 2025 GMT
            Not After : Jul 31 17:30:01 2026 GMT
        Subject: CN=BA0D487C68577C557A4FA2D1DA5F6D79539DEACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:25:94:ec:9b:5a:b9:88:1d:e9:88:ae:ea:7d:
                    75:12:46:30:06:ac:4d:d3:09:2c:36:44:4c:dd:cc:
                    c5:97:a8:76:41:68:91:80:01:e9:8a:f5:78:36:32:
                    b1:00:1f:0e:d5:8b:ba:3c:fd:a1:18:f3:d4:42:94:
                    81:75:66:fa:6f:ac:9e:4b:ca:46:e3:eb:a1:21:df:
                    8d:30:7f:48:74:ab:92:5d:fa:05:6d:d2:00:8c:1a:
                    0b:64:69:8e:80:e8:59:7b:ad:1e:8c:5e:05:71:fc:
                    5c:20:e4:4b:33:53:87:56:f2:7e:7f:7e:24:1b:19:
                    97:07:75:89:7d:fb:b1:8b:dd:fc:27:96:28:b2:eb:
                    d3:12:a5:f8:f7:f7:cd:6c:93:8a:56:98:d1:f9:02:
                    c4:14:87:6f:e5:d5:fa:fd:31:f4:9c:99:51:b3:4c:
                    c9:f9:e0:9b:52:7d:23:1b:f5:fd:32:39:bb:c4:df:
                    f8:1a:d2:a2:06:e3:45:7a:58:3d:a1:11:5b:7b:dd:
                    f8:03:c4:ea:c6:cd:41:e2:fb:d9:21:7f:d0:78:5c:
                    79:80:36:65:82:1f:f0:f4:d2:a2:a4:36:69:60:a5:
                    ac:0e:a9:d6:83:73:cc:a2:4f:37:e3:cf:f5:19:6b:
                    8f:36:40:4a:dc:9f:1d:e7:ba:66:c2:c7:55:23:df:
                    73:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0D:48:7C:68:57:7C:55:7A:4F:A2:D1:DA:5F:6D:79:53:9D:EA:CE
            X509v3 Authority Key Identifier:
                keyid:61:35:58:36:BC:E7:74:5F:7F:D8:87:25:1F:DA:3A:E8:CD:ED:35:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/61355836BCE7745F7FD887251FDA3AE8CDED35FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61355836BCE7745F7FD887251FDA3AE8CDED35FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/3136382e3138312e3138382e302f32322d3332203d3e20323635333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:f1:fe:39:b6:fd:04:5a:52:85:4e:a6:f2:37:28:22:53:73:
         e4:30:5f:e8:37:1f:ab:e2:8d:60:f4:05:5d:f4:9c:64:ce:c1:
         ec:d2:f4:1c:de:0d:1a:e5:06:f1:45:f5:dc:59:20:78:54:96:
         48:d6:d8:0e:1d:9a:50:ff:a8:65:64:e4:98:b5:0b:ed:ed:36:
         df:4a:b8:ff:c1:26:89:9e:97:b2:b6:82:ba:39:a7:0f:99:7c:
         61:d1:5b:42:0a:44:e3:e5:9f:d1:b3:89:d2:c4:b0:23:7e:6b:
         a1:cf:1d:7c:96:be:4b:17:68:3d:7e:44:3f:b5:dc:c5:a0:d5:
         69:cf:08:d5:c8:7e:13:bc:17:28:70:6d:e1:e7:ce:2d:43:63:
         36:28:32:d3:17:59:21:18:b5:e1:0c:cc:b7:ac:2e:f3:f4:00:
         12:a4:45:9b:47:c6:68:79:af:ce:97:3b:a7:19:b9:90:c0:8a:
         07:23:0c:ea:c8:55:f9:9f:a5:01:28:1c:c8:01:49:0b:8b:c2:
         4b:f0:61:2b:99:b1:d1:f0:ef:2b:fe:c2:ae:2a:e9:1d:93:8f:
         cd:12:44:ea:33:57:6d:ad:97:46:bd:14:35:35:a4:6d:9c:81:
         79:56:a3:b3:99:1c:c9:e7:cd:fa:ce:6b:2d:ef:21:37:72:b8:
         0f:f0:b5:44
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSWPZQLaTctTeporL7DtBqSuI0VUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEzNTU4MzZCQ0U3NzQ1RjdGRDg4NzI1MUZEQTNBRThD
REVEMzVGRDAeFw0yNTA4MDExNzI1MDFaFw0yNjA3MzExNzMwMDFaMDMxMTAvBgNV
BAMTKEJBMEQ0ODdDNjg1NzdDNTU3QTRGQTJEMURBNUY2RDc5NTM5REVBQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYJZTsm1q5iB3piK7qfXUSRjAG
rE3TCSw2REzdzMWXqHZBaJGAAemK9Xg2MrEAHw7Vi7o8/aEY89RClIF1ZvpvrJ5L
ykbj66Eh340wf0h0q5Jd+gVt0gCMGgtkaY6A6Fl7rR6MXgVx/Fwg5EszU4dW8n5/
fiQbGZcHdYl9+7GL3fwnliiy69MSpfj3981sk4pWmNH5AsQUh2/l1fr9MfScmVGz
TMn54JtSfSMb9f0yObvE3/ga0qIG40V6WD2hEVt73fgDxOrGzUHi+9khf9B4XHmA
NmWCH/D00qKkNmlgpawOqdaDc8yiTzfjz/UZa482QErcnx3numbCx1Uj33NDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUug1IfGhXfFV6T6LR2l9teVOd6s4wHwYDVR0j
BBgwFoAUYTVYNrzndF9/2IclH9o66M3tNf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVB2Nk53VXd3czFUOHY4M2ZKZ2Y2S1FEejg1NFVSaUozZVViTnFkUlk0
OFUvMC82MTM1NTgzNkJDRTc3NDVGN0ZEODg3MjUxRkRBM0FFOENERUQzNUZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMzU1ODM2QkNFNzc0NUY3
RkQ4ODcyNTFGREEzQUU4Q0RFRDM1RkQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQdjZOd1V3d3MxVDh2ODNmSmdmNktRRHo4NTRVUmlKM2VVYk5xZFJZNDhVLzAv
MzEzNjM4MmUzMTM4MzEyZTMxMzgzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNTMzMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqi1vDANBgkqhkiG9w0BAQsFAAOCAQEAi/H+
Obb9BFpShU6m8jcoIlNz5DBf6Dcfq+KNYPQFXfScZM7B7NL0HN4NGuUG8UX13Fkg
eFSWSNbYDh2aUP+oZWTkmLUL7e0230q4/8EmiZ6XsraCujmnD5l8YdFbQgpE4+Wf
0bOJ0sSwI35roc8dfJa+SxdoPX5EP7XcxaDVac8I1ch+E7wXKHBt4efOLUNjNigy
0xdZIRi14QzMt6wu8/QAEqRFm0fGaHmvzpc7pxm5kMCKByMM6shV+Z+lASgcyAFJ
C4vCS/BhK5mx0fDvK/7CrirpHZOPzRJE6jNXba2XRr0UNTWkbZyBeVajs5kcyefN
+s5rLe8hN3K4D/C1RA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 17:39:39 2025 by rpki-client