Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e302e302f32302d3230203d3e203533313536.roa
File:                     3138362e3231312e302e302f32302d3230203d3e203533313536.roa (raw, json)
Hash identifier:          q7zGku19wVsWo09MhKbZanWbduY5P17m8++8jrJW+ME=
Subject key identifier:   20:D9:7F:80:38:A1:40:D5:01:CD:BF:9E:EC:8E:E6:AD:8F:06:6A:48
Certificate issuer:       /CN=2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1
Certificate serial:       63D07F9CEDE97F35548688C06CA655BC3BA6192E
Authority key identifier: 2A:B3:5A:CD:D4:03:E3:46:BD:D5:B7:C6:86:CF:CF:92:18:AB:B2:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e302e302f32302d3230203d3e203533313536.roa
Signing time:             Sat 12 Jul 2025 14:27:37 +0000
ROA not before:           Sat 12 Jul 2025 14:22:37 +0000
ROA not after:            Sat 11 Jul 2026 14:27:37 +0000
asID:                     53156
IP address blocks:        186.211.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.crl
                          rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 12:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d0:7f:9c:ed:e9:7f:35:54:86:88:c0:6c:a6:55:bc:3b:a6:19:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1
        Validity
            Not Before: Jul 12 14:22:37 2025 GMT
            Not After : Jul 11 14:27:37 2026 GMT
        Subject: CN=20D97F8038A140D501CDBF9EEC8EE6AD8F066A48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f5:45:96:4e:7d:da:57:83:f2:1d:3a:d5:05:
                    cf:f1:52:1a:a6:b8:3b:ef:f5:5a:d7:cb:f7:bc:8d:
                    d0:b6:ca:b1:0b:b1:b9:b6:fd:cc:22:32:35:fe:1a:
                    99:04:b5:2b:35:a8:4b:71:03:c4:2e:59:25:f1:ed:
                    5b:31:83:f4:fc:ba:af:db:4d:63:dc:b5:0f:47:c4:
                    d0:58:10:1e:ab:fc:9d:c0:59:ae:72:bd:db:d7:8c:
                    c2:3b:d4:e9:94:3c:82:da:64:79:99:ab:f8:b3:6f:
                    5b:a3:67:cf:a0:91:85:eb:d5:5b:c8:8c:a2:19:98:
                    4d:db:a7:2f:8a:0b:65:1d:e8:87:50:aa:7f:5f:bb:
                    a0:ea:0f:47:f2:91:b3:d4:a2:42:18:f9:41:d6:7a:
                    da:ab:58:fb:7c:fe:b2:99:d5:03:15:82:43:56:d7:
                    fe:48:2a:d9:64:50:2d:ff:40:38:fa:63:de:b3:38:
                    9a:9e:3a:81:c8:de:02:ee:b6:14:02:8e:1d:3b:89:
                    70:fd:e3:dd:0e:01:98:77:b7:fb:32:08:c0:33:64:
                    e3:01:27:ef:98:31:5a:a7:7d:39:90:fb:3c:cc:5c:
                    97:27:0b:86:ae:9d:89:4a:8f:3b:6f:4f:1d:ef:27:
                    27:ed:c6:58:f0:23:1b:9a:fe:ee:f3:71:61:27:f7:
                    91:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D9:7F:80:38:A1:40:D5:01:CD:BF:9E:EC:8E:E6:AD:8F:06:6A:48
            X509v3 Authority Key Identifier:
                keyid:2A:B3:5A:CD:D4:03:E3:46:BD:D5:B7:C6:86:CF:CF:92:18:AB:B2:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e302e302f32302d3230203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:a4:c7:ac:92:5d:fc:54:e1:82:e3:df:ab:d4:04:b9:c7:42:
         58:17:40:e1:4c:2c:92:27:83:87:16:a6:5d:89:84:b5:66:f7:
         c0:5d:c4:22:7f:9a:1a:8d:cd:0c:15:c6:66:77:5b:09:66:7a:
         62:71:bf:46:a3:6e:eb:d1:66:2e:a1:1a:f1:78:94:cf:2d:fa:
         1a:2b:18:d6:d0:1b:d5:6e:3f:93:71:42:38:83:21:19:5e:42:
         d7:c9:ba:79:66:1c:23:54:80:92:2a:d3:25:0c:5a:ec:db:90:
         a4:71:e3:3e:59:fb:d0:a9:2e:e3:b6:14:20:ce:b5:67:85:1c:
         0c:e5:9c:50:6f:87:b6:8b:46:b8:7d:56:c3:02:65:ee:83:7b:
         14:02:28:16:2b:4d:af:aa:91:4d:e1:34:ef:4e:1c:f2:84:28:
         95:3d:04:1d:5e:32:3f:12:02:aa:07:c6:c0:ab:05:c0:4c:df:
         c1:51:c4:f7:04:d3:94:3d:8b:65:46:20:ea:fe:ad:34:8f:7d:
         09:27:01:c9:58:b7:b4:cf:fa:2e:22:1a:a9:a4:e4:7e:78:92:
         00:d9:d6:13:80:c7:45:cd:82:5a:41:c8:cd:29:03:45:c6:4b:
         70:8c:59:bf:ec:60:e0:fa:61:82:da:1d:53:a5:91:6d:f0:c0:
         0a:6f:2a:13
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUY9B/nO3pfzVUhojAbKZVvDumGS4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFCMzVBQ0RENDAzRTM0NkJERDVCN0M2ODZDRkNGOTIx
OEFCQjJCMTAeFw0yNTA3MTIxNDIyMzdaFw0yNjA3MTExNDI3MzdaMDMxMTAvBgNV
BAMTKDIwRDk3RjgwMzhBMTQwRDUwMUNEQkY5RUVDOEVFNkFEOEYwNjZBNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs9UWWTn3aV4PyHTrVBc/xUhqm
uDvv9VrXy/e8jdC2yrELsbm2/cwiMjX+GpkEtSs1qEtxA8QuWSXx7Vsxg/T8uq/b
TWPctQ9HxNBYEB6r/J3AWa5yvdvXjMI71OmUPILaZHmZq/izb1ujZ8+gkYXr1VvI
jKIZmE3bpy+KC2Ud6IdQqn9fu6DqD0fykbPUokIY+UHWetqrWPt8/rKZ1QMVgkNW
1/5IKtlkUC3/QDj6Y96zOJqeOoHI3gLuthQCjh07iXD9490OAZh3t/syCMAzZOMB
J++YMVqnfTmQ+zzMXJcnC4aunYlKjztvTx3vJyftxljwIxua/u7zcWEn95HVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUINl/gDihQNUBzb+e7I7mrY8GakgwHwYDVR0j
BBgwFoAUKrNazdQD40a91bfGhs/PkhirsrEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0p0d0hzQ3BmUUV6Rm5uRWpVaU5ROUM3N0J6UEVUOHU4Y2l5eHZKTnBC
N28vMC8yQUIzNUFDREQ0MDNFMzQ2QkRENUI3QzY4NkNGQ0Y5MjE4QUJCMkIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQjM1QUNERDQwM0UzNDZC
REQ1QjdDNjg2Q0ZDRjkyMThBQkIyQjEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dKdHdIc0NwZlFFekZubkVqVWlOUTlDNzdCelBFVDh1OGNpeXh2Sk5wQjdvLzAv
MzEzODM2MmUzMjMxMzEyZTMwMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzUzMzMx
MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLrTADANBgkqhkiG9w0BAQsFAAOCAQEAZaTHrJJd/FTh
guPfq9QEucdCWBdA4UwskieDhxamXYmEtWb3wF3EIn+aGo3NDBXGZndbCWZ6YnG/
RqNu69FmLqEa8XiUzy36GisY1tAb1W4/k3FCOIMhGV5C18m6eWYcI1SAkirTJQxa
7NuQpHHjPln70Kku47YUIM61Z4UcDOWcUG+HtotGuH1WwwJl7oN7FAIoFitNr6qR
TeE0704c8oQolT0EHV4yPxICqgfGwKsFwEzfwVHE9wTTlD2LZUYg6v6tNI99CScB
yVi3tM/6LiIaqaTkfniSANnWE4DHRc2CWkHIzSkDRcZLcIxZv+xg4PphgtodU6WR
bfDACm8qEw==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:16:04 2025 by rpki-client