Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e342e302f32332d3233203d3e203533313536.roa
File:                     3138362e3231312e342e302f32332d3233203d3e203533313536.roa (raw, json)
Hash identifier:          owHCO5xKAFHj4GXMfN5RNSsMQXdZ6UiwCz1/g3kzth0=
Subject key identifier:   AA:5B:28:97:6B:86:4D:49:A6:99:89:0C:07:38:55:48:6C:09:A9:2B
Certificate issuer:       /CN=2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1
Certificate serial:       0421E5C27CF243ABE847597E5E5B319853E25EC9
Authority key identifier: 2A:B3:5A:CD:D4:03:E3:46:BD:D5:B7:C6:86:CF:CF:92:18:AB:B2:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e342e302f32332d3233203d3e203533313536.roa
Signing time:             Sat 12 Jul 2025 14:27:50 +0000
ROA not before:           Sat 12 Jul 2025 14:22:50 +0000
ROA not after:            Sat 11 Jul 2026 14:27:50 +0000
asID:                     53156
IP address blocks:        186.211.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.crl
                          rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 12:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:21:e5:c2:7c:f2:43:ab:e8:47:59:7e:5e:5b:31:98:53:e2:5e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1
        Validity
            Not Before: Jul 12 14:22:50 2025 GMT
            Not After : Jul 11 14:27:50 2026 GMT
        Subject: CN=AA5B28976B864D49A699890C073855486C09A92B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:26:a4:30:54:bd:88:3f:3b:d4:e3:9a:56:
                    62:8d:1f:4b:57:8e:06:3d:23:75:46:d4:bb:a9:d8:
                    94:a8:b2:5f:b6:60:ff:d6:3e:29:83:68:af:64:32:
                    6e:2a:ed:17:a8:4f:ae:38:b1:ba:32:1e:da:90:52:
                    68:80:a0:ff:d1:53:01:45:49:c3:ef:f1:d6:10:3a:
                    50:6d:3a:66:38:e1:a0:bb:63:ab:fc:d2:23:f3:e3:
                    6a:f9:5c:1b:90:20:13:58:fd:bc:e5:55:b5:bd:db:
                    08:f1:2e:ae:56:2f:f3:1c:a1:3d:76:01:36:0c:15:
                    1e:95:8b:d4:1a:d0:49:41:da:24:57:f3:a8:e5:48:
                    b3:da:b9:c2:5f:0d:aa:47:92:b0:98:96:4c:aa:a0:
                    ee:0b:28:04:0c:0c:27:b5:42:10:db:32:56:4f:fb:
                    3b:07:d8:b9:5e:86:a3:20:4a:de:c8:88:81:c9:f4:
                    0a:ba:f9:cb:bb:44:4e:a1:90:5f:a5:2b:a4:64:01:
                    d4:bc:98:5f:69:99:2b:6f:0a:4b:8e:b9:55:63:42:
                    97:7e:b7:3d:4f:ba:49:81:1a:21:d9:3f:f9:b8:1a:
                    20:04:33:f4:51:22:80:f8:05:70:d3:e2:0d:f3:46:
                    0c:81:36:c9:4a:23:d4:dc:23:50:1c:0a:e2:26:00:
                    80:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5B:28:97:6B:86:4D:49:A6:99:89:0C:07:38:55:48:6C:09:A9:2B
            X509v3 Authority Key Identifier:
                keyid:2A:B3:5A:CD:D4:03:E3:46:BD:D5:B7:C6:86:CF:CF:92:18:AB:B2:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e342e302f32332d3233203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:42:e9:fc:26:6f:e7:8a:dc:66:ab:09:07:26:bc:18:dd:95:
         75:07:1f:f3:c1:85:fd:01:18:63:68:1a:d3:d3:09:76:38:91:
         cc:76:80:bd:fd:b0:b3:ae:19:9a:3a:cd:1b:3c:9b:df:30:5a:
         5b:84:9f:c4:2f:28:d2:a6:b5:23:f2:27:5e:ac:1f:10:fc:bd:
         92:75:0c:96:a4:a1:4e:e8:05:ac:3a:ac:4b:93:7e:7e:ae:79:
         a9:af:ca:33:a7:c0:4b:34:50:1b:ca:84:1d:13:2a:f5:7d:38:
         ee:88:d8:79:36:4b:b8:5c:65:a7:69:bc:c5:4f:3d:78:64:f7:
         a3:de:d5:57:69:e2:c3:6e:2d:25:3f:30:ba:a8:cb:96:06:40:
         ed:b1:b3:3b:20:88:5f:37:14:f8:04:88:ae:bf:71:24:89:61:
         0b:01:a2:35:3b:bb:92:45:47:6a:5d:9e:76:47:7c:da:83:80:
         0f:2a:87:3b:84:3b:1f:08:a8:d8:61:9c:82:d3:7f:ff:a4:ad:
         01:d6:b6:51:ee:f5:7c:76:77:b5:10:53:23:ba:e8:49:69:d2:
         7f:ce:e1:5a:81:bc:b3:9f:0a:95:50:19:5b:2f:41:6e:07:04:
         c4:10:b5:75:85:63:cd:40:c5:12:18:4d:0f:b6:7b:63:36:5a:
         24:bb:2e:4c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUBCHlwnzyQ6voR1l+XlsxmFPiXskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFCMzVBQ0RENDAzRTM0NkJERDVCN0M2ODZDRkNGOTIx
OEFCQjJCMTAeFw0yNTA3MTIxNDIyNTBaFw0yNjA3MTExNDI3NTBaMDMxMTAvBgNV
BAMTKEFBNUIyODk3NkI4NjRENDlBNjk5ODkwQzA3Mzg1NTQ4NkMwOUE5MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzyakMFS9iD871OOaVmKNH0tX
jgY9I3VG1Lup2JSosl+2YP/WPimDaK9kMm4q7ReoT644sboyHtqQUmiAoP/RUwFF
ScPv8dYQOlBtOmY44aC7Y6v80iPz42r5XBuQIBNY/bzlVbW92wjxLq5WL/McoT12
ATYMFR6Vi9Qa0ElB2iRX86jlSLPaucJfDapHkrCYlkyqoO4LKAQMDCe1QhDbMlZP
+zsH2LlehqMgSt7IiIHJ9Aq6+cu7RE6hkF+lK6RkAdS8mF9pmStvCkuOuVVjQpd+
tz1PukmBGiHZP/m4GiAEM/RRIoD4BXDT4g3zRgyBNslKI9TcI1AcCuImAIAdAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUqlsol2uGTUmmmYkMBzhVSGwJqSswHwYDVR0j
BBgwFoAUKrNazdQD40a91bfGhs/PkhirsrEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0p0d0hzQ3BmUUV6Rm5uRWpVaU5ROUM3N0J6UEVUOHU4Y2l5eHZKTnBC
N28vMC8yQUIzNUFDREQ0MDNFMzQ2QkRENUI3QzY4NkNGQ0Y5MjE4QUJCMkIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQjM1QUNERDQwM0UzNDZC
REQ1QjdDNjg2Q0ZDRjkyMThBQkIyQjEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dKdHdIc0NwZlFFekZubkVqVWlOUTlDNzdCelBFVDh1OGNpeXh2Sk5wQjdvLzAv
MzEzODM2MmUzMjMxMzEyZTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMzMx
MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbrTBDANBgkqhkiG9w0BAQsFAAOCAQEAJ0Lp/CZv54rc
ZqsJBya8GN2VdQcf88GF/QEYY2ga09MJdjiRzHaAvf2ws64ZmjrNGzyb3zBaW4Sf
xC8o0qa1I/InXqwfEPy9knUMlqShTugFrDqsS5N+fq55qa/KM6fASzRQG8qEHRMq
9X047ojYeTZLuFxlp2m8xU89eGT3o97VV2niw24tJT8wuqjLlgZA7bGzOyCIXzcU
+ASIrr9xJIlhCwGiNTu7kkVHal2edkd82oOADyqHO4Q7Hwio2GGcgtN//6StAda2
Ue71fHZ3tRBTI7roSWnSf87hWoG8s58KlVAZWy9BbgcExBC1dYVjzUDFEhhND7Z7
YzZaJLsuTA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:12:53 2025 by rpki-client