Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/3139302e3131352e3139362e302f32322d3332203d3e20323730383234.roa
File:                     3139302e3131352e3139362e302f32322d3332203d3e20323730383234.roa (raw, json)
Hash identifier:          qZrpLX+V7F/v4ZqmTXHfH+2Tgl63VtJKoioJmpnVOIs=
Subject key identifier:   AE:DD:D8:54:7D:60:30:C6:C9:77:53:0C:D8:AA:81:71:9D:E5:41:E3
Certificate issuer:       /CN=98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E
Certificate serial:       5CCD14C10AF46E413E88F7D0FC02C9FB432B5D71
Authority key identifier: 98:C3:85:2C:5F:3D:C1:45:FD:71:BC:A9:2F:69:96:B5:B6:DB:A4:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/3139302e3131352e3139362e302f32322d3332203d3e20323730383234.roa
Signing time:             Fri 08 Aug 2025 23:08:25 +0000
ROA not before:           Fri 08 Aug 2025 23:03:25 +0000
ROA not after:            Fri 07 Aug 2026 23:08:25 +0000
asID:                     270824
IP address blocks:        190.115.196.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.crl
                          rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 01:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:cd:14:c1:0a:f4:6e:41:3e:88:f7:d0:fc:02:c9:fb:43:2b:5d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E
        Validity
            Not Before: Aug  8 23:03:25 2025 GMT
            Not After : Aug  7 23:08:25 2026 GMT
        Subject: CN=AEDDD8547D6030C6C977530CD8AA81719DE541E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:db:f3:6d:21:4a:63:80:f9:c9:88:4e:5e:64:
                    c0:b3:37:88:02:15:0c:2a:17:84:1d:7e:23:19:c3:
                    11:1e:24:0f:e5:e5:f8:f7:38:24:7d:50:01:d3:6e:
                    1b:30:14:a4:81:0f:1f:d5:7a:4f:b5:09:d4:4a:33:
                    cb:3f:64:cf:d0:ea:d9:24:b1:7c:ba:4a:d6:d9:29:
                    81:5a:2a:56:ea:f5:05:bf:d3:33:07:3f:a8:6c:e0:
                    7a:e8:99:dd:07:f9:e0:dc:40:61:87:d4:df:c5:59:
                    5b:a8:34:3d:04:04:19:70:a7:44:f3:9e:9f:75:c7:
                    5e:ec:80:ef:ac:74:0f:89:17:d6:26:05:84:68:da:
                    13:a0:dc:96:49:33:56:0d:65:1f:6e:58:ce:b9:4d:
                    7f:ec:7c:7f:28:71:b9:8f:6c:c5:1f:2f:33:fd:05:
                    67:74:d2:0a:49:d1:a6:30:7a:9c:bb:d1:53:ab:23:
                    24:a1:d9:11:b8:3f:35:da:14:fe:dc:6b:21:ac:7c:
                    67:43:c7:b9:3e:1b:72:0b:e9:cb:ff:e2:52:d1:0b:
                    e2:9b:4f:a8:ca:6b:6f:38:6e:6c:5b:57:cc:76:19:
                    a4:e2:1e:3a:7a:21:34:69:75:2a:61:35:bd:65:44:
                    9e:15:d8:a1:01:23:c2:9c:b8:d1:83:5a:d1:67:88:
                    f1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DD:D8:54:7D:60:30:C6:C9:77:53:0C:D8:AA:81:71:9D:E5:41:E3
            X509v3 Authority Key Identifier:
                keyid:98:C3:85:2C:5F:3D:C1:45:FD:71:BC:A9:2F:69:96:B5:B6:DB:A4:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/3139302e3131352e3139362e302f32322d3332203d3e20323730383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:6a:f1:1f:4f:a1:b8:e6:96:eb:4f:3a:2d:2d:84:1b:04:47:
         5e:0c:01:58:b9:cc:56:4d:7a:db:9d:ac:60:fa:c6:d6:a5:eb:
         a6:72:2b:b3:e4:02:47:2d:2a:71:7f:c2:1a:66:e3:38:ae:c8:
         e7:54:82:1f:8e:b4:9f:31:0e:ab:a5:2d:57:86:2d:08:35:c7:
         a5:24:0f:f4:21:04:cd:99:af:cc:f4:5b:3b:c9:48:67:3a:b9:
         d7:12:91:15:55:07:d2:b7:a4:3c:91:08:3e:be:4b:a6:7c:04:
         29:ae:51:ba:a5:c1:7c:85:b8:65:13:f7:58:9b:ff:fb:a2:4d:
         78:76:21:45:9f:00:74:a8:c2:2e:b2:a7:d5:d0:ab:98:44:71:
         bf:c7:d8:0a:2b:8d:3b:26:b0:c5:4d:ad:c4:6a:87:62:75:0f:
         d6:f7:7b:d3:54:f2:fa:47:53:4c:82:ec:86:cc:72:38:8a:f2:
         bb:d0:34:c4:66:f5:00:14:8d:41:08:56:75:4e:25:2d:27:51:
         7c:b9:c7:12:c9:8b:fd:26:da:3a:4b:53:c2:8a:05:d0:42:ea:
         b0:74:b0:a5:11:32:01:24:5a:0e:30:ce:86:bd:05:f7:00:12:
         f6:16:26:8f:90:d5:2f:f4:37:86:f3:70:3b:19:5d:53:35:a8:
         e3:4d:93:31
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXM0UwQr0bkE+iPfQ/ALJ+0MrXXEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThDMzg1MkM1RjNEQzE0NUZENzFCQ0E5MkY2OTk2QjVC
NkRCQTQ2RTAeFw0yNTA4MDgyMzAzMjVaFw0yNjA4MDcyMzA4MjVaMDMxMTAvBgNV
BAMTKEFFREREODU0N0Q2MDMwQzZDOTc3NTMwQ0Q4QUE4MTcxOURFNTQxRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh2/NtIUpjgPnJiE5eZMCzN4gC
FQwqF4QdfiMZwxEeJA/l5fj3OCR9UAHTbhswFKSBDx/Vek+1CdRKM8s/ZM/Q6tkk
sXy6StbZKYFaKlbq9QW/0zMHP6hs4Hromd0H+eDcQGGH1N/FWVuoND0EBBlwp0Tz
np91x17sgO+sdA+JF9YmBYRo2hOg3JZJM1YNZR9uWM65TX/sfH8ocbmPbMUfLzP9
BWd00gpJ0aYwepy70VOrIySh2RG4PzXaFP7cayGsfGdDx7k+G3IL6cv/4lLRC+Kb
T6jKa284bmxbV8x2GaTiHjp6ITRpdSphNb1lRJ4V2KEBI8KcuNGDWtFniPH/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUrt3YVH1gMMbJd1MM2KqBcZ3lQeMwHwYDVR0j
BBgwFoAUmMOFLF89wUX9cbypL2mWtbbbpG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1VWcTRzeFZ5V1lSTUJ0cTR5NktrOUtkVlJCWXhNVHNqYUpnTEtTM0Nw
Sk0vMC85OEMzODUyQzVGM0RDMTQ1RkQ3MUJDQTkyRjY5OTZCNUI2REJBNDZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4QzM4NTJDNUYzREMxNDVG
RDcxQkNBOTJGNjk5NkI1QjZEQkE0NkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dVVnE0c3hWeVdZUk1CdHE0eTZLazlLZFZSQll4TVRzamFKZ0xLUzNDcEpNLzAv
MzEzOTMwMmUzMTMxMzUyZTMxMzkzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzczMDM4MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5zxDANBgkqhkiG9w0BAQsFAAOCAQEAHGrx
H0+huOaW6086LS2EGwRHXgwBWLnMVk16252sYPrG1qXrpnIrs+QCRy0qcX/CGmbj
OK7I51SCH460nzEOq6UtV4YtCDXHpSQP9CEEzZmvzPRbO8lIZzq51xKRFVUH0rek
PJEIPr5LpnwEKa5RuqXBfIW4ZRP3WJv/+6JNeHYhRZ8AdKjCLrKn1dCrmERxv8fY
CiuNOyawxU2txGqHYnUP1vd701Ty+kdTTILshsxyOIryu9A0xGb1ABSNQQhWdU4l
LSdRfLnHEsmL/SbaOktTwooF0ELqsHSwpREyASRaDjDOhr0F9wAS9hYmj5DVL/Q3
hvNwOxldUzWo402TMQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:07:08 2025 by rpki-client