Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32322d3332203d3e203238313832.roa
File:                     3137302e3233312e3133322e302f32322d3332203d3e203238313832.roa (raw, json)
Hash identifier:          olwccGPphke0ANZaOhwLxcFgYZebNYqT8v+Ix5Sp2HM=
Subject key identifier:   2D:4A:19:5A:BE:5C:3B:7C:D1:B7:8F:77:9B:24:FE:B2:34:5C:C3:33
Certificate issuer:       /CN=FEEF18BFC0F438C174F899A158ED9751D2D84B6C
Certificate serial:       196F45CBCD12FED8737B54354745797DD860A7B1
Authority key identifier: FE:EF:18:BF:C0:F4:38:C1:74:F8:99:A1:58:ED:97:51:D2:D8:4B:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEEF18BFC0F438C174F899A158ED9751D2D84B6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32322d3332203d3e203238313832.roa
Signing time:             Tue 29 Jul 2025 12:27:23 +0000
ROA not before:           Tue 29 Jul 2025 12:22:23 +0000
ROA not after:            Tue 28 Jul 2026 12:27:23 +0000
asID:                     28182
IP address blocks:        170.231.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/FEEF18BFC0F438C174F899A158ED9751D2D84B6C.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/FEEF18BFC0F438C174F899A158ED9751D2D84B6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEEF18BFC0F438C174F899A158ED9751D2D84B6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6f:45:cb:cd:12:fe:d8:73:7b:54:35:47:45:79:7d:d8:60:a7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEEF18BFC0F438C174F899A158ED9751D2D84B6C
        Validity
            Not Before: Jul 29 12:22:23 2025 GMT
            Not After : Jul 28 12:27:23 2026 GMT
        Subject: CN=2D4A195ABE5C3B7CD1B78F779B24FEB2345CC333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:a4:f3:93:1b:9e:94:67:b9:d9:28:95:70:
                    0c:89:23:43:55:69:cb:c3:88:50:01:37:fa:36:3a:
                    58:7b:d4:ac:f3:09:b5:7d:fe:92:98:25:af:2b:6c:
                    a6:cc:99:b8:d3:7a:54:ea:d9:e9:d9:39:bf:35:c7:
                    d5:27:da:94:f9:6b:62:1a:78:a5:e1:1c:32:6a:e6:
                    29:57:4a:41:3b:36:d6:c2:ed:1e:b8:49:d7:1e:d0:
                    8d:f9:c7:bf:b6:ad:9b:5d:72:df:6d:01:60:b9:49:
                    d4:99:29:10:e6:d4:d5:a9:cb:39:43:cb:8d:2c:25:
                    db:a5:42:4e:52:d4:21:f4:02:79:25:40:f9:93:e8:
                    99:4d:a6:a8:59:55:7c:a7:3e:60:b4:d6:08:4c:27:
                    b5:3f:4b:cd:5c:3e:a7:c0:5f:6a:75:ad:19:c2:1e:
                    3e:81:f4:87:8f:80:3b:dd:68:64:9b:0a:94:e8:33:
                    d6:85:6d:8f:49:d7:a0:63:ea:cd:a9:34:9b:5d:ff:
                    0a:e1:1b:ac:8d:63:8a:7b:76:82:70:a3:4e:64:6e:
                    df:64:e3:fa:32:50:9f:c7:1a:98:1b:3b:6a:fe:7a:
                    6b:89:67:d7:81:e4:8b:14:f2:d1:5a:ad:0f:e3:3c:
                    ae:6e:5d:fe:26:9c:5b:ca:9c:56:65:91:5d:61:52:
                    7c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4A:19:5A:BE:5C:3B:7C:D1:B7:8F:77:9B:24:FE:B2:34:5C:C3:33
            X509v3 Authority Key Identifier:
                keyid:FE:EF:18:BF:C0:F4:38:C1:74:F8:99:A1:58:ED:97:51:D2:D8:4B:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/FEEF18BFC0F438C174F899A158ED9751D2D84B6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEEF18BFC0F438C174F899A158ED9751D2D84B6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32322d3332203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:ba:2d:1d:24:e5:69:55:df:32:30:02:90:1f:e4:f5:74:d1:
         cd:c4:4b:32:82:1b:79:87:ae:6f:1f:38:a6:c5:28:ee:7f:9e:
         88:dc:70:75:a3:7b:4f:86:f7:99:8b:8f:ca:a8:e1:9b:07:03:
         36:02:a4:a3:3c:16:2c:27:47:fd:8d:01:3b:fb:c2:99:c9:d8:
         05:4f:18:30:76:d5:d5:ad:83:c2:ef:29:93:46:ab:62:d4:48:
         27:db:33:2c:d6:cf:2e:79:95:d5:63:4f:d1:78:19:f6:8e:73:
         32:f4:7e:90:68:2e:2e:ff:b4:4a:39:98:52:3b:ec:8f:d9:cf:
         2a:d3:24:1d:1d:91:43:e5:e9:cb:64:45:c5:f5:83:91:41:2f:
         cb:da:2a:79:4e:6b:98:ba:73:47:fc:aa:0e:a6:65:d8:76:45:
         71:af:8d:fd:35:e4:ef:18:92:40:2e:ec:02:a1:0f:c8:f9:d2:
         36:fb:06:70:6a:c6:cd:b7:2c:ee:1c:45:14:7e:9d:0a:74:65:
         f8:6e:74:4f:a4:58:bb:dd:24:b0:c8:53:99:c1:4f:64:ad:62:
         f0:71:e2:a2:5c:81:27:f4:f1:d9:82:c1:8b:b3:77:d3:73:bb:
         50:19:33:22:e0:1e:34:3a:77:a7:df:76:10:b0:8a:fe:3e:24:
         4c:38:fa:b1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGW9Fy80S/thze1Q1R0V5fdhgp7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVFRjE4QkZDMEY0MzhDMTc0Rjg5OUExNThFRDk3NTFE
MkQ4NEI2QzAeFw0yNTA3MjkxMjIyMjNaFw0yNjA3MjgxMjI3MjNaMDMxMTAvBgNV
BAMTKDJENEExOTVBQkU1QzNCN0NEMUI3OEY3NzlCMjRGRUIyMzQ1Q0MzMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4K6TzkxuelGe52SiVcAyJI0NV
acvDiFABN/o2Olh71KzzCbV9/pKYJa8rbKbMmbjTelTq2enZOb81x9Un2pT5a2Ia
eKXhHDJq5ilXSkE7NtbC7R64Sdce0I35x7+2rZtdct9tAWC5SdSZKRDm1NWpyzlD
y40sJdulQk5S1CH0AnklQPmT6JlNpqhZVXynPmC01ghMJ7U/S81cPqfAX2p1rRnC
Hj6B9IePgDvdaGSbCpToM9aFbY9J16Bj6s2pNJtd/wrhG6yNY4p7doJwo05kbt9k
4/oyUJ/HGpgbO2r+emuJZ9eB5IsU8tFarQ/jPK5uXf4mnFvKnFZlkV1hUnwzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULUoZWr5cO3zRt493myT+sjRcwzMwHwYDVR0j
BBgwFoAU/u8Yv8D0OMF0+JmhWO2XUdLYS2wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMC9GRUVGMThCRkMwRjQzOEMxNzRGODk5QTE1OEVEOTc1MUQyRDg0QjZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFRUYxOEJGQzBGNDM4QzE3
NEY4OTlBMTU4RUQ5NzUxRDJEODRCNkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAv
MzEzNzMwMmUzMjMzMzEyZTMxMzMzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzgzMTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq54QwDQYJKoZIhvcNAQELBQADggEBAMS6LR0k
5WlV3zIwApAf5PV00c3ESzKCG3mHrm8fOKbFKO5/nojccHWje0+G95mLj8qo4ZsH
AzYCpKM8FiwnR/2NATv7wpnJ2AVPGDB21dWtg8LvKZNGq2LUSCfbMyzWzy55ldVj
T9F4GfaOczL0fpBoLi7/tEo5mFI77I/ZzyrTJB0dkUPl6ctkRcX1g5FBL8vaKnlO
a5i6c0f8qg6mZdh2RXGvjf015O8YkkAu7AKhD8j50jb7BnBqxs23LO4cRRR+nQp0
ZfhudE+kWLvdJLDIU5nBT2StYvBx4qJcgSf08dmCwYuzd9Nzu1AZMyLgHjQ6d6ff
dhCwiv4+JEw4+rE=
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:19:40 2025 by rpki-client