Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e38372e302e302f32302d3233203d3e20323632373733.roa
File:                     3138372e38372e302e302f32302d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          neVx+1b49+aTPg9NUXDGH+qa2eb70KqFAE6F/EOotag=
Subject key identifier:   52:29:9F:4B:C5:62:05:FF:A7:DA:D6:7D:ED:F6:75:E7:4A:1F:A3:9A
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       192DB49C2DA574A90844BFFD5D809F8684D1995B
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e38372e302e302f32302d3233203d3e20323632373733.roa
Signing time:             Fri 08 Aug 2025 14:51:19 +0000
ROA not before:           Fri 08 Aug 2025 14:46:19 +0000
ROA not after:            Fri 07 Aug 2026 14:51:19 +0000
asID:                     262773
IP address blocks:        187.87.0.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 12:56:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2d:b4:9c:2d:a5:74:a9:08:44:bf:fd:5d:80:9f:86:84:d1:99:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug  8 14:46:19 2025 GMT
            Not After : Aug  7 14:51:19 2026 GMT
        Subject: CN=52299F4BC56205FFA7DAD67DEDF675E74A1FA39A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a6:6e:fa:f0:ac:d1:a1:03:0b:1a:75:69:ae:
                    f4:3a:21:53:c1:cd:57:02:7a:96:18:9e:c3:1c:0a:
                    51:9d:37:39:10:ed:7f:12:d7:4a:1b:ab:a8:30:e1:
                    82:df:b2:f8:64:c0:ec:e4:92:2c:d3:ed:2a:37:13:
                    e0:b6:77:17:12:47:a2:ff:bd:00:cf:4a:6e:b7:90:
                    2e:40:60:05:14:a0:f3:ed:f9:89:bd:9d:02:13:6e:
                    fd:3e:6b:16:50:5f:01:3d:2e:32:b5:63:10:6a:fa:
                    5b:bb:4e:cf:7d:ef:0c:fb:d5:42:c1:b3:53:02:18:
                    cf:a9:92:56:e6:53:59:b3:eb:22:ac:1e:68:cb:30:
                    41:ba:ed:52:6b:69:17:56:76:ca:2a:b7:17:b8:5f:
                    49:7d:07:2c:8a:1d:8b:89:d7:b8:15:64:26:68:5e:
                    f9:23:f3:eb:ea:a1:ec:78:3b:be:57:07:17:8b:d4:
                    3b:60:45:7b:d2:0a:79:af:5b:89:4f:06:86:0f:a3:
                    7a:6e:a9:df:a0:58:83:0c:cb:89:61:d2:ce:fb:3a:
                    ef:87:78:5c:23:26:dc:12:05:43:b9:76:ae:66:ef:
                    06:bf:86:11:7e:4e:37:97:df:a9:d5:14:29:92:8c:
                    4a:38:9b:6c:9e:14:13:48:f6:25:0b:56:01:eb:48:
                    bc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:29:9F:4B:C5:62:05:FF:A7:DA:D6:7D:ED:F6:75:E7:4A:1F:A3:9A
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e38372e302e302f32302d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cb:f6:0a:04:81:ea:c0:90:32:67:cd:18:4a:4b:1a:5a:a9:bc:
         a4:38:2c:41:52:f7:3c:e8:11:64:d5:50:22:b3:fa:7a:7b:be:
         ff:51:f9:b0:bc:5e:4a:d1:ec:32:2f:54:de:6b:49:76:9a:ca:
         ae:31:34:2e:da:06:98:88:9e:e3:96:48:04:bb:9c:6e:fa:88:
         3b:66:10:88:a2:d4:98:7e:90:ad:8f:90:b9:ce:28:45:39:af:
         0b:13:27:83:b4:d4:59:f6:95:01:58:90:e2:01:23:1c:bc:fc:
         27:4c:3a:f7:3a:61:59:50:c1:af:52:ba:a8:f0:35:05:61:eb:
         77:68:9b:5a:f6:16:ef:6b:dc:d7:3c:8a:7c:40:1c:be:f3:b8:
         a2:85:ee:7f:b7:67:39:fd:db:e7:2c:12:3f:91:e9:c7:64:7a:
         83:26:19:5d:07:4a:a3:1e:f4:a3:ff:21:0b:2a:01:8e:03:4b:
         23:5e:12:fe:27:40:b7:ee:c7:84:64:4c:68:e6:1c:5d:2f:fa:
         02:ac:ab:de:fb:8f:c1:27:c9:2b:e3:df:3f:79:08:2b:59:76:
         1b:30:92:59:ad:fd:30:03:4a:cf:5b:4d:ec:84:d4:1c:57:1f:
         4f:94:86:00:a2:98:78:2b:9e:06:c7:64:ca:11:3f:ea:f6:25:
         24:e0:e6:f9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUGS20nC2ldKkIRL/9XYCfhoTRmVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNTA4MDgxNDQ2MTlaFw0yNjA4MDcxNDUxMTlaMDMxMTAvBgNV
BAMTKDUyMjk5RjRCQzU2MjA1RkZBN0RBRDY3REVERjY3NUU3NEExRkEzOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFpm768KzRoQMLGnVprvQ6IVPB
zVcCepYYnsMcClGdNzkQ7X8S10obq6gw4YLfsvhkwOzkkizT7So3E+C2dxcSR6L/
vQDPSm63kC5AYAUUoPPt+Ym9nQITbv0+axZQXwE9LjK1YxBq+lu7Ts997wz71ULB
s1MCGM+pklbmU1mz6yKsHmjLMEG67VJraRdWdsoqtxe4X0l9ByyKHYuJ17gVZCZo
Xvkj8+vqoex4O75XBxeL1DtgRXvSCnmvW4lPBoYPo3puqd+gWIMMy4lh0s77Ou+H
eFwjJtwSBUO5dq5m7wa/hhF+TjeX36nVFCmSjEo4m2yeFBNI9iULVgHrSLyRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUUimfS8ViBf+n2tZ97fZ150ofo5owHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzODM3MmUzODM3MmUzMDJlMzAyZjMyMzAyZDMyMzMyMDNkM2UyMDMyMzYzMjM3
MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLtXADANBgkqhkiG9w0BAQsFAAOCAQEAy/YKBIHqwJAy
Z80YSksaWqm8pDgsQVL3POgRZNVQIrP6enu+/1H5sLxeStHsMi9U3mtJdprKrjE0
LtoGmIie45ZIBLucbvqIO2YQiKLUmH6QrY+Quc4oRTmvCxMng7TUWfaVAViQ4gEj
HLz8J0w69zphWVDBr1K6qPA1BWHrd2ibWvYW72vc1zyKfEAcvvO4ooXuf7dnOf3b
5ywSP5Hpx2R6gyYZXQdKox70o/8hCyoBjgNLI14S/idAt+7HhGRMaOYcXS/6Aqyr
3vuPwSfJK+PfP3kIK1l2GzCSWa39MANKz1tN7ITUHFcfT5SGAKKYeCueBsdkyhE/
6vYlJODm+Q==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:35:15 2025 by rpki-client