Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e38372e31322e302f32342d3234203d3e20323632373733.roa
File:                     3138372e38372e31322e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          nsVw8ui5JqzZRo+APNpJlvxeADCU4XZ0YxS7o8pTv8w=
Subject key identifier:   8B:CA:38:29:8A:06:A8:64:79:31:80:03:4F:6F:E1:6C:59:43:08:3C
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       37F7A190C2813B7E81F465B9BB6B726FA564116C
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e38372e31322e302f32342d3234203d3e20323632373733.roa
Signing time:             Fri 08 Aug 2025 14:53:42 +0000
ROA not before:           Fri 08 Aug 2025 14:48:42 +0000
ROA not after:            Fri 07 Aug 2026 14:53:42 +0000
asID:                     262773
IP address blocks:        187.87.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 17:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f7:a1:90:c2:81:3b:7e:81:f4:65:b9:bb:6b:72:6f:a5:64:11:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug  8 14:48:42 2025 GMT
            Not After : Aug  7 14:53:42 2026 GMT
        Subject: CN=8BCA38298A06A864793180034F6FE16C5943083C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:dc:34:79:eb:67:a2:05:a3:f2:8a:c7:77:
                    ef:75:2f:79:9d:92:15:65:37:56:0f:fd:c6:60:05:
                    10:66:b7:6a:3f:0d:4c:bc:f5:72:a7:c7:b1:0e:58:
                    66:14:19:34:5d:30:73:10:90:52:dc:d6:a7:70:77:
                    99:c7:a2:be:4a:e8:92:34:ad:11:e1:9f:81:7c:e3:
                    d6:64:19:84:f4:29:ef:01:08:89:9d:ea:07:4e:50:
                    f1:06:d2:ba:d6:cf:97:44:35:b4:5b:d9:8d:21:a9:
                    96:f7:08:ef:b4:8a:4c:70:8b:85:0d:f8:31:41:f5:
                    05:bf:74:3f:0c:6e:a1:36:a5:f5:0e:48:46:8c:e2:
                    8d:b6:da:5c:6b:d5:48:fa:9f:0b:63:3b:88:d2:b1:
                    20:26:d3:45:e8:f7:e4:f0:fe:f3:71:23:7a:ee:e8:
                    59:20:5b:41:85:79:71:d3:9c:31:ba:f3:8b:43:a8:
                    0f:0a:7d:0d:25:3b:64:5b:48:42:27:9c:dc:ea:e4:
                    bc:4e:52:46:01:07:87:97:8d:0e:5c:ce:b6:0d:bb:
                    2c:77:e9:b3:40:9b:a3:20:bf:cb:26:88:f2:f9:49:
                    e6:b1:34:80:88:aa:97:d2:1a:26:09:87:3d:5c:76:
                    66:59:96:8c:a9:3a:a0:bc:ce:d6:b3:26:cc:da:66:
                    fc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CA:38:29:8A:06:A8:64:79:31:80:03:4F:6F:E1:6C:59:43:08:3C
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e38372e31322e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:54:1b:2b:7f:f8:57:fa:cf:52:5a:0b:0f:56:f2:96:16:f0:
         e2:72:02:4e:8a:10:ad:21:ac:fd:22:2d:62:b7:01:ec:ed:a8:
         65:00:25:f2:bd:9f:80:79:f7:69:6c:78:22:70:cd:c4:ab:9c:
         a3:77:d9:1a:04:ca:05:67:dd:33:e7:53:79:c7:b0:dd:0b:8a:
         69:88:e1:01:93:31:de:5e:3e:10:b6:2b:ef:c7:e5:fe:7f:a4:
         85:ef:9a:0e:9b:71:a1:1f:92:03:1a:bd:68:45:f5:80:3f:03:
         22:77:f4:ec:f1:00:51:4d:dd:5a:b6:55:0a:9a:63:95:aa:33:
         a4:23:91:55:85:c2:97:ee:df:f5:46:49:57:03:4a:28:ee:f7:
         19:50:e1:82:9a:b7:b7:ee:73:a0:92:56:ea:32:d1:52:68:b8:
         41:b4:1b:11:b6:18:1e:dd:75:65:5e:44:d1:cb:48:3a:03:32:
         e9:bb:81:8c:b4:3d:4c:38:9e:99:fd:41:8f:81:e0:21:22:f9:
         25:45:d4:7e:55:a8:7e:fd:2e:53:ac:cb:23:e5:d1:6c:5c:6b:
         d7:fc:04:06:fe:d7:36:62:54:ae:01:1a:d4:20:72:77:43:4b:
         17:73:d7:9e:a8:b4:02:6f:65:b5:2a:15:2f:b7:5d:64:af:20:
         8d:54:e9:db
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUN/ehkMKBO36B9GW5u2tyb6VkEWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNTA4MDgxNDQ4NDJaFw0yNjA4MDcxNDUzNDJaMDMxMTAvBgNV
BAMTKDhCQ0EzODI5OEEwNkE4NjQ3OTMxODAwMzRGNkZFMTZDNTk0MzA4M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Xtw0eetnogWj8orHd+91L3md
khVlN1YP/cZgBRBmt2o/DUy89XKnx7EOWGYUGTRdMHMQkFLc1qdwd5nHor5K6JI0
rRHhn4F849ZkGYT0Ke8BCImd6gdOUPEG0rrWz5dENbRb2Y0hqZb3CO+0ikxwi4UN
+DFB9QW/dD8MbqE2pfUOSEaM4o222lxr1Uj6nwtjO4jSsSAm00Xo9+Tw/vNxI3ru
6FkgW0GFeXHTnDG684tDqA8KfQ0lO2RbSEInnNzq5LxOUkYBB4eXjQ5czrYNuyx3
6bNAm6Mgv8smiPL5SeaxNICIqpfSGiYJhz1cdmZZloypOqC8ztazJszaZvzPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUi8o4KYoGqGR5MYADT2/hbFlDCDwwHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzODM3MmUzODM3MmUzMTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzczNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAu1cMMA0GCSqGSIb3DQEBCwUAA4IBAQA/VBsrf/hX
+s9SWgsPVvKWFvDicgJOihCtIaz9Ii1itwHs7ahlACXyvZ+AefdpbHgicM3Eq5yj
d9kaBMoFZ90z51N5x7DdC4ppiOEBkzHeXj4Qtivvx+X+f6SF75oOm3GhH5IDGr1o
RfWAPwMid/Ts8QBRTd1atlUKmmOVqjOkI5FVhcKX7t/1RklXA0oo7vcZUOGCmre3
7nOgklbqMtFSaLhBtBsRthge3XVlXkTRy0g6AzLpu4GMtD1MOJ6Z/UGPgeAhIvkl
RdR+Vah+/S5TrMsj5dFsXGvX/AQG/tc2YlSuARrUIHJ3Q0sXc9eeqLQCb2W1KhUv
t11kryCNVOnb
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:46:53 2025 by rpki-client