Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3137302e3233332e3230342e302f32322d3234203d3e20323633333231.roa
File:                     3137302e3233332e3230342e302f32322d3234203d3e20323633333231.roa (raw, json)
Hash identifier:          yvz0bncSCI+UJpzByY5mfGy18dE6DAJkqBravnlAWrY=
Subject key identifier:   95:B3:13:C7:DA:6B:6D:24:CB:B9:D1:09:19:58:9E:8D:A9:A4:9E:54
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       61DD2EA2F5BEEFE76CADE1A2DEF81C783BBA88D2
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3137302e3233332e3230342e302f32322d3234203d3e20323633333231.roa
Signing time:             Tue 15 Jul 2025 11:57:30 +0000
ROA not before:           Tue 15 Jul 2025 11:52:30 +0000
ROA not after:            Tue 14 Jul 2026 11:57:30 +0000
asID:                     263321
IP address blocks:        170.233.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl
                          rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 03:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:dd:2e:a2:f5:be:ef:e7:6c:ad:e1:a2:de:f8:1c:78:3b:ba:88:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: Jul 15 11:52:30 2025 GMT
            Not After : Jul 14 11:57:30 2026 GMT
        Subject: CN=95B313C7DA6B6D24CBB9D10919589E8DA9A49E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:97:bc:0d:b2:a4:55:dc:61:22:f4:86:e5:
                    d9:3b:00:16:27:4c:50:08:87:d5:fc:f3:ff:00:75:
                    fa:2b:c9:cf:4b:42:2b:d3:7d:b4:e0:aa:b9:ae:aa:
                    ad:ad:87:b6:f8:91:a7:d5:b5:29:f4:48:73:0c:49:
                    19:bd:b0:b0:0f:0d:c2:3d:ac:a1:61:0a:cb:d2:78:
                    92:6e:ad:b2:bc:ea:b3:86:76:cf:98:37:21:bf:81:
                    13:a8:46:44:ab:cf:9a:67:b7:c7:aa:cc:a8:4e:8e:
                    f4:bd:1d:03:83:b1:37:bc:41:bd:13:97:2d:4b:25:
                    53:19:a9:74:92:72:42:59:35:7e:82:39:71:81:23:
                    54:64:86:0b:5f:04:05:2e:df:83:46:c1:38:73:2f:
                    23:0b:33:c0:bc:21:a0:d5:55:2a:f1:4c:4d:3a:78:
                    87:8f:76:5d:c0:8d:6e:3d:12:3e:f1:5b:69:14:9d:
                    3c:ed:05:50:53:63:49:13:e4:bd:ab:20:20:de:53:
                    d5:a4:f7:7c:69:ca:03:57:92:30:1f:d3:87:d0:fb:
                    06:4a:e2:89:a8:44:c9:b1:30:1f:3c:44:cc:88:ef:
                    fd:7e:e4:68:33:8b:63:f4:75:82:a3:0a:49:a3:51:
                    c3:32:0f:79:06:8a:98:6e:ab:54:1a:27:3c:48:54:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B3:13:C7:DA:6B:6D:24:CB:B9:D1:09:19:58:9E:8D:A9:A4:9E:54
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3137302e3233332e3230342e302f32322d3234203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:a6:7f:c0:26:39:84:3f:b7:2d:d0:62:64:36:15:39:46:68:
         e3:2f:8d:70:75:3b:05:c1:73:86:63:20:61:51:66:a1:d9:66:
         a6:65:0d:be:51:2f:e1:94:80:ce:77:c2:c8:71:4e:c9:7b:a9:
         eb:82:6f:e0:ce:9f:a7:cf:d2:c0:d0:47:de:93:51:5b:e8:4c:
         b2:89:21:7b:5f:0e:0f:16:51:5c:64:9e:c2:2d:1b:4b:9d:c5:
         7b:ed:08:5a:f3:70:72:91:cf:ee:41:84:ef:f1:68:9d:87:b8:
         55:98:7d:87:49:69:80:ee:c6:8c:77:8f:71:6a:0c:86:27:9e:
         bd:9a:68:f7:86:8c:3c:8f:85:83:b1:05:14:91:ec:49:17:31:
         e9:f5:8d:84:95:5f:87:e0:f5:f7:f2:18:a1:65:05:51:63:ec:
         24:22:47:dc:88:7f:37:ed:f4:0c:12:c8:a8:34:30:ac:3c:cd:
         49:1a:0b:30:93:3c:36:a9:01:a7:35:c6:20:53:d7:39:f5:38:
         b4:05:78:ff:15:e0:c6:e6:e4:51:07:d9:c4:78:dd:7b:e5:ff:
         0c:e0:a8:e4:c8:9e:6e:6d:fc:c9:bf:4e:d9:81:da:e3:aa:d5:
         64:cd:87:ee:fe:35:08:8e:3e:01:9b:52:15:21:68:a3:36:c4:
         42:64:e8:c2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYd0uovW+7+dsreGi3vgceDu6iNIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhCRjAzNjdCNTU5MTIxNzc3QTIxQTg0RDk1M0E3MTdE
NkU4MkFFQTAeFw0yNTA3MTUxMTUyMzBaFw0yNjA3MTQxMTU3MzBaMDMxMTAvBgNV
BAMTKDk1QjMxM0M3REE2QjZEMjRDQkI5RDEwOTE5NTg5RThEQTlBNDlFNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwu5e8DbKkVdxhIvSG5dk7ABYn
TFAIh9X88/8Adforyc9LQivTfbTgqrmuqq2th7b4kafVtSn0SHMMSRm9sLAPDcI9
rKFhCsvSeJJurbK86rOGds+YNyG/gROoRkSrz5pnt8eqzKhOjvS9HQODsTe8Qb0T
ly1LJVMZqXSSckJZNX6COXGBI1RkhgtfBAUu34NGwThzLyMLM8C8IaDVVSrxTE06
eIePdl3AjW49Ej7xW2kUnTztBVBTY0kT5L2rICDeU9Wk93xpygNXkjAf04fQ+wZK
4omoRMmxMB88RMyI7/1+5Ggzi2P0dYKjCkmjUcMyD3kGiphuq1QaJzxIVNf1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUlbMTx9prbSTLudEJGViejamknlQwHwYDVR0j
BBgwFoAUuL8DZ7VZEhd3ohqE2VOnF9boKuowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI4S205dEZvOGo5TG42MTVZa2trZzZUOHJCbmJnUGd3c2hiM2doc1Bq
SHEvMS9COEJGMDM2N0I1NTkxMjE3NzdBMjFBODREOTUzQTcxN0Q2RTgyQUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4QkYwMzY3QjU1OTEyMTc3
N0EyMUE4NEQ5NTNBNzE3RDZFODJBRUEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcyOEttOXRGbzhqOUxuNjE1WWtra2c2VDhyQm5iZ1Bnd3NoYjNnaHNQakhxLzEv
MzEzNzMwMmUzMjMzMzMyZTMyMzAzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzMzMzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrpzDANBgkqhkiG9w0BAQsFAAOCAQEAfqZ/
wCY5hD+3LdBiZDYVOUZo4y+NcHU7BcFzhmMgYVFmodlmpmUNvlEv4ZSAznfCyHFO
yXup64Jv4M6fp8/SwNBH3pNRW+hMsokhe18ODxZRXGSewi0bS53Fe+0IWvNwcpHP
7kGE7/FonYe4VZh9h0lpgO7GjHePcWoMhieevZpo94aMPI+Fg7EFFJHsSRcx6fWN
hJVfh+D19/IYoWUFUWPsJCJH3Ih/N+30DBLIqDQwrDzNSRoLMJM8NqkBpzXGIFPX
OfU4tAV4/xXgxubkUQfZxHjde+X/DOCo5Miebm38yb9O2YHa46rVZM2H7v41CI4+
AZtSFSFoozbEQmTowg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:38:00 2025 by rpki-client