Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/3137372e31312e31362e302f32322d3234203d3e20323632383639.roa
File:                     3137372e31312e31362e302f32322d3234203d3e20323632383639.roa (raw, json)
Hash identifier:          oPrAn3y9DxuXQ+3LNSKa8EZkbj36H86+krWpcqpxn/4=
Subject key identifier:   20:3C:D0:E9:A6:3F:32:5C:5D:DD:E9:13:A0:E1:17:98:A5:46:C2:3A
Certificate issuer:       /CN=B15DE8A39643F9E3852DE2E7153C75CAAA401A15
Certificate serial:       1CD1600B56FEC236D2D6D5038BC8CFF3170E0EF7
Authority key identifier: B1:5D:E8:A3:96:43:F9:E3:85:2D:E2:E7:15:3C:75:CA:AA:40:1A:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/3137372e31312e31362e302f32322d3234203d3e20323632383639.roa
Signing time:             Thu 24 Jul 2025 14:08:10 +0000
ROA not before:           Thu 24 Jul 2025 14:03:10 +0000
ROA not after:            Thu 23 Jul 2026 14:08:10 +0000
asID:                     262869
IP address blocks:        177.11.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.crl
                          rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 09:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d1:60:0b:56:fe:c2:36:d2:d6:d5:03:8b:c8:cf:f3:17:0e:0e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B15DE8A39643F9E3852DE2E7153C75CAAA401A15
        Validity
            Not Before: Jul 24 14:03:10 2025 GMT
            Not After : Jul 23 14:08:10 2026 GMT
        Subject: CN=203CD0E9A63F325C5DDDE913A0E11798A546C23A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:0d:45:9e:9f:fa:26:a5:82:7b:e2:30:e6:
                    e1:c6:a0:59:5c:13:bf:9c:23:d5:41:f8:1b:2e:67:
                    04:90:1b:44:d2:20:d6:f8:8c:7e:44:c2:93:ab:d2:
                    38:9b:70:59:51:62:e2:52:0e:f1:9f:86:9c:2f:df:
                    63:a2:2b:6c:57:ac:c3:a3:79:07:15:b0:35:92:91:
                    95:77:64:30:4d:d3:e8:51:ca:99:b6:2a:34:b2:ef:
                    9b:df:ab:52:4a:eb:33:e6:f5:f8:72:8b:39:28:92:
                    d5:47:c8:f0:d5:e8:9e:c4:94:70:4b:08:a2:7b:af:
                    9a:15:ec:ed:f3:56:db:64:13:9e:19:46:42:dc:a7:
                    30:b3:c0:11:c9:b2:b1:66:fb:0e:70:b0:17:da:d9:
                    15:2b:93:49:89:d6:da:cc:bb:87:cd:4d:f6:e2:4a:
                    98:4e:3e:fa:dd:bf:7e:9f:db:01:1a:ee:83:6b:ed:
                    9a:75:7e:bb:18:b2:3a:20:09:8d:d3:1f:80:b9:fe:
                    70:8c:e5:8f:b0:cb:22:45:fa:c6:75:f1:9a:62:0d:
                    42:38:61:30:af:f4:71:78:3c:3c:21:97:7b:9f:7e:
                    e0:32:f9:be:ac:7d:97:10:e6:4a:1e:70:66:94:ce:
                    72:6a:c2:47:27:e9:d9:52:dd:ec:df:92:5b:4d:7f:
                    be:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3C:D0:E9:A6:3F:32:5C:5D:DD:E9:13:A0:E1:17:98:A5:46:C2:3A
            X509v3 Authority Key Identifier:
                keyid:B1:5D:E8:A3:96:43:F9:E3:85:2D:E2:E7:15:3C:75:CA:AA:40:1A:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/3137372e31312e31362e302f32322d3234203d3e20323632383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:2a:ec:6b:fe:7f:92:f2:69:01:74:5f:3a:7c:0a:12:e6:b8:
         c1:31:2c:c6:41:ce:d3:ce:00:2f:cc:e7:78:73:93:f1:29:0f:
         40:b2:9a:3f:2f:50:42:05:6c:ac:53:22:8c:63:b1:a7:96:b1:
         5d:58:5b:95:f0:d8:f6:90:cd:77:0d:dc:be:71:64:a1:89:86:
         74:b0:5b:a4:e0:e6:d4:8d:96:16:2e:d9:05:5f:8d:c8:96:94:
         c5:4d:97:93:5a:4e:f3:cf:00:f9:9d:ff:c2:f9:56:47:23:4b:
         b6:13:0f:c3:14:39:f8:b1:87:e5:5c:fe:83:5b:26:ea:bc:32:
         38:f4:84:4e:80:84:8f:a8:74:70:24:23:a0:1f:2c:a5:73:ad:
         cb:7d:2f:1d:2e:1c:21:85:b5:82:a2:e1:30:8e:14:bc:d9:09:
         24:d4:1c:37:eb:1c:34:ab:cd:84:0c:2b:77:0e:01:6f:07:04:
         29:16:b8:c0:f3:a5:e9:dd:fc:9a:8c:f9:ee:aa:6a:c1:d5:48:
         20:2e:56:3a:2c:3a:8a:80:02:e9:23:ae:ea:a9:86:0a:dc:ab:
         b8:9c:66:4e:eb:32:0e:f2:ce:14:c0:d4:c1:0f:3b:ff:2f:5d:
         e9:5e:2f:7d:bb:b7:b8:ea:00:24:5f:9a:07:11:2d:cf:4d:84:
         38:9c:dd:7b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHNFgC1b+wjbS1tUDi8jP8xcODvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE1REU4QTM5NjQzRjlFMzg1MkRFMkU3MTUzQzc1Q0FB
QTQwMUExNTAeFw0yNTA3MjQxNDAzMTBaFw0yNjA3MjMxNDA4MTBaMDMxMTAvBgNV
BAMTKDIwM0NEMEU5QTYzRjMyNUM1RERERTkxM0EwRTExNzk4QTU0NkMyM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Jg1Fnp/6JqWCe+Iw5uHGoFlc
E7+cI9VB+BsuZwSQG0TSINb4jH5EwpOr0jibcFlRYuJSDvGfhpwv32OiK2xXrMOj
eQcVsDWSkZV3ZDBN0+hRypm2KjSy75vfq1JK6zPm9fhyizkoktVHyPDV6J7ElHBL
CKJ7r5oV7O3zVttkE54ZRkLcpzCzwBHJsrFm+w5wsBfa2RUrk0mJ1trMu4fNTfbi
SphOPvrdv36f2wEa7oNr7Zp1frsYsjogCY3TH4C5/nCM5Y+wyyJF+sZ18ZpiDUI4
YTCv9HF4PDwhl3uffuAy+b6sfZcQ5koecGaUznJqwkcn6dlS3ezfkltNf75tAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUIDzQ6aY/Mlxd3ekToOEXmKVGwjowHwYDVR0j
BBgwFoAUsV3oo5ZD+eOFLeLnFTx1yqpAGhUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzRWSloyaXZtUTlLZndWWXl4akFuM3RkcnNBZXRtZ1g4M2hRTGg2dmNn
bjYvMC9CMTVERThBMzk2NDNGOUUzODUyREUyRTcxNTNDNzVDQUFBNDAxQTE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxNURFOEEzOTY0M0Y5RTM4
NTJERTJFNzE1M0M3NUNBQUE0MDFBMTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc0VkpaMml2bVE5S2Z3Vll5eGpBbjN0ZHJzQWV0bWdYODNoUUxoNnZjZ242LzAv
MzEzNzM3MmUzMTMxMmUzMTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzgzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsQsQMA0GCSqGSIb3DQEBCwUAA4IBAQB7Kuxr/n+S
8mkBdF86fAoS5rjBMSzGQc7TzgAvzOd4c5PxKQ9Aspo/L1BCBWysUyKMY7GnlrFd
WFuV8Nj2kM13Ddy+cWShiYZ0sFuk4ObUjZYWLtkFX43IlpTFTZeTWk7zzwD5nf/C
+VZHI0u2Ew/DFDn4sYflXP6DWybqvDI49IROgISPqHRwJCOgHyylc63LfS8dLhwh
hbWCouEwjhS82Qkk1Bw36xw0q82EDCt3DgFvBwQpFrjA86Xp3fyajPnuqmrB1Ugg
LlY6LDqKgALpI67qqYYK3Ku4nGZO6zIO8s4UwNTBDzv/L13pXi99u7e46gAkX5oH
ES3PTYQ4nN17
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:06 2025 by rpki-client