Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3137302e3135302e3230382e302f32342d3234203d3e20323633323930.roa
File:                     3137302e3135302e3230382e302f32342d3234203d3e20323633323930.roa (raw, json)
Hash identifier:          f0GPNv7avZ+0i1WwmlDnjaedsn7ssj2izTy5mtx9IEs=
Subject key identifier:   B7:5E:A5:4A:19:DA:8E:88:98:06:DB:0D:D3:D3:2A:C4:04:72:77:CC
Certificate issuer:       /CN=665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7
Certificate serial:       5BD35F6BFB02535E38ED7AA29973AD0113AF4075
Authority key identifier: 66:53:61:CB:3A:CA:41:97:B4:AC:FD:25:7E:CF:EA:3E:0D:21:C9:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3137302e3135302e3230382e302f32342d3234203d3e20323633323930.roa
Signing time:             Tue 03 Jun 2025 13:54:11 +0000
ROA not before:           Tue 03 Jun 2025 13:49:11 +0000
ROA not after:            Tue 02 Jun 2026 13:54:11 +0000
asID:                     263290
IP address blocks:        170.150.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.crl
                          rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Jun 2025 13:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d3:5f:6b:fb:02:53:5e:38:ed:7a:a2:99:73:ad:01:13:af:40:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7
        Validity
            Not Before: Jun  3 13:49:11 2025 GMT
            Not After : Jun  2 13:54:11 2026 GMT
        Subject: CN=B75EA54A19DA8E889806DB0DD3D32AC4047277CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:02:2d:2d:e3:d5:a2:aa:70:b1:99:27:e9:45:
                    ec:5f:86:56:4e:4e:a0:76:dd:f5:e6:d2:d3:d9:e2:
                    b0:21:31:0d:a7:9b:1f:da:d0:aa:9e:5f:c7:75:98:
                    59:9b:b6:b7:fb:e3:a7:86:92:a4:3b:95:6e:ee:b8:
                    29:e8:9b:24:6b:f9:1f:2e:4c:e6:d9:e8:82:25:66:
                    be:14:f0:aa:c8:cd:46:3c:0c:e6:8e:10:6a:74:32:
                    67:56:45:45:0a:06:a5:fd:71:57:10:11:73:52:31:
                    71:98:5f:9f:2a:56:38:6e:41:74:0c:bb:44:08:b8:
                    e2:6d:7d:43:41:6a:01:2f:5e:f1:82:fa:e6:03:a1:
                    ba:a8:71:06:ac:7c:14:94:ba:b7:08:98:71:9f:f4:
                    58:b2:25:5a:ed:bf:97:ee:d3:a0:fd:9b:cc:f8:91:
                    c8:79:6b:e7:1f:b9:de:55:70:b2:11:62:5a:22:c6:
                    28:e8:e3:72:68:b2:6f:48:e9:cb:7e:f9:ae:25:58:
                    4d:7b:42:ba:e6:cd:1b:e6:43:c7:27:0a:d9:a1:a7:
                    d9:db:1d:9e:de:2d:c5:a5:ec:11:62:51:0f:ba:9b:
                    42:9e:90:fe:01:27:50:0a:92:76:26:e3:72:cc:b7:
                    5f:51:fd:b7:ed:50:07:78:55:01:4b:0e:e2:38:48:
                    30:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5E:A5:4A:19:DA:8E:88:98:06:DB:0D:D3:D3:2A:C4:04:72:77:CC
            X509v3 Authority Key Identifier:
                keyid:66:53:61:CB:3A:CA:41:97:B4:AC:FD:25:7E:CF:EA:3E:0D:21:C9:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3137302e3135302e3230382e302f32342d3234203d3e20323633323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:32:cb:b4:71:f0:e9:b9:3e:32:63:4e:44:b5:5a:33:f2:fe:
         13:b0:93:88:53:bf:3f:66:50:6d:8d:8f:cb:43:2a:91:be:27:
         65:dc:e6:8d:b8:a0:19:98:f7:c5:08:75:92:5f:cf:33:27:55:
         3a:15:4e:7f:d3:af:72:59:07:1d:25:71:99:5c:ff:bd:10:fb:
         6e:14:83:8d:a5:59:e5:76:8c:4e:97:f5:84:6a:7b:af:78:c7:
         13:ab:3b:d1:4e:7a:da:96:b4:eb:2b:33:18:83:e6:a2:e1:d7:
         12:cc:ad:05:e6:c2:c3:dc:c2:63:bc:67:a5:d5:c5:53:f1:89:
         45:cf:19:6a:f4:ab:e6:a3:34:6b:ca:8d:40:7c:2a:1b:fd:15:
         c7:da:0a:5e:c2:63:89:fa:42:76:a0:17:ec:b1:15:7f:11:0d:
         d2:67:a5:bc:ba:10:23:c1:ff:2c:4d:6e:26:72:4b:3f:43:67:
         82:74:44:fa:23:de:44:8f:61:80:31:9a:df:03:93:67:50:2c:
         df:7c:a7:f3:19:c0:29:52:64:f2:0c:b5:a1:c0:b2:b3:08:4f:
         e5:ff:ec:0e:32:43:1a:1b:ea:4e:26:5e:f5:fe:2f:d8:01:de:
         c5:75:82:4d:b7:9c:ce:d6:22:b4:21:9a:86:12:7f:cb:0f:0a:
         3b:e2:9e:4e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUW9Nfa/sCU1447XqimXOtAROvQHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY1MzYxQ0IzQUNBNDE5N0I0QUNGRDI1N0VDRkVBM0Uw
RDIxQzlCNzAeFw0yNTA2MDMxMzQ5MTFaFw0yNjA2MDIxMzU0MTFaMDMxMTAvBgNV
BAMTKEI3NUVBNTRBMTlEQThFODg5ODA2REIwREQzRDMyQUM0MDQ3Mjc3Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiAi0t49WiqnCxmSfpRexfhlZO
TqB23fXm0tPZ4rAhMQ2nmx/a0KqeX8d1mFmbtrf746eGkqQ7lW7uuCnomyRr+R8u
TObZ6IIlZr4U8KrIzUY8DOaOEGp0MmdWRUUKBqX9cVcQEXNSMXGYX58qVjhuQXQM
u0QIuOJtfUNBagEvXvGC+uYDobqocQasfBSUurcImHGf9FiyJVrtv5fu06D9m8z4
kch5a+cfud5VcLIRYloixijo43Josm9I6ct++a4lWE17QrrmzRvmQ8cnCtmhp9nb
HZ7eLcWl7BFiUQ+6m0KekP4BJ1AKknYm43LMt19R/bftUAd4VQFLDuI4SDBlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUt16lShnajoiYBtsN09MqxARyd8wwHwYDVR0j
BBgwFoAUZlNhyzrKQZe0rP0lfs/qPg0hybcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODg0Q2NFVmdjOHZ2Q0JnNENVQTE4MXZheFpwc2NMdEEzdHBCc0JmcjZ3
b3kvMC82NjUzNjFDQjNBQ0E0MTk3QjRBQ0ZEMjU3RUNGRUEzRTBEMjFDOUI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2NTM2MUNCM0FDQTQxOTdC
NEFDRkQyNTdFQ0ZFQTNFMEQyMUM5QjcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg4NENjRVZnYzh2dkNCZzRDVUExODF2YXhacHNjTHRBM3RwQnNCZnI2d295LzAv
MzEzNzMwMmUzMTM1MzAyZTMyMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMyMzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKqW0DANBgkqhkiG9w0BAQsFAAOCAQEAITLL
tHHw6bk+MmNORLVaM/L+E7CTiFO/P2ZQbY2Py0Mqkb4nZdzmjbigGZj3xQh1kl/P
MydVOhVOf9OvclkHHSVxmVz/vRD7bhSDjaVZ5XaMTpf1hGp7r3jHE6s70U562pa0
6yszGIPmouHXEsytBebCw9zCY7xnpdXFU/GJRc8ZavSr5qM0a8qNQHwqG/0Vx9oK
XsJjifpCdqAX7LEVfxEN0melvLoQI8H/LE1uJnJLP0NngnRE+iPeRI9hgDGa3wOT
Z1As33yn8xnAKVJk8gy1ocCyswhP5f/sDjJDGhvqTiZe9f4v2AHexXWCTbecztYi
tCGahhJ/yw8KO+KeTg==
-----END CERTIFICATE-----
Generated at Sat Jun 21 23:33:35 2025 by rpki-client