Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e3233332e34302e302f32322d3234203d3e203238313436.roa
File:                     3137302e3233332e34302e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          7HYf8b3kWgFsHRVYvbIKBYHMMfrZfjW2Yn/41vDzH0s=
Subject key identifier:   9C:C4:3C:14:4A:EA:D0:BF:29:1F:F0:90:C4:1F:AD:8B:CC:EA:11:3C
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       02E8E5C908F30268B321070534C880908375C285
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e3233332e34302e302f32322d3234203d3e203238313436.roa
Signing time:             Mon 12 May 2025 12:58:26 +0000
ROA not before:           Mon 12 May 2025 12:53:26 +0000
ROA not after:            Mon 11 May 2026 12:58:26 +0000
asID:                     28146
IP address blocks:        170.233.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 22:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e8:e5:c9:08:f3:02:68:b3:21:07:05:34:c8:80:90:83:75:c2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:53:26 2025 GMT
            Not After : May 11 12:58:26 2026 GMT
        Subject: CN=9CC43C144AEAD0BF291FF090C41FAD8BCCEA113C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:38:c6:de:aa:f6:c2:75:fe:da:25:aa:df:d6:
                    d4:05:80:ca:f0:cf:13:a1:13:2f:0c:35:af:ba:c7:
                    ae:fe:47:9f:e6:40:7e:12:43:76:70:fc:c7:f7:11:
                    e4:fb:25:17:5d:b8:af:4b:81:8d:b1:16:8f:8c:e2:
                    74:b5:94:2b:ae:2e:6c:d8:33:ec:52:55:d3:97:a0:
                    46:95:e5:2c:f0:6e:94:30:c7:7f:c4:8f:5f:64:47:
                    5d:85:1f:bc:e6:9d:5e:23:68:cb:c0:b8:38:e2:5c:
                    be:f7:94:c5:ae:02:16:6c:d5:ac:53:40:e3:4f:b6:
                    40:69:9c:55:c8:0f:6a:72:c4:fe:ce:8f:d8:37:bb:
                    85:66:ec:c0:fe:ff:7a:2a:bc:22:e7:fe:fc:12:b8:
                    c0:27:df:ac:4a:18:e2:19:ba:32:a3:56:64:37:3f:
                    03:85:50:62:75:b7:44:86:bc:6e:44:28:4d:12:ea:
                    78:8e:48:46:19:e4:09:ca:a0:ed:b6:4b:c6:79:ad:
                    e6:1f:34:17:77:9d:d8:0f:ac:5a:fd:56:4a:3c:4c:
                    b9:48:3b:79:b2:26:1b:e0:2e:a0:a3:ff:e5:b4:21:
                    b5:95:49:a1:0f:10:18:6f:30:38:69:1a:86:57:fa:
                    ab:d5:23:70:d0:7f:3d:6c:e6:e7:3a:c2:fc:53:dc:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C4:3C:14:4A:EA:D0:BF:29:1F:F0:90:C4:1F:AD:8B:CC:EA:11:3C
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e3233332e34302e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:77:e3:3f:93:2f:f9:34:61:6e:5c:4e:db:79:56:f1:8a:42:
         47:ec:b8:f2:f5:4f:ea:6f:08:82:e4:5e:c8:b8:7d:51:36:c5:
         23:c0:d0:db:11:29:53:a0:e9:aa:6a:be:4c:b9:7f:76:e2:56:
         b9:46:e1:da:88:79:77:e8:4a:5e:65:3f:9c:62:15:8c:45:b2:
         7f:7c:49:86:d8:9f:3d:96:09:f7:7f:48:08:a3:66:7f:f5:3a:
         9d:d4:16:70:d5:96:fc:74:22:4e:09:e4:6f:93:b5:08:4f:de:
         bd:e9:7f:8f:04:d0:81:b9:ca:6a:b8:e6:39:06:da:3c:85:64:
         c2:1b:79:8c:c4:98:44:20:0f:d3:da:bf:98:b4:54:16:74:da:
         4f:92:60:77:f3:a0:97:4d:9a:ab:5c:06:f7:ea:34:55:4f:e9:
         3f:1d:2d:fb:00:80:51:a4:73:31:32:9f:e3:9a:2d:39:59:5c:
         22:22:ef:53:75:ae:a5:30:68:01:d4:5a:30:6b:a4:2a:9a:ec:
         65:f1:b4:f5:1d:0d:75:cc:02:c6:8e:1f:5b:37:44:84:e6:54:
         76:da:bb:da:e6:4d:3d:83:ab:4c:55:8f:c5:e8:7a:af:1b:47:
         8a:78:ea:82:79:b9:53:46:25:2c:16:a9:76:ad:e3:e7:2a:b6:
         75:02:ba:e3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAujlyQjzAmizIQcFNMiAkIN1woUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FCN0M5QUFFQTFEMjkyMDEwMkQwNTJFMUFDNDVFQ0Ez
NDM5QjJGMDAeFw0yNTA1MTIxMjUzMjZaFw0yNjA1MTExMjU4MjZaMDMxMTAvBgNV
BAMTKDlDQzQzQzE0NEFFQUQwQkYyOTFGRjA5MEM0MUZBRDhCQ0NFQTExM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQOMbeqvbCdf7aJarf1tQFgMrw
zxOhEy8MNa+6x67+R5/mQH4SQ3Zw/Mf3EeT7JRdduK9LgY2xFo+M4nS1lCuuLmzY
M+xSVdOXoEaV5SzwbpQwx3/Ej19kR12FH7zmnV4jaMvAuDjiXL73lMWuAhZs1axT
QONPtkBpnFXID2pyxP7Oj9g3u4Vm7MD+/3oqvCLn/vwSuMAn36xKGOIZujKjVmQ3
PwOFUGJ1t0SGvG5EKE0S6niOSEYZ5AnKoO22S8Z5reYfNBd3ndgPrFr9Vko8TLlI
O3myJhvgLqCj/+W0IbWVSaEPEBhvMDhpGoZX+qvVI3DQfz1s5uc6wvxT3Is5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnMQ8FErq0L8pH/CQxB+ti8zqETwwHwYDVR0j
BBgwFoAUerfJquodKSAQLQUuGsReyjQ5svAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZEQ2g2WDV5cktkN0NZWXZacERMOVNxU3pNQUJqUGFhNmRzMUtSSzZx
SzYvMC83QUI3QzlBQUVBMUQyOTIwMTAyRDA1MkUxQUM0NUVDQTM0MzlCMkYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBQjdDOUFBRUExRDI5MjAx
MDJEMDUyRTFBQzQ1RUNBMzQzOUIyRjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGRENoNlg1eXJLZDdDWVl2WnBETDlTcVN6TUFCalBhYTZkczFLUks2cUs2LzAv
MzEzNzMwMmUzMjMzMzMyZTM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzEzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqukoMA0GCSqGSIb3DQEBCwUAA4IBAQCkd+M/ky/5
NGFuXE7beVbxikJH7Ljy9U/qbwiC5F7IuH1RNsUjwNDbESlToOmqar5MuX924la5
RuHaiHl36EpeZT+cYhWMRbJ/fEmG2J89lgn3f0gIo2Z/9Tqd1BZw1Zb8dCJOCeRv
k7UIT9696X+PBNCBucpquOY5Bto8hWTCG3mMxJhEIA/T2r+YtFQWdNpPkmB386CX
TZqrXAb36jRVT+k/HS37AIBRpHMxMp/jmi05WVwiIu9Tda6lMGgB1Fowa6Qqmuxl
8bT1HQ11zALGjh9bN0SE5lR22rva5k09g6tMVY/F6HqvG0eKeOqCeblTRiUsFql2
rePnKrZ1Arrj
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:42:26 2025 by rpki-client