Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/3136342e3136332e3230382e302f32322d3234203d3e20323637343237.roa
File:                     3136342e3136332e3230382e302f32322d3234203d3e20323637343237.roa (raw, json)
Hash identifier:          xhBmFJWH0UyCao0JVPKBeLZ55Y1hgXWtHZaxt2MGicM=
Subject key identifier:   BC:F1:4D:FA:E3:68:92:BC:E9:C5:35:56:E4:BE:47:ED:C6:95:6B:16
Certificate issuer:       /CN=488C735907C82A33DD56871CC305A21B88A9B353
Certificate serial:       4F610D9884E8BD655A075BA311459098AF3D0051
Authority key identifier: 48:8C:73:59:07:C8:2A:33:DD:56:87:1C:C3:05:A2:1B:88:A9:B3:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488C735907C82A33DD56871CC305A21B88A9B353.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/3136342e3136332e3230382e302f32322d3234203d3e20323637343237.roa
Signing time:             Wed 30 Apr 2025 15:07:42 +0000
ROA not before:           Wed 30 Apr 2025 15:02:42 +0000
ROA not after:            Wed 29 Apr 2026 15:07:42 +0000
asID:                     267427
IP address blocks:        164.163.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/488C735907C82A33DD56871CC305A21B88A9B353.crl
                          rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/488C735907C82A33DD56871CC305A21B88A9B353.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488C735907C82A33DD56871CC305A21B88A9B353.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 18:27:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:61:0d:98:84:e8:bd:65:5a:07:5b:a3:11:45:90:98:af:3d:00:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488C735907C82A33DD56871CC305A21B88A9B353
        Validity
            Not Before: Apr 30 15:02:42 2025 GMT
            Not After : Apr 29 15:07:42 2026 GMT
        Subject: CN=BCF14DFAE36892BCE9C53556E4BE47EDC6956B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:38:f4:e0:22:4a:02:92:9d:bf:42:f9:26:96:
                    38:83:58:60:00:8c:11:90:63:2d:80:2b:d6:90:d3:
                    9f:27:e9:a7:a7:4b:00:6d:ea:a1:a1:21:2e:c6:8f:
                    a3:b8:d5:1b:ac:91:37:d6:7f:de:02:63:6b:06:de:
                    d2:00:30:ec:a3:87:77:bc:b5:4c:6b:1b:32:b9:b5:
                    6c:03:79:c1:21:a5:b1:de:1f:d5:aa:0f:e8:50:3a:
                    43:a2:28:8c:d5:b9:c4:bd:3f:90:44:2d:43:5b:1f:
                    45:f8:a9:84:f8:dc:6d:5a:77:08:e4:82:f6:c7:1a:
                    24:d0:49:b9:b0:8f:87:82:52:ca:c5:03:0c:f0:f6:
                    ba:20:5e:41:ac:3d:a6:53:33:05:d8:02:bb:ca:f0:
                    9a:eb:fa:cf:d2:b1:40:ec:c0:ca:57:cc:59:64:52:
                    f1:6f:88:9c:16:f0:0d:62:bf:3d:00:89:16:25:1a:
                    6c:05:2d:9f:94:98:23:75:65:22:d5:c6:4c:7b:19:
                    b4:78:3f:a5:0b:5f:02:e9:4d:ca:56:4a:1b:70:46:
                    de:37:e8:6c:1d:4e:84:84:95:92:7f:75:b4:f6:70:
                    74:22:1a:5c:a4:d0:e4:b5:3b:cf:b2:b9:e6:19:87:
                    5e:29:9b:3f:37:97:0d:0f:5b:65:a6:b9:92:6c:8e:
                    39:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F1:4D:FA:E3:68:92:BC:E9:C5:35:56:E4:BE:47:ED:C6:95:6B:16
            X509v3 Authority Key Identifier:
                keyid:48:8C:73:59:07:C8:2A:33:DD:56:87:1C:C3:05:A2:1B:88:A9:B3:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/488C735907C82A33DD56871CC305A21B88A9B353.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488C735907C82A33DD56871CC305A21B88A9B353.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/3136342e3136332e3230382e302f32322d3234203d3e20323637343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:04:9f:54:f4:05:78:79:52:85:0a:b5:b6:1b:6c:4f:15:fc:
         90:cb:2d:5f:f7:cd:48:64:f1:35:5a:d9:6a:66:83:30:ba:e4:
         27:a9:7a:fb:f7:ad:a2:f4:fb:82:5f:cf:5a:12:b1:71:73:5a:
         04:b3:a5:76:19:1e:8d:f1:db:a1:a7:fc:b4:18:b9:75:cd:22:
         64:9e:12:13:2f:5a:f4:41:b9:75:28:bd:35:14:c2:6e:c3:79:
         c2:70:74:5a:cd:ed:aa:b1:3a:cc:21:ed:65:1d:a0:31:99:ba:
         1b:ae:02:10:99:e1:fe:ad:d8:7a:c2:17:6c:4d:98:0a:b1:48:
         10:41:10:d1:b2:70:62:ed:7f:23:7c:5c:e0:f9:e0:54:15:9d:
         4d:f6:34:c9:3d:00:81:83:a6:6e:80:f7:e8:88:32:e7:e0:98:
         10:73:82:71:0b:70:72:4d:39:f6:ba:f7:98:91:0e:da:f6:3f:
         31:41:ba:04:22:78:29:3c:5f:ac:25:1f:c1:03:60:c4:dc:9a:
         5b:62:6e:cc:b1:7d:4d:05:78:08:90:a6:7e:8b:19:0d:a3:2e:
         3f:9d:5b:1d:21:6d:b5:4c:9f:73:d4:2b:ad:c7:cc:68:04:cd:
         d0:96:55:2a:28:06:74:6c:6e:a8:1c:64:a6:7b:23:56:2f:e4:
         02:28:11:0e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUT2ENmITovWVaB1ujEUWQmK89AFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDg4QzczNTkwN0M4MkEzM0RENTY4NzFDQzMwNUEyMUI4
OEE5QjM1MzAeFw0yNTA0MzAxNTAyNDJaFw0yNjA0MjkxNTA3NDJaMDMxMTAvBgNV
BAMTKEJDRjE0REZBRTM2ODkyQkNFOUM1MzU1NkU0QkU0N0VEQzY5NTZCMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcOPTgIkoCkp2/QvkmljiDWGAA
jBGQYy2AK9aQ058n6aenSwBt6qGhIS7Gj6O41RuskTfWf94CY2sG3tIAMOyjh3e8
tUxrGzK5tWwDecEhpbHeH9WqD+hQOkOiKIzVucS9P5BELUNbH0X4qYT43G1adwjk
gvbHGiTQSbmwj4eCUsrFAwzw9rogXkGsPaZTMwXYArvK8Jrr+s/SsUDswMpXzFlk
UvFviJwW8A1ivz0AiRYlGmwFLZ+UmCN1ZSLVxkx7GbR4P6ULXwLpTcpWShtwRt43
6GwdToSElZJ/dbT2cHQiGlyk0OS1O8+yueYZh14pmz83lw0PW2WmuZJsjjnZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUvPFN+uNokrzpxTVW5L5H7caVaxYwHwYDVR0j
BBgwFoAUSIxzWQfIKjPdVoccwwWiG4ips1MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGNqZTRxNWtIOFJuQXVlOHc0TmkybzNFTDZZOTZrc3NmaXBDZUF5empt
bTEvMC80ODhDNzM1OTA3QzgyQTMzREQ1Njg3MUNDMzA1QTIxQjg4QTlCMzUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4OEM3MzU5MDdDODJBMzNE
RDU2ODcxQ0MzMDVBMjFCODhBOUIzNTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhjamU0cTVrSDhSbkF1ZTh3NE5pMm8zRUw2WTk2a3NzZmlwQ2VBeXpqbW0xLzAv
MzEzNjM0MmUzMTM2MzMyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNzM0MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqSj0DANBgkqhkiG9w0BAQsFAAOCAQEAgASf
VPQFeHlShQq1thtsTxX8kMstX/fNSGTxNVrZamaDMLrkJ6l6+/etovT7gl/PWhKx
cXNaBLOldhkejfHboaf8tBi5dc0iZJ4SEy9a9EG5dSi9NRTCbsN5wnB0Ws3tqrE6
zCHtZR2gMZm6G64CEJnh/q3YesIXbE2YCrFIEEEQ0bJwYu1/I3xc4PngVBWdTfY0
yT0AgYOmboD36Igy5+CYEHOCcQtwck059rr3mJEO2vY/MUG6BCJ4KTxfrCUfwQNg
xNyaW2JuzLF9TQV4CJCmfosZDaMuP51bHSFttUyfc9QrrcfMaATN0JZVKigGdGxu
qBxkpnsjVi/kAigRDg==
-----END CERTIFICATE-----
Generated at Tue May 6 22:26:35 2025 by rpki-client