Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235322e302f32322d3232203d3e20323730343536.roa
File:                     3139302e3132342e3235322e302f32322d3232203d3e20323730343536.roa (raw, json)
Hash identifier:          EvcWNlAhjsxaKSWHQjXmlppFg0WDz7MkhyemwM9tmHk=
Subject key identifier:   18:34:38:C7:54:18:C3:8A:CD:B9:AE:BB:1F:8C:75:1B:C7:35:AE:C5
Certificate issuer:       /CN=085D77D4302255076FC0EF856AC7C40EF2F57975
Certificate serial:       64E252C6893C760CC1995398AE2C3AECD05837D0
Authority key identifier: 08:5D:77:D4:30:22:55:07:6F:C0:EF:85:6A:C7:C4:0E:F2:F5:79:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235322e302f32322d3232203d3e20323730343536.roa
Signing time:             Wed 30 Apr 2025 23:06:23 +0000
ROA not before:           Wed 30 Apr 2025 23:01:23 +0000
ROA not after:            Wed 29 Apr 2026 23:06:23 +0000
asID:                     270456
IP address blocks:        190.124.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.crl
                          rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 06:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e2:52:c6:89:3c:76:0c:c1:99:53:98:ae:2c:3a:ec:d0:58:37:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085D77D4302255076FC0EF856AC7C40EF2F57975
        Validity
            Not Before: Apr 30 23:01:23 2025 GMT
            Not After : Apr 29 23:06:23 2026 GMT
        Subject: CN=183438C75418C38ACDB9AEBB1F8C751BC735AEC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d7:77:e6:7c:f4:3c:54:63:2b:bc:17:86:9f:
                    c2:6d:64:c5:01:93:0b:48:a9:24:28:d4:da:a4:16:
                    35:78:99:e3:d0:1f:aa:0e:3c:4b:7c:8c:4d:38:e2:
                    50:49:14:1c:3a:d9:66:ef:f0:6c:95:2b:55:1d:33:
                    55:ea:19:3f:b9:de:34:2f:d0:b5:bd:96:29:90:c1:
                    47:bd:b9:6d:23:87:68:a4:6e:cf:7d:cd:2a:f4:17:
                    9f:e1:35:06:93:c6:b7:34:27:bb:7f:e0:eb:f0:3e:
                    ec:8f:88:8b:2f:2e:55:1a:31:4c:9e:af:9e:a8:57:
                    b8:af:f6:bf:8c:71:d6:c8:fd:5c:c2:7d:c1:4b:31:
                    3b:42:2c:2e:d7:c5:37:c2:b1:3d:c4:85:94:a4:7f:
                    d6:8c:bc:28:61:0c:eb:52:85:59:ed:78:f0:f6:ff:
                    da:83:13:a2:1d:f9:ff:de:96:72:f9:95:5b:82:85:
                    c8:c9:d2:f6:bc:75:6d:51:61:1a:a9:78:f9:c1:c6:
                    f3:b6:12:7c:dc:c1:9e:51:1d:f4:a7:b0:6c:b0:72:
                    f6:b4:ed:9b:0f:4a:5f:59:ee:ab:2f:0a:5f:b1:97:
                    74:1a:33:a8:61:6d:0a:f0:aa:a8:33:87:50:99:68:
                    2c:80:80:f0:cf:f2:1f:c9:8d:16:46:c5:7b:23:0b:
                    4a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:34:38:C7:54:18:C3:8A:CD:B9:AE:BB:1F:8C:75:1B:C7:35:AE:C5
            X509v3 Authority Key Identifier:
                keyid:08:5D:77:D4:30:22:55:07:6F:C0:EF:85:6A:C7:C4:0E:F2:F5:79:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235322e302f32322d3232203d3e20323730343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:7e:3f:d3:db:79:df:7c:0f:9b:39:0b:06:d2:e7:7b:7d:1e:
         66:2d:5f:ba:2f:09:d3:6a:1b:6e:4b:2f:41:6b:51:9e:d9:59:
         cf:cc:3f:44:37:23:6f:e6:f2:af:a6:cc:c1:bb:44:28:8a:e1:
         51:8e:a0:92:41:fc:be:aa:f3:37:01:25:65:90:52:3a:9b:3a:
         32:e9:28:ae:3a:ee:a9:ba:dc:be:d4:1e:3c:e1:4a:2d:c6:96:
         c5:03:1e:a3:3c:0c:a7:7a:d5:1a:9f:e2:e1:81:25:6a:8e:9f:
         0d:1e:66:3e:cb:16:f7:b4:60:25:56:38:3d:a3:93:14:29:ea:
         e3:19:48:a3:34:20:bd:e1:0a:65:39:c9:da:e5:3c:4a:1a:06:
         79:cb:4e:44:97:23:87:f6:8b:28:35:c6:0d:ce:22:8b:e8:b0:
         84:74:5c:2a:1a:5f:dd:65:0a:2e:31:9d:fb:59:2a:bd:10:de:
         78:f0:51:92:13:81:13:7b:ca:58:e7:d7:d0:f0:c1:05:65:fc:
         7d:c6:9f:1a:1e:f4:bc:c2:b9:06:dc:38:d9:a6:a5:41:ad:7a:
         1b:98:84:03:79:1f:c5:48:6d:d0:61:57:ec:e6:e0:16:c7:12:
         45:ec:ca:1c:4e:9d:f8:06:86:e3:69:ac:ed:40:74:af:17:ed:
         05:a8:a7:5b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZOJSxok8dgzBmVOYriw67NBYN9AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg1RDc3RDQzMDIyNTUwNzZGQzBFRjg1NkFDN0M0MEVG
MkY1Nzk3NTAeFw0yNTA0MzAyMzAxMjNaFw0yNjA0MjkyMzA2MjNaMDMxMTAvBgNV
BAMTKDE4MzQzOEM3NTQxOEMzOEFDREI5QUVCQjFGOEM3NTFCQzczNUFFQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf13fmfPQ8VGMrvBeGn8JtZMUB
kwtIqSQo1NqkFjV4mePQH6oOPEt8jE044lBJFBw62Wbv8GyVK1UdM1XqGT+53jQv
0LW9limQwUe9uW0jh2ikbs99zSr0F5/hNQaTxrc0J7t/4OvwPuyPiIsvLlUaMUye
r56oV7iv9r+McdbI/VzCfcFLMTtCLC7XxTfCsT3EhZSkf9aMvChhDOtShVntePD2
/9qDE6Id+f/elnL5lVuChcjJ0va8dW1RYRqpePnBxvO2EnzcwZ5RHfSnsGywcva0
7ZsPSl9Z7qsvCl+xl3QaM6hhbQrwqqgzh1CZaCyAgPDP8h/JjRZGxXsjC0r3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUGDQ4x1QYw4rNua67H4x1G8c1rsUwHwYDVR0j
BBgwFoAUCF131DAiVQdvwO+FasfEDvL1eXUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXlxVVR3Z1dpTEJ5dWdtckFSNEdHTEM2dm1lc21vVzYyRTZrcEhIelpV
d2EvMC8wODVENzdENDMwMjI1NTA3NkZDMEVGODU2QUM3QzQwRUYyRjU3OTc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4NUQ3N0Q0MzAyMjU1MDc2
RkMwRUY4NTZBQzdDNDBFRjJGNTc5NzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl5cVVUd2dXaUxCeXVnbXJBUjRHR0xDNnZtZXNtb1c2MkU2a3BISHpaVXdhLzAv
MzEzOTMwMmUzMTMyMzQyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMDM0MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr58/DANBgkqhkiG9w0BAQsFAAOCAQEAdX4/
09t533wPmzkLBtLne30eZi1fui8J02obbksvQWtRntlZz8w/RDcjb+byr6bMwbtE
KIrhUY6gkkH8vqrzNwElZZBSOps6MukorjruqbrcvtQePOFKLcaWxQMeozwMp3rV
Gp/i4YElao6fDR5mPssW97RgJVY4PaOTFCnq4xlIozQgveEKZTnJ2uU8ShoGectO
RJcjh/aLKDXGDc4ii+iwhHRcKhpf3WUKLjGd+1kqvRDeePBRkhOBE3vKWOfX0PDB
BWX8fcafGh70vMK5Btw42aalQa16G5iEA3kfxUht0GFX7ObgFscSRezKHE6d+AaG
42ms7UB0rxftBainWw==
-----END CERTIFICATE-----
Generated at Tue May 6 20:13:58 2025 by rpki-client