Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7casLdjwTNxuigwnzPrY9Umzm7LzmHmWYoY3nSVUihT/0/3137302e3234342e3234382e302f32322d3234203d3e20323634393433.roa
File:                     3137302e3234342e3234382e302f32322d3234203d3e20323634393433.roa (raw, json)
Hash identifier:          vY6l/w9Dc5H/LYDRKQwywe/PKvfmwYplJZokdwg4NkI=
Subject key identifier:   E7:2E:4E:31:9B:6B:50:2D:4C:9B:8C:6E:83:04:4A:FE:9A:C2:15:AD
Certificate issuer:       /CN=E65374697D9FB212A56972F6CABF2FED977758ED
Certificate serial:       77E0B49DB10B166C54FE53CA23158BE50930E3BB
Authority key identifier: E6:53:74:69:7D:9F:B2:12:A5:69:72:F6:CA:BF:2F:ED:97:77:58:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E65374697D9FB212A56972F6CABF2FED977758ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7casLdjwTNxuigwnzPrY9Umzm7LzmHmWYoY3nSVUihT/0/3137302e3234342e3234382e302f32322d3234203d3e20323634393433.roa
Signing time:             Wed 04 Jun 2025 17:12:59 +0000
ROA not before:           Wed 04 Jun 2025 17:07:59 +0000
ROA not after:            Wed 03 Jun 2026 17:12:59 +0000
asID:                     264943
IP address blocks:        170.244.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7casLdjwTNxuigwnzPrY9Umzm7LzmHmWYoY3nSVUihT/0/E65374697D9FB212A56972F6CABF2FED977758ED.crl
                          rsync://rpki-repo.registro.br/repo/A7casLdjwTNxuigwnzPrY9Umzm7LzmHmWYoY3nSVUihT/0/E65374697D9FB212A56972F6CABF2FED977758ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E65374697D9FB212A56972F6CABF2FED977758ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Jun 2025 22:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e0:b4:9d:b1:0b:16:6c:54:fe:53:ca:23:15:8b:e5:09:30:e3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E65374697D9FB212A56972F6CABF2FED977758ED
        Validity
            Not Before: Jun  4 17:07:59 2025 GMT
            Not After : Jun  3 17:12:59 2026 GMT
        Subject: CN=E72E4E319B6B502D4C9B8C6E83044AFE9AC215AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d9:22:fa:f9:41:ef:3d:51:00:d7:2f:b4:fd:
                    10:ca:bb:69:84:47:f7:a9:ef:5e:e0:bf:ea:b0:b9:
                    88:f0:63:74:3c:3f:64:bd:a3:49:bc:67:75:13:8d:
                    39:21:53:aa:16:7e:31:2e:52:bf:28:26:f3:07:98:
                    38:1e:64:86:f0:55:26:d8:a0:f7:e9:3e:7a:8d:57:
                    41:5b:db:2c:83:84:3b:31:5c:0d:5e:08:c8:e4:69:
                    d3:27:aa:62:46:ac:fe:f0:0e:64:be:fa:8e:c4:99:
                    d0:f4:a4:88:44:08:10:dd:76:dd:59:a9:b1:5f:6a:
                    15:36:61:ca:5b:b5:7a:88:da:59:98:38:ec:a3:34:
                    f4:53:9a:04:97:f9:e7:4d:c6:60:e1:2d:91:4c:fc:
                    09:65:d0:00:b6:84:44:eb:84:37:90:7f:c6:ea:59:
                    e1:f1:6a:fb:49:b3:c3:94:16:ae:19:f4:84:41:ed:
                    5f:48:f1:c5:11:a8:82:6b:25:5e:e8:9c:67:6c:7d:
                    e1:f6:bb:93:12:4c:54:65:8a:de:8f:db:de:2a:2f:
                    97:8f:77:54:0c:84:d5:e3:10:34:d2:aa:07:36:6e:
                    5e:e2:bc:5c:4f:78:4d:ba:81:8f:75:9a:eb:29:e5:
                    b6:36:9d:d3:b7:1f:27:75:be:f2:bc:03:b0:44:87:
                    25:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2E:4E:31:9B:6B:50:2D:4C:9B:8C:6E:83:04:4A:FE:9A:C2:15:AD
            X509v3 Authority Key Identifier:
                keyid:E6:53:74:69:7D:9F:B2:12:A5:69:72:F6:CA:BF:2F:ED:97:77:58:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7casLdjwTNxuigwnzPrY9Umzm7LzmHmWYoY3nSVUihT/0/E65374697D9FB212A56972F6CABF2FED977758ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E65374697D9FB212A56972F6CABF2FED977758ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7casLdjwTNxuigwnzPrY9Umzm7LzmHmWYoY3nSVUihT/0/3137302e3234342e3234382e302f32322d3234203d3e20323634393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:5f:6e:41:4d:ed:24:4b:08:d4:2f:04:16:ba:6e:be:33:37:
         48:34:b0:15:14:35:fa:fb:a5:69:f3:1c:a4:16:49:f5:49:08:
         05:f3:cb:c7:dd:d7:86:87:3f:f4:a2:34:52:fc:35:55:4f:76:
         fc:e1:54:64:ef:99:1d:29:dd:fd:5f:ab:79:a6:70:64:0e:72:
         fa:03:1c:15:81:01:dc:6e:19:d4:2b:43:67:a8:db:01:cb:74:
         d0:18:4e:77:2e:c5:c0:72:d7:d0:5b:fe:8c:97:04:4c:49:2a:
         bf:fe:fa:ef:d2:d4:ac:40:18:ef:8b:74:c8:09:e7:55:c5:f7:
         e6:01:f1:bf:7d:cc:fe:c4:14:b1:e1:e5:18:52:7f:69:72:b3:
         5d:5a:3f:28:e5:9e:b4:42:4b:68:fc:97:04:e2:9f:f1:56:09:
         8c:62:d7:a0:fd:36:35:d0:b1:a3:1a:94:5b:2f:45:54:ea:63:
         06:cc:dd:e5:36:28:55:6e:f3:e7:1e:3c:0b:77:4a:1e:82:91:
         78:f0:12:e5:b2:c9:a8:b2:d9:a0:21:d9:a6:a2:88:7a:26:49:
         ad:dc:92:76:3e:0a:ea:2c:b2:55:15:a7:c3:cf:df:74:79:97:
         3b:03:2b:84:dd:7a:2a:5c:68:47:55:75:51:76:0d:83:24:19:
         32:eb:56:d2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUd+C0nbELFmxU/lPKIxWL5Qkw47swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY1Mzc0Njk3RDlGQjIxMkE1Njk3MkY2Q0FCRjJGRUQ5
Nzc3NThFRDAeFw0yNTA2MDQxNzA3NTlaFw0yNjA2MDMxNzEyNTlaMDMxMTAvBgNV
BAMTKEU3MkU0RTMxOUI2QjUwMkQ0QzlCOEM2RTgzMDQ0QUZFOUFDMjE1QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw2SL6+UHvPVEA1y+0/RDKu2mE
R/ep717gv+qwuYjwY3Q8P2S9o0m8Z3UTjTkhU6oWfjEuUr8oJvMHmDgeZIbwVSbY
oPfpPnqNV0Fb2yyDhDsxXA1eCMjkadMnqmJGrP7wDmS++o7EmdD0pIhECBDddt1Z
qbFfahU2YcpbtXqI2lmYOOyjNPRTmgSX+edNxmDhLZFM/All0AC2hETrhDeQf8bq
WeHxavtJs8OUFq4Z9IRB7V9I8cURqIJrJV7onGdsfeH2u5MSTFRlit6P294qL5eP
d1QMhNXjEDTSqgc2bl7ivFxPeE26gY91musp5bY2ndO3Hyd1vvK8A7BEhyX/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU5y5OMZtrUC1Mm4xugwRK/prCFa0wHwYDVR0j
BBgwFoAU5lN0aX2fshKlaXL2yr8v7Zd3WO0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTdjYXNMZGp3VE54dWlnd256UHJZOVVtem03THptSG1XWW9ZM25TVlVp
aFQvMC9FNjUzNzQ2OTdEOUZCMjEyQTU2OTcyRjZDQUJGMkZFRDk3Nzc1OEVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2NTM3NDY5N0Q5RkIyMTJB
NTY5NzJGNkNBQkYyRkVEOTc3NzU4RUQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E3Y2FzTGRqd1ROeHVpZ3duelByWTlVbXptN0x6bUhtV1lvWTNuU1ZVaWhULzAv
MzEzNzMwMmUzMjM0MzQyZTMyMzQzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDM5MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr0+DANBgkqhkiG9w0BAQsFAAOCAQEAnF9u
QU3tJEsI1C8EFrpuvjM3SDSwFRQ1+vulafMcpBZJ9UkIBfPLx93Xhoc/9KI0Uvw1
VU92/OFUZO+ZHSnd/V+reaZwZA5y+gMcFYEB3G4Z1CtDZ6jbAct00BhOdy7FwHLX
0Fv+jJcETEkqv/7679LUrEAY74t0yAnnVcX35gHxv33M/sQUseHlGFJ/aXKzXVo/
KOWetEJLaPyXBOKf8VYJjGLXoP02NdCxoxqUWy9FVOpjBszd5TYoVW7z5x48C3dK
HoKRePAS5bLJqLLZoCHZpqKIeiZJrdySdj4K6iyyVRWnw8/fdHmXOwMrhN16Klxo
R1V1UXYNgyQZMutW0g==
-----END CERTIFICATE-----
Generated at Sun Jun 22 08:58:42 2025 by rpki-client