Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/3137302e3234352e3232302e302f32322d3232203d3e20323636303238.roa
File:                     3137302e3234352e3232302e302f32322d3232203d3e20323636303238.roa (raw, json)
Hash identifier:          P7tlqqUJnTE0Q36FAqk2PFxOZZFzaUO8SVBOTxegoOA=
Subject key identifier:   45:AD:C4:52:69:0A:73:0C:A7:C3:A7:7F:23:5C:C5:04:CB:04:39:99
Certificate issuer:       /CN=126CBB2E01C90415CAD8020379862F937CB88B35
Certificate serial:       0CE226382B1F5CADB0EF3F4697CA05565ED6DE0D
Authority key identifier: 12:6C:BB:2E:01:C9:04:15:CA:D8:02:03:79:86:2F:93:7C:B8:8B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126CBB2E01C90415CAD8020379862F937CB88B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/3137302e3234352e3232302e302f32322d3232203d3e20323636303238.roa
Signing time:             Thu 24 Jul 2025 14:21:30 +0000
ROA not before:           Thu 24 Jul 2025 14:16:30 +0000
ROA not after:            Thu 23 Jul 2026 14:21:30 +0000
asID:                     266028
IP address blocks:        170.245.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.crl
                          rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126CBB2E01C90415CAD8020379862F937CB88B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e2:26:38:2b:1f:5c:ad:b0:ef:3f:46:97:ca:05:56:5e:d6:de:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126CBB2E01C90415CAD8020379862F937CB88B35
        Validity
            Not Before: Jul 24 14:16:30 2025 GMT
            Not After : Jul 23 14:21:30 2026 GMT
        Subject: CN=45ADC452690A730CA7C3A77F235CC504CB043999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7d:7d:ed:9e:29:38:af:b6:b6:7b:ee:33:d2:
                    73:8d:74:09:c4:38:9f:c5:f7:65:e3:9c:ea:b8:7d:
                    5e:7a:88:1b:f5:90:80:d7:ae:f5:40:04:c6:42:67:
                    41:f2:2e:0c:d0:06:8e:1d:9d:e4:70:11:84:68:5c:
                    fd:b6:a9:f3:97:c7:47:af:0e:44:1b:31:8a:52:77:
                    80:12:67:f1:77:64:76:43:2c:1a:9d:cb:7d:86:75:
                    b5:db:37:f1:60:38:3c:67:12:67:32:07:75:91:24:
                    94:45:77:10:3d:96:27:38:48:56:a7:e9:99:7f:02:
                    2f:05:5b:9a:8f:c4:ae:f8:08:ed:27:37:19:21:10:
                    88:a2:e2:bb:04:ea:19:88:71:c0:45:b2:63:83:1c:
                    f7:e7:c8:c0:ee:3d:8f:a5:f5:f2:6d:46:e4:5a:02:
                    29:b5:58:85:96:96:a9:c3:ab:0c:39:18:15:48:68:
                    6b:e8:0a:f9:52:f2:81:4c:1e:39:96:12:14:b6:2c:
                    f3:0f:2d:99:c0:10:e3:db:8c:dc:aa:4a:85:78:09:
                    98:1f:11:d2:cb:d9:bc:08:79:47:d6:ea:37:73:f1:
                    dc:09:91:fd:de:69:bf:42:c1:ab:df:c0:b0:7c:5b:
                    d1:e1:f9:cd:98:fb:b6:d2:cd:4d:05:eb:82:32:e3:
                    43:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AD:C4:52:69:0A:73:0C:A7:C3:A7:7F:23:5C:C5:04:CB:04:39:99
            X509v3 Authority Key Identifier:
                keyid:12:6C:BB:2E:01:C9:04:15:CA:D8:02:03:79:86:2F:93:7C:B8:8B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126CBB2E01C90415CAD8020379862F937CB88B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/3137302e3234352e3232302e302f32322d3232203d3e20323636303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:a8:bd:26:79:dc:00:ba:c9:96:ee:2c:4d:0d:9e:2c:ce:35:
         da:29:4f:fe:58:fa:71:8e:9d:d8:84:b2:4c:78:89:76:f8:f0:
         5d:9b:49:35:f6:8e:7e:b6:00:5b:c1:d5:e5:45:25:64:9b:89:
         60:30:d6:93:8e:a4:c8:6e:bb:e1:36:d1:16:63:28:51:2f:4a:
         60:f6:91:99:86:a4:4a:46:df:d0:cd:57:6e:4c:9e:da:b9:98:
         49:31:a0:01:94:a5:b3:a7:eb:3e:54:1f:8d:d3:21:f5:82:f5:
         4f:7e:32:87:21:2c:61:6f:69:15:ea:aa:68:b7:ee:50:7c:56:
         35:6f:98:c5:d4:f3:b3:70:6e:20:f0:67:c8:48:62:7b:d3:57:
         d4:9f:2b:ef:03:ab:13:c9:22:db:92:9e:42:62:3d:51:82:79:
         d2:f1:09:15:30:95:7c:3f:d0:33:45:a1:43:8d:89:4e:f8:74:
         cc:8e:ca:22:5d:8c:e5:69:8c:b0:25:d5:77:8e:ef:1b:ff:d6:
         88:f1:7c:c1:fb:6c:ba:f8:aa:47:f5:47:1a:48:93:2a:ab:af:
         38:4b:b5:1a:ad:28:f5:85:ae:2a:e7:75:f1:dc:cb:e0:63:72:
         0b:71:9f:b5:7f:09:ce:84:06:30:07:83:8d:ac:35:35:78:af:
         f2:b3:1f:10
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDOImOCsfXK2w7z9Gl8oFVl7W3g0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI2Q0JCMkUwMUM5MDQxNUNBRDgwMjAzNzk4NjJGOTM3
Q0I4OEIzNTAeFw0yNTA3MjQxNDE2MzBaFw0yNjA3MjMxNDIxMzBaMDMxMTAvBgNV
BAMTKDQ1QURDNDUyNjkwQTczMENBN0MzQTc3RjIzNUNDNTA0Q0IwNDM5OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWfX3tnik4r7a2e+4z0nONdAnE
OJ/F92XjnOq4fV56iBv1kIDXrvVABMZCZ0HyLgzQBo4dneRwEYRoXP22qfOXx0ev
DkQbMYpSd4ASZ/F3ZHZDLBqdy32GdbXbN/FgODxnEmcyB3WRJJRFdxA9lic4SFan
6Zl/Ai8FW5qPxK74CO0nNxkhEIii4rsE6hmIccBFsmODHPfnyMDuPY+l9fJtRuRa
Aim1WIWWlqnDqww5GBVIaGvoCvlS8oFMHjmWEhS2LPMPLZnAEOPbjNyqSoV4CZgf
EdLL2bwIeUfW6jdz8dwJkf3eab9CwavfwLB8W9Hh+c2Y+7bSzU0F64Iy40O3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQURa3EUmkKcwynw6d/I1zFBMsEOZkwHwYDVR0j
BBgwFoAUEmy7LgHJBBXK2AIDeYYvk3y4izUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTZnQlJ1ejdqQllkTW1laEdxNUU2WXBVODJqbzFUS2pwVjlkUXVuVmtW
d2cvMC8xMjZDQkIyRTAxQzkwNDE1Q0FEODAyMDM3OTg2MkY5MzdDQjg4QjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyNkNCQjJFMDFDOTA0MTVD
QUQ4MDIwMzc5ODYyRjkzN0NCODhCMzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U2Z0JSdXo3akJZZE1tZWhHcTVFNllwVTgyam8xVEtqcFY5ZFF1blZrVndnLzAv
MzEzNzMwMmUzMjM0MzUyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNjMwMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr13DANBgkqhkiG9w0BAQsFAAOCAQEAA6i9
JnncALrJlu4sTQ2eLM412ilP/lj6cY6d2ISyTHiJdvjwXZtJNfaOfrYAW8HV5UUl
ZJuJYDDWk46kyG674TbRFmMoUS9KYPaRmYakSkbf0M1Xbkye2rmYSTGgAZSls6fr
PlQfjdMh9YL1T34yhyEsYW9pFeqqaLfuUHxWNW+YxdTzs3BuIPBnyEhie9NX1J8r
7wOrE8ki25KeQmI9UYJ50vEJFTCVfD/QM0WhQ42JTvh0zI7KIl2M5WmMsCXVd47v
G//WiPF8wftsuviqR/VHGkiTKquvOEu1Gq0o9YWuKud18dzL4GNyC3GftX8JzoQG
MAeDjaw1NXiv8rMfEA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:47:26 2025 by rpki-client