Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa
File:                     3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa (raw, json)
Hash identifier:          tn7RLZxDY4+tby4hFB+zJ9K1hsTCWY7+LWvTWawl+M8=
Subject key identifier:   7E:5E:55:D1:50:10:1F:BA:61:19:2C:12:12:AD:3A:71:85:33:EB:56
Certificate issuer:       /CN=D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF
Certificate serial:       6831C3A1F47141F8B2891C40E3B35DDC98043A62
Authority key identifier: D5:41:B9:E1:C0:D6:AC:17:BF:11:5B:B1:B7:A8:7B:29:BE:DD:B0:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa
Signing time:             Wed 30 Apr 2025 17:17:52 +0000
ROA not before:           Wed 30 Apr 2025 17:12:52 +0000
ROA not after:            Wed 29 Apr 2026 17:17:52 +0000
asID:                     265080
IP address blocks:        170.233.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.crl
                          rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 16:40:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:31:c3:a1:f4:71:41:f8:b2:89:1c:40:e3:b3:5d:dc:98:04:3a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF
        Validity
            Not Before: Apr 30 17:12:52 2025 GMT
            Not After : Apr 29 17:17:52 2026 GMT
        Subject: CN=7E5E55D150101FBA61192C1212AD3A718533EB56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3e:21:7a:91:b3:ec:5b:82:da:e4:93:96:18:
                    bb:88:d4:cc:96:20:c7:7f:16:40:c2:81:5e:d7:6b:
                    4d:0e:f6:83:60:aa:08:0a:ca:98:ab:cc:51:b9:b8:
                    16:a0:fc:98:21:a9:77:4b:f7:5a:0b:06:6e:68:cb:
                    6a:59:5f:9b:63:c7:d5:58:95:be:6e:ea:88:ae:db:
                    4c:bc:3b:b1:66:21:89:24:06:ee:47:a4:14:e6:92:
                    08:a9:d7:0c:a2:19:81:1b:05:56:41:43:9c:85:b3:
                    5c:14:89:12:a9:6e:39:0b:94:8c:82:c8:3a:70:61:
                    10:83:60:57:d4:91:0a:68:8e:21:6a:f5:e0:8e:d9:
                    0c:7a:69:49:8a:13:07:13:e8:96:00:1b:78:bb:2e:
                    02:4b:3a:20:c3:7e:ce:66:39:cc:42:de:7a:96:5e:
                    ab:3e:08:b5:4d:71:33:84:bf:13:04:3d:7d:b2:63:
                    73:15:bf:5e:70:be:57:af:1f:02:cc:99:b5:5d:0d:
                    a2:37:1d:bd:c3:3d:ff:44:15:36:d0:80:93:82:de:
                    3d:51:f8:cf:47:27:c3:67:4c:ea:82:54:5e:86:a1:
                    39:d5:8d:8e:ae:2a:21:f7:bd:8c:03:17:b1:b0:57:
                    d5:e3:96:ab:98:59:c5:af:2f:83:2a:86:c3:5c:91:
                    1d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5E:55:D1:50:10:1F:BA:61:19:2C:12:12:AD:3A:71:85:33:EB:56
            X509v3 Authority Key Identifier:
                keyid:D5:41:B9:E1:C0:D6:AC:17:BF:11:5B:B1:B7:A8:7B:29:BE:DD:B0:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:28:d3:ad:5f:5b:32:bf:2f:9f:69:63:35:a6:71:37:ad:b6:
         c2:b6:7a:63:52:fd:72:20:e7:e5:74:e6:97:13:58:a3:12:23:
         02:ee:ee:e6:00:86:a5:40:23:ab:26:77:46:11:47:c5:ba:96:
         5c:60:1a:17:15:a5:20:0d:ef:60:eb:9d:2c:b1:02:8f:4f:51:
         7a:04:63:b8:d3:97:2f:b9:d1:0d:bc:fb:1f:cb:38:b9:1c:87:
         9f:e5:08:d2:55:ad:cb:e4:77:b5:59:e5:c9:11:46:af:9d:e3:
         44:48:1d:f5:e1:fd:c9:cb:65:ae:44:01:6c:7b:7a:b8:66:e4:
         a0:73:a6:07:d4:92:b4:0a:e2:ff:6b:17:aa:e7:72:40:8c:f8:
         8a:78:5b:38:47:b5:a8:f2:95:22:d2:8c:cd:60:36:a6:70:49:
         15:39:90:f7:50:73:0d:85:5a:8b:15:d4:b7:4a:6d:20:06:c4:
         9e:30:2f:66:8b:d2:a0:b6:61:cc:9b:2e:78:97:d8:4e:c6:2f:
         37:24:69:51:d2:c3:4e:68:6e:f5:09:21:60:ed:a1:0a:54:f1:
         1f:31:9e:f2:bb:59:2f:9b:6a:f3:82:da:51:62:dc:ec:2a:4f:
         4a:d0:1a:a6:ae:77:76:b3:a7:14:68:25:c4:d1:93:49:97:53:
         14:29:be:38
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUaDHDofRxQfiyiRxA47Nd3JgEOmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0MUI5RTFDMEQ2QUMxN0JGMTE1QkIxQjdBODdCMjlC
RUREQjBERjAeFw0yNTA0MzAxNzEyNTJaFw0yNjA0MjkxNzE3NTJaMDMxMTAvBgNV
BAMTKDdFNUU1NUQxNTAxMDFGQkE2MTE5MkMxMjEyQUQzQTcxODUzM0VCNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPiF6kbPsW4La5JOWGLuI1MyW
IMd/FkDCgV7Xa00O9oNgqggKypirzFG5uBag/JghqXdL91oLBm5oy2pZX5tjx9VY
lb5u6oiu20y8O7FmIYkkBu5HpBTmkgip1wyiGYEbBVZBQ5yFs1wUiRKpbjkLlIyC
yDpwYRCDYFfUkQpojiFq9eCO2Qx6aUmKEwcT6JYAG3i7LgJLOiDDfs5mOcxC3nqW
Xqs+CLVNcTOEvxMEPX2yY3MVv15wvlevHwLMmbVdDaI3Hb3DPf9EFTbQgJOC3j1R
+M9HJ8NnTOqCVF6GoTnVjY6uKiH3vYwDF7GwV9XjlquYWcWvL4MqhsNckR3DAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUfl5V0VAQH7phGSwSEq06cYUz61YwHwYDVR0j
BBgwFoAU1UG54cDWrBe/EVuxt6h7Kb7dsN8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkZYa0xrYUtYSGVyWExwZlVBc283MzZyUUVlbnFNcGl2NlFlaEZ3bVUx
dlcvMC9ENTQxQjlFMUMwRDZBQzE3QkYxMTVCQjFCN0E4N0IyOUJFRERCMERGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1NDFCOUUxQzBENkFDMTdC
RjExNUJCMUI3QTg3QjI5QkVEREIwREYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZGWGtMa2FLWEhlclhMcGZVQXNvNzM2clFFZW5xTXBpdjZRZWhGd21VMXZXLzAv
MzEzNzMwMmUzMjMzMzMyZTMxMzIzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTMwMzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAarpeDANBgkqhkiG9w0BAQsFAAOCAQEAYSjT
rV9bMr8vn2ljNaZxN622wrZ6Y1L9ciDn5XTmlxNYoxIjAu7u5gCGpUAjqyZ3RhFH
xbqWXGAaFxWlIA3vYOudLLECj09RegRjuNOXL7nRDbz7H8s4uRyHn+UI0lWty+R3
tVnlyRFGr53jREgd9eH9yctlrkQBbHt6uGbkoHOmB9SStAri/2sXqudyQIz4inhb
OEe1qPKVItKMzWA2pnBJFTmQ91BzDYVaixXUt0ptIAbEnjAvZovSoLZhzJsueJfY
TsYvNyRpUdLDTmhu9QkhYO2hClTxHzGe8rtZL5tq84LaUWLc7CpPStAapq53drOn
FGglxNGTSZdTFCm+OA==
-----END CERTIFICATE-----
Generated at Fri May 2 07:11:42 2025 by rpki-client