Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136372e3235302e302e302f32322d3232203d3e20323635313835.roa
File:                     3136372e3235302e302e302f32322d3232203d3e20323635313835.roa (raw, json)
Hash identifier:          t7w+Jx8q2FYmpEqJjLAnjKl6DdatWNVQyP+WmHtkHk4=
Subject key identifier:   93:DD:17:03:09:3B:AB:60:8A:EB:06:15:BC:81:14:D4:15:DC:8E:00
Certificate issuer:       /CN=9D35D29D04D84C156E4112BF977E37E007A4B928
Certificate serial:       40B99711AC278780FBFA316BFF2826DC47F5BA76
Authority key identifier: 9D:35:D2:9D:04:D8:4C:15:6E:41:12:BF:97:7E:37:E0:07:A4:B9:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136372e3235302e302e302f32322d3232203d3e20323635313835.roa
Signing time:             Thu 13 Mar 2025 19:44:01 +0000
ROA not before:           Thu 13 Mar 2025 19:39:01 +0000
ROA not after:            Thu 12 Mar 2026 19:44:01 +0000
asID:                     265185
IP address blocks:        167.250.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.crl
                          rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 22:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b9:97:11:ac:27:87:80:fb:fa:31:6b:ff:28:26:dc:47:f5:ba:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D35D29D04D84C156E4112BF977E37E007A4B928
        Validity
            Not Before: Mar 13 19:39:01 2025 GMT
            Not After : Mar 12 19:44:01 2026 GMT
        Subject: CN=93DD1703093BAB608AEB0615BC8114D415DC8E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3f:03:43:de:95:92:d6:29:46:e3:c8:1b:20:
                    82:df:fa:d1:84:9a:ae:ce:5e:c0:23:38:5f:ed:82:
                    70:21:60:fc:bb:1d:21:ef:d4:7d:c8:34:56:d9:64:
                    ea:81:a4:3a:e0:56:be:8b:f6:f4:f4:32:4e:ec:62:
                    d6:a2:2b:25:3e:14:52:1d:92:3d:0e:6c:84:8e:c7:
                    19:c6:54:07:87:df:a8:8a:75:09:5f:6b:48:1d:2c:
                    43:1a:70:76:b8:19:e5:9c:00:70:36:a4:05:0c:8f:
                    f5:3d:bd:83:fb:76:54:95:2a:05:a3:81:31:ee:f6:
                    da:99:21:ac:80:55:04:6a:40:19:02:d5:0d:ce:8f:
                    ed:93:26:d4:53:56:89:9f:aa:b7:c6:96:b8:cd:4c:
                    fa:aa:cb:3c:5b:af:d8:bd:12:5a:b1:c8:c2:a2:e5:
                    52:5f:db:70:16:92:ae:79:77:55:60:7b:e1:8a:66:
                    88:c6:7a:63:c0:b3:f4:16:22:75:7e:5f:e6:b6:1a:
                    00:0e:30:6c:89:b3:d4:cd:b3:bd:19:4e:43:d7:bc:
                    7a:6f:0f:4e:50:28:05:d6:ee:99:7d:60:b9:61:96:
                    4a:46:9f:9f:e7:9f:eb:2b:83:44:8b:e1:a1:55:b6:
                    16:06:62:eb:54:2e:5d:dd:c0:97:e8:72:8a:db:14:
                    8e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DD:17:03:09:3B:AB:60:8A:EB:06:15:BC:81:14:D4:15:DC:8E:00
            X509v3 Authority Key Identifier:
                keyid:9D:35:D2:9D:04:D8:4C:15:6E:41:12:BF:97:7E:37:E0:07:A4:B9:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136372e3235302e302e302f32322d3232203d3e20323635313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:c7:c9:af:ec:94:cf:33:1e:ed:17:34:a1:9a:e3:6c:2f:cf:
         92:3c:d3:a1:88:5d:00:2b:90:7d:a0:63:54:4a:f7:8c:87:63:
         77:8a:60:f5:42:69:7c:66:50:0c:d5:ad:61:77:f4:15:f3:68:
         75:6e:dc:88:06:3f:2a:c5:49:79:b6:fd:6c:07:c2:9e:57:bd:
         02:43:13:ec:ad:7f:6d:7d:89:e8:88:bf:cf:41:38:fb:53:cb:
         b2:b2:ea:44:13:e5:7d:cb:79:8b:bc:91:ba:89:6b:bd:01:35:
         d8:7a:71:5a:83:e5:b7:72:ed:8e:00:94:44:0f:c4:ed:9a:4b:
         c0:b4:c9:89:7b:25:ea:97:9d:8e:ce:94:ee:f0:76:d3:98:b9:
         2f:63:f9:5c:ca:4c:8b:0a:c8:af:76:3c:2f:64:96:29:2d:4e:
         15:49:94:93:76:73:d5:f3:d6:68:d7:8e:f7:62:b8:15:83:de:
         bb:a6:ea:90:cd:aa:83:12:38:53:dd:29:7d:5a:d9:07:a0:37:
         c7:b4:04:b8:4f:19:74:69:ea:4e:28:99:2b:2f:5a:a8:b3:95:
         1d:58:27:53:a1:c9:49:dd:aa:39:a2:c2:08:26:ff:12:e0:73:
         b8:b4:42:09:7c:0a:a4:fc:e2:09:80:6a:88:b8:d4:67:87:85:
         95:59:bd:85
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQLmXEawnh4D7+jFr/ygm3Ef1unYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQzNUQyOUQwNEQ4NEMxNTZFNDExMkJGOTc3RTM3RTAw
N0E0QjkyODAeFw0yNTAzMTMxOTM5MDFaFw0yNjAzMTIxOTQ0MDFaMDMxMTAvBgNV
BAMTKDkzREQxNzAzMDkzQkFCNjA4QUVCMDYxNUJDODExNEQ0MTVEQzhFMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChPwND3pWS1ilG48gbIILf+tGE
mq7OXsAjOF/tgnAhYPy7HSHv1H3INFbZZOqBpDrgVr6L9vT0Mk7sYtaiKyU+FFId
kj0ObISOxxnGVAeH36iKdQlfa0gdLEMacHa4GeWcAHA2pAUMj/U9vYP7dlSVKgWj
gTHu9tqZIayAVQRqQBkC1Q3Oj+2TJtRTVomfqrfGlrjNTPqqyzxbr9i9ElqxyMKi
5VJf23AWkq55d1Vge+GKZojGemPAs/QWInV+X+a2GgAOMGyJs9TNs70ZTkPXvHpv
D05QKAXW7pl9YLlhlkpGn5/nn+srg0SL4aFVthYGYutULl3dwJfocorbFI6hAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUk90XAwk7q2CK6wYVvIEU1BXcjgAwHwYDVR0j
BBgwFoAUnTXSnQTYTBVuQRK/l3434AekuSgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRk1rZWY3OXhyUllQNnY2VWdQVXFROGo5Q0JNa2FtaUVZQjZKa3dSUFpk
TlEvMC85RDM1RDI5RDA0RDg0QzE1NkU0MTEyQkY5NzdFMzdFMDA3QTRCOTI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEMzVEMjlEMDREODRDMTU2
RTQxMTJCRjk3N0UzN0UwMDdBNEI5MjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZNa2VmNzl4clJZUDZ2NlVnUFVxUThqOUNCTWthbWlFWUI2Smt3UlBaZE5RLzAv
MzEzNjM3MmUzMjM1MzAyZTMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM1
MzEzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCp/oAMA0GCSqGSIb3DQEBCwUAA4IBAQCHx8mv7JTP
Mx7tFzShmuNsL8+SPNOhiF0AK5B9oGNUSveMh2N3imD1Qml8ZlAM1a1hd/QV82h1
btyIBj8qxUl5tv1sB8KeV70CQxPsrX9tfYnoiL/PQTj7U8uysupEE+V9y3mLvJG6
iWu9ATXYenFag+W3cu2OAJRED8TtmkvAtMmJeyXql52OzpTu8HbTmLkvY/lcykyL
CsivdjwvZJYpLU4VSZSTdnPV89Zo1473YrgVg967puqQzaqDEjhT3Sl9WtkHoDfH
tAS4Txl0aepOKJkrL1qos5UdWCdToclJ3ao5osIIJv8S4HO4tEIJfAqk/OIJgGqI
uNRnh4WVWb2F
-----END CERTIFICATE-----
Generated at Thu May 1 05:44:44 2025 by rpki-client