Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3137302e38342e31322e302f32322d3234203d3e20323634393837.roa
File:                     3137302e38342e31322e302f32322d3234203d3e20323634393837.roa (raw, json)
Hash identifier:          AyWdlPk7ptT1AUbWLXNObWGLJxWyMR/HMYNiC7P0ys4=
Subject key identifier:   DC:E8:91:52:CE:A0:8B:6F:94:08:FF:CE:DB:44:DD:AF:45:8E:FA:D2
Certificate issuer:       /CN=2085C2E26105617BC4502F8911A5BE52CC061122
Certificate serial:       3E35A972D239B00E1374E49CDB33A90A8E9653B7
Authority key identifier: 20:85:C2:E2:61:05:61:7B:C4:50:2F:89:11:A5:BE:52:CC:06:11:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3137302e38342e31322e302f32322d3234203d3e20323634393837.roa
Signing time:             Mon 16 Jun 2025 20:03:02 +0000
ROA not before:           Mon 16 Jun 2025 19:58:02 +0000
ROA not after:            Mon 15 Jun 2026 20:03:02 +0000
asID:                     264987
IP address blocks:        170.84.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.crl
                          rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 15:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:35:a9:72:d2:39:b0:0e:13:74:e4:9c:db:33:a9:0a:8e:96:53:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085C2E26105617BC4502F8911A5BE52CC061122
        Validity
            Not Before: Jun 16 19:58:02 2025 GMT
            Not After : Jun 15 20:03:02 2026 GMT
        Subject: CN=DCE89152CEA08B6F9408FFCEDB44DDAF458EFAD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:85:66:07:96:47:15:64:15:45:0b:1c:87:07:
                    d7:87:05:22:95:3a:f4:72:3c:8c:91:b7:db:ac:04:
                    8f:3b:35:30:e4:1d:54:b0:91:90:e1:30:b4:ea:f1:
                    a6:0b:53:19:31:68:96:90:09:8a:a1:b7:b3:9f:cc:
                    dc:8c:b9:d4:7d:d3:0f:4b:cb:29:69:a7:4b:bd:90:
                    d0:66:fa:e6:67:5c:04:79:88:53:b5:7f:13:43:6a:
                    82:d3:de:8c:8d:41:32:6d:d6:27:84:32:49:07:08:
                    0a:9b:32:4a:7f:02:80:af:df:e5:e8:b6:f2:1d:cf:
                    f0:60:19:c6:42:95:cf:32:6d:4b:b9:b1:69:29:6d:
                    92:a9:e1:bc:00:dc:5f:96:f0:1a:3c:09:94:4f:0a:
                    cd:09:53:61:ce:2b:4c:ae:e0:87:78:99:4e:91:a4:
                    92:03:e3:a9:e6:f7:67:a1:18:c3:6c:8c:74:bf:93:
                    25:a8:67:ca:c5:c5:cd:07:ba:80:9b:35:b1:db:56:
                    1c:12:4c:80:6c:e6:ce:b4:0d:79:39:c7:3d:00:88:
                    af:f6:06:50:5e:79:2e:66:36:dc:6c:a6:97:c0:30:
                    fd:0b:01:d5:8b:58:e7:87:a0:df:73:0b:3c:bd:04:
                    0b:dc:12:5d:60:66:c5:31:04:d7:48:89:7e:8f:8c:
                    3a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E8:91:52:CE:A0:8B:6F:94:08:FF:CE:DB:44:DD:AF:45:8E:FA:D2
            X509v3 Authority Key Identifier:
                keyid:20:85:C2:E2:61:05:61:7B:C4:50:2F:89:11:A5:BE:52:CC:06:11:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3137302e38342e31322e302f32322d3234203d3e20323634393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:ff:cd:3c:71:e5:a1:d9:13:8f:0c:50:de:ff:7a:57:a7:56:
         07:87:ed:b1:6e:4c:7f:a7:41:7b:9b:2b:68:11:82:77:2a:66:
         ea:97:46:50:3c:65:4f:7e:43:7a:60:f3:3e:01:27:65:e7:59:
         71:d8:c5:c4:e7:b1:c5:b0:63:1c:14:bb:f2:9d:30:01:9b:85:
         c3:54:f1:f5:46:fb:6b:a5:ee:2c:a3:c1:33:1a:27:12:6a:4e:
         ed:a3:03:92:f6:b0:f2:4c:2b:4b:d9:32:96:03:29:a5:06:75:
         12:ef:c2:31:5c:f6:b5:88:71:27:1e:9a:b7:e3:13:9a:09:83:
         bb:92:2a:bc:d8:ad:55:16:bd:76:77:25:64:84:b1:8b:f9:43:
         1c:97:19:0d:75:22:ad:a9:a1:e5:06:58:32:b0:0d:02:4f:93:
         81:ba:e8:46:51:7d:53:a4:09:e5:c3:73:36:d6:46:a8:ac:31:
         c2:12:3a:48:cc:6d:1c:15:00:36:c3:ac:2f:8e:3c:e9:50:9d:
         b0:97:b4:6b:31:6b:0f:10:4d:29:71:66:2c:02:f8:95:ca:7f:
         1f:2a:f7:4a:54:5f:e5:fd:a9:ca:90:63:81:a2:52:d7:79:2d:
         b2:3a:90:f2:32:b0:bc:65:eb:55:03:f8:7a:d6:2a:38:80:16:
         84:eb:ee:3b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPjWpctI5sA4TdOSc2zOpCo6WU7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA4NUMyRTI2MTA1NjE3QkM0NTAyRjg5MTFBNUJFNTJD
QzA2MTEyMjAeFw0yNTA2MTYxOTU4MDJaFw0yNjA2MTUyMDAzMDJaMDMxMTAvBgNV
BAMTKERDRTg5MTUyQ0VBMDhCNkY5NDA4RkZDRURCNDREREFGNDU4RUZBRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfhWYHlkcVZBVFCxyHB9eHBSKV
OvRyPIyRt9usBI87NTDkHVSwkZDhMLTq8aYLUxkxaJaQCYqht7OfzNyMudR90w9L
yylpp0u9kNBm+uZnXAR5iFO1fxNDaoLT3oyNQTJt1ieEMkkHCAqbMkp/AoCv3+Xo
tvIdz/BgGcZClc8ybUu5sWkpbZKp4bwA3F+W8Bo8CZRPCs0JU2HOK0yu4Id4mU6R
pJID46nm92ehGMNsjHS/kyWoZ8rFxc0HuoCbNbHbVhwSTIBs5s60DXk5xz0AiK/2
BlBeeS5mNtxsppfAMP0LAdWLWOeHoN9zCzy9BAvcEl1gZsUxBNdIiX6PjDqzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3OiRUs6gi2+UCP/O20Tdr0WO+tIwHwYDVR0j
BBgwFoAUIIXC4mEFYXvEUC+JEaW+UswGESIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0dpRlpYSmFiVzY0dGZmWm1QcXFQSnpvVXR3RXd6TWVyTFo4WnNIdWJL
THQvMC8yMDg1QzJFMjYxMDU2MTdCQzQ1MDJGODkxMUE1QkU1MkNDMDYxMTIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwODVDMkUyNjEwNTYxN0JD
NDUwMkY4OTExQTVCRTUyQ0MwNjExMjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dHaUZaWEphYlc2NHRmZlptUHFxUEp6b1V0d0V3ek1lckxaOFpzSHViS0x0LzAv
MzEzNzMwMmUzODM0MmUzMTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzkzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlQMMA0GCSqGSIb3DQEBCwUAA4IBAQCv/808ceWh
2ROPDFDe/3pXp1YHh+2xbkx/p0F7mytoEYJ3Kmbql0ZQPGVPfkN6YPM+ASdl51lx
2MXE57HFsGMcFLvynTABm4XDVPH1Rvtrpe4so8EzGicSak7towOS9rDyTCtL2TKW
AymlBnUS78IxXPa1iHEnHpq34xOaCYO7kiq82K1VFr12dyVkhLGL+UMclxkNdSKt
qaHlBlgysA0CT5OBuuhGUX1TpAnlw3M21kaorDHCEjpIzG0cFQA2w6wvjjzpUJ2w
l7RrMWsPEE0pcWYsAviVyn8fKvdKVF/l/anKkGOBolLXeS2yOpDyMrC8ZetVA/h6
1io4gBaE6+47
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:59:57 2025 by rpki-client