Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/3136382e3139372e32342e302f32322d3234203d3e20323635343735.roa
File:                     3136382e3139372e32342e302f32322d3234203d3e20323635343735.roa (raw, json)
Hash identifier:          DvmYlOm8OmuaRVXtvUloK3/qsa5opULT8IXI38cQ6dg=
Subject key identifier:   B0:61:B6:FD:CC:A1:26:3C:F1:D4:61:6F:CC:3A:FE:A5:08:F6:45:8C
Certificate issuer:       /CN=2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8
Certificate serial:       448DCE02E411F1BD6981584710D356C15BDC1DC7
Authority key identifier: 2B:E9:E1:3D:9A:7C:5A:A3:F1:7D:C9:9A:74:E8:D5:C7:D8:4B:D4:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/3136382e3139372e32342e302f32322d3234203d3e20323635343735.roa
Signing time:             Wed 23 Jul 2025 13:05:44 +0000
ROA not before:           Wed 23 Jul 2025 13:00:44 +0000
ROA not after:            Wed 22 Jul 2026 13:05:44 +0000
asID:                     265475
IP address blocks:        168.197.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.crl
                          rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 21:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8d:ce:02:e4:11:f1:bd:69:81:58:47:10:d3:56:c1:5b:dc:1d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8
        Validity
            Not Before: Jul 23 13:00:44 2025 GMT
            Not After : Jul 22 13:05:44 2026 GMT
        Subject: CN=B061B6FDCCA1263CF1D4616FCC3AFEA508F6458C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c8:b4:d7:5d:47:63:d0:1b:8c:0c:8b:ee:a3:
                    e6:70:8e:86:cf:e7:01:8c:3a:1d:68:08:cf:13:f9:
                    d5:6f:26:d4:27:e3:d8:cc:dc:3e:3f:55:e8:8b:aa:
                    8a:cf:fc:5f:5b:40:6d:cb:4c:9d:c1:4a:c0:ff:ce:
                    b4:5a:3c:26:15:54:76:b7:1e:20:ca:8f:89:67:58:
                    3f:d2:1f:50:e2:ea:91:2a:8c:23:84:9c:63:e9:36:
                    7a:8e:bb:50:97:6c:5a:c9:ad:f9:7e:3a:a6:cc:2b:
                    a9:a4:b0:65:5f:e8:8f:c8:ac:d1:4e:4f:ba:a7:67:
                    f4:0a:dc:f6:79:73:9c:f2:05:4b:29:67:4c:c0:12:
                    b0:27:11:3b:b6:18:01:05:66:08:61:2c:ef:52:ec:
                    03:05:27:97:f2:8a:04:3d:e5:fb:68:07:06:a0:a8:
                    d0:cb:0e:64:88:55:a1:1b:2e:d5:99:54:ec:64:07:
                    63:a5:38:ba:3e:dd:a0:71:27:28:62:24:66:86:87:
                    f5:28:d8:b6:21:bb:8a:9b:69:62:3b:0a:21:e0:c3:
                    b1:09:31:83:8b:11:78:f9:5c:15:79:b3:ce:88:ad:
                    af:03:63:4d:ee:58:21:39:d3:cb:93:2d:56:36:22:
                    20:4e:22:e5:0c:d1:a7:fb:d8:87:9a:1b:76:82:ea:
                    43:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:61:B6:FD:CC:A1:26:3C:F1:D4:61:6F:CC:3A:FE:A5:08:F6:45:8C
            X509v3 Authority Key Identifier:
                keyid:2B:E9:E1:3D:9A:7C:5A:A3:F1:7D:C9:9A:74:E8:D5:C7:D8:4B:D4:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/3136382e3139372e32342e302f32322d3234203d3e20323635343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:f7:b5:8f:f6:d2:df:9f:96:29:c6:d4:b8:92:84:09:ca:20:
         c8:2c:fa:10:aa:32:5a:77:61:ef:d7:36:11:e5:7c:ac:81:b0:
         ec:5a:90:a8:71:e5:42:66:b1:ce:5d:fe:71:f0:48:f4:5b:fd:
         6d:7e:89:af:1c:96:42:82:10:f0:c6:d0:e7:11:ec:72:05:b6:
         a4:ed:b7:df:15:10:41:f4:73:f1:3c:88:33:74:a9:c3:40:12:
         c6:d9:27:b2:8c:c8:48:c4:07:4a:d1:d0:e4:e2:7c:be:77:73:
         da:76:e7:dc:17:be:d0:50:b6:96:b4:4e:1b:f1:2d:f4:b0:fe:
         f8:46:62:a8:89:e0:b3:61:e6:b5:58:de:e4:df:a6:64:f2:ad:
         ea:95:2c:78:78:0e:f8:6c:8e:83:57:d5:75:aa:f5:8c:67:f7:
         29:f9:2e:6c:87:72:08:f2:b5:cd:9c:33:69:20:70:8e:5c:7d:
         71:84:30:5b:11:50:2f:bd:2e:38:b8:4b:b0:11:a3:3b:3a:a0:
         9d:a4:83:ce:77:81:4d:e0:4d:06:fd:75:f9:55:c1:ea:6c:34:
         8b:8d:94:6f:e8:0e:ab:79:a3:99:5c:2f:e6:cf:06:83:19:30:
         16:b8:84:2d:fa:26:e5:46:b3:9a:a2:0a:f8:ff:51:63:f5:31:
         2f:c2:3d:9f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURI3OAuQR8b1pgVhHENNWwVvcHccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJFOUUxM0Q5QTdDNUFBM0YxN0RDOTlBNzRFOEQ1QzdE
ODRCRDREODAeFw0yNTA3MjMxMzAwNDRaFw0yNjA3MjIxMzA1NDRaMDMxMTAvBgNV
BAMTKEIwNjFCNkZEQ0NBMTI2M0NGMUQ0NjE2RkNDM0FGRUE1MDhGNjQ1OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1yLTXXUdj0BuMDIvuo+ZwjobP
5wGMOh1oCM8T+dVvJtQn49jM3D4/VeiLqorP/F9bQG3LTJ3BSsD/zrRaPCYVVHa3
HiDKj4lnWD/SH1Di6pEqjCOEnGPpNnqOu1CXbFrJrfl+OqbMK6mksGVf6I/IrNFO
T7qnZ/QK3PZ5c5zyBUspZ0zAErAnETu2GAEFZghhLO9S7AMFJ5fyigQ95ftoBwag
qNDLDmSIVaEbLtWZVOxkB2OlOLo+3aBxJyhiJGaGh/Uo2LYhu4qbaWI7CiHgw7EJ
MYOLEXj5XBV5s86Ira8DY03uWCE508uTLVY2IiBOIuUM0af72IeaG3aC6kMTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsGG2/cyhJjzx1GFvzDr+pQj2RYwwHwYDVR0j
BBgwFoAUK+nhPZp8WqPxfcmadOjVx9hL1NgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGRIdE15bk4zMnZLMkZFQzVqbVdRN0F5aEQ0NDc3dm1oTlAzUVRVQ0Zr
cW4vMC8yQkU5RTEzRDlBN0M1QUEzRjE3REM5OUE3NEU4RDVDN0Q4NEJENEQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCRTlFMTNEOUE3QzVBQTNG
MTdEQzk5QTc0RThENUM3RDg0QkQ0RDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hkSHRNeW5OMzJ2SzJGRUM1am1XUTdBeWhENDQ3N3ZtaE5QM1FUVUNGa3FuLzAv
MzEzNjM4MmUzMTM5MzcyZTMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzUzNDM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoxRgwDQYJKoZIhvcNAQELBQADggEBAAf3tY/2
0t+flinG1LiShAnKIMgs+hCqMlp3Ye/XNhHlfKyBsOxakKhx5UJmsc5d/nHwSPRb
/W1+ia8clkKCEPDG0OcR7HIFtqTtt98VEEH0c/E8iDN0qcNAEsbZJ7KMyEjEB0rR
0OTifL53c9p259wXvtBQtpa0ThvxLfSw/vhGYqiJ4LNh5rVY3uTfpmTyreqVLHh4
DvhsjoNX1XWq9Yxn9yn5LmyHcgjytc2cM2kgcI5cfXGEMFsRUC+9Lji4S7ARozs6
oJ2kg853gU3gTQb9dflVwepsNIuNlG/oDqt5o5lcL+bPBoMZMBa4hC36JuVGs5qi
Cvj/UWP1MS/CPZ8=
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:05:11 2025 by rpki-client