Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa
File:                     3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa (raw, json)
Hash identifier:          Zifu3K7T2Nboe5rtdC8OTNzGwhDgletMs5YjcX5gNts=
Subject key identifier:   78:15:0C:22:CC:34:F6:56:B1:33:45:AC:36:7F:0D:E3:65:20:1E:7A
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       7944894215F6C893D58EAB0933A3114A3D675AD4
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa
Signing time:             Mon 04 Aug 2025 18:24:19 +0000
ROA not before:           Mon 04 Aug 2025 18:19:19 +0000
ROA not after:            Mon 03 Aug 2026 18:24:19 +0000
asID:                     263518
IP address blocks:        168.197.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 14:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:44:89:42:15:f6:c8:93:d5:8e:ab:09:33:a3:11:4a:3d:67:5a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Aug  4 18:19:19 2025 GMT
            Not After : Aug  3 18:24:19 2026 GMT
        Subject: CN=78150C22CC34F656B13345AC367F0DE365201E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2f:e6:47:10:4a:ee:31:be:ce:7c:67:23:b0:
                    23:dc:47:9a:7b:db:25:89:29:9d:52:89:db:56:c4:
                    ac:28:6e:17:2b:92:0e:46:06:6f:52:f0:29:18:9d:
                    2f:43:2d:8c:28:fd:1d:fa:cf:ad:bf:a4:93:9b:0a:
                    34:d5:64:d1:3f:dd:85:88:d9:e7:40:b6:f6:d9:24:
                    50:11:2c:90:e1:9a:9c:7c:19:7d:5d:87:70:16:c8:
                    14:57:0e:a1:99:aa:72:92:a7:da:26:4b:0f:13:c5:
                    bd:65:5b:e5:5b:15:50:83:a3:42:fe:a4:ac:89:1a:
                    9a:52:8d:c2:bd:c5:96:db:41:00:ff:28:ac:78:52:
                    04:31:fd:9b:47:69:34:23:1b:d0:c3:57:fc:c1:51:
                    20:1a:58:85:86:92:e7:84:53:d5:6a:d1:c5:04:e9:
                    da:d9:f9:a9:99:0f:11:48:86:97:e3:9a:d1:5e:11:
                    ab:1b:95:73:12:96:93:24:61:22:f6:48:85:05:34:
                    bb:b7:7c:8f:1d:6b:07:e4:75:1c:c1:51:de:bf:93:
                    cb:90:c8:1f:76:22:e1:c8:8c:e1:1f:a6:9b:b7:63:
                    4e:ce:d1:b6:d2:54:10:8f:d3:ae:01:2e:4e:81:97:
                    b8:69:7c:f7:67:1c:21:19:2c:d9:c2:a4:61:bc:d7:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:15:0C:22:CC:34:F6:56:B1:33:45:AC:36:7F:0D:E3:65:20:1E:7A
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:48:10:9a:80:24:7b:a3:e0:f7:90:f3:d2:74:c8:82:f7:a0:
         e8:38:b6:2f:e7:22:ec:d1:dd:b6:ac:5a:99:de:4d:40:56:06:
         ac:27:df:6f:53:f1:0c:1f:eb:49:95:19:6d:37:8b:12:d5:ea:
         8a:c2:8a:f5:df:02:af:a6:f7:ad:5d:73:90:69:d7:dc:dc:7e:
         17:c9:ae:54:be:23:ed:92:9c:01:38:05:2d:81:24:98:60:50:
         08:8f:32:1b:b9:f2:a6:7b:ba:4a:6e:01:3a:f3:5e:90:cd:1b:
         5e:f6:e2:4a:cc:af:0f:0b:fb:a2:f3:67:66:33:29:8d:88:05:
         cc:70:a2:c7:3b:77:c5:7d:7c:a3:3e:57:68:20:a3:96:6a:70:
         fe:23:c2:92:93:d6:bb:39:d6:40:66:62:88:ae:a3:1e:ee:d2:
         85:0a:d0:71:1a:eb:91:d5:14:79:4e:83:4c:cd:47:29:8f:24:
         3f:c1:ca:23:ce:d2:10:aa:ea:66:e4:52:98:b2:4e:a6:86:2f:
         71:3b:c9:2d:23:b5:f3:a9:66:60:08:12:3b:8f:75:60:15:7e:
         c9:65:b2:3f:5a:aa:89:ba:ec:6a:4a:05:eb:64:5b:b6:ed:2d:
         7a:66:f4:9c:b3:d8:48:7c:9a:7a:f1:a2:8e:c6:21:b6:75:02:
         b6:75:3c:ea
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeUSJQhX2yJPVjqsJM6MRSj1nWtQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY0OTE2QzBFQzVGMUU2QkZGMUE2NERDOTYwNDQ1NDcz
ODc3NUUyNzAeFw0yNTA4MDQxODE5MTlaFw0yNjA4MDMxODI0MTlaMDMxMTAvBgNV
BAMTKDc4MTUwQzIyQ0MzNEY2NTZCMTMzNDVBQzM2N0YwREUzNjUyMDFFN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZL+ZHEEruMb7OfGcjsCPcR5p7
2yWJKZ1SidtWxKwobhcrkg5GBm9S8CkYnS9DLYwo/R36z62/pJObCjTVZNE/3YWI
2edAtvbZJFARLJDhmpx8GX1dh3AWyBRXDqGZqnKSp9omSw8Txb1lW+VbFVCDo0L+
pKyJGppSjcK9xZbbQQD/KKx4UgQx/ZtHaTQjG9DDV/zBUSAaWIWGkueEU9Vq0cUE
6drZ+amZDxFIhpfjmtFeEasblXMSlpMkYSL2SIUFNLu3fI8dawfkdRzBUd6/k8uQ
yB92IuHIjOEfppu3Y07O0bbSVBCP064BLk6Bl7hpfPdnHCEZLNnCpGG817InAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUeBUMIsw09laxM0WsNn8N42UgHnowHwYDVR0j
BBgwFoAUL0kWwOxfHmv/GmTclgRFRzh3XicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG05OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZp
VG4vMC8yRjQ5MTZDMEVDNUYxRTZCRkYxQTY0REM5NjA0NDU0NzM4Nzc1RTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNDkxNkMwRUM1RjFFNkJG
RjFBNjREQzk2MDQ0NTQ3Mzg3NzVFMjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htOTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAv
MzEzNjM4MmUzMTM5MzcyZTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoxVQwDQYJKoZIhvcNAQELBQADggEBACtIEJqA
JHuj4PeQ89J0yIL3oOg4ti/nIuzR3basWpneTUBWBqwn329T8Qwf60mVGW03ixLV
6orCivXfAq+m961dc5Bp19zcfhfJrlS+I+2SnAE4BS2BJJhgUAiPMhu58qZ7ukpu
ATrzXpDNG1724krMrw8L+6LzZ2YzKY2IBcxwosc7d8V9fKM+V2ggo5ZqcP4jwpKT
1rs51kBmYoiuox7u0oUK0HEa65HVFHlOg0zNRymPJD/ByiPO0hCq6mbkUpiyTqaG
L3E7yS0jtfOpZmAIEjuPdWAVfsllsj9aqom67GpKBetkW7btLXpm9Jyz2Eh8mnrx
oo7GIbZ1ArZ1POo=
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:09:47 2025 by rpki-client