Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139322e302f32322d3232203d3e20323635323831.roa
File:                     3136382e39302e3139322e302f32322d3232203d3e20323635323831.roa (raw, json)
Hash identifier:          HfaPHBwMYNwE/IacUsz6F8tLkOAWsRTJdIZRD+n/o0M=
Subject key identifier:   FC:12:A8:4B:27:A1:D4:E7:96:0E:13:BC:BE:68:B6:0A:A9:AC:5A:44
Certificate issuer:       /CN=27703D671AE6A9B45D2221CB442F8C340216A354
Certificate serial:       69D15D22184C07920617C582A29B19C7EEC00608
Authority key identifier: 27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139322e302f32322d3232203d3e20323635323831.roa
Signing time:             Thu 05 Jun 2025 17:04:10 +0000
ROA not before:           Thu 05 Jun 2025 16:59:10 +0000
ROA not after:            Thu 04 Jun 2026 17:04:10 +0000
asID:                     265281
IP address blocks:        168.90.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl
                          rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 15:17:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d1:5d:22:18:4c:07:92:06:17:c5:82:a2:9b:19:c7:ee:c0:06:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27703D671AE6A9B45D2221CB442F8C340216A354
        Validity
            Not Before: Jun  5 16:59:10 2025 GMT
            Not After : Jun  4 17:04:10 2026 GMT
        Subject: CN=FC12A84B27A1D4E7960E13BCBE68B60AA9AC5A44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7d:3f:41:42:cf:89:60:0f:a3:b1:2e:db:57:
                    41:8c:d0:cd:97:f1:4f:89:fa:c3:f8:4c:f6:6f:01:
                    70:23:84:a8:69:e5:3e:63:01:fc:7f:92:37:f7:66:
                    ab:cf:ee:36:e2:47:15:2b:b5:db:1a:b9:30:0a:87:
                    1c:f8:30:82:8d:92:bd:a3:0d:ac:cc:a6:ba:ce:b9:
                    3f:b6:cd:a6:26:02:74:b0:9e:97:e7:69:fb:44:ee:
                    65:aa:df:0c:71:f8:cc:00:59:a7:41:59:c9:c9:a4:
                    32:46:86:d6:f3:b0:65:d9:ba:00:cd:d7:b4:d6:2d:
                    7b:70:37:ae:5c:e0:40:df:dd:5c:2f:fe:16:5b:98:
                    00:fc:aa:8d:34:83:f9:bf:09:7a:20:45:6e:b3:85:
                    b2:01:76:36:c0:8e:c3:0f:2d:6f:76:71:fa:ac:03:
                    d7:4b:46:25:1f:87:ed:5b:89:e6:48:09:65:5c:c2:
                    b8:42:b4:f9:e9:0c:3a:c1:1a:9e:7f:11:0a:f0:04:
                    94:5d:df:4b:bf:3c:61:9d:e0:3f:85:6d:9a:f5:b5:
                    56:60:37:ff:08:5a:20:74:a3:52:27:fe:f8:c6:43:
                    6c:e3:80:53:09:57:e1:e1:0a:27:6c:42:a5:fa:7a:
                    79:fc:ba:61:3e:8c:c9:af:27:1f:89:7f:48:a3:7e:
                    68:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:12:A8:4B:27:A1:D4:E7:96:0E:13:BC:BE:68:B6:0A:A9:AC:5A:44
            X509v3 Authority Key Identifier:
                keyid:27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139322e302f32322d3232203d3e20323635323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:3d:59:78:3b:94:12:46:28:58:c9:66:4b:42:b0:b8:f2:35:
         87:3a:35:0e:1d:a6:fd:6e:41:10:11:79:01:a7:b8:8e:91:14:
         f4:86:74:66:bf:10:af:33:35:a6:45:2f:7a:0c:bf:73:29:06:
         ed:43:c9:d8:e3:ff:e8:88:33:78:b6:37:d7:07:25:93:c8:91:
         ea:65:ed:dd:31:d4:e9:e8:a3:b8:16:4f:12:e0:00:cc:f3:86:
         5d:ff:79:20:f7:08:c7:fc:7f:86:f2:23:0f:1e:4d:52:d6:2e:
         62:97:06:45:3d:2a:c6:c6:7d:c4:23:04:11:20:44:c4:12:b2:
         9f:6f:fc:33:74:93:fc:57:56:22:b0:56:5f:c3:1b:62:4c:64:
         7d:c3:cf:66:e1:0b:1f:29:db:84:c4:43:a3:c2:fc:9e:8b:56:
         37:9e:01:64:5a:4c:3e:38:dc:f6:cf:1e:aa:de:aa:2b:dc:4b:
         45:4a:58:20:03:14:06:ed:c0:33:5e:63:3c:37:4a:cc:da:56:
         20:7d:b5:9a:45:9c:d0:ad:70:4f:f7:d6:d0:c5:48:e4:e4:02:
         b8:69:e8:2d:59:ae:d1:7d:c0:6c:77:90:8f:e6:fb:71:ab:cf:
         92:e0:f2:17:d0:56:90:f7:4d:02:99:12:ff:4e:5a:60:27:c2:
         52:8a:1e:7f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUadFdIhhMB5IGF8WCopsZx+7ABggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc3MDNENjcxQUU2QTlCNDVEMjIyMUNCNDQyRjhDMzQw
MjE2QTM1NDAeFw0yNTA2MDUxNjU5MTBaFw0yNjA2MDQxNzA0MTBaMDMxMTAvBgNV
BAMTKEZDMTJBODRCMjdBMUQ0RTc5NjBFMTNCQ0JFNjhCNjBBQTlBQzVBNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCafT9BQs+JYA+jsS7bV0GM0M2X
8U+J+sP4TPZvAXAjhKhp5T5jAfx/kjf3ZqvP7jbiRxUrtdsauTAKhxz4MIKNkr2j
DazMprrOuT+2zaYmAnSwnpfnaftE7mWq3wxx+MwAWadBWcnJpDJGhtbzsGXZugDN
17TWLXtwN65c4EDf3Vwv/hZbmAD8qo00g/m/CXogRW6zhbIBdjbAjsMPLW92cfqs
A9dLRiUfh+1bieZICWVcwrhCtPnpDDrBGp5/EQrwBJRd30u/PGGd4D+FbZr1tVZg
N/8IWiB0o1In/vjGQ2zjgFMJV+HhCidsQqX6enn8umE+jMmvJx+Jf0ijfmj5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/BKoSyeh1OeWDhO8vmi2CqmsWkQwHwYDVR0j
BBgwFoAUJ3A9ZxrmqbRdIiHLRC+MNAIWo1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmZOd3JFUlhucFN4TEt1QnU2c2p0NGU0cVBvQ3dqV2txRTZzcFZ1NmpO
M0YvMC8yNzcwM0Q2NzFBRTZBOUI0NUQyMjIxQ0I0NDJGOEMzNDAyMTZBMzU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3NzAzRDY3MUFFNkE5QjQ1
RDIyMjFDQjQ0MkY4QzM0MDIxNkEzNTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJmTndyRVJYbnBTeExLdUJ1NnNqdDRlNHFQb0N3aldrcUU2c3BWdTZqTjNGLzAv
MzEzNjM4MmUzOTMwMmUzMTM5MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzMjM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoWsAwDQYJKoZIhvcNAQELBQADggEBAEk9WXg7
lBJGKFjJZktCsLjyNYc6NQ4dpv1uQRAReQGnuI6RFPSGdGa/EK8zNaZFL3oMv3Mp
Bu1Dydjj/+iIM3i2N9cHJZPIkepl7d0x1Onoo7gWTxLgAMzzhl3/eSD3CMf8f4by
Iw8eTVLWLmKXBkU9KsbGfcQjBBEgRMQSsp9v/DN0k/xXViKwVl/DG2JMZH3Dz2bh
Cx8p24TEQ6PC/J6LVjeeAWRaTD443PbPHqreqivcS0VKWCADFAbtwDNeYzw3Ssza
ViB9tZpFnNCtcE/31tDFSOTkArhp6C1ZrtF9wGx3kI/m+3Grz5Lg8hfQVpD3TQKZ
Ev9OWmAnwlKKHn8=
-----END CERTIFICATE-----
Generated at Thu Jun 12 03:32:01 2025 by rpki-client