Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa
File:                     3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (raw, json)
Hash identifier:          LGeUXiaM2/c1vLGUKu+hgacL8LtOYT3QJEpd2sZiP9s=
Subject key identifier:   6A:43:0C:35:A0:1B:19:F2:2E:FA:45:79:87:1D:6B:22:4D:24:5B:45
Certificate issuer:       /CN=D264983A092FF22610C9F436FE4BFC265EF4DF1B
Certificate serial:       53C290A60496B58584576D20C46E65BF97E1DE3B
Authority key identifier: D2:64:98:3A:09:2F:F2:26:10:C9:F4:36:FE:4B:FC:26:5E:F4:DF:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D264983A092FF22610C9F436FE4BFC265EF4DF1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa
Signing time:             Sun 06 Jul 2025 21:56:55 +0000
ROA not before:           Sun 06 Jul 2025 21:51:55 +0000
ROA not after:            Sun 05 Jul 2026 21:56:55 +0000
asID:                     266304
IP address blocks:        170.79.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/D264983A092FF22610C9F436FE4BFC265EF4DF1B.crl
                          rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/D264983A092FF22610C9F436FE4BFC265EF4DF1B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D264983A092FF22610C9F436FE4BFC265EF4DF1B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 22:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c2:90:a6:04:96:b5:85:84:57:6d:20:c4:6e:65:bf:97:e1:de:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D264983A092FF22610C9F436FE4BFC265EF4DF1B
        Validity
            Not Before: Jul  6 21:51:55 2025 GMT
            Not After : Jul  5 21:56:55 2026 GMT
        Subject: CN=6A430C35A01B19F22EFA4579871D6B224D245B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f9:0b:15:33:96:29:11:c4:77:87:23:6c:40:
                    a8:1c:d9:0c:23:0c:2c:61:92:d9:f2:b3:94:fa:e5:
                    9e:b6:14:7f:a5:9c:3a:91:c6:08:25:03:e2:e9:a9:
                    56:cb:5a:0e:82:a9:de:49:1a:0b:e5:fd:c4:7e:de:
                    83:3b:f4:87:d7:c2:3e:05:a8:85:de:e9:ec:8a:d9:
                    af:ea:a1:68:92:a4:28:d9:a5:3a:c2:e3:38:90:c3:
                    76:3e:b5:9d:55:19:1c:2b:0c:38:59:79:05:cb:94:
                    40:4b:79:ca:cc:cd:97:28:a6:5c:40:de:e4:41:d4:
                    d9:2c:5a:76:93:ba:e0:03:16:3e:a8:12:94:d5:ed:
                    f5:29:b3:45:49:cf:a8:e5:61:21:06:a9:8a:16:7b:
                    5b:72:7c:57:ec:a6:b8:06:ed:b0:e1:f4:38:6b:0e:
                    a2:3c:e3:da:d3:a5:b1:2a:c7:e0:ae:e1:83:53:ee:
                    b3:71:04:e9:2d:e8:a6:45:80:41:57:cb:35:52:7d:
                    45:c5:42:f4:a5:a6:fe:26:53:08:04:ca:d3:1f:95:
                    e1:7a:4a:70:82:fd:fa:3b:65:d7:83:cb:3c:b2:62:
                    e9:fa:50:e4:93:86:06:cb:2c:9e:fb:ac:dc:0e:5b:
                    45:4e:d7:3b:e8:bd:c1:40:15:38:76:9d:d9:a3:ef:
                    5a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:43:0C:35:A0:1B:19:F2:2E:FA:45:79:87:1D:6B:22:4D:24:5B:45
            X509v3 Authority Key Identifier:
                keyid:D2:64:98:3A:09:2F:F2:26:10:C9:F4:36:FE:4B:FC:26:5E:F4:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/D264983A092FF22610C9F436FE4BFC265EF4DF1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D264983A092FF22610C9F436FE4BFC265EF4DF1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:ee:39:e5:17:bf:f8:30:be:53:f5:4b:07:9f:07:f2:3b:8f:
         ac:78:10:82:24:ae:31:fe:1a:6a:98:af:08:38:53:66:e2:ab:
         94:43:9e:e1:ba:3d:ed:94:13:4b:43:db:47:91:8d:0b:ad:11:
         4d:48:80:2d:e1:a2:b4:ea:cc:fb:ae:cd:2a:43:b5:b9:6d:0a:
         c3:f6:fa:09:75:f9:a2:c0:11:44:e8:ec:c3:33:fc:10:0b:79:
         1a:d7:33:e8:b1:5b:15:32:62:cd:c8:28:3f:18:02:94:53:50:
         3e:11:1c:9b:79:78:0f:d1:7e:5f:40:33:13:bd:8e:99:da:b7:
         29:1a:13:df:de:90:f1:2f:33:7b:38:ca:0a:c2:b5:69:da:15:
         2f:8b:29:69:51:61:91:e5:e1:0e:49:79:d0:ba:12:7e:6e:d3:
         49:ed:21:74:4d:a6:a8:36:4c:cc:4f:3b:4b:17:82:c9:d1:04:
         9b:e2:c3:3c:9f:5b:36:2f:5c:0c:5e:e2:03:a5:52:a1:6d:cf:
         7e:fb:48:5a:f1:8c:c7:95:9f:fe:c5:48:04:52:68:e1:73:25:
         b2:22:50:a2:27:19:c1:46:a5:76:45:74:01:4c:9e:3e:3b:cb:
         73:72:aa:94:93:39:12:68:ea:00:71:24:67:1d:b9:a2:76:5f:
         81:53:b4:3f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUU8KQpgSWtYWEV20gxG5lv5fh3jswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI2NDk4M0EwOTJGRjIyNjEwQzlGNDM2RkU0QkZDMjY1
RUY0REYxQjAeFw0yNTA3MDYyMTUxNTVaFw0yNjA3MDUyMTU2NTVaMDMxMTAvBgNV
BAMTKDZBNDMwQzM1QTAxQjE5RjIyRUZBNDU3OTg3MUQ2QjIyNEQyNDVCNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS+QsVM5YpEcR3hyNsQKgc2Qwj
DCxhktnys5T65Z62FH+lnDqRxgglA+LpqVbLWg6Cqd5JGgvl/cR+3oM79IfXwj4F
qIXe6eyK2a/qoWiSpCjZpTrC4ziQw3Y+tZ1VGRwrDDhZeQXLlEBLecrMzZcoplxA
3uRB1NksWnaTuuADFj6oEpTV7fUps0VJz6jlYSEGqYoWe1tyfFfsprgG7bDh9Dhr
DqI849rTpbEqx+Cu4YNT7rNxBOkt6KZFgEFXyzVSfUXFQvSlpv4mUwgEytMfleF6
SnCC/fo7ZdeDyzyyYun6UOSThgbLLJ77rNwOW0VO1zvovcFAFTh2ndmj71oBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUakMMNaAbGfIu+kV5hx1rIk0kW0UwHwYDVR0j
BBgwFoAU0mSYOgkv8iYQyfQ2/kv8Jl703xswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThq
ZkIvMC9EMjY0OTgzQTA5MkZGMjI2MTBDOUY0MzZGRTRCRkMyNjVFRjRERjFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyNjQ5ODNBMDkyRkYyMjYx
MEM5RjQzNkZFNEJGQzI2NUVGNERGMUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0SGl1eHFvNm5id1p0cUNBcUt4MkRiVTc2dnJIV1VYMUJiWlBGNUU4amZCLzAv
MzEzNzMwMmUzNzM5MmUzMjMwMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzYzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqT8gwDQYJKoZIhvcNAQELBQADggEBACDuOeUX
v/gwvlP1SwefB/I7j6x4EIIkrjH+GmqYrwg4U2biq5RDnuG6Pe2UE0tD20eRjQut
EU1IgC3horTqzPuuzSpDtbltCsP2+gl1+aLAEUTo7MMz/BALeRrXM+ixWxUyYs3I
KD8YApRTUD4RHJt5eA/Rfl9AMxO9jpnatykaE9/ekPEvM3s4ygrCtWnaFS+LKWlR
YZHl4Q5JedC6En5u00ntIXRNpqg2TMxPO0sXgsnRBJviwzyfWzYvXAxe4gOlUqFt
z377SFrxjMeVn/7FSARSaOFzJbIiUKInGcFGpXZFdAFMnj47y3NyqpSTORJo6gBx
JGcduaJ2X4FTtD8=
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:25:35 2025 by rpki-client