Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JhjAbKcWXVuJdb1H6g82uLzDJpiWgy6giVHdkbSEZHz/0/3137302e38302e3139322e302f32322d3332203d3e20323636333931.roa
File:                     3137302e38302e3139322e302f32322d3332203d3e20323636333931.roa (raw, json)
Hash identifier:          4QIfnHyN/rr3o7a2xVdnBIrRdHANTpH6+jizjYKkBhw=
Subject key identifier:   4C:63:1A:29:CA:BC:4D:7B:A7:E2:61:63:98:A2:27:14:29:37:03:92
Certificate issuer:       /CN=B4ACA719A9B1A16B65191FE5D8C96A9C1791D8AF
Certificate serial:       0C5CA4FE0AF47A1518EC8E7D30172A5D761142EC
Authority key identifier: B4:AC:A7:19:A9:B1:A1:6B:65:19:1F:E5:D8:C9:6A:9C:17:91:D8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4ACA719A9B1A16B65191FE5D8C96A9C1791D8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JhjAbKcWXVuJdb1H6g82uLzDJpiWgy6giVHdkbSEZHz/0/3137302e38302e3139322e302f32322d3332203d3e20323636333931.roa
Signing time:             Tue 27 May 2025 22:34:20 +0000
ROA not before:           Tue 27 May 2025 22:29:20 +0000
ROA not after:            Tue 26 May 2026 22:34:20 +0000
asID:                     266391
IP address blocks:        170.80.192.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7JhjAbKcWXVuJdb1H6g82uLzDJpiWgy6giVHdkbSEZHz/0/B4ACA719A9B1A16B65191FE5D8C96A9C1791D8AF.crl
                          rsync://rpki-repo.registro.br/repo/7JhjAbKcWXVuJdb1H6g82uLzDJpiWgy6giVHdkbSEZHz/0/B4ACA719A9B1A16B65191FE5D8C96A9C1791D8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4ACA719A9B1A16B65191FE5D8C96A9C1791D8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 00:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:5c:a4:fe:0a:f4:7a:15:18:ec:8e:7d:30:17:2a:5d:76:11:42:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4ACA719A9B1A16B65191FE5D8C96A9C1791D8AF
        Validity
            Not Before: May 27 22:29:20 2025 GMT
            Not After : May 26 22:34:20 2026 GMT
        Subject: CN=4C631A29CABC4D7BA7E2616398A2271429370392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:af:5b:d4:71:69:0b:c6:c2:fe:ab:e8:64:
                    a3:90:fe:4b:f4:fc:99:15:f5:b8:eb:31:fa:8b:68:
                    b5:e8:2a:30:49:d4:45:bf:4b:88:3b:5b:f4:8b:fd:
                    00:2f:68:6b:fb:b8:c5:08:28:64:3f:f0:ab:48:4d:
                    d4:37:f8:08:5b:9e:3e:0a:8f:c8:7a:fc:38:54:21:
                    38:68:bc:8e:b5:e4:a5:ff:fa:57:e9:bf:94:48:16:
                    08:c5:aa:41:ad:47:18:72:74:ff:63:df:3a:a6:4c:
                    64:44:36:1b:69:c6:9d:ed:62:17:89:7d:09:73:57:
                    88:f2:39:07:e4:5e:84:af:2d:b3:6e:8e:e8:90:7d:
                    7e:90:79:82:96:f0:13:a9:6b:a9:78:d0:13:28:86:
                    ac:56:33:4c:76:57:8b:27:0f:13:13:d8:7f:40:7a:
                    e7:f0:bd:85:21:1b:1d:d9:0f:97:a2:0e:b2:fe:18:
                    fc:87:81:52:cb:b5:98:bf:f8:c8:04:a8:f1:44:2c:
                    5b:73:19:8e:5e:cb:72:e4:c7:dc:80:8c:96:ed:88:
                    e4:47:c1:66:fc:9d:c5:f8:6a:c3:82:da:ca:e3:4c:
                    b8:f5:f2:88:59:45:bc:fd:9e:bb:3c:dc:7c:a8:9d:
                    58:a5:4e:78:dd:fe:76:39:db:50:2f:57:22:79:d5:
                    8d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:63:1A:29:CA:BC:4D:7B:A7:E2:61:63:98:A2:27:14:29:37:03:92
            X509v3 Authority Key Identifier:
                keyid:B4:AC:A7:19:A9:B1:A1:6B:65:19:1F:E5:D8:C9:6A:9C:17:91:D8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JhjAbKcWXVuJdb1H6g82uLzDJpiWgy6giVHdkbSEZHz/0/B4ACA719A9B1A16B65191FE5D8C96A9C1791D8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4ACA719A9B1A16B65191FE5D8C96A9C1791D8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JhjAbKcWXVuJdb1H6g82uLzDJpiWgy6giVHdkbSEZHz/0/3137302e38302e3139322e302f32322d3332203d3e20323636333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:0e:d5:09:05:34:69:6b:88:bb:2d:70:4b:f7:76:bc:8f:2e:
         04:0a:55:04:b9:b7:9d:79:4a:fe:9b:a4:b4:96:db:ed:6a:2f:
         b3:93:8a:1c:7e:61:07:03:58:a1:d8:71:39:88:4c:84:5b:d7:
         f9:1b:9e:3f:82:05:0f:7c:3f:59:c1:9d:ae:b6:10:4d:88:20:
         61:b1:48:f6:50:bd:77:06:ee:b7:7a:cc:45:d0:7e:86:55:75:
         46:00:a7:6d:67:20:6f:ed:7e:c2:92:e2:df:55:e9:b2:bb:a6:
         4e:ae:36:15:10:29:14:c2:c3:8b:cf:e7:12:95:1a:77:8d:b7:
         f4:23:8e:96:f8:21:50:03:05:ae:7b:1f:c1:26:58:5e:c1:85:
         12:40:1a:41:e8:e2:44:ca:d9:fe:21:a6:a3:29:2d:f5:f6:f5:
         74:71:69:08:ac:f1:0d:5a:94:06:a1:e1:0d:8d:6a:ca:d5:5f:
         b5:d6:82:66:ba:1e:e3:b1:ec:44:09:95:cc:06:b1:36:b3:b7:
         53:19:a3:74:96:65:aa:bf:17:a6:44:0b:59:74:98:d1:74:47:
         ab:52:74:93:66:27:fc:7d:13:d3:82:2f:cf:72:ff:28:cb:c2:
         16:eb:16:5a:40:6e:04:12:09:51:30:af:ac:88:79:92:3d:f5:
         10:46:ab:02
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDFyk/gr0ehUY7I59MBcqXXYRQuwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRBQ0E3MTlBOUIxQTE2QjY1MTkxRkU1RDhDOTZBOUMx
NzkxRDhBRjAeFw0yNTA1MjcyMjI5MjBaFw0yNjA1MjYyMjM0MjBaMDMxMTAvBgNV
BAMTKDRDNjMxQTI5Q0FCQzREN0JBN0UyNjE2Mzk4QTIyNzE0MjkzNzAzOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFYa9b1HFpC8bC/qvoZKOQ/kv0
/JkV9bjrMfqLaLXoKjBJ1EW/S4g7W/SL/QAvaGv7uMUIKGQ/8KtITdQ3+Ahbnj4K
j8h6/DhUIThovI615KX/+lfpv5RIFgjFqkGtRxhydP9j3zqmTGRENhtpxp3tYheJ
fQlzV4jyOQfkXoSvLbNujuiQfX6QeYKW8BOpa6l40BMohqxWM0x2V4snDxMT2H9A
eufwvYUhGx3ZD5eiDrL+GPyHgVLLtZi/+MgEqPFELFtzGY5ey3Lkx9yAjJbtiORH
wWb8ncX4asOC2srjTLj18ohZRbz9nrs83HyonVilTnjd/nY521AvVyJ51Y1nAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTGMaKcq8TXun4mFjmKInFCk3A5IwHwYDVR0j
BBgwFoAUtKynGamxoWtlGR/l2MlqnBeR2K8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0poakFiS2NXWFZ1SmRiMUg2ZzgydUx6REpwaVdneTZnaVZIZGtiU0Va
SHovMC9CNEFDQTcxOUE5QjFBMTZCNjUxOTFGRTVEOEM5NkE5QzE3OTFEOEFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0QUNBNzE5QTlCMUExNkI2
NTE5MUZFNUQ4Qzk2QTlDMTc5MUQ4QUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdKaGpBYktjV1hWdUpkYjFINmc4MnVMekRKcGlXZ3k2Z2lWSGRrYlNFWkh6LzAv
MzEzNzMwMmUzODMwMmUzMTM5MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzYzMzM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqUMAwDQYJKoZIhvcNAQELBQADggEBAHkO1QkF
NGlriLstcEv3dryPLgQKVQS5t515Sv6bpLSW2+1qL7OTihx+YQcDWKHYcTmITIRb
1/kbnj+CBQ98P1nBna62EE2IIGGxSPZQvXcG7rd6zEXQfoZVdUYAp21nIG/tfsKS
4t9V6bK7pk6uNhUQKRTCw4vP5xKVGneNt/Qjjpb4IVADBa57H8EmWF7BhRJAGkHo
4kTK2f4hpqMpLfX29XRxaQis8Q1alAah4Q2NasrVX7XWgma6HuOx7EQJlcwGsTaz
t1MZo3SWZaq/F6ZEC1l0mNF0R6tSdJNmJ/x9E9OCL89y/yjLwhbrFlpAbgQSCVEw
r6yIeZI99RBGqwI=
-----END CERTIFICATE-----
Generated at Wed Jun 11 05:40:21 2025 by rpki-client