Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130372e302f32342d3234203d3e20323635343737.roa
File:                     3136382e3139372e3130372e302f32342d3234203d3e20323635343737.roa (raw, json)
Hash identifier:          YRFJhkvX837E0FMe7PV2ybZeFhnR6n54KJMew2WH/qU=
Subject key identifier:   78:69:59:65:F0:D2:3A:FC:C4:75:8E:D6:DC:F6:6F:6B:6E:02:EB:60
Certificate issuer:       /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Certificate serial:       311E962CE2FD11D4546DDEA941B16E3336350B63
Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130372e302f32342d3234203d3e20323635343737.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     265477
IP address blocks:        168.197.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
                          rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 09:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1e:96:2c:e2:fd:11:d4:54:6d:de:a9:41:b1:6e:33:36:35:0b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject: CN=78695965F0D23AFCC4758ED6DCF66F6B6E02EB60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:8b:71:ac:8d:11:01:8f:0d:98:b2:d7:0a:
                    f4:84:a8:f8:c3:dd:49:40:31:9d:87:d4:79:6c:db:
                    66:33:71:69:f4:be:d5:bc:48:69:05:63:63:b2:f5:
                    8c:39:40:32:65:01:a0:96:06:80:d8:c3:49:13:48:
                    f4:79:14:ec:53:70:94:3c:55:11:c2:3f:86:d7:a5:
                    dd:e5:bf:a1:8d:e7:0d:a1:58:55:2d:c1:c2:b1:0c:
                    81:be:31:d3:77:5b:8d:a4:57:09:7b:52:df:81:ac:
                    f3:db:81:d7:0e:fa:d6:28:5e:fe:ec:82:71:eb:3f:
                    e2:aa:cd:ee:88:c7:20:07:67:ef:c8:e3:30:eb:23:
                    34:b3:c4:20:e3:d5:8f:88:a9:d7:81:9d:f0:0b:50:
                    5e:50:e1:0a:98:b3:3b:a4:ec:db:4f:11:ba:8b:08:
                    61:b7:fe:27:e9:c9:a4:a5:72:53:32:b5:85:f0:ee:
                    d2:21:67:19:fd:a7:b7:76:f6:43:df:1d:18:74:b2:
                    3c:31:68:93:ab:30:b0:7c:25:81:13:7e:7d:ce:50:
                    b0:10:0a:87:1c:5e:70:85:65:1b:fd:a9:ad:d0:e6:
                    75:72:23:b1:46:ec:b4:4e:62:f9:02:bc:bb:ed:15:
                    fa:06:92:9a:26:19:d2:bf:4a:7f:e4:0b:a3:42:15:
                    39:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:69:59:65:F0:D2:3A:FC:C4:75:8E:D6:DC:F6:6F:6B:6E:02:EB:60
            X509v3 Authority Key Identifier:
                keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130372e302f32342d3234203d3e20323635343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:80:78:bd:61:e7:79:39:85:bd:88:82:64:b3:51:b4:cd:30:
         c7:ee:47:48:a4:f3:a9:72:b3:6f:67:26:e5:54:ef:43:fb:e8:
         f6:50:da:4d:87:a7:37:d5:21:9b:e3:2d:57:42:e3:a9:11:5f:
         ff:c3:cc:71:97:37:8a:93:36:45:bc:5b:87:57:b4:23:ba:fb:
         f5:8d:3a:9f:74:f8:7c:24:73:74:d9:1c:24:8a:f4:9d:61:be:
         77:82:42:3d:59:cd:1a:cd:b7:0d:6a:67:e2:8f:79:25:ee:f1:
         fa:60:5b:c6:3c:14:fb:07:6d:80:03:87:5a:41:0f:90:51:bc:
         b3:d0:1e:f7:df:6b:81:f3:ba:c3:bd:a9:52:f3:5f:ca:00:46:
         66:4c:cd:1a:34:3a:06:9b:14:90:1f:87:e9:a5:08:fd:1a:01:
         2a:de:0c:4c:1d:8e:46:61:27:81:80:f7:9d:29:c1:28:02:1c:
         3c:cd:39:5e:95:4a:55:90:7c:7f:73:b6:32:40:11:d6:ff:39:
         12:38:94:8b:92:6f:8a:81:77:71:1a:dc:8d:7a:9a:94:77:14:
         5c:59:af:23:50:51:ce:1b:db:f8:07:3a:c2:c1:de:83:31:0d:
         40:f6:7d:83:f4:9a:6f:cf:ce:4f:c5:3f:47:dd:4e:b3:be:2c:
         af:c9:50:fb
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMR6WLOL9EdRUbd6pQbFuMzY1C2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI5RUU3RDU2NUMwMjcwOTc1ODUzN0FGRUI3QkI4M0VD
NkFEMkVEMzAeFw0yNTAzMDUxODU1MDlaFw0yNjAzMDQxOTAwMDlaMDMxMTAvBgNV
BAMTKDc4Njk1OTY1RjBEMjNBRkNDNDc1OEVENkRDRjY2RjZCNkUwMkVCNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4o4txrI0RAY8NmLLXCvSEqPjD
3UlAMZ2H1Hls22YzcWn0vtW8SGkFY2Oy9Yw5QDJlAaCWBoDYw0kTSPR5FOxTcJQ8
VRHCP4bXpd3lv6GN5w2hWFUtwcKxDIG+MdN3W42kVwl7Ut+BrPPbgdcO+tYoXv7s
gnHrP+Kqze6IxyAHZ+/I4zDrIzSzxCDj1Y+IqdeBnfALUF5Q4QqYszuk7NtPEbqL
CGG3/ifpyaSlclMytYXw7tIhZxn9p7d29kPfHRh0sjwxaJOrMLB8JYETfn3OULAQ
CoccXnCFZRv9qa3Q5nVyI7FG7LROYvkCvLvtFfoGkpomGdK/Sn/kC6NCFTmXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUeGlZZfDSOvzEdY7W3PZva24C62AwHwYDVR0j
BBgwFoAUq57n1WXAJwl1hTev63u4PsatLtMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlNhcHluV0todW1HTmdIZkVHRFk3SjZDRW9udU54WHp5SEhhQ3ZFdkNj
dVkvMS9BQjlFRTdENTY1QzAyNzA5NzU4NTM3QUZFQjdCQjgzRUM2QUQyRUQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCOUVFN0Q1NjVDMDI3MDk3
NTg1MzdBRkVCN0JCODNFQzZBRDJFRDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJTYXB5bldLaHVtR05nSGZFR0RZN0o2Q0VvbnVOeFh6eUhIYUN2RXZDY3VZLzEv
MzEzNjM4MmUzMTM5MzcyZTMxMzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjFazANBgkqhkiG9w0BAQsFAAOCAQEAqYB4
vWHneTmFvYiCZLNRtM0wx+5HSKTzqXKzb2cm5VTvQ/vo9lDaTYenN9Uhm+MtV0Lj
qRFf/8PMcZc3ipM2Rbxbh1e0I7r79Y06n3T4fCRzdNkcJIr0nWG+d4JCPVnNGs23
DWpn4o95Je7x+mBbxjwU+wdtgAOHWkEPkFG8s9Ae999rgfO6w72pUvNfygBGZkzN
GjQ6BpsUkB+H6aUI/RoBKt4MTB2ORmEngYD3nSnBKAIcPM05XpVKVZB8f3O2MkAR
1v85EjiUi5JvioF3cRrcjXqalHcUXFmvI1BRzhvb+Ac6wsHegzENQPZ9g/Sab8/O
T8U/R91Os74sr8lQ+w==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:41:57 2025 by rpki-client