Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32322d3232203d3e20323632323936.roa
File:                     3137302e38312e302e302f32322d3232203d3e20323632323936.roa (raw, json)
Hash identifier:          nZXxQz82S99gNOf1PA3HTMEyoCnJ5LtTdzpAJ0zvFcE=
Subject key identifier:   25:FB:8E:21:A4:64:B5:06:5E:06:0E:2F:1F:16:AC:01:78:02:3C:B9
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       51A05575678C6D04EEF9F1F1B9956B43B786828D
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32322d3232203d3e20323632323936.roa
Signing time:             Mon 31 Mar 2025 17:57:30 +0000
ROA not before:           Mon 31 Mar 2025 17:52:30 +0000
ROA not after:            Mon 30 Mar 2026 17:57:30 +0000
asID:                     262296
IP address blocks:        170.81.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 22:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a0:55:75:67:8c:6d:04:ee:f9:f1:f1:b9:95:6b:43:b7:86:82:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar 31 17:52:30 2025 GMT
            Not After : Mar 30 17:57:30 2026 GMT
        Subject: CN=25FB8E21A464B5065E060E2F1F16AC0178023CB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:14:e5:0e:16:d5:cd:31:1f:64:ec:63:ca:fe:
                    d0:92:d7:dd:1a:eb:2c:76:a0:f4:63:63:20:24:13:
                    c5:42:fa:3a:ec:23:2e:7d:79:e6:a8:7e:78:e8:5a:
                    63:06:84:a0:bb:80:26:e6:a7:5a:87:7d:f7:82:cf:
                    94:66:5a:3b:64:c9:7b:87:47:20:76:0d:f2:1f:50:
                    60:33:b6:be:63:c0:b9:9f:9e:80:34:21:61:35:84:
                    c2:4b:14:12:4d:4d:81:93:2c:4a:df:c9:db:93:ac:
                    ae:c3:5b:a1:d8:2a:07:8e:55:51:43:45:b5:62:de:
                    8e:70:ff:b1:38:1c:2f:2e:87:6a:8b:6e:79:2d:53:
                    b0:d3:f8:2d:3b:a3:7e:3e:a2:f7:5c:37:0c:99:6e:
                    aa:01:e1:c3:b8:a0:f0:41:7a:4a:25:44:57:52:78:
                    44:8f:e3:25:cd:6c:85:63:5b:56:39:42:42:fd:2f:
                    ab:7f:a0:0a:c5:5a:7c:91:3f:b0:58:08:04:9f:78:
                    84:14:17:06:13:cd:f3:69:1b:86:98:36:00:e7:51:
                    87:9d:06:c5:f8:63:6f:08:d3:69:d1:82:a7:7c:76:
                    ab:24:ee:e5:c6:9d:d0:65:91:45:0f:b7:0e:c4:a0:
                    5e:a9:bc:d3:ec:f0:db:20:26:c0:01:7f:30:e3:1f:
                    0a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FB:8E:21:A4:64:B5:06:5E:06:0E:2F:1F:16:AC:01:78:02:3C:B9
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32322d3232203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e1:7a:56:c2:20:df:81:9d:35:13:44:0b:a1:06:8c:65:75:e2:
         99:1c:6c:08:75:7f:b3:ab:d6:b9:40:17:50:32:29:dd:ae:5a:
         95:54:43:f8:34:2b:df:01:32:50:26:97:95:86:df:ac:6c:9c:
         3f:d2:98:25:31:d0:8e:6a:af:63:64:ca:d6:8a:e1:63:57:50:
         08:6d:92:2f:00:f8:e1:c5:ab:0e:54:5e:03:3e:73:60:63:a0:
         94:5b:93:bc:ec:03:3c:0d:63:69:25:87:0c:fb:77:6b:8a:43:
         10:91:4a:ed:27:de:3c:c4:2a:53:1b:34:e3:7a:be:91:fe:ab:
         8e:8b:44:47:8a:84:23:85:c4:bc:8f:2b:84:03:57:97:56:f1:
         c2:4c:0b:b4:4c:ec:1e:a0:33:02:77:fb:3a:0a:e5:5e:a5:bd:
         6f:66:21:ea:a9:39:85:e4:11:de:0c:49:69:de:98:2a:61:6e:
         be:b8:2f:96:d9:b4:54:8a:6c:d8:c9:b1:5a:d4:aa:a9:15:9c:
         2d:38:3f:44:26:d1:b2:35:01:aa:0d:6d:cd:dd:4d:18:c5:34:
         aa:8f:76:59:62:da:4f:5b:e5:22:ee:c7:88:b2:4f:79:79:7a:
         95:27:92:68:b8:3c:64:89:72:ff:38:5c:7e:96:73:78:11:c2:
         5b:b4:28:c8
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUUaBVdWeMbQTu+fHxuZVrQ7eGgo0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEzMzJFNEJDRTcxMUFBOEI5QTgwRkM2M0NGODIzREZC
NEYwQjk5MDAeFw0yNTAzMzExNzUyMzBaFw0yNjAzMzAxNzU3MzBaMDMxMTAvBgNV
BAMTKDI1RkI4RTIxQTQ2NEI1MDY1RTA2MEUyRjFGMTZBQzAxNzgwMjNDQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcFOUOFtXNMR9k7GPK/tCS190a
6yx2oPRjYyAkE8VC+jrsIy59eeaofnjoWmMGhKC7gCbmp1qHffeCz5RmWjtkyXuH
RyB2DfIfUGAztr5jwLmfnoA0IWE1hMJLFBJNTYGTLErfyduTrK7DW6HYKgeOVVFD
RbVi3o5w/7E4HC8uh2qLbnktU7DT+C07o34+ovdcNwyZbqoB4cO4oPBBekolRFdS
eESP4yXNbIVjW1Y5QkL9L6t/oArFWnyRP7BYCASfeIQUFwYTzfNpG4aYNgDnUYed
BsX4Y28I02nRgqd8dqsk7uXGndBlkUUPtw7EoF6pvNPs8NsgJsABfzDjHwoDAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUJfuOIaRktQZeBg4vHxasAXgCPLkwHwYDVR0j
BBgwFoAUajMuS85xGqi5qA/GPPgj37TwuZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM05NNm55eVpEUldSUjcxSjJjeHg2eFJzVlh5MktqMWtBR1k2b0NnZ0xp
eTcvMC82QTMzMkU0QkNFNzExQUE4QjlBODBGQzYzQ0Y4MjNERkI0RjBCOTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBMzMyRTRCQ0U3MTFBQThC
OUE4MEZDNjNDRjgyM0RGQjRGMEI5OTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNOTTZueXlaRFJXUlI3MUoyY3h4NnhSc1ZYeTJLajFrQUdZNm9DZ2dMaXk3LzAv
MzEzNzMwMmUzODMxMmUzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzMjMy
MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqpRADANBgkqhkiG9w0BAQsFAAOCAQEA4XpWwiDfgZ01
E0QLoQaMZXXimRxsCHV/s6vWuUAXUDIp3a5alVRD+DQr3wEyUCaXlYbfrGycP9KY
JTHQjmqvY2TK1orhY1dQCG2SLwD44cWrDlReAz5zYGOglFuTvOwDPA1jaSWHDPt3
a4pDEJFK7SfePMQqUxs043q+kf6rjotER4qEI4XEvI8rhANXl1bxwkwLtEzsHqAz
Anf7OgrlXqW9b2Yh6qk5heQR3gxJad6YKmFuvrgvltm0VIps2MmxWtSqqRWcLTg/
RCbRsjUBqg1tzd1NGMU0qo92WWLaT1vlIu7HiLJPeXl6lSeSaLg8ZIly/zhcfpZz
eBHCW7QoyA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:08:57 2025 by rpki-client