Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3139302e3130392e38302e302f32322d3234203d3e203532393133.roa
File:                     3139302e3130392e38302e302f32322d3234203d3e203532393133.roa (raw, json)
Hash identifier:          cnXFFjteLwxFJzW5tJDRUpxoZcspHKMllIxuDdVkNFI=
Subject key identifier:   AE:57:C6:E6:88:4B:B3:25:16:5B:06:5C:03:97:96:63:29:6C:CE:28
Certificate issuer:       /CN=8204A8F62764E655E183BB09417B0875F11B3A7D
Certificate serial:       5B03282190BCF9940F3897AEE8BE4F40FC3FFCE7
Authority key identifier: 82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3139302e3130392e38302e302f32322d3234203d3e203532393133.roa
Signing time:             Thu 06 Mar 2025 10:06:42 +0000
ROA not before:           Thu 06 Mar 2025 10:01:42 +0000
ROA not after:            Thu 05 Mar 2026 10:06:42 +0000
asID:                     52913
IP address blocks:        190.109.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 14:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:03:28:21:90:bc:f9:94:0f:38:97:ae:e8:be:4f:40:fc:3f:fc:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8204A8F62764E655E183BB09417B0875F11B3A7D
        Validity
            Not Before: Mar  6 10:01:42 2025 GMT
            Not After : Mar  5 10:06:42 2026 GMT
        Subject: CN=AE57C6E6884BB325165B065C03979663296CCE28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d4:90:6f:f1:cf:db:7f:ae:2c:5d:2f:ca:c2:
                    0e:69:da:5b:ef:a9:c4:26:06:29:cc:ba:37:c0:3c:
                    dc:18:84:14:bd:37:55:8a:6d:1b:db:d5:a7:f6:38:
                    47:b7:26:6d:30:37:f0:a3:ad:ff:e7:88:a8:50:33:
                    83:d9:e2:90:f5:82:04:64:f1:ff:e3:5d:02:ef:48:
                    9c:2a:f1:4b:2f:19:9f:cc:ac:76:7d:56:9a:26:5a:
                    d8:35:89:80:6d:b1:c3:4d:94:5a:39:37:1f:ff:28:
                    b6:93:bb:de:2a:8c:e0:2c:bd:81:dd:bc:11:92:f8:
                    0c:24:6b:ac:c9:1e:c5:4a:b4:c1:11:57:1e:4d:c4:
                    f1:28:a4:ac:50:a4:43:dc:ab:a4:fd:10:d1:bf:5a:
                    28:a6:23:73:40:f0:c4:7a:a9:06:c5:d9:91:06:0d:
                    6b:4a:ec:77:42:05:d8:22:30:3c:35:5f:73:7a:54:
                    95:67:05:67:d3:ed:dc:e3:50:73:21:4a:7e:4f:f7:
                    37:ff:03:6f:53:e6:47:4d:d5:40:ab:38:0c:72:1e:
                    14:70:15:1d:0e:5f:67:e3:1f:52:91:71:56:08:07:
                    da:a6:8b:f5:1f:5a:d5:0e:33:fa:9f:cc:1a:9e:77:
                    f1:35:3d:11:84:54:16:c1:da:5f:6a:5a:5b:2d:44:
                    61:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:57:C6:E6:88:4B:B3:25:16:5B:06:5C:03:97:96:63:29:6C:CE:28
            X509v3 Authority Key Identifier:
                keyid:82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3139302e3130392e38302e302f32322d3234203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:6c:50:6f:d7:ca:b9:28:d6:75:94:42:af:51:20:fc:36:00:
         d4:a3:b6:11:6b:48:6c:99:26:99:b8:32:4c:bf:b1:fe:9c:08:
         e5:04:a3:00:6f:c8:76:07:d4:0f:dd:78:b5:6a:bb:bd:15:94:
         87:19:9a:46:3a:b1:56:8c:f1:ec:95:f2:fb:6a:3e:f9:ca:d3:
         3d:db:69:99:4e:92:d9:79:16:f8:c2:a7:b9:9b:18:84:e3:46:
         58:ae:5b:18:56:38:f1:ec:7b:41:31:c4:d6:a7:08:bd:eb:0b:
         ec:41:30:4a:94:26:66:2e:28:17:36:c3:55:ea:eb:12:43:4c:
         14:c2:24:b6:4a:c3:61:bf:32:10:a6:fb:57:e1:19:c5:09:ae:
         8a:cd:ac:e1:5a:06:be:dd:ca:23:26:95:56:a1:d6:60:f1:63:
         ac:02:42:f2:cc:aa:43:24:f0:0c:de:8c:c8:1c:c8:c3:a1:29:
         06:8a:44:60:1b:de:4c:5f:fd:f7:82:3d:88:18:e5:4d:24:c9:
         44:c1:40:d3:f2:2a:ef:f4:83:80:a6:24:d8:cb:cf:f2:fb:cc:
         93:70:64:04:91:f1:7e:09:06:b1:8e:e6:74:bc:d4:11:e2:83:
         b2:9f:e4:c9:3f:7e:1b:d8:5b:36:12:07:0c:42:0f:46:c9:72:
         c7:94:93:ab
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWwMoIZC8+ZQPOJeu6L5PQPw//OcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIwNEE4RjYyNzY0RTY1NUUxODNCQjA5NDE3QjA4NzVG
MTFCM0E3RDAeFw0yNTAzMDYxMDAxNDJaFw0yNjAzMDUxMDA2NDJaMDMxMTAvBgNV
BAMTKEFFNTdDNkU2ODg0QkIzMjUxNjVCMDY1QzAzOTc5NjYzMjk2Q0NFMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM1JBv8c/bf64sXS/Kwg5p2lvv
qcQmBinMujfAPNwYhBS9N1WKbRvb1af2OEe3Jm0wN/Cjrf/niKhQM4PZ4pD1ggRk
8f/jXQLvSJwq8UsvGZ/MrHZ9VpomWtg1iYBtscNNlFo5Nx//KLaTu94qjOAsvYHd
vBGS+Awka6zJHsVKtMERVx5NxPEopKxQpEPcq6T9ENG/WiimI3NA8MR6qQbF2ZEG
DWtK7HdCBdgiMDw1X3N6VJVnBWfT7dzjUHMhSn5P9zf/A29T5kdN1UCrOAxyHhRw
FR0OX2fjH1KRcVYIB9qmi/UfWtUOM/qfzBqed/E1PRGEVBbB2l9qWlstRGGnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrlfG5ohLsyUWWwZcA5eWYylszigwHwYDVR0j
BBgwFoAUggSo9idk5lXhg7sJQXsIdfEbOn0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1NWd1JheEQzU3dacEV0dUxkRk1MY056d2FDM0ZCdXJXVUFOZFc3bTRM
TnIvMS84MjA0QThGNjI3NjRFNjU1RTE4M0JCMDk0MTdCMDg3NUYxMUIzQTdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgyMDRBOEY2Mjc2NEU2NTVF
MTgzQkIwOTQxN0IwODc1RjExQjNBN0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNTVndSYXhEM1N3WnBFdHVMZEZNTGNOendhQzNGQnVyV1VBTmRXN200TE5yLzEv
MzEzOTMwMmUzMTMwMzkyZTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzkzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvm1QMA0GCSqGSIb3DQEBCwUAA4IBAQB4bFBv18q5
KNZ1lEKvUSD8NgDUo7YRa0hsmSaZuDJMv7H+nAjlBKMAb8h2B9QP3Xi1aru9FZSH
GZpGOrFWjPHslfL7aj75ytM922mZTpLZeRb4wqe5mxiE40ZYrlsYVjjx7HtBMcTW
pwi96wvsQTBKlCZmLigXNsNV6usSQ0wUwiS2SsNhvzIQpvtX4RnFCa6KzazhWga+
3cojJpVWodZg8WOsAkLyzKpDJPAM3ozIHMjDoSkGikRgG95MX/33gj2IGOVNJMlE
wUDT8irv9IOApiTYy8/y+8yTcGQEkfF+CQaxjuZ0vNQR4oOyn+TJP34b2Fs2EgcM
Qg9GyXLHlJOr
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:11:53 2025 by rpki-client