Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/3137302e38322e3235352e302f32342d3234203d3e20323636343630.roa
File:                     3137302e38322e3235352e302f32342d3234203d3e20323636343630.roa (raw, json)
Hash identifier:          KAfVCTxxsx0v4fTVoerACmj2dga84snX34zpTtNmqN4=
Subject key identifier:   B3:99:08:E0:79:C5:CD:4E:29:6B:1D:F0:09:63:7E:90:34:0A:0E:CA
Certificate issuer:       /CN=E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3
Certificate serial:       1C8A2B448B8EE72E31EB39838CF64636B23DE290
Authority key identifier: E7:96:4E:5B:F1:FF:4D:49:D0:A3:6F:CF:2B:31:8E:B7:A6:4A:26:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/3137302e38322e3235352e302f32342d3234203d3e20323636343630.roa
Signing time:             Sat 03 May 2025 12:45:10 +0000
ROA not before:           Sat 03 May 2025 12:40:10 +0000
ROA not after:            Sat 02 May 2026 12:45:10 +0000
asID:                     266460
IP address blocks:        170.82.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.crl
                          rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 18:43:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8a:2b:44:8b:8e:e7:2e:31:eb:39:83:8c:f6:46:36:b2:3d:e2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3
        Validity
            Not Before: May  3 12:40:10 2025 GMT
            Not After : May  2 12:45:10 2026 GMT
        Subject: CN=B39908E079C5CD4E296B1DF009637E90340A0ECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:bd:30:55:d2:11:76:00:23:d5:f6:8c:8f:
                    7a:9d:a7:c3:1a:39:32:a4:b8:a8:8c:b2:ff:8c:7f:
                    60:00:fc:20:6f:1b:31:c5:2f:2e:d5:ed:c2:7b:af:
                    fa:1c:51:32:0e:88:f3:65:6c:77:40:86:70:5a:22:
                    09:96:72:22:ac:1a:d6:6b:c8:8d:70:c4:f5:1b:e2:
                    f8:80:97:f5:0f:74:41:06:43:d0:d1:ad:24:39:90:
                    55:e7:42:d8:1d:e3:fa:5f:6f:2a:4b:61:6b:8f:ac:
                    a8:e6:b0:c1:9b:31:83:5f:9f:3e:ec:a3:fa:a0:66:
                    cc:67:d9:98:cd:af:66:1d:25:17:03:ca:30:b6:10:
                    99:5f:9f:f1:1c:18:41:ad:9e:a1:7e:e2:74:bd:65:
                    67:f7:51:56:97:6a:ab:77:92:08:ef:c1:7c:c8:e4:
                    18:d2:b2:5b:fa:a9:ab:8f:2d:c8:65:94:34:04:37:
                    94:9a:eb:8e:76:90:86:3e:bb:f6:36:9b:44:ad:68:
                    d8:31:f9:22:b0:0e:f4:26:f1:f2:e6:b0:2b:cc:e0:
                    c2:50:88:34:bf:6a:d6:5a:b3:d7:01:01:84:c5:7a:
                    d6:d1:0c:db:fe:85:3b:af:89:d5:60:ea:4d:e1:d5:
                    cd:63:03:42:ed:e8:37:89:82:d8:b2:94:e9:24:bf:
                    13:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:99:08:E0:79:C5:CD:4E:29:6B:1D:F0:09:63:7E:90:34:0A:0E:CA
            X509v3 Authority Key Identifier:
                keyid:E7:96:4E:5B:F1:FF:4D:49:D0:A3:6F:CF:2B:31:8E:B7:A6:4A:26:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/3137302e38322e3235352e302f32342d3234203d3e20323636343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:a1:62:3d:59:0b:cf:a8:d3:51:b0:7c:3e:42:0e:c4:0d:7f:
         4b:c5:75:14:bc:61:9e:34:49:05:64:e8:77:66:74:ca:fd:43:
         4d:c0:97:71:b3:18:6a:9b:42:54:a9:f1:0a:15:f7:ad:09:d7:
         be:c1:c8:79:d8:f8:b3:1b:7c:b8:9a:47:30:29:a3:3c:11:45:
         cd:32:34:c5:02:97:77:58:20:c1:42:83:83:c4:f0:3f:30:8c:
         b7:94:74:2e:86:18:dc:cb:43:a5:57:69:19:c0:de:a1:94:f5:
         19:80:e3:f6:12:73:6d:63:0a:4f:61:59:ef:2b:06:e2:e6:82:
         26:2d:62:02:b0:4c:65:55:ae:17:93:d6:df:71:69:fd:be:5f:
         c3:dc:83:99:7f:f1:4a:be:6c:71:58:8d:f4:20:ad:b7:15:7c:
         fe:6e:35:06:1b:ab:4d:ac:ed:ca:a1:a8:5b:8c:b5:8c:63:18:
         f8:81:56:f5:5d:1c:53:3a:e0:ef:a9:e9:ad:c0:0b:1f:32:f1:
         5d:8f:33:a4:16:cf:a5:73:86:36:88:1c:7b:71:59:b0:0d:39:
         23:f6:80:92:d2:1c:55:b9:7e:5d:e7:68:f4:13:54:3a:45:9e:
         46:f2:f0:24:ae:fb:80:20:81:ab:4b:d2:2a:68:bd:04:a0:69:
         b0:b9:a8:24
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHIorRIuO5y4x6zmDjPZGNrI94pAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc5NjRFNUJGMUZGNEQ0OUQwQTM2RkNGMkIzMThFQjdB
NjRBMjZBMzAeFw0yNTA1MDMxMjQwMTBaFw0yNjA1MDIxMjQ1MTBaMDMxMTAvBgNV
BAMTKEIzOTkwOEUwNzlDNUNENEUyOTZCMURGMDA5NjM3RTkwMzQwQTBFQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw6b0wVdIRdgAj1faMj3qdp8Ma
OTKkuKiMsv+Mf2AA/CBvGzHFLy7V7cJ7r/ocUTIOiPNlbHdAhnBaIgmWciKsGtZr
yI1wxPUb4viAl/UPdEEGQ9DRrSQ5kFXnQtgd4/pfbypLYWuPrKjmsMGbMYNfnz7s
o/qgZsxn2ZjNr2YdJRcDyjC2EJlfn/EcGEGtnqF+4nS9ZWf3UVaXaqt3kgjvwXzI
5BjSslv6qauPLchllDQEN5Sa6452kIY+u/Y2m0StaNgx+SKwDvQm8fLmsCvM4MJQ
iDS/atZas9cBAYTFetbRDNv+hTuvidVg6k3h1c1jA0Lt6DeJgtiylOkkvxODAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUs5kI4HnFzU4pax3wCWN+kDQKDsowHwYDVR0j
BBgwFoAU55ZOW/H/TUnQo2/PKzGOt6ZKJqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEppUHBjZDRZR1FmRHluaHNQNVN1WDE3UkhVRFZwVGRyZEs2ZmZFckZo
VmUvMi9FNzk2NEU1QkYxRkY0RDQ5RDBBMzZGQ0YyQjMxOEVCN0E2NEEyNkEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3OTY0RTVCRjFGRjRENDlE
MEEzNkZDRjJCMzE4RUI3QTY0QTI2QTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRKaVBwY2Q0WUdRZkR5bmhzUDVTdVgxN1JIVURWcFRkcmRLNmZmRXJGaFZlLzIv
MzEzNzMwMmUzODMyMmUzMjM1MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqUv8wDQYJKoZIhvcNAQELBQADggEBAIqhYj1Z
C8+o01GwfD5CDsQNf0vFdRS8YZ40SQVk6HdmdMr9Q03Al3GzGGqbQlSp8QoV960J
177ByHnY+LMbfLiaRzApozwRRc0yNMUCl3dYIMFCg4PE8D8wjLeUdC6GGNzLQ6VX
aRnA3qGU9RmA4/YSc21jCk9hWe8rBuLmgiYtYgKwTGVVrheT1t9xaf2+X8Pcg5l/
8Uq+bHFYjfQgrbcVfP5uNQYbq02s7cqhqFuMtYxjGPiBVvVdHFM64O+p6a3ACx8y
8V2PM6QWz6VzhjaIHHtxWbANOSP2gJLSHFW5fl3naPQTVDpFnkby8CSu+4AggatL
0ipovQSgabC5qCQ=
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:21:25 2025 by rpki-client