Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e342e302f32322d3234203d3e20323632353530.roa
File:                     3136382e3139372e342e302f32322d3234203d3e20323632353530.roa (raw, json)
Hash identifier:          tR4QBSvbHHoAylhPaIKf94jCC/1xpPHyXCjhdb+kYPg=
Subject key identifier:   79:BD:A2:8D:22:91:57:8B:D9:11:EF:5B:EA:B4:4A:12:56:06:DE:3D
Certificate issuer:       /CN=9B54308B9152DD415CBD122B076FA6C8D2B993B5
Certificate serial:       558CCF11ED8FADDC8F60F8FCD3AB23FE5F8D1CF8
Authority key identifier: 9B:54:30:8B:91:52:DD:41:5C:BD:12:2B:07:6F:A6:C8:D2:B9:93:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B54308B9152DD415CBD122B076FA6C8D2B993B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e342e302f32322d3234203d3e20323632353530.roa
Signing time:             Tue 22 Jul 2025 14:41:17 +0000
ROA not before:           Tue 22 Jul 2025 14:36:17 +0000
ROA not after:            Tue 21 Jul 2026 14:41:17 +0000
asID:                     262550
IP address blocks:        168.197.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/9B54308B9152DD415CBD122B076FA6C8D2B993B5.crl
                          rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/9B54308B9152DD415CBD122B076FA6C8D2B993B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B54308B9152DD415CBD122B076FA6C8D2B993B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 23:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8c:cf:11:ed:8f:ad:dc:8f:60:f8:fc:d3:ab:23:fe:5f:8d:1c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B54308B9152DD415CBD122B076FA6C8D2B993B5
        Validity
            Not Before: Jul 22 14:36:17 2025 GMT
            Not After : Jul 21 14:41:17 2026 GMT
        Subject: CN=79BDA28D2291578BD911EF5BEAB44A125606DE3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:1f:cf:db:46:9f:63:c3:02:8e:fc:92:45:
                    02:21:d4:66:c2:8d:e4:fa:4e:53:23:e1:62:e9:36:
                    77:9d:90:c6:31:a9:a0:ce:2d:1c:53:78:f8:b1:47:
                    0c:f8:78:27:89:68:e2:6f:22:85:df:c5:34:98:50:
                    c2:77:d2:6c:e0:21:6b:7d:42:f4:d0:bb:70:31:e6:
                    fc:e6:d1:7f:9d:34:56:36:7b:e7:3b:2d:18:dc:57:
                    16:98:73:ce:ff:db:47:b8:0b:80:5d:78:65:50:47:
                    2e:ab:a3:fa:8a:50:7d:9f:e1:80:d1:1b:07:80:b4:
                    1a:f4:3c:6c:b4:78:0c:44:df:9e:bf:4e:85:e8:28:
                    00:59:1b:0b:81:dc:bb:83:01:13:c4:f3:81:2b:a8:
                    dd:1b:2d:ea:37:1c:d1:bc:34:87:9c:24:ff:7d:74:
                    32:a0:bc:dc:e4:ab:7c:f8:a9:dc:69:dc:ff:d9:c7:
                    5a:9f:2e:d5:28:5f:bd:e4:05:8e:e5:07:b9:19:d0:
                    57:df:d2:0c:43:4c:5a:75:43:2c:10:02:58:89:a5:
                    2d:fd:29:54:21:e4:93:46:2f:6c:e1:3c:cd:59:23:
                    11:53:da:dc:e9:5e:ae:9d:d1:7a:91:4b:ab:a3:65:
                    59:a9:a0:e1:3a:3c:0b:36:9d:80:49:6a:99:7e:f0:
                    98:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BD:A2:8D:22:91:57:8B:D9:11:EF:5B:EA:B4:4A:12:56:06:DE:3D
            X509v3 Authority Key Identifier:
                keyid:9B:54:30:8B:91:52:DD:41:5C:BD:12:2B:07:6F:A6:C8:D2:B9:93:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/9B54308B9152DD415CBD122B076FA6C8D2B993B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B54308B9152DD415CBD122B076FA6C8D2B993B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e342e302f32322d3234203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:c0:91:63:f9:97:4b:0b:55:44:fb:8a:cb:62:79:70:6f:7f:
         e9:57:83:0c:b9:1c:82:99:73:89:db:7a:66:1f:20:de:09:f5:
         45:c3:b8:b6:19:f7:f0:9a:b3:97:32:26:98:cb:bb:94:c0:12:
         8f:48:5b:3e:82:c9:5f:65:59:bf:6b:56:d2:18:35:2d:25:36:
         ca:ec:01:e9:8f:f3:85:48:26:e4:91:8b:7a:04:01:f6:4d:68:
         eb:d8:e6:b6:3e:a7:ec:59:92:bf:ed:47:88:f7:56:4e:c8:f2:
         09:01:ed:93:ef:bd:30:9b:e6:cd:75:fd:11:94:1c:e4:76:ad:
         da:8d:97:11:98:92:89:70:5f:d4:e0:d6:0e:1f:70:7a:d6:c7:
         31:d5:ed:e1:d8:05:0c:0b:a0:b9:98:05:56:da:3d:66:fb:9b:
         6a:fa:a7:28:fe:3a:c4:49:db:e4:e9:3e:da:15:dc:d8:01:7f:
         1e:06:19:71:18:35:f8:b4:e1:f7:52:c8:2e:82:2b:ee:03:1f:
         45:4c:2f:5b:a6:89:cb:c5:6a:dd:c9:c0:b9:3a:84:58:4e:4a:
         aa:5f:51:0d:cb:d8:d6:35:04:c0:5d:00:2a:9f:2f:9a:1b:21:
         25:f3:9c:c3:51:8d:e0:9f:95:34:96:ae:9b:67:ae:be:fa:a3:
         01:06:84:4e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVYzPEe2PrdyPYPj806sj/l+NHPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI1NDMwOEI5MTUyREQ0MTVDQkQxMjJCMDc2RkE2QzhE
MkI5OTNCNTAeFw0yNTA3MjIxNDM2MTdaFw0yNjA3MjExNDQxMTdaMDMxMTAvBgNV
BAMTKDc5QkRBMjhEMjI5MTU3OEJEOTExRUY1QkVBQjQ0QTEyNTYwNkRFM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJQx/P20afY8MCjvySRQIh1GbC
jeT6TlMj4WLpNnedkMYxqaDOLRxTePixRwz4eCeJaOJvIoXfxTSYUMJ30mzgIWt9
QvTQu3Ax5vzm0X+dNFY2e+c7LRjcVxaYc87/20e4C4BdeGVQRy6ro/qKUH2f4YDR
GweAtBr0PGy0eAxE356/ToXoKABZGwuB3LuDARPE84ErqN0bLeo3HNG8NIecJP99
dDKgvNzkq3z4qdxp3P/Zx1qfLtUoX73kBY7lB7kZ0Fff0gxDTFp1QywQAliJpS39
KVQh5JNGL2zhPM1ZIxFT2tzpXq6d0XqRS6ujZVmpoOE6PAs2nYBJapl+8JgVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUeb2ijSKRV4vZEe9b6rRKElYG3j0wHwYDVR0j
BBgwFoAUm1Qwi5FS3UFcvRIrB2+myNK5k7UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVTcGZqUUZvbUpROGVGaFJRbXJBaFUxQ1M3UGVKc1hNV2tIUlRic1Vv
emQvMC85QjU0MzA4QjkxNTJERDQxNUNCRDEyMkIwNzZGQTZDOEQyQjk5M0I1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNTQzMDhCOTE1MkRENDE1
Q0JEMTIyQjA3NkZBNkM4RDJCOTkzQjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFU3BmalFGb21KUThlRmhSUW1yQWhVMUNTN1BlSnNYTVdrSFJUYnNVb3pkLzAv
MzEzNjM4MmUzMTM5MzcyZTM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzUzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqMUEMA0GCSqGSIb3DQEBCwUAA4IBAQAWwJFj+ZdL
C1VE+4rLYnlwb3/pV4MMuRyCmXOJ23pmHyDeCfVFw7i2GffwmrOXMiaYy7uUwBKP
SFs+gslfZVm/a1bSGDUtJTbK7AHpj/OFSCbkkYt6BAH2TWjr2Oa2PqfsWZK/7UeI
91ZOyPIJAe2T770wm+bNdf0RlBzkdq3ajZcRmJKJcF/U4NYOH3B61scx1e3h2AUM
C6C5mAVW2j1m+5tq+qco/jrESdvk6T7aFdzYAX8eBhlxGDX4tOH3UsgugivuAx9F
TC9bponLxWrdycC5OoRYTkqqX1ENy9jWNQTAXQAqny+aGyEl85zDUY3gn5U0lq6b
Z66++qMBBoRO
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:13:18 2025 by rpki-client