Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233322e302f32342d3234203d3e203631393138.roa
File:                     3137302e3135302e3233322e302f32342d3234203d3e203631393138.roa (raw, json)
Hash identifier:          AsvHTDIt8bd97D4EBid5+twWtPEyG9DgJxL8DuYD6GI=
Subject key identifier:   B2:1F:26:6E:D9:AA:66:7F:3A:5E:0F:B0:7C:03:3B:B3:E9:FB:56:AC
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       7A29D1D65E6461F2E5912E4472EC53D8A1726919
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233322e302f32342d3234203d3e203631393138.roa
Signing time:             Wed 05 Mar 2025 19:00:12 +0000
ROA not before:           Wed 05 Mar 2025 18:55:12 +0000
ROA not after:            Wed 04 Mar 2026 19:00:12 +0000
asID:                     61918
IP address blocks:        170.150.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:29:d1:d6:5e:64:61:f2:e5:91:2e:44:72:ec:53:d8:a1:72:69:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Mar  5 18:55:12 2025 GMT
            Not After : Mar  4 19:00:12 2026 GMT
        Subject: CN=B21F266ED9AA667F3A5E0FB07C033BB3E9FB56AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3c:73:de:d3:fb:fc:38:4e:76:c6:b3:02:c8:
                    95:e9:b3:e9:8f:36:70:52:0b:a9:41:c7:93:4e:74:
                    26:ac:b1:aa:96:31:11:cc:48:9d:94:e2:4e:c2:30:
                    76:37:a5:9c:ca:28:1c:0b:7f:40:73:18:6f:4c:ef:
                    83:50:e1:ca:8a:7b:04:a4:22:81:8e:3c:35:86:91:
                    f0:29:78:d5:c4:78:36:14:63:67:a4:eb:9d:1c:63:
                    04:e9:09:14:47:e3:d0:80:13:52:92:26:4f:ed:f1:
                    0c:9d:e1:b4:5c:0b:0f:5b:d4:f5:c0:f0:26:3f:00:
                    fb:0d:fc:66:d2:e6:11:37:5b:b4:b9:9c:d1:84:3c:
                    ed:2b:d5:b4:f8:9d:61:8b:c7:95:e5:41:ba:bf:ea:
                    4f:b9:83:06:8b:4b:a7:fc:fc:2e:2f:71:b4:58:80:
                    3d:fb:44:2a:c8:7e:db:4a:dc:79:56:31:c2:2f:5c:
                    b3:02:22:03:0a:5a:7a:56:16:d4:16:72:73:c6:be:
                    0f:e1:35:2c:da:43:41:ec:5b:19:18:25:47:c6:57:
                    6f:a9:ac:50:44:61:96:e0:fd:ba:5a:08:f0:91:b4:
                    fc:5e:56:cd:fb:1a:2a:8c:6c:b4:e3:6a:c1:00:98:
                    f8:0f:32:3d:33:16:94:c4:bb:62:ef:84:47:18:14:
                    cd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1F:26:6E:D9:AA:66:7F:3A:5E:0F:B0:7C:03:3B:B3:E9:FB:56:AC
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233322e302f32342d3234203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:29:b5:0a:03:16:ea:bc:32:56:0e:72:1f:20:38:c8:fd:c3:
         1d:23:f2:04:fb:d5:c9:5e:23:78:38:c7:68:a1:6f:c4:78:0f:
         6f:e0:c4:ca:db:7e:59:23:26:95:df:6b:4c:1e:a4:9e:9d:61:
         b5:3b:5b:f7:4c:e2:95:cc:a8:12:d6:97:4b:9b:fa:b0:b5:cb:
         ad:73:ec:cf:42:0b:ea:b0:46:33:52:c7:74:6f:27:6a:49:e8:
         bf:04:89:48:77:0d:cb:a7:4c:54:bd:4d:f5:09:9b:82:f1:aa:
         8a:95:fb:d6:74:f5:bc:81:6b:69:a2:ef:1b:9c:c7:77:dc:71:
         c5:f2:61:dc:5a:a5:4b:d2:52:69:0f:c7:10:fe:10:15:fa:96:
         61:22:93:7a:bd:a4:54:8a:a2:35:42:05:71:b7:95:2f:c1:07:
         43:24:95:97:8c:e8:e8:64:de:68:15:d0:85:75:bd:11:54:ef:
         38:fd:91:54:1c:f6:9b:59:8c:28:90:85:3a:4f:da:51:c7:ea:
         9d:f5:71:bd:bc:b9:be:d5:51:a2:0c:81:ad:38:86:16:c9:2a:
         60:d1:26:98:50:c5:1b:46:e3:55:d4:f3:ab:40:7b:9a:1a:7f:
         ed:42:4a:b0:52:ad:9f:a7:69:c0:21:79:c1:d1:17:c1:9d:68:
         76:1b:89:cd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeinR1l5kYfLlkS5EcuxT2KFyaRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYzNkVDMzM0ODcwOTA4QTAxQ0JGN0I1OUJDQjA1QTNB
NTZCM0QxNDAeFw0yNTAzMDUxODU1MTJaFw0yNjAzMDQxOTAwMTJaMDMxMTAvBgNV
BAMTKEIyMUYyNjZFRDlBQTY2N0YzQTVFMEZCMDdDMDMzQkIzRTlGQjU2QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6PHPe0/v8OE52xrMCyJXps+mP
NnBSC6lBx5NOdCassaqWMRHMSJ2U4k7CMHY3pZzKKBwLf0BzGG9M74NQ4cqKewSk
IoGOPDWGkfApeNXEeDYUY2ek650cYwTpCRRH49CAE1KSJk/t8Qyd4bRcCw9b1PXA
8CY/APsN/GbS5hE3W7S5nNGEPO0r1bT4nWGLx5XlQbq/6k+5gwaLS6f8/C4vcbRY
gD37RCrIfttK3HlWMcIvXLMCIgMKWnpWFtQWcnPGvg/hNSzaQ0HsWxkYJUfGV2+p
rFBEYZbg/bpaCPCRtPxeVs37GiqMbLTjasEAmPgPMj0zFpTEu2LvhEcYFM0tAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsh8mbtmqZn86Xg+wfAM7s+n7VqwwHwYDVR0j
BBgwFoAUbzbsM0hwkIoBy/e1m8sFo6VrPRQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdKcENUUW52NmhDeEZzSzg4NzVwM3ZBQ1F6NjdBTUwxRGFRM1Z3ZFFj
NHovMS82RjM2RUMzMzQ4NzA5MDhBMDFDQkY3QjU5QkNCMDVBM0E1NkIzRDE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGMzZFQzMzNDg3MDkwOEEw
MUNCRjdCNTlCQ0IwNUEzQTU2QjNEMTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHSnBDVFFudjZoQ3hGc0s4ODc1cDN2QUNRejY3QU1MMURhUTNWd2RRYzR6LzEv
MzEzNzMwMmUzMTM1MzAyZTMyMzMzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzOTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqlugwDQYJKoZIhvcNAQELBQADggEBAEIptQoD
Fuq8MlYOch8gOMj9wx0j8gT71cleI3g4x2ihb8R4D2/gxMrbflkjJpXfa0wepJ6d
YbU7W/dM4pXMqBLWl0ub+rC1y61z7M9CC+qwRjNSx3RvJ2pJ6L8EiUh3DcunTFS9
TfUJm4LxqoqV+9Z09byBa2mi7xucx3fcccXyYdxapUvSUmkPxxD+EBX6lmEik3q9
pFSKojVCBXG3lS/BB0MklZeM6Ohk3mgV0IV1vRFU7zj9kVQc9ptZjCiQhTpP2lHH
6p31cb28ub7VUaIMga04hhbJKmDRJphQxRtG41XU86tAe5oaf+1CSrBSrZ+nacAh
ecHRF8GdaHYbic0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 20:39:44 2025 by rpki-client