Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS265427.roa
File:                     AS265427.roa (raw, json)
Hash identifier:          3o6Foyey2OhBcKImsu3a1cembjLKm+QvJwD5fAWVkW0=
Subject key identifier:   F0:71:DA:57:84:71:5A:DB:97:E1:87:9F:42:11:26:98:3D:EE:E7:CD
Certificate issuer:       /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial:       27A51C5CF646FBAAEF04B928084B2DFC62D5D2B3
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS265427.roa
Signing time:             Thu 20 Mar 2025 14:24:07 +0000
ROA not before:           Thu 20 Mar 2025 14:19:07 +0000
ROA not after:            Thu 19 Mar 2026 14:24:07 +0000
asID:                     265427
IP address blocks:        168.195.192.0/22 maxlen: 24
                          2804:33f4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
                          rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a5:1c:5c:f6:46:fb:aa:ef:04:b9:28:08:4b:2d:fc:62:d5:d2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
        Validity
            Not Before: Mar 20 14:19:07 2025 GMT
            Not After : Mar 19 14:24:07 2026 GMT
        Subject: CN=F071DA5784715ADB97E1879F421126983DEEE7CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cc:db:75:39:e3:91:c5:ba:cf:50:b3:50:32:
                    2f:3b:a8:ad:fd:7c:86:4b:1b:b8:5e:b3:22:c0:22:
                    f5:92:ca:26:96:fb:67:56:56:07:47:70:1d:02:16:
                    0e:15:07:2d:df:cb:63:ee:06:9e:f3:52:0c:61:d2:
                    b5:92:a0:82:08:9f:7d:b2:f1:08:a8:08:d2:fd:15:
                    eb:12:f2:a6:ff:65:fb:ae:96:11:a3:ce:ad:f5:2b:
                    1a:99:eb:de:60:d6:4d:d8:be:e3:65:49:27:c1:e6:
                    c1:19:f3:79:08:6e:43:d3:8b:eb:ee:36:c9:ed:90:
                    2b:a2:f9:31:7c:52:86:37:8e:d2:c2:68:5a:03:10:
                    bd:7d:2c:63:44:3b:22:db:b2:3e:19:99:99:47:b4:
                    4f:92:de:bb:af:5e:1b:76:de:77:1f:98:a5:79:91:
                    d7:4a:3b:98:6f:bd:f5:e1:c3:86:95:89:a7:f6:75:
                    d5:12:0f:99:99:95:c2:02:0a:ec:c2:e9:e5:80:33:
                    71:fd:38:b3:cf:04:d8:f6:a4:b2:a5:88:b8:be:5b:
                    b8:e7:e4:9e:74:90:d6:c9:6e:fa:1c:1b:5a:60:06:
                    00:cf:30:49:4f:5b:df:a7:5d:35:26:71:25:c8:9b:
                    ae:61:c9:dc:44:3c:8c:62:0b:cd:11:0d:4e:3f:fe:
                    c4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:71:DA:57:84:71:5A:DB:97:E1:87:9F:42:11:26:98:3D:EE:E7:CD
            X509v3 Authority Key Identifier:
                keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS265427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.192.0/22
                IPv6:
                  2804:33f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:99:99:59:99:44:e3:46:ee:a5:ae:a3:88:67:90:38:e6:33:
         7d:9f:a7:cd:fe:ca:f4:52:73:06:6d:86:9c:12:a1:45:33:25:
         31:25:71:bd:63:da:d1:54:a8:35:87:91:01:b9:83:9f:45:a6:
         f4:a6:62:a9:5a:3e:a4:6e:2e:4a:c3:62:2b:05:26:d3:62:a8:
         f5:c3:50:7f:7f:23:d3:56:41:72:99:71:1f:da:3e:94:ca:60:
         c6:a7:77:cf:22:4f:6a:c5:4d:4d:e3:c5:4f:e4:09:41:92:d1:
         d2:b3:29:5a:41:f4:38:ca:c1:cf:82:cb:66:04:35:77:41:f5:
         a0:84:d9:4c:6c:16:7c:f2:52:09:20:13:d7:14:42:f4:34:99:
         df:fc:27:57:0b:22:80:62:52:de:4c:eb:8c:cb:5c:ef:13:e2:
         1f:19:9b:4b:9d:49:4a:73:12:9c:36:ee:6a:d9:14:4a:53:c8:
         02:92:8c:c5:c1:ce:89:86:19:07:df:4d:03:5d:41:3d:26:3e:
         0f:9b:40:a2:ec:24:80:1a:b3:e8:1c:d1:18:b0:f6:d3:a9:92:
         66:cc:9a:fc:4c:90:9c:97:99:2e:0b:b0:f0:08:13:6d:49:c3:
         4d:40:2f:32:71:ba:cd:8f:32:7e:3d:d9:7f:6f:31:60:4a:8e:
         ae:df:b2:89
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUJ6UcXPZG+6rvBLkoCEst/GLV0rMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJFOTE0NzVFQjZDODZBQTQwRjNBMTNBQTBDM0MzOERC
OTYyN0JDRDAeFw0yNTAzMjAxNDE5MDdaFw0yNjAzMTkxNDI0MDdaMDMxMTAvBgNV
BAMTKEYwNzFEQTU3ODQ3MTVBREI5N0UxODc5RjQyMTEyNjk4M0RFRUU3Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQzNt1OeORxbrPULNQMi87qK39
fIZLG7hesyLAIvWSyiaW+2dWVgdHcB0CFg4VBy3fy2PuBp7zUgxh0rWSoIIIn32y
8QioCNL9FesS8qb/ZfuulhGjzq31KxqZ695g1k3YvuNlSSfB5sEZ83kIbkPTi+vu
NsntkCui+TF8UoY3jtLCaFoDEL19LGNEOyLbsj4ZmZlHtE+S3ruvXht23ncfmKV5
kddKO5hvvfXhw4aViaf2ddUSD5mZlcICCuzC6eWAM3H9OLPPBNj2pLKliLi+W7jn
5J50kNbJbvocG1pgBgDPMElPW9+nXTUmcSXIm65hydxEPIxiC80RDU4//sRFAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQU8HHaV4RxWtuX4YefQhEmmD3u580wHwYDVR0j
BBgwFoAUW+kUdetshqpA86E6oMPDjblie80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW
Nm8vMS81QkU5MTQ3NUVCNkM4NkFBNDBGM0ExM0FBMEMzQzM4REI5NjI3QkNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRTkxNDc1RUI2Qzg2QUE0
MEYzQTEzQUEwQzNDMzhEQjk2MjdCQ0QuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr
BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82NzNx
WVBTSzJEV1dqQ0JhbVdoTkM3cmdycWhDUVBBamRHSFNkQ1puOVY2by8xL0FTMjY1
NDI3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/
BB8wHTAMBAIAATAGAwQCqMPAMA0EAgACMAcDBQAoBDP0MA0GCSqGSIb3DQEBCwUA
A4IBAQA7mZlZmUTjRu6lrqOIZ5A45jN9n6fN/sr0UnMGbYacEqFFMyUxJXG9Y9rR
VKg1h5EBuYOfRab0pmKpWj6kbi5Kw2IrBSbTYqj1w1B/fyPTVkFymXEf2j6UymDG
p3fPIk9qxU1N48VP5AlBktHSsylaQfQ4ysHPgstmBDV3QfWghNlMbBZ88lIJIBPX
FEL0NJnf/CdXCyKAYlLeTOuMy1zvE+IfGZtLnUlKcxKcNu5q2RRKU8gCkozFwc6J
hhkH300DXUE9Jj4Pm0Ci7CSAGrPoHNEYsPbTqZJmzJr8TJCcl5kuC7DwCBNtScNN
QC8ycbrNjzJ+Pdl/bzFgSo6u37KJ
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:25:25 2025 by rpki-client