Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38342e302f32332d3233203d3e20323632363432.roa
File:                     3137302e38322e38342e302f32332d3233203d3e20323632363432.roa (raw, json)
Hash identifier:          l9iWhUMCGyMhi7VAaVHsFdMBYtoKIUmLL++IE+UQ2eI=
Subject key identifier:   26:31:C7:39:22:98:77:A4:64:66:A0:A1:2F:85:21:44:CF:28:2B:6A
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       02E17634442E63ECE296558D9D784E3AF81B19A8
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38342e302f32332d3233203d3e20323632363432.roa
Signing time:             Thu 06 Mar 2025 03:50:00 +0000
ROA not before:           Thu 06 Mar 2025 03:45:00 +0000
ROA not after:            Thu 05 Mar 2026 03:50:00 +0000
asID:                     262642
IP address blocks:        170.82.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e1:76:34:44:2e:63:ec:e2:96:55:8d:9d:78:4e:3a:f8:1b:19:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Mar  6 03:45:00 2025 GMT
            Not After : Mar  5 03:50:00 2026 GMT
        Subject: CN=2631C739229877A46466A0A12F852144CF282B6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:92:43:4e:eb:38:4b:93:8f:11:3b:65:72:b7:
                    a4:10:17:cd:a7:f6:4a:45:46:12:60:dd:d4:3c:b7:
                    1f:68:a6:97:f2:15:6c:b9:a2:d8:49:b0:44:a6:73:
                    0a:fb:99:b5:ab:8c:91:d3:d8:a7:6d:70:74:07:a1:
                    cd:70:dd:6a:04:98:ee:98:d8:0a:45:fe:c7:27:93:
                    70:81:99:6b:10:c1:23:51:0f:14:e5:1b:13:ca:25:
                    7c:65:79:f6:47:e4:4f:7a:09:3c:a4:cd:9a:5c:d5:
                    a0:6d:eb:4e:d2:db:2f:ec:39:ce:ff:55:dc:6c:48:
                    1d:dd:42:49:a8:a5:0e:87:9a:18:86:ab:9f:62:fb:
                    6e:9f:64:03:15:a6:f4:ba:8f:ed:67:94:1e:21:c8:
                    c2:f5:ad:06:be:0d:11:dc:45:54:c1:34:37:b5:63:
                    4d:3e:5f:3a:bc:29:71:7b:4e:32:27:74:1e:d8:63:
                    cf:17:36:46:dd:b4:69:a2:f1:ad:05:bd:5d:93:ef:
                    82:33:84:49:ae:04:8d:3e:c0:a6:79:71:8c:6c:5d:
                    98:ac:ea:51:f3:ff:10:28:ab:47:d0:06:aa:ab:f6:
                    41:34:bf:da:ec:af:18:69:4d:4d:b9:aa:04:ac:06:
                    5c:51:f4:c7:4f:71:20:ef:27:8a:18:b9:af:98:54:
                    ff:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:31:C7:39:22:98:77:A4:64:66:A0:A1:2F:85:21:44:CF:28:2B:6A
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38342e302f32332d3233203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:d4:dc:ee:f5:75:ca:e3:b0:17:0c:77:dc:5f:ed:17:f6:51:
         25:2d:b4:95:a0:12:c3:c6:e1:75:aa:d2:93:67:41:75:06:45:
         31:33:63:03:26:ee:6c:97:37:46:fc:60:5d:23:5a:b7:1d:17:
         d4:2a:5e:8c:dc:d7:29:88:fa:b9:12:cf:e1:85:04:55:eb:2e:
         a7:5b:cb:bd:e8:e4:a7:25:e5:70:be:db:a1:1f:7a:ef:72:20:
         d5:de:fe:29:8b:05:d5:8d:41:d6:24:47:ad:b8:d5:33:ea:00:
         38:97:05:d8:ae:99:63:78:9e:d0:03:d5:54:8b:0e:0c:7a:a0:
         5e:f2:21:35:27:f7:22:95:ba:d9:3f:24:33:58:a0:67:6c:48:
         77:cd:9d:e3:c2:73:fe:20:81:ce:b5:4f:cb:b5:01:2a:dc:9c:
         38:47:46:09:b3:1d:28:b3:c4:40:cc:99:67:cc:72:b5:84:36:
         f7:46:f7:b4:19:76:32:dc:56:a5:f9:7c:28:61:33:78:ca:b3:
         fb:cb:02:20:cc:85:78:9f:6e:74:b6:a0:08:b6:25:ec:af:0e:
         f3:77:54:67:df:c6:c1:c2:40:f1:f8:87:4d:99:d4:01:c7:db:
         f5:e4:7a:06:e0:99:f2:df:bf:12:75:5f:43:0f:ce:e1:06:04:
         38:d8:13:92
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAuF2NEQuY+zillWNnXhOOvgbGagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ4RDhEOTZGMUZGRUM1RjIwQzZGMUY3MzNFRTY5NTAz
RTcxNjc0NTAeFw0yNTAzMDYwMzQ1MDBaFw0yNjAzMDUwMzUwMDBaMDMxMTAvBgNV
BAMTKDI2MzFDNzM5MjI5ODc3QTQ2NDY2QTBBMTJGODUyMTQ0Q0YyODJCNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDykkNO6zhLk48RO2Vyt6QQF82n
9kpFRhJg3dQ8tx9oppfyFWy5othJsESmcwr7mbWrjJHT2KdtcHQHoc1w3WoEmO6Y
2ApF/scnk3CBmWsQwSNRDxTlGxPKJXxlefZH5E96CTykzZpc1aBt607S2y/sOc7/
VdxsSB3dQkmopQ6HmhiGq59i+26fZAMVpvS6j+1nlB4hyML1rQa+DRHcRVTBNDe1
Y00+Xzq8KXF7TjIndB7YY88XNkbdtGmi8a0FvV2T74IzhEmuBI0+wKZ5cYxsXZis
6lHz/xAoq0fQBqqr9kE0v9rsrxhpTU25qgSsBlxR9MdPcSDvJ4oYua+YVP+9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUJjHHOSKYd6RkZqChL4UhRM8oK2owHwYDVR0j
BBgwFoAUxI2NlvH/7F8gxvH3M+5pUD5xZ0UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjlHd2FpakNzZGExTm1EWG5jWGlkeDJyTGZiTWFtd3VKVXlUNFNvczUy
YWYvMS9DNDhEOEQ5NkYxRkZFQzVGMjBDNkYxRjczM0VFNjk1MDNFNzE2NzQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0OEQ4RDk2RjFGRkVDNUYy
MEM2RjFGNzMzRUU2OTUwM0U3MTY3NDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5R3dhaWpDc2RhMU5tRFhuY1hpZHgyckxmYk1hbXd1SlV5VDRTb3M1MmFmLzEv
MzEzNzMwMmUzODMyMmUzODM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMy
MzYzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqlJUMA0GCSqGSIb3DQEBCwUAA4IBAQAw1Nzu9XXK
47AXDHfcX+0X9lElLbSVoBLDxuF1qtKTZ0F1BkUxM2MDJu5slzdG/GBdI1q3HRfU
Kl6M3NcpiPq5Es/hhQRV6y6nW8u96OSnJeVwvtuhH3rvciDV3v4piwXVjUHWJEet
uNUz6gA4lwXYrpljeJ7QA9VUiw4MeqBe8iE1J/cilbrZPyQzWKBnbEh3zZ3jwnP+
IIHOtU/LtQEq3Jw4R0YJsx0os8RAzJlnzHK1hDb3Rve0GXYy3Fal+XwoYTN4yrP7
ywIgzIV4n250tqAItiXsrw7zd1Rn38bBwkDx+IdNmdQBx9v15HoG4Jny378SdV9D
D87hBgQ42BOS
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:26:20 2025 by rpki-client