Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/1/3230302e3131352e3130382e302f32322d3332203d3e20323730323837.roa
File:                     3230302e3131352e3130382e302f32322d3332203d3e20323730323837.roa (raw, json)
Hash identifier:          MahrU5RGiFko266FfGsh7jw0RjbYyagB5t7jrfGobxw=
Subject key identifier:   A6:7E:1E:5B:3D:18:B2:88:8E:47:6D:97:4D:F1:93:AC:E6:FC:E1:99
Certificate issuer:       /CN=B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F
Certificate serial:       716E37C425E2B32289F7E483E2FFF6A49E74D279
Authority key identifier: B9:9B:DA:72:41:B9:BF:DF:2B:43:2F:5E:95:92:DA:5F:69:1D:CA:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/1/3230302e3131352e3130382e302f32322d3332203d3e20323730323837.roa
Signing time:             Thu 06 Mar 2025 10:00:06 +0000
ROA not before:           Thu 06 Mar 2025 09:55:06 +0000
ROA not after:            Thu 05 Mar 2026 10:00:06 +0000
asID:                     270287
IP address blocks:        200.115.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.crl
                          rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6e:37:c4:25:e2:b3:22:89:f7:e4:83:e2:ff:f6:a4:9e:74:d2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F
        Validity
            Not Before: Mar  6 09:55:06 2025 GMT
            Not After : Mar  5 10:00:06 2026 GMT
        Subject: CN=A67E1E5B3D18B2888E476D974DF193ACE6FCE199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9a:f1:4b:1a:74:87:dc:38:4a:81:e9:8a:17:
                    1f:36:06:bd:17:4f:0e:37:64:18:8b:4a:85:1e:04:
                    c1:af:bc:f5:e5:99:31:91:9a:56:7f:3c:b1:2a:ec:
                    51:fe:a9:b5:f1:56:83:c4:46:30:97:b7:4f:24:f1:
                    68:69:25:8a:22:83:5c:36:93:bf:78:b0:16:32:e7:
                    c9:f1:9a:3b:7b:7c:a8:55:87:00:56:bd:17:55:d9:
                    d1:c2:ee:80:aa:06:06:90:86:08:72:78:fd:ea:c1:
                    69:0b:ef:18:94:7f:27:40:5c:53:9a:25:ae:74:4c:
                    6e:04:78:99:2c:16:41:af:16:36:58:cb:fe:de:a2:
                    30:36:d7:61:ee:be:11:29:9a:f2:3b:22:6d:81:af:
                    1a:79:1d:e6:9b:68:3f:3c:51:09:74:2b:9e:a1:95:
                    6b:5e:4b:0a:5c:5d:71:bc:69:7a:54:ba:6c:a3:d1:
                    ed:4f:de:97:fd:91:04:e5:37:bf:90:37:5a:09:a9:
                    9d:40:c7:c0:ba:51:62:71:6b:4a:4b:06:cd:b7:8b:
                    3c:6b:c4:84:91:0e:a7:0a:53:96:03:cb:80:05:68:
                    1a:ca:1b:05:e5:1e:3f:62:40:e0:2e:f7:d8:f2:81:
                    4b:38:86:6b:e5:00:f2:98:9c:4e:e8:3c:c6:54:66:
                    e4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7E:1E:5B:3D:18:B2:88:8E:47:6D:97:4D:F1:93:AC:E6:FC:E1:99
            X509v3 Authority Key Identifier:
                keyid:B9:9B:DA:72:41:B9:BF:DF:2B:43:2F:5E:95:92:DA:5F:69:1D:CA:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B99BDA7241B9BFDF2B432F5E9592DA5F691DCA8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/1/3230302e3131352e3130382e302f32322d3332203d3e20323730323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:b8:79:38:1f:fb:f9:49:24:1d:e5:69:84:25:7d:5d:15:74:
         a3:50:31:14:c3:27:b5:0a:ed:40:bf:70:c5:51:d8:9a:c3:25:
         fc:8c:31:1f:49:00:a8:75:7d:9c:af:f2:d6:c4:08:c1:ef:07:
         ad:03:62:14:ca:73:0c:67:1c:f8:18:0b:5d:eb:a6:11:96:01:
         0d:9d:2e:7b:d7:05:0d:2f:e3:81:ef:5f:66:86:c6:b5:96:4e:
         06:07:98:fd:35:83:d2:7f:a7:50:a6:1d:ff:77:b2:34:ec:3c:
         73:31:c1:f8:05:17:e5:c4:00:be:36:b6:88:e2:ff:96:3b:f0:
         6b:b6:e3:df:bc:08:f5:77:04:81:68:00:c9:5f:ee:b2:c7:22:
         ca:a5:1d:37:ae:b1:ee:a5:4a:31:68:2b:be:d2:7d:b5:ac:e1:
         9e:c9:d9:53:e8:86:16:66:25:97:e6:9b:1b:2a:34:7a:00:a9:
         cc:2b:7c:69:f4:4c:f3:2f:27:e8:33:f4:72:71:e3:a2:01:b1:
         26:61:a0:91:00:09:7a:68:62:f8:39:d0:ff:5d:ab:53:9b:e6:
         aa:20:f9:dc:01:48:c6:b8:3d:c2:f5:90:eb:92:aa:69:7e:ea:
         78:f7:a2:22:fe:11:da:c7:61:04:44:8e:6d:55:a7:f1:af:8e:
         df:66:be:3e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcW43xCXisyKJ9+SD4v/2pJ500nkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk5QkRBNzI0MUI5QkZERjJCNDMyRjVFOTU5MkRBNUY2
OTFEQ0E4RjAeFw0yNTAzMDYwOTU1MDZaFw0yNjAzMDUxMDAwMDZaMDMxMTAvBgNV
BAMTKEE2N0UxRTVCM0QxOEIyODg4RTQ3NkQ5NzRERjE5M0FDRTZGQ0UxOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMmvFLGnSH3DhKgemKFx82Br0X
Tw43ZBiLSoUeBMGvvPXlmTGRmlZ/PLEq7FH+qbXxVoPERjCXt08k8WhpJYoig1w2
k794sBYy58nxmjt7fKhVhwBWvRdV2dHC7oCqBgaQhghyeP3qwWkL7xiUfydAXFOa
Ja50TG4EeJksFkGvFjZYy/7eojA212HuvhEpmvI7Im2Brxp5HeabaD88UQl0K56h
lWteSwpcXXG8aXpUumyj0e1P3pf9kQTlN7+QN1oJqZ1Ax8C6UWJxa0pLBs23izxr
xISRDqcKU5YDy4AFaBrKGwXlHj9iQOAu99jygUs4hmvlAPKYnE7oPMZUZuRJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUpn4eWz0YsoiOR22XTfGTrOb84ZkwHwYDVR0j
BBgwFoAUuZvackG5v98rQy9elZLaX2kdyo8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkN4ZkcxdTM4QVNkcUFEMVVEWkFhejdDaUp3N3pBM0JISEx5WHdMcnB2
c1QvMS9COTlCREE3MjQxQjlCRkRGMkI0MzJGNUU5NTkyREE1RjY5MURDQThGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5OUJEQTcyNDFCOUJGREYy
QjQzMkY1RTk1OTJEQTVGNjkxRENBOEYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZDeGZHMXUzOEFTZHFBRDFVRFpBYXo3Q2lKdzd6QTNCSEhMeVh3THJwdnNULzEv
MzIzMDMwMmUzMTMxMzUyZTMxMzAzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzczMDMyMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAshzbDANBgkqhkiG9w0BAQsFAAOCAQEAi7h5
OB/7+UkkHeVphCV9XRV0o1AxFMMntQrtQL9wxVHYmsMl/IwxH0kAqHV9nK/y1sQI
we8HrQNiFMpzDGcc+BgLXeumEZYBDZ0ue9cFDS/jge9fZobGtZZOBgeY/TWD0n+n
UKYd/3eyNOw8czHB+AUX5cQAvja2iOL/ljvwa7bj37wI9XcEgWgAyV/ussciyqUd
N66x7qVKMWgrvtJ9tazhnsnZU+iGFmYll+abGyo0egCpzCt8afRM8y8n6DP0cnHj
ogGxJmGgkQAJemhi+DnQ/12rU5vmqiD53AFIxrg9wvWQ65KqaX7qePeiIv4R2sdh
BESObVWn8a+O32a+Pg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:53:24 2025 by rpki-client