Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/3136302e3233382e3132382e302f32322d3232203d3e20323636353437.roa
File:                     3136302e3233382e3132382e302f32322d3232203d3e20323636353437.roa (raw, json)
Hash identifier:          sdD2Yd0FBjd+7ogQhl7Csizl/Xi5rW3ubqT/9jyTos0=
Subject key identifier:   31:D8:CA:50:DD:55:74:D5:8C:8F:EF:9E:4C:69:BC:BB:CB:DE:89:22
Certificate issuer:       /CN=164081884269A17674589E45798EE6EE0A93A94E
Certificate serial:       267F6F498243D3EB5A77A19000D4B7C06E0AB93F
Authority key identifier: 16:40:81:88:42:69:A1:76:74:58:9E:45:79:8E:E6:EE:0A:93:A9:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/164081884269A17674589E45798EE6EE0A93A94E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/3136302e3233382e3132382e302f32322d3232203d3e20323636353437.roa
Signing time:             Thu 06 Mar 2025 09:20:43 +0000
ROA not before:           Thu 06 Mar 2025 09:15:43 +0000
ROA not after:            Thu 05 Mar 2026 09:20:43 +0000
asID:                     266547
IP address blocks:        160.238.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.crl
                          rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/164081884269A17674589E45798EE6EE0A93A94E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:7f:6f:49:82:43:d3:eb:5a:77:a1:90:00:d4:b7:c0:6e:0a:b9:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164081884269A17674589E45798EE6EE0A93A94E
        Validity
            Not Before: Mar  6 09:15:43 2025 GMT
            Not After : Mar  5 09:20:43 2026 GMT
        Subject: CN=31D8CA50DD5574D58C8FEF9E4C69BCBBCBDE8922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:66:e8:f0:e6:25:9c:f4:98:09:fe:b7:4c:
                    bf:39:9b:10:f0:1a:79:0d:9e:13:87:c6:18:06:36:
                    82:c5:b2:23:4e:f6:3f:18:00:e6:fa:13:28:59:4b:
                    3f:ef:17:7e:83:c0:05:25:26:84:b5:63:b3:f5:51:
                    aa:95:69:36:15:33:3a:7b:52:06:02:4e:26:19:c0:
                    51:1a:67:37:19:99:20:64:45:df:31:8f:78:72:78:
                    63:56:21:67:42:8d:eb:86:13:15:05:de:28:93:95:
                    3f:c3:27:82:1e:03:31:b5:01:50:1c:c3:7e:08:bb:
                    46:da:aa:a5:6d:63:9e:4f:06:63:6d:31:07:07:21:
                    a8:c3:32:dc:8f:b5:d7:f4:ff:68:56:c0:2c:d9:16:
                    9b:e9:08:bb:96:d8:11:d4:ad:40:2e:74:a5:95:e1:
                    1c:83:08:46:2a:56:4a:a2:df:c4:85:8a:f4:b6:0b:
                    62:40:47:19:07:83:0f:f6:36:51:df:f0:37:fa:45:
                    aa:69:53:de:06:4a:78:9b:ed:82:36:09:14:18:51:
                    52:99:78:f2:4a:6a:5d:0f:af:46:eb:18:47:fd:65:
                    85:19:86:d4:b4:13:c2:2c:68:3b:ad:3f:15:6b:51:
                    90:b5:ea:a5:b7:06:b7:1f:73:15:b2:43:b4:aa:fc:
                    78:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D8:CA:50:DD:55:74:D5:8C:8F:EF:9E:4C:69:BC:BB:CB:DE:89:22
            X509v3 Authority Key Identifier:
                keyid:16:40:81:88:42:69:A1:76:74:58:9E:45:79:8E:E6:EE:0A:93:A9:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/164081884269A17674589E45798EE6EE0A93A94E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/3136302e3233382e3132382e302f32322d3232203d3e20323636353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:73:3f:a4:39:34:e3:d8:b9:d9:2d:37:6f:25:72:0b:97:ee:
         dd:98:52:04:ad:51:62:0e:1e:be:40:08:b9:68:f5:4f:f3:72:
         10:c8:e2:77:82:98:21:a0:4f:77:53:70:d6:ba:1c:53:1b:3e:
         c2:9c:04:db:b4:06:93:7a:80:13:e1:22:7d:e1:31:05:5d:c6:
         a2:ce:de:d3:4c:f6:3b:f3:c7:2d:88:14:9d:fa:82:2b:48:d7:
         1b:7d:7a:11:50:ba:1c:cc:b4:96:99:71:30:b7:6d:d6:82:9b:
         18:08:94:84:e3:b8:c5:48:8e:ed:d8:85:93:e1:cb:43:e7:e9:
         73:be:97:8c:19:8e:f0:2f:f9:b8:5b:31:73:5c:11:8f:c6:93:
         08:f6:14:7a:e7:25:42:37:e6:7e:8a:38:10:f9:1e:ca:01:45:
         58:09:bf:51:f9:bb:a1:7b:89:9d:11:fd:77:85:28:34:46:28:
         08:b7:fb:78:9e:72:f8:70:30:8b:9e:46:33:b9:f7:78:f5:41:
         cb:cb:31:59:0c:ec:77:ff:47:c3:30:cb:a8:07:e1:7a:e5:57:
         93:93:03:76:c0:b3:fb:3e:de:aa:0c:a4:a5:a8:9c:57:1b:38:
         71:2c:51:ed:58:d1:7b:4c:91:33:79:f4:6c:2a:70:17:86:e3:
         2b:af:18:7f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJn9vSYJD0+tad6GQANS3wG4KuT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY0MDgxODg0MjY5QTE3Njc0NTg5RTQ1Nzk4RUU2RUUw
QTkzQTk0RTAeFw0yNTAzMDYwOTE1NDNaFw0yNjAzMDUwOTIwNDNaMDMxMTAvBgNV
BAMTKDMxRDhDQTUwREQ1NTc0RDU4QzhGRUY5RTRDNjlCQ0JCQ0JERTg5MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC652bo8OYlnPSYCf63TL85mxDw
GnkNnhOHxhgGNoLFsiNO9j8YAOb6EyhZSz/vF36DwAUlJoS1Y7P1UaqVaTYVMzp7
UgYCTiYZwFEaZzcZmSBkRd8xj3hyeGNWIWdCjeuGExUF3iiTlT/DJ4IeAzG1AVAc
w34Iu0baqqVtY55PBmNtMQcHIajDMtyPtdf0/2hWwCzZFpvpCLuW2BHUrUAudKWV
4RyDCEYqVkqi38SFivS2C2JARxkHgw/2NlHf8Df6RappU94GSnib7YI2CRQYUVKZ
ePJKal0Pr0brGEf9ZYUZhtS0E8IsaDutPxVrUZC16qW3BrcfcxWyQ7Sq/HgHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUMdjKUN1VdNWMj++eTGm8u8veiSIwHwYDVR0j
BBgwFoAUFkCBiEJpoXZ0WJ5FeY7m7gqTqU4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk1BUFVSYVFNVGtmakpkOVlNR0NqVmY4ZjQ1cmtWZm1QZFlXRkRlb0JW
OEEvMS8xNjQwODE4ODQyNjlBMTc2NzQ1ODlFNDU3OThFRTZFRTBBOTNBOTRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2NDA4MTg4NDI2OUExNzY3
NDU4OUU0NTc5OEVFNkVFMEE5M0E5NEUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZNQVBVUmFRTVRrZmpKZDlZTUdDalZmOGY0NXJrVmZtUGRZV0ZEZW9CVjhBLzEv
MzEzNjMwMmUzMjMzMzgyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNjM1MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqDugDANBgkqhkiG9w0BAQsFAAOCAQEAWnM/
pDk049i52S03byVyC5fu3ZhSBK1RYg4evkAIuWj1T/NyEMjid4KYIaBPd1Nw1roc
Uxs+wpwE27QGk3qAE+EifeExBV3Gos7e00z2O/PHLYgUnfqCK0jXG316EVC6HMy0
lplxMLdt1oKbGAiUhOO4xUiO7diFk+HLQ+fpc76XjBmO8C/5uFsxc1wRj8aTCPYU
euclQjfmfoo4EPkeygFFWAm/Ufm7oXuJnRH9d4UoNEYoCLf7eJ5y+HAwi55GM7n3
ePVBy8sxWQzsd/9HwzDLqAfheuVXk5MDdsCz+z7eqgykpaicVxs4cSxR7VjRe0yR
M3n0bCpwF4bjK68Yfw==
-----END CERTIFICATE-----
Generated at Sun Apr 13 09:58:11 2025 by rpki-client