Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37372e302f32342d3234203d3e20323730343133.roa
File:                     3137302e302e37372e302f32342d3234203d3e20323730343133.roa (raw, json)
Hash identifier:          dyUVyl50Crbw7qYIQIxCQ5P22hE3et2MG3eZVWOsvJM=
Subject key identifier:   CE:22:6E:18:30:56:10:E1:5A:36:C7:0D:9F:9C:0B:4D:53:06:AD:B0
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       2AFCDFD07239D8AB16B82F6BF364A9AA2BE1499D
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37372e302f32342d3234203d3e20323730343133.roa
Signing time:             Thu 04 Sep 2025 14:30:06 +0000
ROA not before:           Thu 04 Sep 2025 14:25:06 +0000
ROA not after:            Thu 03 Sep 2026 14:30:06 +0000
asID:                     270413
IP address blocks:        170.0.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 03:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fc:df:d0:72:39:d8:ab:16:b8:2f:6b:f3:64:a9:aa:2b:e1:49:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Sep  4 14:25:06 2025 GMT
            Not After : Sep  3 14:30:06 2026 GMT
        Subject: CN=CE226E18305610E15A36C70D9F9C0B4D5306ADB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:52:95:b5:ee:00:d1:a7:86:42:b8:2c:ea:25:
                    74:43:6a:9a:55:c1:b8:df:c6:e5:b6:5e:04:e1:ba:
                    5a:52:7d:48:95:57:18:b8:a2:4f:8a:5a:ad:0f:8e:
                    88:79:e9:99:39:4b:fc:8d:9c:fe:dc:2c:bf:da:03:
                    1a:dd:8b:49:61:26:0b:0c:eb:93:c1:12:b3:78:fa:
                    e3:03:d3:a0:e1:4b:d6:09:01:2f:be:22:a7:fc:c8:
                    ee:0a:e0:94:5e:c4:59:c0:98:4d:04:b7:ea:cb:a3:
                    d3:f1:a0:b0:bd:01:98:81:f5:de:b0:e4:05:c2:e4:
                    db:03:2e:1a:64:b0:47:b8:bd:f4:a0:37:00:59:09:
                    54:72:6a:bb:3d:92:58:2b:d4:60:91:32:6a:ff:66:
                    50:c6:9e:4e:61:2f:6e:77:4d:9c:66:e8:e6:b6:ab:
                    89:3d:6d:6f:82:03:e2:3a:c2:f9:a0:d0:20:a4:ff:
                    83:c1:36:39:4c:90:8c:46:82:78:7b:0c:f9:00:0d:
                    9e:b7:12:39:bd:ec:ff:9d:ff:21:6a:6b:19:29:4c:
                    a7:ed:75:5b:b6:5b:65:2e:e1:61:39:7f:40:69:33:
                    f8:bf:45:93:af:fb:f5:8c:bc:50:1e:3a:68:7f:d3:
                    fc:e7:1a:f9:c0:43:a5:9e:79:ef:a5:61:6c:c1:75:
                    97:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:22:6E:18:30:56:10:E1:5A:36:C7:0D:9F:9C:0B:4D:53:06:AD:B0
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37372e302f32342d3234203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:c3:67:ac:89:fb:db:25:6a:3e:82:29:15:5d:c9:68:9b:0b:
         66:2d:cb:6f:a9:18:46:c9:ba:51:07:f8:be:1b:a3:77:36:5b:
         47:3e:ba:af:92:77:e8:3d:fb:fe:e8:58:81:67:e1:9a:be:b8:
         4c:fe:0e:d8:fa:a2:b7:65:ad:b2:03:ce:7c:0d:93:e7:b7:01:
         7c:a3:1e:7a:29:51:e0:37:96:b6:a6:8a:ff:6d:9a:9d:f1:d8:
         cf:6d:49:bb:90:95:f7:48:19:6f:6f:14:6e:4d:ee:da:ac:09:
         0d:dc:86:7c:02:76:51:82:e7:75:86:99:c1:a5:bc:0a:81:24:
         4a:92:e4:e8:f1:93:14:76:0c:cd:89:04:ed:66:76:64:f9:e4:
         ab:14:45:95:38:e3:1b:ae:f3:3f:e8:32:9e:02:f0:3e:62:4b:
         38:d6:ee:1d:43:9a:b2:39:dd:63:d6:85:12:d2:f9:88:92:53:
         29:e0:77:23:20:34:94:41:5a:52:34:73:f1:fd:36:bf:36:b2:
         db:2e:f2:01:8c:70:29:81:34:91:c0:a4:a2:0e:0d:60:5d:2e:
         ec:f4:b7:d4:4f:a1:4d:a2:7e:40:88:20:81:fd:c6:2d:14:f0:
         a0:1a:87:0a:30:e4:7f:2f:d4:db:78:2a:71:39:28:05:0b:53:
         26:cd:94:1c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKvzf0HI52KsWuC9r82SpqivhSZ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU2MTY0MzQ4MDQzRTZBQTUzN0M3RUQ3NEQ1MENDNDAy
OTg3NTdGQzAeFw0yNTA5MDQxNDI1MDZaFw0yNjA5MDMxNDMwMDZaMDMxMTAvBgNV
BAMTKENFMjI2RTE4MzA1NjEwRTE1QTM2QzcwRDlGOUMwQjRENTMwNkFEQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6UpW17gDRp4ZCuCzqJXRDappV
wbjfxuW2XgThulpSfUiVVxi4ok+KWq0Pjoh56Zk5S/yNnP7cLL/aAxrdi0lhJgsM
65PBErN4+uMD06DhS9YJAS++Iqf8yO4K4JRexFnAmE0Et+rLo9PxoLC9AZiB9d6w
5AXC5NsDLhpksEe4vfSgNwBZCVRyars9klgr1GCRMmr/ZlDGnk5hL253TZxm6Oa2
q4k9bW+CA+I6wvmg0CCk/4PBNjlMkIxGgnh7DPkADZ63Ejm97P+d/yFqaxkpTKft
dVu2W2Uu4WE5f0BpM/i/RZOv+/WMvFAeOmh/0/znGvnAQ6Weee+lYWzBdZffAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUziJuGDBWEOFaNscNn5wLTVMGrbAwHwYDVR0j
BBgwFoAUvmFkNIBD5qpTfH7XTVDMQCmHV/wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk5nWlluQ2c0WlBqVG5lUjRMdDVZM3JMMVBjUXBQcXBaRGFnc0JTRzZo
YUIvMS9CRTYxNjQzNDgwNDNFNkFBNTM3QzdFRDc0RDUwQ0M0MDI5ODc1N0ZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFNjE2NDM0ODA0M0U2QUE1
MzdDN0VENzRENTBDQzQwMjk4NzU3RkMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZOZ1pZbkNnNFpQalRuZVI0THQ1WTNyTDFQY1FwUHFwWkRhZ3NCU0c2aGFCLzEv
MzEzNzMwMmUzMDJlMzczNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMDM0
MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAKoATTANBgkqhkiG9w0BAQsFAAOCAQEAV8NnrIn72yVq
PoIpFV3JaJsLZi3Lb6kYRsm6UQf4vhujdzZbRz66r5J36D37/uhYgWfhmr64TP4O
2Pqit2WtsgPOfA2T57cBfKMeeilR4DeWtqaK/22anfHYz21Ju5CV90gZb28Ubk3u
2qwJDdyGfAJ2UYLndYaZwaW8CoEkSpLk6PGTFHYMzYkE7WZ2ZPnkqxRFlTjjG67z
P+gyngLwPmJLONbuHUOasjndY9aFEtL5iJJTKeB3IyA0lEFaUjRz8f02vzay2y7y
AYxwKYE0kcCkog4NYF0u7PS31E+hTaJ+QIgggf3GLRTwoBqHCjDkfy/U23gqcTko
BQtTJs2UHA==
-----END CERTIFICATE-----
Generated at Fri Sep 19 05:29:18 2025 by rpki-client