Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3136382e3232372e35322e302f32322d3332203d3e20323634303735.roa
File:                     3136382e3232372e35322e302f32322d3332203d3e20323634303735.roa (raw, json)
Hash identifier:          50yGs+iAXQUdCh0/nqVOVm9UmiIKcalmfjQafSLV590=
Subject key identifier:   EE:D7:8E:D0:BB:DC:FC:97:37:C2:E2:D6:0A:4A:FA:FF:F7:88:7B:D6
Certificate issuer:       /CN=1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07
Certificate serial:       30807C14DD7C19688F719D20AF64B8E3772F7311
Authority key identifier: 1F:88:BE:2C:C4:CA:60:A3:45:8E:9F:8C:F2:FB:AA:FF:1F:ED:7A:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3136382e3232372e35322e302f32322d3332203d3e20323634303735.roa
Signing time:             Fri 21 Feb 2025 16:24:28 +0000
ROA not before:           Fri 21 Feb 2025 16:19:28 +0000
ROA not after:            Fri 20 Feb 2026 16:24:28 +0000
asID:                     264075
IP address blocks:        168.227.52.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.crl
                          rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 05:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:80:7c:14:dd:7c:19:68:8f:71:9d:20:af:64:b8:e3:77:2f:73:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07
        Validity
            Not Before: Feb 21 16:19:28 2025 GMT
            Not After : Feb 20 16:24:28 2026 GMT
        Subject: CN=EED78ED0BBDCFC9737C2E2D60A4AFAFFF7887BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:47:06:90:a6:13:36:25:9a:82:0c:2a:3e:23:
                    ba:c6:1a:e4:8b:fd:32:e6:da:fd:9e:8c:2d:df:bb:
                    a3:eb:89:60:e3:63:a8:0a:0a:51:58:39:8c:a2:3b:
                    18:e8:8e:c0:40:ab:8e:60:31:66:b9:96:8c:3d:06:
                    4f:b5:c5:27:64:0d:68:ec:4d:c6:52:5e:83:f7:71:
                    07:12:4b:a4:b9:a6:5d:3d:16:bf:8a:57:6f:8b:43:
                    6c:19:dc:f6:b0:30:2b:7c:b3:60:9c:de:26:44:5b:
                    fa:64:2e:69:ef:c2:60:5a:3e:e0:42:85:c8:e5:0b:
                    2d:2c:e3:bf:44:08:63:6f:8a:7e:73:9a:39:a9:d4:
                    64:11:a8:72:fd:31:d5:5f:8f:49:86:1a:8e:95:67:
                    44:f0:81:70:5e:cd:f8:65:fb:1a:5f:8b:ec:5b:70:
                    57:67:09:0d:6d:8d:70:4f:0f:04:06:8c:33:40:6a:
                    5f:06:ae:6b:e2:6d:23:8b:f3:42:ce:51:ae:88:3a:
                    d9:f2:69:f8:63:5f:ec:7e:3a:8d:71:59:d8:41:40:
                    77:c6:a4:24:49:17:48:db:e0:b1:52:a4:e2:ad:80:
                    67:b7:0c:30:60:88:35:09:63:cd:7c:ba:77:8c:69:
                    35:27:e0:33:d3:7e:52:d2:e3:cd:fc:16:7f:33:a4:
                    26:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D7:8E:D0:BB:DC:FC:97:37:C2:E2:D6:0A:4A:FA:FF:F7:88:7B:D6
            X509v3 Authority Key Identifier:
                keyid:1F:88:BE:2C:C4:CA:60:A3:45:8E:9F:8C:F2:FB:AA:FF:1F:ED:7A:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3136382e3232372e35322e302f32322d3332203d3e20323634303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:9a:81:76:a5:45:79:eb:d6:2f:c4:a3:0f:0e:04:d1:ee:76:
         98:97:28:b0:cd:68:b9:84:03:b9:19:8d:f6:ee:b4:3f:6f:37:
         97:27:ae:9f:d4:f3:e1:23:1e:ad:c5:f2:24:42:80:41:7c:d8:
         e0:b7:ab:b3:7c:8c:a9:be:c6:17:da:96:f0:03:59:dc:53:76:
         f0:fb:df:f9:9a:7e:d7:59:c0:ed:49:48:43:7f:7b:f5:72:57:
         ff:f1:43:ae:31:41:f8:9a:fb:a2:0d:8b:ed:4b:c0:cb:08:1f:
         bd:53:1f:b8:c4:b8:00:11:9f:d6:8b:7d:9b:d2:83:f2:bd:4c:
         c4:a6:3f:7e:09:ac:06:b4:a7:e2:34:c4:93:4a:03:81:8b:d3:
         55:4f:b4:b8:8b:f9:2b:49:74:90:19:27:46:b2:8e:58:42:59:
         15:3a:db:2b:ca:83:48:c5:4c:35:99:51:cd:ad:00:08:0b:83:
         63:e1:e1:e3:c2:bc:4c:f9:8c:25:28:67:f6:b5:22:04:a7:1d:
         86:19:f1:3b:8c:5f:45:39:f5:44:66:b7:b5:d3:03:24:74:63:
         b3:49:9a:ef:29:7f:49:81:73:13:2a:ac:31:e0:62:3c:35:5c:
         06:ab:37:75:dd:d7:ff:6a:31:f0:c6:fa:88:48:aa:75:50:89:
         b5:44:73:12
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMIB8FN18GWiPcZ0gr2S443cvcxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY4OEJFMkNDNENBNjBBMzQ1OEU5RjhDRjJGQkFBRkYx
RkVEN0EwNzAeFw0yNTAyMjExNjE5MjhaFw0yNjAyMjAxNjI0MjhaMDMxMTAvBgNV
BAMTKEVFRDc4RUQwQkJEQ0ZDOTczN0MyRTJENjBBNEFGQUZGRjc4ODdCRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQRwaQphM2JZqCDCo+I7rGGuSL
/TLm2v2ejC3fu6PriWDjY6gKClFYOYyiOxjojsBAq45gMWa5low9Bk+1xSdkDWjs
TcZSXoP3cQcSS6S5pl09Fr+KV2+LQ2wZ3PawMCt8s2Cc3iZEW/pkLmnvwmBaPuBC
hcjlCy0s479ECGNvin5zmjmp1GQRqHL9MdVfj0mGGo6VZ0TwgXBezfhl+xpfi+xb
cFdnCQ1tjXBPDwQGjDNAal8GrmvibSOL80LOUa6IOtnyafhjX+x+Oo1xWdhBQHfG
pCRJF0jb4LFSpOKtgGe3DDBgiDUJY818uneMaTUn4DPTflLS4838Fn8zpCbbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7teO0Lvc/Jc3wuLWCkr6//eIe9YwHwYDVR0j
BBgwFoAUH4i+LMTKYKNFjp+M8vuq/x/tegcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm42ZzFrUHVENThCZVNWa1g3R3U0U0tpNVFXWHkxOW9UcHZwdmkzYzNr
anQvMC8xRjg4QkUyQ0M0Q0E2MEEzNDU4RTlGOENGMkZCQUFGRjFGRUQ3QTA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGODhCRTJDQzRDQTYwQTM0
NThFOUY4Q0YyRkJBQUZGMUZFRDdBMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZuNmcxa1B1RDU4QmVTVmtYN0d1NFNLaTVRV1h5MTlvVHB2cHZpM2Mza2p0LzAv
MzEzNjM4MmUzMjMyMzcyZTM1MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzQzMDM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKo4zQwDQYJKoZIhvcNAQELBQADggEBACmagXal
RXnr1i/Eow8OBNHudpiXKLDNaLmEA7kZjfbutD9vN5cnrp/U8+EjHq3F8iRCgEF8
2OC3q7N8jKm+xhfalvADWdxTdvD73/maftdZwO1JSEN/e/VyV//xQ64xQfia+6IN
i+1LwMsIH71TH7jEuAARn9aLfZvSg/K9TMSmP34JrAa0p+I0xJNKA4GL01VPtLiL
+StJdJAZJ0ayjlhCWRU62yvKg0jFTDWZUc2tAAgLg2Ph4ePCvEz5jCUoZ/a1IgSn
HYYZ8TuMX0U59URmt7XTAyR0Y7NJmu8pf0mBcxMqrDHgYjw1XAarN3Xd1/9qMfDG
+ohIqnVQibVEcxI=
-----END CERTIFICATE-----
Generated at Fri Apr 11 11:12:11 2025 by rpki-client