Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132342e302f32322d3233203d3e20323634383739.roa
File:                     3136382e3232372e3132342e302f32322d3233203d3e20323634383739.roa (raw, json)
Hash identifier:          j4eqO1RosnvO9W/q4TSvq2Xk0oEtza1FTjGLHHoUlZ4=
Subject key identifier:   F0:17:AA:A3:91:DF:3D:0E:D9:96:9D:40:5F:80:38:2E:EA:1D:EC:E4
Certificate issuer:       /CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
Certificate serial:       4C6EBA74D5E7FB0E6ADA125494846C454B78A045
Authority key identifier: D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132342e302f32322d3233203d3e20323634383739.roa
Signing time:             Fri 16 May 2025 12:11:03 +0000
ROA not before:           Fri 16 May 2025 12:06:03 +0000
ROA not after:            Fri 15 May 2026 12:11:03 +0000
asID:                     264879
IP address blocks:        168.227.124.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl
                          rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 16:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6e:ba:74:d5:e7:fb:0e:6a:da:12:54:94:84:6c:45:4b:78:a0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
        Validity
            Not Before: May 16 12:06:03 2025 GMT
            Not After : May 15 12:11:03 2026 GMT
        Subject: CN=F017AAA391DF3D0ED9969D405F80382EEA1DECE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:13:1e:5c:2c:0d:96:95:77:86:af:c6:a2:bf:
                    06:ed:f9:a4:ea:9a:63:4a:c1:c4:85:b2:2b:c0:15:
                    84:20:b1:17:99:a8:05:4d:b7:90:c3:21:77:48:4c:
                    cc:bd:59:7c:c9:88:72:4e:eb:f2:08:28:eb:4c:bb:
                    19:af:31:ee:1c:58:94:2b:35:1c:a5:5b:8c:df:ec:
                    3a:de:a1:71:0a:3d:b8:b8:c5:df:80:77:f8:88:a1:
                    14:32:9f:3a:e7:02:28:56:a5:5b:91:d3:b8:44:8f:
                    05:66:b8:a6:91:55:bd:2a:e5:0b:09:28:f6:e9:a8:
                    6e:40:d8:52:c8:0e:a8:4a:aa:0f:67:64:d8:ff:89:
                    75:2b:a4:bf:01:4a:49:b1:92:0b:ab:d6:ad:23:d1:
                    52:7e:d0:ff:82:b9:f4:58:73:4c:e6:0e:61:64:4d:
                    7f:db:4d:a4:2f:c4:46:8b:09:c7:cf:78:cf:ee:58:
                    75:2c:39:75:17:99:b2:b9:a2:0c:91:b5:b9:21:8c:
                    55:a8:f4:4f:db:5d:7c:bc:b4:54:cc:28:5b:32:ba:
                    84:36:22:73:76:d6:ba:c9:de:67:bc:a8:4a:a5:cb:
                    38:bb:1b:1f:57:b6:77:d4:66:56:c8:ca:75:fd:b5:
                    89:2f:66:00:20:3d:b3:21:30:9a:8c:72:72:a6:8e:
                    9e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:17:AA:A3:91:DF:3D:0E:D9:96:9D:40:5F:80:38:2E:EA:1D:EC:E4
            X509v3 Authority Key Identifier:
                keyid:D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132342e302f32322d3233203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:19:74:91:15:19:0f:95:3a:3e:5e:9d:4c:68:7d:84:f3:2a:
         fb:f5:33:13:0b:62:01:b2:92:44:0d:6c:ee:15:59:07:d5:d7:
         5b:4d:01:75:62:6d:ac:28:c2:da:9d:42:ea:7e:03:96:cd:9c:
         de:99:e3:5c:e2:cb:c4:09:a3:d0:1a:45:b8:c1:5d:2f:a2:7a:
         4b:17:53:6b:3e:07:1a:51:5c:b6:bf:c4:04:41:72:11:f9:16:
         53:c5:56:75:fb:0a:21:14:5a:45:2a:60:d9:08:22:ee:7c:63:
         52:63:7d:8b:e8:49:31:a1:b4:e4:0c:d1:7f:26:6f:2e:9d:73:
         07:bd:00:47:25:15:ec:bf:3c:d8:a5:6d:99:4f:2d:1c:45:3f:
         4e:95:16:d3:18:0d:7d:73:d0:4b:fc:15:b3:74:91:cb:00:09:
         13:d0:fc:c8:17:49:c1:e4:fe:49:40:4f:33:b9:d1:29:0a:19:
         27:13:6d:87:8d:f2:2e:8e:00:17:47:8e:9f:5e:10:fb:84:b6:
         4a:7a:e1:d0:58:63:41:27:82:fd:6e:b8:0a:d3:52:91:0a:c5:
         6d:be:d4:93:69:86:e7:ec:df:9f:97:73:6e:ef:7d:73:26:40:
         e7:7d:5c:9d:86:47:89:88:73:f4:0c:b1:f3:ff:fb:95:da:85:
         bb:91:80:3d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTG66dNXn+w5q2hJUlIRsRUt4oEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDkzMjI4RTA4OEZDNjNFNDk5RERDRjZFMjAzNTU4QkRG
QkEzM0ZDNDAeFw0yNTA1MTYxMjA2MDNaFw0yNjA1MTUxMjExMDNaMDMxMTAvBgNV
BAMTKEYwMTdBQUEzOTFERjNEMEVEOTk2OUQ0MDVGODAzODJFRUExREVDRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfEx5cLA2WlXeGr8aivwbt+aTq
mmNKwcSFsivAFYQgsReZqAVNt5DDIXdITMy9WXzJiHJO6/IIKOtMuxmvMe4cWJQr
NRylW4zf7DreoXEKPbi4xd+Ad/iIoRQynzrnAihWpVuR07hEjwVmuKaRVb0q5QsJ
KPbpqG5A2FLIDqhKqg9nZNj/iXUrpL8BSkmxkgur1q0j0VJ+0P+CufRYc0zmDmFk
TX/bTaQvxEaLCcfPeM/uWHUsOXUXmbK5ogyRtbkhjFWo9E/bXXy8tFTMKFsyuoQ2
InN21rrJ3me8qEqlyzi7Gx9XtnfUZlbIynX9tYkvZgAgPbMhMJqMcnKmjp7lAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU8Beqo5HfPQ7Zlp1AX4A4Luod7OQwHwYDVR0j
BBgwFoAU2TIo4Ij8Y+SZ3c9uIDVYvfujP8QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRrd0VYbUtQamhzM2UzWjk3WHMyOTRudXk2QzRkUGViNjRRdWlIVllE
MTkvMS9EOTMyMjhFMDg4RkM2M0U0OTlERENGNkUyMDM1NThCREZCQTMzRkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5MzIyOEUwODhGQzYzRTQ5
OUREQ0Y2RTIwMzU1OEJERkJBMzNGQzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0a3dFWG1LUGpoczNlM1o5N1hzMjk0bnV5NkM0ZFBlYjY0UXVpSFZZRDE5LzEv
MzEzNjM4MmUzMjMyMzcyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzMyMDNkM2UyMDMy
MzYzNDM4MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjjfDANBgkqhkiG9w0BAQsFAAOCAQEAfxl0
kRUZD5U6Pl6dTGh9hPMq+/UzEwtiAbKSRA1s7hVZB9XXW00BdWJtrCjC2p1C6n4D
ls2c3pnjXOLLxAmj0BpFuMFdL6J6SxdTaz4HGlFctr/EBEFyEfkWU8VWdfsKIRRa
RSpg2Qgi7nxjUmN9i+hJMaG05AzRfyZvLp1zB70ARyUV7L882KVtmU8tHEU/TpUW
0xgNfXPQS/wVs3SRywAJE9D8yBdJweT+SUBPM7nRKQoZJxNth43yLo4AF0eOn14Q
+4S2Snrh0FhjQSeC/W64CtNSkQrFbb7Uk2mG5+zfn5dzbu99cyZA531cnYZHiYhz
9Ayx8//7ldqFu5GAPQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:22:59 2025 by rpki-client