Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3130392e302f32342d3234203d3e20323635393530.roa
File:                     3136342e3136332e3130392e302f32342d3234203d3e20323635393530.roa (raw, json)
Hash identifier:          yj43JBhkzO4gvwOwNRLRX2CN9IRXHAxWc77KNQBKTzA=
Subject key identifier:   AC:F5:56:9B:EC:F3:D7:F4:2D:07:9D:1A:6D:BC:F6:9E:60:19:1A:53
Certificate issuer:       /CN=576471CF7577222B160C490BFEEA5C66CB21874F
Certificate serial:       4F7C74B9C517AFA0A975CC66C4566BC6B22690B1
Authority key identifier: 57:64:71:CF:75:77:22:2B:16:0C:49:0B:FE:EA:5C:66:CB:21:87:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576471CF7577222B160C490BFEEA5C66CB21874F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3130392e302f32342d3234203d3e20323635393530.roa
Signing time:             Wed 04 Jun 2025 08:12:04 +0000
ROA not before:           Wed 04 Jun 2025 08:07:04 +0000
ROA not after:            Wed 03 Jun 2026 08:12:04 +0000
asID:                     265950
IP address blocks:        164.163.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/576471CF7577222B160C490BFEEA5C66CB21874F.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/576471CF7577222B160C490BFEEA5C66CB21874F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576471CF7577222B160C490BFEEA5C66CB21874F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 01:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7c:74:b9:c5:17:af:a0:a9:75:cc:66:c4:56:6b:c6:b2:26:90:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576471CF7577222B160C490BFEEA5C66CB21874F
        Validity
            Not Before: Jun  4 08:07:04 2025 GMT
            Not After : Jun  3 08:12:04 2026 GMT
        Subject: CN=ACF5569BECF3D7F42D079D1A6DBCF69E60191A53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:6b:11:bb:20:20:2f:e6:ab:80:18:3a:d2:
                    0a:ef:47:08:df:5e:47:69:f1:04:65:94:42:75:39:
                    c3:a2:00:6e:5e:b5:64:a1:17:5e:c1:96:73:77:64:
                    70:b4:e9:1f:50:5e:23:5c:c4:05:ef:5d:90:d3:38:
                    ec:c9:91:0a:be:de:65:f7:46:da:c0:79:75:e3:f0:
                    be:31:ed:f9:de:16:3b:bb:ee:66:cd:83:df:9a:04:
                    85:c3:9b:a7:98:34:60:61:56:f8:97:6c:67:16:57:
                    dc:61:de:b4:39:24:8d:8d:7a:e4:8b:6e:35:a3:2c:
                    ed:88:9a:e2:4c:bc:a2:d9:2a:32:ef:3f:83:7d:47:
                    82:cd:50:64:19:5f:1c:60:f9:4f:70:cd:5b:18:99:
                    f5:d7:27:f5:7c:89:84:4e:cf:0e:ee:c2:28:20:29:
                    9d:b0:fe:c6:7c:a7:74:64:2b:e8:64:2b:cb:1e:08:
                    e1:fe:90:da:1c:31:67:a2:b8:73:71:6b:a8:ac:56:
                    5c:5a:61:2f:f7:b8:a3:9e:b1:61:2f:30:dd:a2:bd:
                    75:b7:13:0c:fe:a7:6e:4b:11:2f:c2:a5:86:a1:06:
                    51:58:11:45:cd:9d:7b:f8:50:42:b1:2b:63:5b:aa:
                    5c:f6:90:81:21:31:b6:53:42:fd:34:e3:89:ee:c7:
                    e1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F5:56:9B:EC:F3:D7:F4:2D:07:9D:1A:6D:BC:F6:9E:60:19:1A:53
            X509v3 Authority Key Identifier:
                keyid:57:64:71:CF:75:77:22:2B:16:0C:49:0B:FE:EA:5C:66:CB:21:87:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/576471CF7577222B160C490BFEEA5C66CB21874F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576471CF7577222B160C490BFEEA5C66CB21874F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3130392e302f32342d3234203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:af:1c:7e:d1:fe:59:28:11:e3:69:0d:ef:f3:0e:dd:54:a0:
         e3:be:f9:2f:a7:ef:d2:6c:14:b1:65:4c:fb:3c:4e:b0:0b:9d:
         9d:e8:89:c4:fb:50:fc:11:bd:f3:2d:80:bc:e8:7a:1f:66:2a:
         f9:2f:0e:1d:8c:74:8d:4c:72:41:c6:55:9c:75:fe:29:d9:bf:
         44:f0:91:1d:85:19:2c:18:a9:ec:98:db:d5:38:cd:75:be:6a:
         c9:87:57:e5:15:7e:09:75:f4:2c:2e:18:31:1d:7c:54:0f:a0:
         be:af:ba:2b:a1:cd:70:e4:e3:f2:7b:98:4b:33:63:d1:5d:22:
         73:58:00:1d:0c:4b:c6:94:b1:81:fd:95:40:55:42:67:52:b9:
         88:09:8d:82:6b:41:b4:ba:7c:6e:b3:80:14:11:bb:88:88:dd:
         91:f1:f2:95:9f:3b:1d:8b:bc:8f:6b:e1:13:83:8c:e3:bf:45:
         eb:a3:1b:d3:f3:8f:ee:a8:4f:f4:3a:81:f4:a0:93:d5:bf:0d:
         27:b0:82:42:ca:40:01:28:b8:34:2f:00:07:b5:c1:42:35:fe:
         cb:6f:ed:29:b4:f4:c1:31:f8:a9:fb:8d:6a:af:29:92:d9:6c:
         69:f6:43:be:5f:0f:a1:99:d8:7c:a9:ca:cb:1d:10:e0:7d:08:
         75:90:79:fb
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUT3x0ucUXr6CpdcxmxFZrxrImkLEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc2NDcxQ0Y3NTc3MjIyQjE2MEM0OTBCRkVFQTVDNjZD
QjIxODc0RjAeFw0yNTA2MDQwODA3MDRaFw0yNjA2MDMwODEyMDRaMDMxMTAvBgNV
BAMTKEFDRjU1NjlCRUNGM0Q3RjQyRDA3OUQxQTZEQkNGNjlFNjAxOTFBNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7GsRuyAgL+argBg60grvRwjf
Xkdp8QRllEJ1OcOiAG5etWShF17BlnN3ZHC06R9QXiNcxAXvXZDTOOzJkQq+3mX3
RtrAeXXj8L4x7fneFju77mbNg9+aBIXDm6eYNGBhVviXbGcWV9xh3rQ5JI2NeuSL
bjWjLO2ImuJMvKLZKjLvP4N9R4LNUGQZXxxg+U9wzVsYmfXXJ/V8iYROzw7uwigg
KZ2w/sZ8p3RkK+hkK8seCOH+kNocMWeiuHNxa6isVlxaYS/3uKOesWEvMN2ivXW3
Ewz+p25LES/CpYahBlFYEUXNnXv4UEKxK2Nbqlz2kIEhMbZTQv0044nux+EfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUrPVWm+zz1/QtB50abbz2nmAZGlMwHwYDVR0j
BBgwFoAUV2Rxz3V3IisWDEkL/upcZsshh08wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnk1UTlDOUx3ZnJlU0xrSzhYc01GN3hBanc1aDlLcWp5Ym1OVnZQd2c0
dUMvMC81NzY0NzFDRjc1NzcyMjJCMTYwQzQ5MEJGRUVBNUM2NkNCMjE4NzRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3NjQ3MUNGNzU3NzIyMkIx
NjBDNDkwQkZFRUE1QzY2Q0IyMTg3NEYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5NVE5QzlMd2ZyZVNMa0s4WHNNRjd4QWp3NWg5S3FqeWJtTlZ2UHdnNHVDLzAv
MzEzNjM0MmUzMTM2MzMyZTMxMzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM5MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKSjbTANBgkqhkiG9w0BAQsFAAOCAQEAka8c
ftH+WSgR42kN7/MO3VSg4775L6fv0mwUsWVM+zxOsAudneiJxPtQ/BG98y2AvOh6
H2Yq+S8OHYx0jUxyQcZVnHX+Kdm/RPCRHYUZLBip7Jjb1TjNdb5qyYdX5RV+CXX0
LC4YMR18VA+gvq+6K6HNcOTj8nuYSzNj0V0ic1gAHQxLxpSxgf2VQFVCZ1K5iAmN
gmtBtLp8brOAFBG7iIjdkfHylZ87HYu8j2vhE4OM479F66Mb0/OP7qhP9DqB9KCT
1b8NJ7CCQspAASi4NC8AB7XBQjX+y2/tKbT0wTH4qfuNaq8pktlsafZDvl8PoZnY
fKnKyx0Q4H0IdZB5+w==
-----END CERTIFICATE-----
Generated at Mon Jun 9 05:11:38 2025 by rpki-client