Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/3139302e3131322e3136342e302f32332d3233203d3e20323633303837.roa
File:                     3139302e3131322e3136342e302f32332d3233203d3e20323633303837.roa (raw, json)
Hash identifier:          4O2XGSNYMievAU6cAYcw38ZmV3ZBr/q77AVmJAs0X5w=
Subject key identifier:   02:D0:FD:63:80:6F:12:79:12:D7:97:B3:65:84:BB:71:1B:6C:9E:E4
Certificate issuer:       /CN=FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28
Certificate serial:       6D26E3986FF9208F1C97A92A0C5CF038F8DDC341
Authority key identifier: FD:F4:72:92:5F:FF:60:FC:8F:7D:3F:64:15:7C:DC:51:AC:3D:EF:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/3139302e3131322e3136342e302f32332d3233203d3e20323633303837.roa
Signing time:             Thu 23 Jan 2025 13:56:57 +0000
ROA not before:           Thu 23 Jan 2025 13:51:57 +0000
ROA not after:            Thu 22 Jan 2026 13:56:57 +0000
asID:                     263087
IP address blocks:        190.112.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28.crl
                          rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 18:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:26:e3:98:6f:f9:20:8f:1c:97:a9:2a:0c:5c:f0:38:f8:dd:c3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28
        Validity
            Not Before: Jan 23 13:51:57 2025 GMT
            Not After : Jan 22 13:56:57 2026 GMT
        Subject: CN=02D0FD63806F127912D797B36584BB711B6C9EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:47:7e:4d:80:61:7c:8d:6e:b4:4e:fc:47:
                    4b:63:99:00:4b:c0:38:9e:07:d6:4e:e1:ad:4c:bb:
                    4b:08:55:21:fb:6e:a9:d2:a5:6b:f9:c9:5d:70:e5:
                    11:8e:a7:7b:ac:d8:5e:61:79:c7:ba:c0:e3:79:25:
                    0d:29:ac:fe:dd:b0:63:91:f8:d4:92:e2:14:ab:83:
                    5a:e4:a4:1f:3a:9c:21:18:49:a2:41:0e:2c:74:23:
                    f2:4b:09:e2:c0:d6:27:09:7d:02:40:8d:36:97:78:
                    9c:be:2c:c7:cf:74:ce:43:f4:75:80:06:6c:30:58:
                    8e:c2:28:f9:09:7b:6a:d5:30:51:12:e4:0c:7f:6c:
                    90:09:2d:b4:63:26:f2:85:41:26:c5:1b:da:dc:2c:
                    1a:47:d6:2a:23:bf:8e:90:d5:dc:11:41:33:15:f2:
                    8f:e8:16:e5:9d:c0:01:fc:f5:85:66:3b:d7:ba:3b:
                    46:7f:b4:a2:85:56:4c:b0:25:f7:41:df:d5:c6:a1:
                    05:94:cf:73:43:fb:fa:b3:95:f2:ec:40:11:de:f8:
                    fa:c8:a0:df:85:d4:f8:c7:50:ce:f5:4f:5d:51:41:
                    95:3e:04:22:32:ba:11:15:9e:dd:09:db:18:03:41:
                    1e:e8:5b:fa:cc:2a:2c:6c:d2:34:f1:84:f8:69:fe:
                    f5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D0:FD:63:80:6F:12:79:12:D7:97:B3:65:84:BB:71:1B:6C:9E:E4
            X509v3 Authority Key Identifier:
                keyid:FD:F4:72:92:5F:FF:60:FC:8F:7D:3F:64:15:7C:DC:51:AC:3D:EF:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/3139302e3131322e3136342e302f32332d3233203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:7f:81:a0:6d:7c:27:6f:d5:8d:e6:a7:37:a6:35:76:72:2d:
         97:23:9a:cf:e3:dd:f5:1a:d0:58:19:31:81:4b:e2:cd:04:24:
         fe:86:f3:53:7b:d4:db:44:99:7e:f7:1f:e7:78:25:2b:d3:ae:
         12:71:28:81:18:1d:99:ad:04:14:4b:a0:9f:b6:cd:ba:02:6e:
         59:16:9c:1a:46:6b:96:0a:0c:e6:7c:07:06:ea:0f:99:24:c9:
         0a:80:14:b1:10:a9:f7:c4:20:4f:cb:8e:ae:2c:da:27:b3:7e:
         f8:a9:99:88:b2:0e:7c:a5:f5:6f:aa:b5:60:14:cd:a1:d6:47:
         11:8a:5e:2f:f5:70:f0:bc:74:07:89:c8:ff:13:00:f6:68:71:
         97:c4:20:7e:da:fa:e9:45:57:a4:b5:42:1c:83:b3:11:5a:92:
         15:71:6c:da:8e:0d:7b:a4:27:90:ba:5d:c3:cf:17:e2:ce:a9:
         99:c7:c8:fb:a2:95:fe:c7:72:8f:6c:89:17:c1:f8:5e:93:0e:
         95:f6:4a:3f:9c:c2:1d:b1:3d:cd:d3:f7:f6:02:df:4a:aa:0b:
         b9:49:56:91:6b:fa:28:13:33:ba:f8:b5:dc:6e:3d:d8:13:84:
         af:c3:29:9b:3e:05:25:78:0b:f8:3f:ee:e5:96:ca:4f:5f:1b:
         c6:47:4d:c1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbSbjmG/5II8cl6kqDFzwOPjdw0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRGNDcyOTI1RkZGNjBGQzhGN0QzRjY0MTU3Q0RDNTFB
QzNERUYyODAeFw0yNTAxMjMxMzUxNTdaFw0yNjAxMjIxMzU2NTdaMDMxMTAvBgNV
BAMTKDAyRDBGRDYzODA2RjEyNzkxMkQ3OTdCMzY1ODRCQjcxMUI2QzlFRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuF0d+TYBhfI1utE78R0tjmQBL
wDieB9ZO4a1Mu0sIVSH7bqnSpWv5yV1w5RGOp3us2F5hece6wON5JQ0prP7dsGOR
+NSS4hSrg1rkpB86nCEYSaJBDix0I/JLCeLA1icJfQJAjTaXeJy+LMfPdM5D9HWA
BmwwWI7CKPkJe2rVMFES5Ax/bJAJLbRjJvKFQSbFG9rcLBpH1iojv46Q1dwRQTMV
8o/oFuWdwAH89YVmO9e6O0Z/tKKFVkywJfdB39XGoQWUz3ND+/qzlfLsQBHe+PrI
oN+F1PjHUM71T11RQZU+BCIyuhEVnt0J2xgDQR7oW/rMKixs0jTxhPhp/vXBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUAtD9Y4BvEnkS15ezZYS7cRtsnuQwHwYDVR0j
BBgwFoAU/fRykl//YPyPfT9kFXzcUaw97ygwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0VKVFNhRUJLYmVKWlpTeDFNcTdYU0NKSzE1THJZZGdZTUFGUE1nbkxC
RzkvMC9GREY0NzI5MjVGRkY2MEZDOEY3RDNGNjQxNTdDREM1MUFDM0RFRjI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZERjQ3MjkyNUZGRjYwRkM4
RjdEM0Y2NDE1N0NEQzUxQUMzREVGMjguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFSlRTYUVCS2JlSlpaU3gxTXE3WFNDSksxNUxyWWRnWU1BRlBNZ25MQkc5LzAv
MzEzOTMwMmUzMTMxMzIyZTMxMzYzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzMwMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAb5wpDANBgkqhkiG9w0BAQsFAAOCAQEAlH+B
oG18J2/VjeanN6Y1dnItlyOaz+Pd9RrQWBkxgUvizQQk/obzU3vU20SZfvcf53gl
K9OuEnEogRgdma0EFEugn7bNugJuWRacGkZrlgoM5nwHBuoPmSTJCoAUsRCp98Qg
T8uOrizaJ7N++KmZiLIOfKX1b6q1YBTNodZHEYpeL/Vw8Lx0B4nI/xMA9mhxl8Qg
ftr66UVXpLVCHIOzEVqSFXFs2o4Ne6QnkLpdw88X4s6pmcfI+6KV/sdyj2yJF8H4
XpMOlfZKP5zCHbE9zdP39gLfSqoLuUlWkWv6KBMzuvi13G492BOEr8Mpmz4FJXgL
+D/u5ZbKT18bxkdNwQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:26 2025 by rpki-client