Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32322d3232203d3e20323632353033.roa
File:                     3136372e3234392e3136382e302f32322d3232203d3e20323632353033.roa (raw, json)
Hash identifier:          8W8CLcB8uWOuW/FUdY96EbZm3qEBajAhiSff50coxo8=
Subject key identifier:   D7:8A:D5:0F:76:9D:CB:C0:BB:8E:8C:17:12:6A:C6:0C:9B:63:EE:70
Certificate issuer:       /CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
Certificate serial:       159D6EFD647068D80BFE79C2B64912CF63B8474A
Authority key identifier: AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32322d3232203d3e20323632353033.roa
Signing time:             Thu 29 May 2025 18:50:13 +0000
ROA not before:           Thu 29 May 2025 18:45:13 +0000
ROA not after:            Thu 28 May 2026 18:50:13 +0000
asID:                     262503
IP address blocks:        167.249.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 14:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:9d:6e:fd:64:70:68:d8:0b:fe:79:c2:b6:49:12:cf:63:b8:47:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
        Validity
            Not Before: May 29 18:45:13 2025 GMT
            Not After : May 28 18:50:13 2026 GMT
        Subject: CN=D78AD50F769DCBC0BB8E8C17126AC60C9B63EE70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:ed:fd:aa:a1:b7:22:24:ba:e2:cf:ef:8e:
                    79:98:3f:08:5d:73:bb:51:0d:9a:16:7b:ca:28:d5:
                    9f:b9:79:eb:e9:91:f3:79:49:4e:43:af:8b:46:e3:
                    e0:fa:03:6c:ae:85:2c:d5:1e:68:b1:fc:3c:24:10:
                    5b:62:32:bd:1d:35:78:e1:58:35:78:13:20:06:98:
                    5a:d2:dc:68:26:09:fb:60:7a:43:51:ea:1f:34:c1:
                    f3:4c:c9:20:ef:32:4b:a1:d9:f1:95:3d:7c:e6:61:
                    03:3d:0f:1e:f5:be:8a:53:70:6c:19:28:ab:d4:0d:
                    50:e6:3c:85:c3:e4:18:cf:95:10:c8:b3:86:e2:10:
                    63:ac:ec:cf:5c:e0:3d:f2:3c:40:51:22:0c:e6:0d:
                    28:be:ef:98:ae:88:9b:f3:d6:1c:91:1c:74:27:99:
                    d8:a3:4f:1b:29:48:55:32:52:03:a5:19:31:80:a3:
                    74:18:bc:73:ae:f6:a3:27:ee:cc:12:83:69:0d:c4:
                    87:f9:1f:84:e3:bd:37:12:eb:75:b8:68:30:b4:68:
                    a0:05:20:04:58:be:db:46:62:b7:99:ff:62:80:6e:
                    56:be:69:d3:1e:02:21:5a:f5:94:56:1c:f4:dc:62:
                    01:93:53:cb:7c:3a:54:d4:8c:07:cb:7f:b3:46:5e:
                    5b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8A:D5:0F:76:9D:CB:C0:BB:8E:8C:17:12:6A:C6:0C:9B:63:EE:70
            X509v3 Authority Key Identifier:
                keyid:AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32322d3232203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:c8:6c:a6:dd:41:1a:81:f8:57:81:58:f4:cf:9b:21:52:d3:
         e9:d2:4e:b6:cb:37:4a:c9:2d:0c:18:61:09:65:55:47:8a:07:
         17:75:2c:36:9c:91:03:05:b0:57:c7:bf:f4:11:04:5f:e7:a7:
         5a:f2:c5:02:26:26:ba:59:49:e8:40:f6:1e:79:b1:1e:97:d7:
         de:82:a2:d2:2b:fd:1f:a4:ad:7d:90:01:09:9e:c7:2d:ee:e5:
         b7:94:8b:55:63:b7:a7:4c:b4:9e:59:b4:45:42:8b:77:38:3f:
         6f:a6:f3:bd:6f:3d:45:76:af:9e:36:39:97:15:c7:6a:ce:fc:
         81:d3:02:42:c3:14:18:e1:76:8a:81:61:08:5c:8e:f3:59:e1:
         d6:68:d0:f1:9e:5b:a3:37:9e:da:78:d6:87:ff:60:7a:81:56:
         e7:a1:16:70:94:a5:53:ac:c8:a6:4a:51:ae:66:14:b2:dd:65:
         fa:c0:61:a9:e9:89:a0:61:89:73:2e:c7:a5:6e:6e:f9:e1:79:
         b3:6e:ae:c2:82:b1:8f:7f:04:80:b0:41:b0:15:d5:b9:a5:c7:
         83:fc:c8:df:31:12:12:60:e5:31:28:54:f4:fb:6e:1f:9f:58:
         44:b0:51:f3:70:6d:85:ed:78:73:90:6f:51:6f:eb:47:38:4d:
         50:a3:de:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:31:18 2025 by rpki-client