Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e38342e35362e302f32322d3234203d3e203238313436.roa
File:                     3137302e38342e35362e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          zSpGnkOIkxDXHoUDytayg2QztaxatVFlNKUnv4TtctY=
Subject key identifier:   3C:BC:DD:10:47:4A:5B:7A:6B:E7:30:8D:C8:B1:51:19:AE:D1:58:A5
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       7570491D38E042EA94230E8DEA8A09BF66370E66
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e38342e35362e302f32322d3234203d3e203238313436.roa
Signing time:             Mon 12 May 2025 12:54:22 +0000
ROA not before:           Mon 12 May 2025 12:49:22 +0000
ROA not after:            Mon 11 May 2026 12:54:22 +0000
asID:                     28146
IP address blocks:        170.84.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 02:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:70:49:1d:38:e0:42:ea:94:23:0e:8d:ea:8a:09:bf:66:37:0e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:49:22 2025 GMT
            Not After : May 11 12:54:22 2026 GMT
        Subject: CN=3CBCDD10474A5B7A6BE7308DC8B15119AED158A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:5a:0c:8f:c0:c1:b7:c3:38:b7:3a:5b:33:
                    f5:c7:de:b2:59:14:b5:70:e2:a5:ee:a2:6e:a4:9b:
                    59:bc:c9:b3:48:7b:00:31:b2:cc:37:d9:c6:76:d1:
                    a7:12:fe:1f:8a:cb:81:98:85:8e:83:81:4f:5b:73:
                    d4:e8:d8:cd:e5:34:ba:82:11:13:f3:54:8d:bb:31:
                    39:9c:92:c8:4a:00:b5:49:d0:4d:2c:e5:28:b1:57:
                    e3:1f:d5:bf:b4:82:21:16:90:1e:01:93:cb:9f:f2:
                    79:18:ef:c6:85:86:dd:c0:92:59:a5:1e:55:4d:db:
                    a0:68:2c:da:e8:e6:68:b7:d3:1c:4e:2c:a9:c3:90:
                    ee:2c:90:68:27:ce:c7:d2:3d:5b:a9:a8:94:a0:b5:
                    da:47:b2:8d:72:0a:43:39:42:51:80:94:2f:45:c3:
                    40:3b:cc:28:a6:61:63:b7:d9:f9:66:fe:f7:b0:f7:
                    91:34:d9:ac:ab:1f:d1:29:fb:df:1a:3a:61:ec:9a:
                    62:7f:d4:9d:62:26:08:ae:42:7d:8b:67:af:33:e7:
                    de:dd:79:2e:3c:1d:e4:b3:ba:4d:8c:fd:30:7e:17:
                    01:fe:07:3a:69:d0:9f:b2:f4:a4:a3:30:d3:92:a8:
                    75:30:7e:0c:e4:fb:02:a3:4e:0c:d1:a3:e1:97:50:
                    ab:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BC:DD:10:47:4A:5B:7A:6B:E7:30:8D:C8:B1:51:19:AE:D1:58:A5
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e38342e35362e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:1e:5c:f1:d8:c3:92:cf:58:d4:0b:1b:b7:6b:58:ef:0d:81:
         70:27:95:41:42:7e:a2:ca:d1:86:77:e5:03:5b:d8:f4:b2:25:
         3e:64:91:93:2e:13:bb:ab:fa:c3:50:bf:cf:86:3b:18:b5:ee:
         4b:7b:73:a4:83:85:d4:f8:9e:33:fa:76:2e:6b:00:f1:96:a3:
         d5:1d:a1:1a:1c:00:cf:3a:5d:48:47:8e:e4:f4:2a:f4:48:3e:
         5b:da:9c:94:06:da:80:ef:11:7b:14:6d:81:6e:0c:14:76:61:
         36:79:79:93:dd:90:4a:dd:f2:2a:0f:3e:a7:97:60:dd:0c:4a:
         01:c4:83:4b:5b:87:eb:50:a9:f0:67:87:89:f4:05:48:de:93:
         90:6a:00:23:42:70:e8:63:3c:5f:1d:5a:6b:c9:ad:28:19:c3:
         bb:1d:7e:7d:86:1c:dc:7f:3d:55:1a:14:a6:be:37:75:f1:0e:
         8b:58:12:ad:8a:ca:a5:e7:57:06:6d:e2:79:c4:72:fb:3d:1c:
         5c:b8:e1:ba:e8:c6:b6:af:40:fd:3e:0c:34:4f:6b:6d:86:f7:
         4b:3e:c3:5c:32:4f:a3:69:c2:fd:bc:61:36:8e:61:9c:25:2f:
         84:a1:c4:2a:5a:29:8d:80:02:8b:e9:28:51:3b:4f:c1:e5:02:
         d7:fd:f2:bb
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUdXBJHTjgQuqUIw6N6ooJv2Y3DmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FCN0M5QUFFQTFEMjkyMDEwMkQwNTJFMUFDNDVFQ0Ez
NDM5QjJGMDAeFw0yNTA1MTIxMjQ5MjJaFw0yNjA1MTExMjU0MjJaMDMxMTAvBgNV
BAMTKDNDQkNERDEwNDc0QTVCN0E2QkU3MzA4REM4QjE1MTE5QUVEMTU4QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDrFoMj8DBt8M4tzpbM/XH3rJZ
FLVw4qXuom6km1m8ybNIewAxssw32cZ20acS/h+Ky4GYhY6DgU9bc9To2M3lNLqC
ERPzVI27MTmckshKALVJ0E0s5SixV+Mf1b+0giEWkB4Bk8uf8nkY78aFht3Aklml
HlVN26BoLNro5mi30xxOLKnDkO4skGgnzsfSPVupqJSgtdpHso1yCkM5QlGAlC9F
w0A7zCimYWO32flm/vew95E02ayrH9Ep+98aOmHsmmJ/1J1iJgiuQn2LZ68z597d
eS48HeSzuk2M/TB+FwH+Bzpp0J+y9KSjMNOSqHUwfgzk+wKjTgzRo+GXUKsTAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUPLzdEEdKW3pr5zCNyLFRGa7RWKUwHwYDVR0j
BBgwFoAUerfJquodKSAQLQUuGsReyjQ5svAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZEQ2g2WDV5cktkN0NZWXZacERMOVNxU3pNQUJqUGFhNmRzMUtSSzZx
SzYvMC83QUI3QzlBQUVBMUQyOTIwMTAyRDA1MkUxQUM0NUVDQTM0MzlCMkYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBQjdDOUFBRUExRDI5MjAx
MDJEMDUyRTFBQzQ1RUNBMzQzOUIyRjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGRENoNlg1eXJLZDdDWVl2WnBETDlTcVN6TUFCalBhYTZkczFLUks2cUs2LzAv
MzEzNzMwMmUzODM0MmUzNTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMx
MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqpUODANBgkqhkiG9w0BAQsFAAOCAQEAeR5c8djDks9Y
1Asbt2tY7w2BcCeVQUJ+osrRhnflA1vY9LIlPmSRky4Tu6v6w1C/z4Y7GLXuS3tz
pIOF1PieM/p2LmsA8Zaj1R2hGhwAzzpdSEeO5PQq9Eg+W9qclAbagO8RexRtgW4M
FHZhNnl5k92QSt3yKg8+p5dg3QxKAcSDS1uH61Cp8GeHifQFSN6TkGoAI0Jw6GM8
Xx1aa8mtKBnDux1+fYYc3H89VRoUpr43dfEOi1gSrYrKpedXBm3iecRy+z0cXLjh
uujGtq9A/T4MNE9rbYb3Sz7DXDJPo2nC/bxhNo5hnCUvhKHEKlopjYACi+koUTtP
weUC1/3yuw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:01:51 2025 by rpki-client