Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/3138362e3233352e3235322e302f32322d3234203d3e20323633323835.roa
File:                     3138362e3233352e3235322e302f32322d3234203d3e20323633323835.roa (raw, json)
Hash identifier:          dfyP0Df5w0Z+yCi+3DT4Tz2E4groDxQVIK8Ud1lRssE=
Subject key identifier:   90:9B:B3:35:FD:EB:3B:04:D2:CE:24:3B:0C:3A:DE:BA:BF:0A:9C:53
Certificate issuer:       /CN=66B93796F42390B681A3DC1CC99F8E8E43CE7BDF
Certificate serial:       34A38FF8C2864767E9DA1C704EC5097C4D2CE6F9
Authority key identifier: 66:B9:37:96:F4:23:90:B6:81:A3:DC:1C:C9:9F:8E:8E:43:CE:7B:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/3138362e3233352e3235322e302f32322d3234203d3e20323633323835.roa
Signing time:             Thu 06 Mar 2025 09:55:29 +0000
ROA not before:           Thu 06 Mar 2025 09:50:29 +0000
ROA not after:            Thu 05 Mar 2026 09:55:29 +0000
asID:                     263285
IP address blocks:        186.235.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.crl
                          rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 23:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a3:8f:f8:c2:86:47:67:e9:da:1c:70:4e:c5:09:7c:4d:2c:e6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B93796F42390B681A3DC1CC99F8E8E43CE7BDF
        Validity
            Not Before: Mar  6 09:50:29 2025 GMT
            Not After : Mar  5 09:55:29 2026 GMT
        Subject: CN=909BB335FDEB3B04D2CE243B0C3ADEBABF0A9C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:ff:d6:7c:63:e8:47:e9:6c:c9:e4:17:84:
                    0c:db:0c:62:cc:d6:91:10:bd:31:19:11:2a:3f:61:
                    7c:42:46:53:e9:30:84:8f:f6:64:aa:92:4e:14:6b:
                    9b:7e:39:81:04:59:e8:36:b7:7a:f8:5a:11:70:2c:
                    f1:2e:6b:05:55:e1:3f:ef:87:a0:92:73:a2:b5:ea:
                    4b:d9:f0:11:44:d7:6f:27:62:fd:70:84:c1:1a:69:
                    34:3b:63:b4:db:fb:c0:e1:07:e2:28:73:ac:be:59:
                    3e:94:85:2f:e1:9a:84:69:57:56:03:65:b0:6f:2c:
                    88:b8:7a:e9:73:32:d5:b6:71:21:0f:16:82:49:59:
                    8c:f1:de:cd:2d:5b:fe:c6:c7:59:2d:aa:36:7c:42:
                    3d:de:07:df:89:14:95:8b:db:ea:89:da:0e:74:1d:
                    b1:3f:95:57:5d:fc:ac:ee:eb:fd:11:e9:af:fd:58:
                    9a:b0:db:d9:f7:3a:9a:47:c6:04:95:bb:8c:d2:ae:
                    e0:71:62:da:67:0a:a3:c5:87:53:fa:f5:1f:68:e0:
                    32:c2:a1:5d:bf:48:29:a1:f2:8a:13:a3:54:32:48:
                    07:4e:03:ae:b5:7d:82:40:56:91:1a:70:dd:83:a6:
                    28:78:11:39:87:d6:ac:fd:36:cc:9c:91:f8:d9:74:
                    5b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9B:B3:35:FD:EB:3B:04:D2:CE:24:3B:0C:3A:DE:BA:BF:0A:9C:53
            X509v3 Authority Key Identifier:
                keyid:66:B9:37:96:F4:23:90:B6:81:A3:DC:1C:C9:9F:8E:8E:43:CE:7B:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/3138362e3233352e3235322e302f32322d3234203d3e20323633323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:bb:36:9c:f6:cf:92:3b:be:95:7c:03:1b:d0:a2:42:81:9c:
         dc:e9:89:d6:e0:bd:d1:7d:16:4d:fa:dc:50:c5:c1:06:22:53:
         01:07:78:90:2c:77:87:6c:25:f2:fa:4a:50:ef:bc:d0:ed:98:
         39:d3:59:74:89:27:03:26:35:1c:8a:e0:55:48:86:06:20:da:
         d3:e4:10:75:ce:8d:3d:8c:d4:63:f6:51:62:56:86:d4:5c:da:
         dd:41:2a:6b:82:34:d6:6d:22:2f:6e:77:2e:5c:e5:aa:60:91:
         69:de:d6:47:74:f1:8a:71:97:73:92:ec:0e:f4:a3:af:9a:cd:
         54:ad:85:a6:4d:f4:c5:25:e2:00:4e:86:ee:40:ac:cb:7a:ea:
         ed:2b:02:1a:26:6a:4f:ec:d0:4c:d3:6e:00:a8:ad:a9:13:e6:
         aa:2f:e4:e6:48:c8:22:a5:b6:ce:36:9e:2b:59:8e:08:69:45:
         6c:15:f3:42:f4:58:a6:f6:cd:fc:99:92:24:70:d7:ab:54:15:
         08:af:f2:a6:9a:9f:c0:15:dd:ea:67:91:3b:6f:71:29:a1:ff:
         45:ce:45:8b:68:b0:7c:36:98:53:49:c4:36:98:dd:30:77:5a:
         86:f4:23:d4:7c:a0:03:d1:b9:13:0f:5d:15:3a:7b:c9:da:0c:
         02:63:ec:27
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNKOP+MKGR2fp2hxwTsUJfE0s5vkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZCOTM3OTZGNDIzOTBCNjgxQTNEQzFDQzk5RjhFOEU0
M0NFN0JERjAeFw0yNTAzMDYwOTUwMjlaFw0yNjAzMDUwOTU1MjlaMDMxMTAvBgNV
BAMTKDkwOUJCMzM1RkRFQjNCMDREMkNFMjQzQjBDM0FERUJBQkYwQTlDNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2v/WfGPoR+lsyeQXhAzbDGLM
1pEQvTEZESo/YXxCRlPpMISP9mSqkk4Ua5t+OYEEWeg2t3r4WhFwLPEuawVV4T/v
h6CSc6K16kvZ8BFE128nYv1whMEaaTQ7Y7Tb+8DhB+Ioc6y+WT6UhS/hmoRpV1YD
ZbBvLIi4eulzMtW2cSEPFoJJWYzx3s0tW/7Gx1ktqjZ8Qj3eB9+JFJWL2+qJ2g50
HbE/lVdd/Kzu6/0R6a/9WJqw29n3OppHxgSVu4zSruBxYtpnCqPFh1P69R9o4DLC
oV2/SCmh8ooTo1QySAdOA661fYJAVpEacN2Dpih4ETmH1qz9NsyckfjZdFtHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkJuzNf3rOwTSziQ7DDreur8KnFMwHwYDVR0j
BBgwFoAUZrk3lvQjkLaBo9wcyZ+OjkPOe98wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFZXY1hOajNLSEVFNGF5WXZoNGdFR0ZoR3ROZnlTYmkxWEFvVlllNkcy
NXcvMS82NkI5Mzc5NkY0MjM5MEI2ODFBM0RDMUNDOTlGOEU4RTQzQ0U3QkRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2QjkzNzk2RjQyMzkwQjY4
MUEzREMxQ0M5OUY4RThFNDNDRTdCREYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhWV2NYTmozS0hFRTRheVl2aDRnRUdGaEd0TmZ5U2JpMVhBb1ZZZTZHMjV3LzEv
MzEzODM2MmUzMjMzMzUyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzMyMzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArrr/DANBgkqhkiG9w0BAQsFAAOCAQEAA7s2
nPbPkju+lXwDG9CiQoGc3OmJ1uC90X0WTfrcUMXBBiJTAQd4kCx3h2wl8vpKUO+8
0O2YOdNZdIknAyY1HIrgVUiGBiDa0+QQdc6NPYzUY/ZRYlaG1Fza3UEqa4I01m0i
L253LlzlqmCRad7WR3TxinGXc5LsDvSjr5rNVK2Fpk30xSXiAE6G7kCsy3rq7SsC
GiZqT+zQTNNuAKitqRPmqi/k5kjIIqW2zjaeK1mOCGlFbBXzQvRYpvbN/JmSJHDX
q1QVCK/yppqfwBXd6meRO29xKaH/Rc5Fi2iwfDaYU0nENpjdMHdahvQj1HygA9G5
Ew9dFTp7ydoMAmPsJw==
-----END CERTIFICATE-----
Generated at Sun Apr 13 06:02:32 2025 by rpki-client