Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/1/3134332e3133372e3231362e302f32322d3234203d3e20323634303436.roa
File:                     3134332e3133372e3231362e302f32322d3234203d3e20323634303436.roa (raw, json)
Hash identifier:          lpefHjMpw+mbSDBR4T0S4kQNAh8vdN5KrkFysqKT8hg=
Subject key identifier:   F7:F9:D0:56:4B:88:B2:BB:15:5A:71:6C:14:09:C7:17:68:89:E8:05
Certificate issuer:       /CN=862365C41E0481AF7ACA562E7517210802E490EB
Certificate serial:       20D9EA34E6A0D8BFE74EB900BF3FD86D7EE1E3A3
Authority key identifier: 86:23:65:C4:1E:04:81:AF:7A:CA:56:2E:75:17:21:08:02:E4:90:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862365C41E0481AF7ACA562E7517210802E490EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/1/3134332e3133372e3231362e302f32322d3234203d3e20323634303436.roa
Signing time:             Thu 06 Mar 2025 11:55:33 +0000
ROA not before:           Thu 06 Mar 2025 11:50:33 +0000
ROA not after:            Thu 05 Mar 2026 11:55:33 +0000
asID:                     264046
IP address blocks:        143.137.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/1/862365C41E0481AF7ACA562E7517210802E490EB.crl
                          rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/1/862365C41E0481AF7ACA562E7517210802E490EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862365C41E0481AF7ACA562E7517210802E490EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 03:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d9:ea:34:e6:a0:d8:bf:e7:4e:b9:00:bf:3f:d8:6d:7e:e1:e3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862365C41E0481AF7ACA562E7517210802E490EB
        Validity
            Not Before: Mar  6 11:50:33 2025 GMT
            Not After : Mar  5 11:55:33 2026 GMT
        Subject: CN=F7F9D0564B88B2BB155A716C1409C7176889E805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:39:b7:50:03:80:ea:44:c0:d9:dd:41:fe:
                    69:11:e0:82:26:06:f3:34:53:02:53:1c:b9:cf:48:
                    ad:2e:76:1f:0f:66:e5:97:26:33:29:2e:b0:2f:6d:
                    f9:fc:67:51:5d:9c:8b:49:c6:73:1c:2c:dc:e6:a3:
                    1f:c6:8b:39:1d:9e:dc:47:d8:77:5f:be:c0:8f:1b:
                    8e:b2:cd:ac:b1:94:13:59:ee:55:02:09:ed:58:90:
                    c5:9c:32:09:7d:3d:4a:7f:53:24:cc:fc:f1:bd:9b:
                    b8:c0:60:18:c0:7e:ef:02:c7:d6:a4:37:3b:cf:0a:
                    5d:0b:9d:db:64:71:d6:c3:a8:4d:4f:37:f5:88:a9:
                    ba:50:82:88:48:81:e4:17:bf:3b:eb:f4:08:58:6b:
                    29:32:4f:8a:af:e7:62:8c:59:1c:92:a8:f5:fd:9c:
                    70:9d:73:56:55:8b:af:08:54:f1:cc:3c:38:f8:43:
                    d3:42:69:63:e3:b7:eb:e0:34:8f:dc:e3:29:24:28:
                    2d:d0:6b:99:14:9a:c0:ef:39:4e:cc:dd:0d:33:5e:
                    28:07:d3:05:d5:09:92:2a:6b:f7:60:90:16:3a:01:
                    82:ae:b5:21:73:2f:65:0d:2b:2c:50:e0:79:e4:eb:
                    57:3f:29:aa:bc:76:ce:9b:58:e4:58:d1:b8:f2:05:
                    52:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F9:D0:56:4B:88:B2:BB:15:5A:71:6C:14:09:C7:17:68:89:E8:05
            X509v3 Authority Key Identifier:
                keyid:86:23:65:C4:1E:04:81:AF:7A:CA:56:2E:75:17:21:08:02:E4:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/1/862365C41E0481AF7ACA562E7517210802E490EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862365C41E0481AF7ACA562E7517210802E490EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/1/3134332e3133372e3231362e302f32322d3234203d3e20323634303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:3b:0a:3a:25:4a:c4:f8:d4:cd:aa:91:f0:6e:fd:c5:ee:b0:
         14:c4:6b:9d:dc:d8:42:7d:45:cd:24:62:24:54:6d:f4:de:11:
         cb:b2:2e:d6:f9:65:43:79:cb:d0:a5:d1:3f:91:95:8c:71:e8:
         e1:df:e7:cd:be:02:84:92:e9:57:fe:d6:df:8a:3c:a0:54:9f:
         19:4a:ce:0e:08:e3:86:89:8d:16:af:7c:95:75:47:6e:0a:02:
         67:69:8e:c0:69:ea:97:70:1e:ab:4c:c8:bb:5d:4c:a8:b4:b4:
         67:8b:a5:e5:13:b8:d7:6c:b7:2e:fc:31:30:24:fb:f5:4e:bd:
         5c:0f:8e:56:39:08:34:f7:96:06:e3:1b:2d:74:0c:af:bd:e2:
         b8:35:ea:bd:b7:d3:c3:4b:50:b9:b8:7f:d7:9a:ee:81:7f:1c:
         30:8d:e6:ad:14:85:00:34:f6:a5:91:c0:36:0a:dd:30:08:b6:
         3c:91:2a:08:f7:9d:f8:a8:21:f2:d8:f5:af:89:25:68:bd:5f:
         2e:d3:e7:81:22:fa:6d:4a:4c:bb:cf:18:eb:ac:7c:58:09:ee:
         ee:b0:71:37:8e:a4:d1:53:cb:1b:af:0b:ef:0a:67:09:73:5e:
         1c:d4:97:8c:d4:bc:e4:0b:6f:39:a0:fb:8a:75:59:7d:f3:39:
         cb:f6:a8:67
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUINnqNOag2L/nTrkAvz/YbX7h46MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODYyMzY1QzQxRTA0ODFBRjdBQ0E1NjJFNzUxNzIxMDgw
MkU0OTBFQjAeFw0yNTAzMDYxMTUwMzNaFw0yNjAzMDUxMTU1MzNaMDMxMTAvBgNV
BAMTKEY3RjlEMDU2NEI4OEIyQkIxNTVBNzE2QzE0MDlDNzE3Njg4OUU4MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr9Tm3UAOA6kTA2d1B/mkR4IIm
BvM0UwJTHLnPSK0udh8PZuWXJjMpLrAvbfn8Z1FdnItJxnMcLNzmox/GizkdntxH
2HdfvsCPG46yzayxlBNZ7lUCCe1YkMWcMgl9PUp/UyTM/PG9m7jAYBjAfu8Cx9ak
NzvPCl0LndtkcdbDqE1PN/WIqbpQgohIgeQXvzvr9AhYaykyT4qv52KMWRySqPX9
nHCdc1ZVi68IVPHMPDj4Q9NCaWPjt+vgNI/c4ykkKC3Qa5kUmsDvOU7M3Q0zXigH
0wXVCZIqa/dgkBY6AYKutSFzL2UNKyxQ4Hnk61c/Kaq8ds6bWORY0bjyBVLjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU9/nQVkuIsrsVWnFsFAnHF2iJ6AUwHwYDVR0j
BBgwFoAUhiNlxB4Ega96ylYudRchCALkkOswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUo2dkF0R3ZUNXRMeWhOOXRIcHR0WUY3aWlRdzlyTFFpQ1laZXZmd3pw
OGIvMS84NjIzNjVDNDFFMDQ4MUFGN0FDQTU2MkU3NTE3MjEwODAyRTQ5MEVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2MjM2NUM0MUUwNDgxQUY3
QUNBNTYyRTc1MTcyMTA4MDJFNDkwRUIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlKNnZBdEd2VDV0THloTjl0SHB0dFlGN2lpUXc5ckxRaUNZWmV2Znd6cDhiLzEv
MzEzNDMzMmUzMTMzMzcyZTMyMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDMwMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo+J2DANBgkqhkiG9w0BAQsFAAOCAQEAYDsK
OiVKxPjUzaqR8G79xe6wFMRrndzYQn1FzSRiJFRt9N4Ry7Iu1vllQ3nL0KXRP5GV
jHHo4d/nzb4ChJLpV/7W34o8oFSfGUrODgjjhomNFq98lXVHbgoCZ2mOwGnql3Ae
q0zIu11MqLS0Z4ul5RO412y3LvwxMCT79U69XA+OVjkINPeWBuMbLXQMr73iuDXq
vbfTw0tQubh/15rugX8cMI3mrRSFADT2pZHANgrdMAi2PJEqCPed+Kgh8tj1r4kl
aL1fLtPngSL6bUpMu88Y66x8WAnu7rBxN46k0VPLG68L7wpnCXNeHNSXjNS85Atv
OaD7inVZffM5y/aoZw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:47:34 2025 by rpki-client