Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/3137302e3234352e37362e302f32322d3332203d3e20323636303135.roa
File:                     3137302e3234352e37362e302f32322d3332203d3e20323636303135.roa (raw, json)
Hash identifier:          FMts0WWmRfv3uIJr6sQoqG85fvB8sMOGzi7yG5qk4oU=
Subject key identifier:   04:02:4E:40:33:CA:B3:7A:25:BC:51:99:CC:D0:4C:E1:F8:BF:63:BE
Certificate issuer:       /CN=54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A
Certificate serial:       2C1FADD76486E22125459C86A4B28AC55E24E9BC
Authority key identifier: 54:65:48:55:AF:7A:47:FA:3E:E5:E7:AF:D4:22:FF:D3:DB:BF:EC:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/3137302e3234352e37362e302f32322d3332203d3e20323636303135.roa
Signing time:             Sat 05 Apr 2025 00:53:18 +0000
ROA not before:           Sat 05 Apr 2025 00:48:18 +0000
ROA not after:            Sat 04 Apr 2026 00:53:18 +0000
asID:                     266015
IP address blocks:        170.245.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.crl
                          rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 08:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1f:ad:d7:64:86:e2:21:25:45:9c:86:a4:b2:8a:c5:5e:24:e9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A
        Validity
            Not Before: Apr  5 00:48:18 2025 GMT
            Not After : Apr  4 00:53:18 2026 GMT
        Subject: CN=04024E4033CAB37A25BC5199CCD04CE1F8BF63BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:db:75:dd:bc:42:3b:e9:fd:5f:b8:34:bf:91:
                    12:b6:74:77:ca:3e:31:de:c1:77:50:1b:9d:13:5e:
                    77:9e:4b:3e:2e:da:f1:c2:3b:89:b0:85:98:bc:17:
                    e1:9a:36:7d:7d:f4:02:b5:32:57:fb:c9:76:b7:96:
                    e7:bb:26:80:f0:6f:0b:ef:2e:48:e6:f5:8a:ce:e3:
                    3a:0f:1b:a8:b9:6f:da:df:47:b4:e7:1a:1d:07:cd:
                    5c:7a:d5:eb:52:54:f3:cd:5a:01:9b:b0:3f:a2:40:
                    6d:7c:e5:34:93:31:0c:2d:5a:da:c6:b0:51:2e:15:
                    10:a5:94:fa:09:33:22:6e:cf:0c:e5:23:a8:0d:12:
                    a3:5d:89:c1:cd:e0:68:8b:5c:b7:13:f5:e1:9a:91:
                    13:0d:27:3d:9f:5a:ca:05:a4:08:b4:95:98:32:e4:
                    46:5c:79:d4:a7:d5:aa:42:d1:bb:68:12:bb:72:1e:
                    f2:89:a6:53:b6:98:bd:75:97:16:91:61:72:6d:ee:
                    8b:60:39:50:50:7f:33:3b:9e:b6:ce:89:5a:ce:ab:
                    32:a0:11:f8:34:38:e8:71:2a:db:de:08:41:40:78:
                    b2:84:37:39:cd:79:bd:15:1b:fb:c0:ba:60:42:40:
                    78:f1:c0:fb:8f:36:c0:d4:87:2c:13:0a:f1:2a:11:
                    bc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:02:4E:40:33:CA:B3:7A:25:BC:51:99:CC:D0:4C:E1:F8:BF:63:BE
            X509v3 Authority Key Identifier:
                keyid:54:65:48:55:AF:7A:47:FA:3E:E5:E7:AF:D4:22:FF:D3:DB:BF:EC:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/3137302e3234352e37362e302f32322d3332203d3e20323636303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:b9:24:82:a8:ac:ae:49:8c:9a:5d:47:50:87:82:79:6f:a6:
         1a:8d:d3:18:b6:88:59:c1:bd:7d:cc:b5:63:66:03:58:95:19:
         48:2a:f2:3b:bb:ea:ac:d5:49:eb:bc:f0:4d:25:87:ea:b8:34:
         89:7b:d7:a1:25:dd:5a:fa:af:5e:1a:47:7f:fd:78:6d:9f:fd:
         21:a3:df:7d:15:99:c4:50:16:71:89:cb:13:ad:71:50:8a:89:
         ba:30:d5:ed:8f:35:77:d6:54:89:da:2a:9a:cc:c1:7a:f9:c6:
         7b:8c:3d:80:1e:e0:b4:f5:d6:1a:69:2d:91:6d:82:6a:70:5e:
         ec:f6:09:4c:36:16:13:70:06:25:96:4b:42:ce:9d:ab:87:05:
         8a:15:71:bd:a1:d7:91:3a:8b:50:db:a7:bc:f7:2e:a4:a9:3f:
         2a:ee:15:2f:11:48:67:86:bb:94:53:aa:cc:e6:03:2d:3f:1e:
         c1:ab:7f:f5:4e:b4:15:1b:17:7f:72:7f:1a:80:2f:71:da:9a:
         79:e1:e6:11:61:64:54:95:b5:8f:8c:d1:9a:99:28:e0:1c:2f:
         7c:fa:7a:b3:d2:a2:6a:fe:7f:b3:93:5a:28:b0:11:0a:42:1f:
         38:f5:90:ff:17:bd:02:03:f1:5f:dd:5f:9f:12:99:23:fc:3a:
         0c:6c:f8:1a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULB+t12SG4iElRZyGpLKKxV4k6bwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ2NTQ4NTVBRjdBNDdGQTNFRTVFN0FGRDQyMkZGRDNE
QkJGRUM0QTAeFw0yNTA0MDUwMDQ4MThaFw0yNjA0MDQwMDUzMThaMDMxMTAvBgNV
BAMTKDA0MDI0RTQwMzNDQUIzN0EyNUJDNTE5OUNDRDA0Q0UxRjhCRjYzQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs23XdvEI76f1fuDS/kRK2dHfK
PjHewXdQG50TXneeSz4u2vHCO4mwhZi8F+GaNn199AK1Mlf7yXa3lue7JoDwbwvv
Lkjm9YrO4zoPG6i5b9rfR7TnGh0HzVx61etSVPPNWgGbsD+iQG185TSTMQwtWtrG
sFEuFRCllPoJMyJuzwzlI6gNEqNdicHN4GiLXLcT9eGakRMNJz2fWsoFpAi0lZgy
5EZcedSn1apC0btoErtyHvKJplO2mL11lxaRYXJt7otgOVBQfzM7nrbOiVrOqzKg
Efg0OOhxKtveCEFAeLKENznNeb0VG/vAumBCQHjxwPuPNsDUhywTCvEqEbwXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBAJOQDPKs3olvFGZzNBM4fi/Y74wHwYDVR0j
BBgwFoAUVGVIVa96R/o+5eev1CL/09u/7EowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWNQaEVzTFYzMW9XNDNFVmFRNGg4ekw4M2RLYXJBcHB4Z2ZMS2RZOTJy
ZU4vMC81NDY1NDg1NUFGN0E0N0ZBM0VFNUU3QUZENDIyRkZEM0RCQkZFQzRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0NjU0ODU1QUY3QTQ3RkEz
RUU1RTdBRkQ0MjJGRkQzREJCRkVDNEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzljUGhFc0xWMzFvVzQzRVZhUTRoOHpMODNkS2FyQXBweGdmTEtkWTkycmVOLzAv
MzEzNzMwMmUzMjM0MzUyZTM3MzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzYzMDMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9UwwDQYJKoZIhvcNAQELBQADggEBAKO5JIKo
rK5JjJpdR1CHgnlvphqN0xi2iFnBvX3MtWNmA1iVGUgq8ju76qzVSeu88E0lh+q4
NIl716El3Vr6r14aR3/9eG2f/SGj330VmcRQFnGJyxOtcVCKibow1e2PNXfWVIna
KprMwXr5xnuMPYAe4LT11hppLZFtgmpwXuz2CUw2FhNwBiWWS0LOnauHBYoVcb2h
15E6i1Dbp7z3LqSpPyruFS8RSGeGu5RTqszmAy0/HsGrf/VOtBUbF39yfxqAL3Ha
mnnh5hFhZFSVtY+M0ZqZKOAcL3z6erPSomr+f7OTWiiwEQpCHzj1kP8XvQID8V/d
X58SmSP8Ogxs+Bo=
-----END CERTIFICATE-----
Generated at Fri Apr 18 01:42:48 2025 by rpki-client