Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e34382e302f32332d3233203d3e20323636333734.roa
File:                     3137302e38302e34382e302f32332d3233203d3e20323636333734.roa (raw, json)
Hash identifier:          1ke442G4sr1gdXVL5S2dIvsAioTdoxCJCdzpNrSzpFk=
Subject key identifier:   9D:C2:4A:9A:BD:FF:74:28:58:9F:41:F0:D9:0F:C0:46:42:AF:F4:2E
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       5DBEF138A5D4DDBA7661D1B829CFA143E72B0C98
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e34382e302f32332d3233203d3e20323636333734.roa
Signing time:             Wed 26 Mar 2025 15:07:02 +0000
ROA not before:           Wed 26 Mar 2025 15:02:02 +0000
ROA not after:            Wed 25 Mar 2026 15:07:02 +0000
asID:                     266374
IP address blocks:        170.80.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl
                          rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:be:f1:38:a5:d4:dd:ba:76:61:d1:b8:29:cf:a1:43:e7:2b:0c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: Mar 26 15:02:02 2025 GMT
            Not After : Mar 25 15:07:02 2026 GMT
        Subject: CN=9DC24A9ABDFF7428589F41F0D90FC04642AFF42E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a8:f0:2a:cd:3a:0d:66:fa:e1:d1:78:ab:98:
                    07:98:c5:f8:45:33:0e:93:b0:3a:95:c7:37:06:ec:
                    81:4b:a4:4a:e7:1e:b3:8e:e6:6c:1b:32:1c:52:93:
                    9f:f8:e3:8a:e3:c7:c4:4b:5e:db:1f:a7:d5:3f:2e:
                    73:c1:df:f7:47:71:ce:6e:2c:0b:bc:d1:a2:a2:0e:
                    fe:40:6e:66:ee:97:a8:22:b7:93:83:55:0b:37:aa:
                    13:9b:2b:84:34:74:83:2f:ff:49:da:b1:13:7b:1e:
                    d5:48:a7:ef:9a:81:f1:75:3c:d1:d1:e6:3f:1e:82:
                    33:dd:09:a0:ac:60:d2:f6:0c:46:8d:69:8e:3d:e1:
                    e1:41:ec:f2:49:7b:2e:b8:d9:9e:f6:8a:a9:00:e8:
                    ec:66:31:41:64:0a:5e:eb:f9:45:71:7e:fa:b2:27:
                    95:45:ab:5f:20:71:5a:66:a5:fd:ca:79:aa:ea:cf:
                    6e:50:00:01:9c:3a:b4:5c:de:f4:63:a7:45:88:85:
                    52:0a:f9:0d:a7:16:db:0b:4b:c2:33:93:82:fa:22:
                    64:ce:25:f5:10:29:dd:40:4d:5d:c7:2c:97:0e:9d:
                    17:19:68:73:7b:69:3b:98:ca:04:88:fb:6e:53:34:
                    ea:ac:ad:9d:ff:6f:8d:7d:a7:6e:6c:30:d5:06:d5:
                    fd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C2:4A:9A:BD:FF:74:28:58:9F:41:F0:D9:0F:C0:46:42:AF:F4:2E
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e34382e302f32332d3233203d3e20323636333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:01:c9:f6:af:88:3d:95:58:c4:f2:c3:6a:44:01:e1:4b:94:
         34:60:d6:e6:7b:ba:de:e6:59:5d:c4:07:cb:be:38:3d:af:09:
         bf:94:85:e0:1b:4c:8a:ab:ff:dd:18:a9:80:93:96:e7:3d:ed:
         5d:f3:64:04:35:bf:f4:d8:a9:28:61:e2:fa:6e:b1:b1:5d:64:
         b2:5d:b0:8d:87:57:38:d0:6c:86:15:ad:d9:14:22:f8:ae:b8:
         1c:0f:90:04:03:8f:17:b0:ba:5f:8d:29:70:13:be:83:cb:56:
         51:30:9f:6b:59:ac:14:b7:20:fa:f8:59:53:44:fd:03:3a:39:
         7a:a4:06:7d:84:a6:42:26:cd:f9:fb:17:2c:6d:9f:da:0a:45:
         f4:58:ae:b0:9c:ef:5f:b2:e3:32:54:40:45:d1:60:6c:d5:5d:
         c2:b8:89:8c:a3:13:88:6c:36:63:fd:fc:1a:37:d1:55:53:d2:
         d7:92:65:d2:95:82:7e:c1:fd:f6:63:f9:73:29:d7:ad:78:e6:
         1b:11:3f:94:47:1f:af:92:d0:4e:63:59:19:ad:ba:b1:a8:fc:
         33:9d:86:57:a5:84:39:cd:a9:dd:2b:56:13:56:1c:f5:d8:fd:
         02:83:48:43:e8:24:ca:b9:27:97:fb:c0:29:a4:2c:ef:7e:74:
         9d:06:6d:6f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXb7xOKXU3bp2YdG4Kc+hQ+crDJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY5NzA4MzIyNTcwRDA3Q0E0QkU3NUVGNDg0QjY4MzE2
NjRGRTg2NDAeFw0yNTAzMjYxNTAyMDJaFw0yNjAzMjUxNTA3MDJaMDMxMTAvBgNV
BAMTKDlEQzI0QTlBQkRGRjc0Mjg1ODlGNDFGMEQ5MEZDMDQ2NDJBRkY0MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIqPAqzToNZvrh0XirmAeYxfhF
Mw6TsDqVxzcG7IFLpErnHrOO5mwbMhxSk5/444rjx8RLXtsfp9U/LnPB3/dHcc5u
LAu80aKiDv5Abmbul6git5ODVQs3qhObK4Q0dIMv/0nasRN7HtVIp++agfF1PNHR
5j8egjPdCaCsYNL2DEaNaY494eFB7PJJey642Z72iqkA6OxmMUFkCl7r+UVxfvqy
J5VFq18gcVpmpf3Kearqz25QAAGcOrRc3vRjp0WIhVIK+Q2nFtsLS8Izk4L6ImTO
JfUQKd1ATV3HLJcOnRcZaHN7aTuYygSI+25TNOqsrZ3/b419p25sMNUG1f3LAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUncJKmr3/dChYn0Hw2Q/ARkKv9C4wHwYDVR0j
BBgwFoAUD5cIMiVw0HykvnXvSEtoMWZP6GQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTVxTm92TE5NTVNOUWNrVGl5elNIaVJVaDlHZWFRQzJ6enExZHVLcUZk
U1MvMS8wRjk3MDgzMjI1NzBEMDdDQTRCRTc1RUY0ODRCNjgzMTY2NEZFODY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGOTcwODMyMjU3MEQwN0NB
NEJFNzVFRjQ4NEI2ODMxNjY0RkU4NjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E1cU5vdkxOTU1TTlFja1RpeXpTSGlSVWg5R2VhUUMyenpxMWR1S3FGZFNTLzEv
MzEzNzMwMmUzODMwMmUzNDM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM2
MzMzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqlAwMA0GCSqGSIb3DQEBCwUAA4IBAQCrAcn2r4g9
lVjE8sNqRAHhS5Q0YNbme7re5lldxAfLvjg9rwm/lIXgG0yKq//dGKmAk5bnPe1d
82QENb/02KkoYeL6brGxXWSyXbCNh1c40GyGFa3ZFCL4rrgcD5AEA48XsLpfjSlw
E76Dy1ZRMJ9rWawUtyD6+FlTRP0DOjl6pAZ9hKZCJs35+xcsbZ/aCkX0WK6wnO9f
suMyVEBF0WBs1V3CuImMoxOIbDZj/fwaN9FVU9LXkmXSlYJ+wf32Y/lzKdeteOYb
ET+URx+vktBOY1kZrbqxqPwznYZXpYQ5zandK1YTVhz12P0Cg0hD6CTKuSeX+8Ap
pCzvfnSdBm1v
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:42:47 2025 by rpki-client