Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/3137302e38332e38382e302f32322d3332203d3e20323636343831.roa
File:                     3137302e38332e38382e302f32322d3332203d3e20323636343831.roa (raw, json)
Hash identifier:          VuTjYXuXQGCKV7rk/UGPVw0HM9z+bJImjB0NtenCF4o=
Subject key identifier:   80:37:A4:12:00:A1:B1:32:BD:F8:2A:48:6F:0E:24:3D:6A:83:37:65
Certificate issuer:       /CN=4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE
Certificate serial:       6752F65F58D096B93242515C7BB2D51025B89C15
Authority key identifier: 4B:15:F5:37:3E:2C:29:8F:E4:B5:F0:EA:FC:99:1C:D5:C4:B3:57:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/3137302e38332e38382e302f32322d3332203d3e20323636343831.roa
Signing time:             Mon 27 Jan 2025 13:10:23 +0000
ROA not before:           Mon 27 Jan 2025 13:05:23 +0000
ROA not after:            Mon 26 Jan 2026 13:10:23 +0000
asID:                     266481
IP address blocks:        170.83.88.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.crl
                          rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:52:f6:5f:58:d0:96:b9:32:42:51:5c:7b:b2:d5:10:25:b8:9c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE
        Validity
            Not Before: Jan 27 13:05:23 2025 GMT
            Not After : Jan 26 13:10:23 2026 GMT
        Subject: CN=8037A41200A1B132BDF82A486F0E243D6A833765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d6:fc:24:62:af:95:bc:9f:fc:71:30:b8:77:
                    c8:d7:71:9f:34:0d:5d:63:d1:67:ef:9b:1d:71:92:
                    a7:5c:43:a4:be:91:29:c1:9f:33:ac:a5:ce:b7:d6:
                    cc:d7:4c:84:22:ac:bd:e7:40:6f:74:53:55:27:33:
                    54:a1:74:b9:47:c8:03:47:f1:ac:e1:8c:e5:25:29:
                    4b:c5:6c:06:89:b6:ea:80:be:28:d3:51:2d:51:ac:
                    f5:5e:d5:ec:12:22:bf:55:5f:c5:33:25:cb:c5:1a:
                    0c:17:e2:7a:39:ba:b7:ea:a1:ca:85:f9:76:c2:8f:
                    17:89:d7:7f:68:21:f5:13:ce:e6:bc:00:ed:85:6f:
                    b9:25:16:21:70:a0:84:8b:42:da:8a:00:12:43:4d:
                    f0:7d:a0:16:7a:58:a1:6d:05:6c:41:d3:4d:51:55:
                    92:8a:f3:b8:5e:c9:f9:52:1b:29:a3:25:10:77:a7:
                    35:ac:45:71:2a:72:f1:2f:6a:e6:77:ed:bc:77:6f:
                    a7:e7:73:0c:19:23:a2:64:9f:3d:78:a8:f8:32:27:
                    55:b4:cc:a9:45:5e:ca:2e:fe:ac:30:dc:4d:43:3f:
                    59:5f:d5:7f:9b:c1:3c:80:c6:6c:59:1a:ba:8a:05:
                    d6:f6:f9:5c:a3:11:b5:01:e2:3d:59:7a:08:33:0b:
                    07:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:37:A4:12:00:A1:B1:32:BD:F8:2A:48:6F:0E:24:3D:6A:83:37:65
            X509v3 Authority Key Identifier:
                keyid:4B:15:F5:37:3E:2C:29:8F:E4:B5:F0:EA:FC:99:1C:D5:C4:B3:57:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/3137302e38332e38382e302f32322d3332203d3e20323636343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:f6:2d:51:72:7b:33:5b:05:af:f9:26:fa:3e:1c:59:5a:af:
         aa:1b:57:f9:6e:7a:19:06:b6:97:c8:c3:8b:b7:87:3b:59:7c:
         3d:e8:4c:7f:b3:3c:b2:09:9a:7d:34:d6:14:a4:5d:fa:d2:b3:
         6f:50:2c:7e:ad:b5:a4:10:62:98:94:2a:ca:8a:48:34:c3:79:
         18:68:d8:b5:2a:6c:d4:3d:14:a9:bb:a7:9b:00:5e:5a:92:72:
         d7:12:49:5d:5e:fe:b0:1d:36:a0:8c:96:ff:7e:2b:bc:f3:d1:
         9e:fa:ba:7d:f5:f9:68:3b:85:a3:6a:03:d8:13:7c:14:97:6e:
         e7:09:fd:42:0f:06:ca:ae:fa:ab:da:81:e8:b5:9e:b4:a8:10:
         55:7a:c6:15:35:f6:b4:ab:ba:27:a1:cb:2d:1d:53:a2:ba:e6:
         c8:9c:20:89:b3:cd:7d:85:22:85:e2:de:41:36:bf:63:76:39:
         88:47:78:d2:de:90:8c:99:4f:9e:6a:27:87:e8:82:76:af:00:
         ca:a9:c3:da:1a:67:3d:81:07:07:56:c4:c2:e1:fd:ad:c8:77:
         65:a0:ee:e6:4b:ac:bc:86:63:ee:63:30:48:f6:00:e0:61:1a:
         d9:04:5e:d5:ca:2d:20:17:dd:1f:4d:ee:1f:44:e6:56:50:31:
         cc:bf:61:d0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZ1L2X1jQlrkyQlFce7LVECW4nBUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIxNUY1MzczRTJDMjk4RkU0QjVGMEVBRkM5OTFDRDVD
NEIzNTdCRTAeFw0yNTAxMjcxMzA1MjNaFw0yNjAxMjYxMzEwMjNaMDMxMTAvBgNV
BAMTKDgwMzdBNDEyMDBBMUIxMzJCREY4MkE0ODZGMEUyNDNENkE4MzM3NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK1vwkYq+VvJ/8cTC4d8jXcZ80
DV1j0Wfvmx1xkqdcQ6S+kSnBnzOspc631szXTIQirL3nQG90U1UnM1ShdLlHyANH
8azhjOUlKUvFbAaJtuqAvijTUS1RrPVe1ewSIr9VX8UzJcvFGgwX4no5urfqocqF
+XbCjxeJ139oIfUTzua8AO2Fb7klFiFwoISLQtqKABJDTfB9oBZ6WKFtBWxB001R
VZKK87heyflSGymjJRB3pzWsRXEqcvEvauZ37bx3b6fncwwZI6Jknz14qPgyJ1W0
zKlFXsou/qww3E1DP1lf1X+bwTyAxmxZGrqKBdb2+VyjEbUB4j1ZeggzCweVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgDekEgChsTK9+CpIbw4kPWqDN2UwHwYDVR0j
BBgwFoAUSxX1Nz4sKY/ktfDq/Jkc1cSzV74wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtBbTVycEE0RjU0akhSZHFQODljTWZ0ZlJWSmVRdVVUaUFkOTducHlt
a1MvMC80QjE1RjUzNzNFMkMyOThGRTRCNUYwRUFGQzk5MUNENUM0QjM1N0JFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCMTVGNTM3M0UyQzI5OEZF
NEI1RjBFQUZDOTkxQ0Q1QzRCMzU3QkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLQW01cnBBNEY1NGpIUmRxUDg5Y01mdGZSVkplUXVVVGlBZDk3bnB5bWtTLzAv
MzEzNzMwMmUzODMzMmUzODM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzQzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlNYMA0GCSqGSIb3DQEBCwUAA4IBAQB09i1Rcnsz
WwWv+Sb6PhxZWq+qG1f5bnoZBraXyMOLt4c7WXw96Ex/szyyCZp9NNYUpF360rNv
UCx+rbWkEGKYlCrKikg0w3kYaNi1KmzUPRSpu6ebAF5aknLXEkldXv6wHTagjJb/
fiu889Ge+rp99floO4WjagPYE3wUl27nCf1CDwbKrvqr2oHotZ60qBBVesYVNfa0
q7onocstHVOiuubInCCJs819hSKF4t5BNr9jdjmIR3jS3pCMmU+eaieH6IJ2rwDK
qcPaGmc9gQcHVsTC4f2tyHdloO7mS6y8hmPuYzBI9gDgYRrZBF7Vyi0gF90fTe4f
ROZWUDHMv2HQ
-----END CERTIFICATE-----
Generated at Sun Apr 13 05:31:35 2025 by rpki-client