Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/3136372e3235302e37322e302f32322d3234203d3e20323635313937.roa
File:                     3136372e3235302e37322e302f32322d3234203d3e20323635313937.roa (raw, json)
Hash identifier:          gua/fwZtg4M7LVIaYBGXRDSZ269XwL2LvapCpLa5kbM=
Subject key identifier:   38:64:6F:44:1F:F4:40:40:E7:00:44:92:9B:76:AC:4F:8B:E2:17:94
Certificate issuer:       /CN=7BDC82E7CDD327891122A630F6A931B143818126
Certificate serial:       09056AD50D62CF55AEB6B3063BAED88F22DF3EB1
Authority key identifier: 7B:DC:82:E7:CD:D3:27:89:11:22:A6:30:F6:A9:31:B1:43:81:81:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BDC82E7CDD327891122A630F6A931B143818126.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/3136372e3235302e37322e302f32322d3234203d3e20323635313937.roa
Signing time:             Fri 11 Jul 2025 19:02:57 +0000
ROA not before:           Fri 11 Jul 2025 18:57:57 +0000
ROA not after:            Fri 10 Jul 2026 19:02:57 +0000
asID:                     265197
IP address blocks:        167.250.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/7BDC82E7CDD327891122A630F6A931B143818126.crl
                          rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/7BDC82E7CDD327891122A630F6A931B143818126.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BDC82E7CDD327891122A630F6A931B143818126.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 01:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:05:6a:d5:0d:62:cf:55:ae:b6:b3:06:3b:ae:d8:8f:22:df:3e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BDC82E7CDD327891122A630F6A931B143818126
        Validity
            Not Before: Jul 11 18:57:57 2025 GMT
            Not After : Jul 10 19:02:57 2026 GMT
        Subject: CN=38646F441FF44040E70044929B76AC4F8BE21794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:51:0a:a6:30:d0:74:25:9f:60:47:fe:c5:
                    10:cf:bb:5a:f6:6d:9d:b3:7c:c5:13:df:57:55:4b:
                    ed:f3:30:20:d5:e7:a8:e5:e4:09:cc:d5:d3:6e:86:
                    1f:a2:41:22:82:a9:e3:73:3d:f9:a2:f2:a2:e0:aa:
                    9f:e7:54:c7:35:77:aa:49:23:16:56:bf:2f:c2:60:
                    07:cb:e7:4a:ee:37:1c:4c:4b:01:46:d8:7e:c4:76:
                    af:af:7a:2e:1d:14:dc:ed:ed:6f:07:74:92:57:4b:
                    c8:f1:6a:16:e9:f6:ac:29:aa:3d:c0:e6:3a:09:45:
                    ff:1a:84:17:52:fb:32:6a:96:4c:ff:c5:be:39:6c:
                    f2:40:a1:be:0c:6a:61:4d:14:6f:72:af:df:9a:63:
                    b9:c7:7b:da:de:a4:70:1b:ed:6a:b0:df:40:8b:f0:
                    d7:eb:be:b5:2c:e9:67:01:ce:53:03:ee:04:4c:37:
                    11:11:50:1a:c4:7f:51:3f:0e:eb:04:e6:70:68:26:
                    28:78:66:91:aa:40:4d:2c:ef:21:a3:4f:6f:62:1d:
                    bc:5c:66:54:f1:aa:d2:61:f6:d3:0f:8c:2a:ec:97:
                    16:54:2c:b3:2c:dd:a5:2b:4a:8c:ee:be:16:95:03:
                    fa:2e:f9:3c:ed:7a:d8:b6:c7:68:2f:33:ba:34:da:
                    af:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:64:6F:44:1F:F4:40:40:E7:00:44:92:9B:76:AC:4F:8B:E2:17:94
            X509v3 Authority Key Identifier:
                keyid:7B:DC:82:E7:CD:D3:27:89:11:22:A6:30:F6:A9:31:B1:43:81:81:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/7BDC82E7CDD327891122A630F6A931B143818126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BDC82E7CDD327891122A630F6A931B143818126.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/3136372e3235302e37322e302f32322d3234203d3e20323635313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:c9:5c:30:9f:01:1d:d3:78:03:48:37:91:1c:a6:16:23:47:
         96:8b:d7:57:33:c1:78:9b:f6:d4:62:ee:9e:59:6f:7f:9c:9f:
         c5:99:b6:50:24:97:70:5a:b6:3b:83:d5:f9:3e:c4:bf:75:30:
         f7:ed:8d:6f:f2:bc:60:ce:2c:11:f8:9a:7d:d7:ca:c8:90:86:
         6e:dd:9e:63:17:2f:e2:88:54:e0:b1:82:4b:93:98:bd:0a:d3:
         57:6e:76:50:c8:94:3b:be:c4:9f:94:1d:2a:c1:38:ed:41:2b:
         94:64:3a:79:2e:ee:c1:a0:3e:4d:89:f1:83:8d:02:0e:a6:09:
         52:af:12:97:a2:13:1e:85:f4:f4:0c:a0:11:80:07:20:89:83:
         4b:7a:7f:b5:f2:70:66:8a:a7:39:f6:0c:b3:4d:18:d8:9c:81:
         79:44:a9:ab:5e:04:1e:0f:ff:ad:37:f7:36:08:fd:ad:71:89:
         ea:74:d0:19:93:ff:a5:25:00:ef:ac:a8:28:1c:40:c1:d0:3b:
         92:4c:b2:be:ab:0e:c9:9e:88:12:98:7a:bc:9b:95:77:88:80:
         c6:69:d4:79:61:c3:9a:5f:f7:b4:e4:41:14:59:40:b8:e3:e5:
         24:ea:c0:e4:17:19:8c:54:ff:92:ed:74:8a:63:2f:07:43:40:
         63:f0:96:09
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCQVq1Q1iz1WutrMGO67YjyLfPrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JEQzgyRTdDREQzMjc4OTExMjJBNjMwRjZBOTMxQjE0
MzgxODEyNjAeFw0yNTA3MTExODU3NTdaFw0yNjA3MTAxOTAyNTdaMDMxMTAvBgNV
BAMTKDM4NjQ2RjQ0MUZGNDQwNDBFNzAwNDQ5MjlCNzZBQzRGOEJFMjE3OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHDFEKpjDQdCWfYEf+xRDPu1r2
bZ2zfMUT31dVS+3zMCDV56jl5AnM1dNuhh+iQSKCqeNzPfmi8qLgqp/nVMc1d6pJ
IxZWvy/CYAfL50ruNxxMSwFG2H7Edq+vei4dFNzt7W8HdJJXS8jxahbp9qwpqj3A
5joJRf8ahBdS+zJqlkz/xb45bPJAob4MamFNFG9yr9+aY7nHe9repHAb7Wqw30CL
8NfrvrUs6WcBzlMD7gRMNxERUBrEf1E/DusE5nBoJih4ZpGqQE0s7yGjT29iHbxc
ZlTxqtJh9tMPjCrslxZULLMs3aUrSozuvhaVA/ou+Tzteti2x2gvM7o02q9NAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOGRvRB/0QEDnAESSm3asT4viF5QwHwYDVR0j
BBgwFoAUe9yC583TJ4kRIqYw9qkxsUOBgSYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU56b3VUdjlzMk5nN3YyRkNFWFpVRmR1UWtLNVlxb1hyaWlRcTdUMjJl
WFEvMC83QkRDODJFN0NERDMyNzg5MTEyMkE2MzBGNkE5MzFCMTQzODE4MTI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCREM4MkU3Q0REMzI3ODkx
MTIyQTYzMEY2QTkzMUIxNDM4MTgxMjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FOem91VHY5czJOZzd2MkZDRVhaVUZkdVFrSzVZcW9YcmlpUXE3VDIyZVhRLzAv
MzEzNjM3MmUzMjM1MzAyZTM3MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzUzMTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKn+kgwDQYJKoZIhvcNAQELBQADggEBALTJXDCf
AR3TeANIN5EcphYjR5aL11czwXib9tRi7p5Zb3+cn8WZtlAkl3BatjuD1fk+xL91
MPftjW/yvGDOLBH4mn3XysiQhm7dnmMXL+KIVOCxgkuTmL0K01dudlDIlDu+xJ+U
HSrBOO1BK5RkOnku7sGgPk2J8YONAg6mCVKvEpeiEx6F9PQMoBGAByCJg0t6f7Xy
cGaKpzn2DLNNGNicgXlEqateBB4P/6039zYI/a1xiep00BmT/6UlAO+sqCgcQMHQ
O5JMsr6rDsmeiBKYeryblXeIgMZp1Hlhw5pf97TkQRRZQLjj5STqwOQXGYxU/5Lt
dIpjLwdDQGPwlgk=
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:47:34 2025 by rpki-client