Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa
File:                     3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa (raw, json)
Hash identifier:          GoUxruqrWyfM/QBIt61/z78deouB50VWnh+QC6A2xxc=
Subject key identifier:   C5:0B:E8:69:88:46:A8:2B:5B:C5:CC:1D:AB:80:B3:EB:F2:32:98:97
Certificate issuer:       /CN=34FA07AB853C6431DB34402F636F4CBE0466335C
Certificate serial:       340166636648AF489341751DF31FB02CA2CD294A
Authority key identifier: 34:FA:07:AB:85:3C:64:31:DB:34:40:2F:63:6F:4C:BE:04:66:33:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34FA07AB853C6431DB34402F636F4CBE0466335C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa
Signing time:             Fri 07 Mar 2025 13:09:50 +0000
ROA not before:           Fri 07 Mar 2025 13:04:50 +0000
ROA not after:            Fri 06 Mar 2026 13:09:50 +0000
asID:                     264297
IP address blocks:        168.197.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/34FA07AB853C6431DB34402F636F4CBE0466335C.crl
                          rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/34FA07AB853C6431DB34402F636F4CBE0466335C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34FA07AB853C6431DB34402F636F4CBE0466335C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 19:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:01:66:63:66:48:af:48:93:41:75:1d:f3:1f:b0:2c:a2:cd:29:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34FA07AB853C6431DB34402F636F4CBE0466335C
        Validity
            Not Before: Mar  7 13:04:50 2025 GMT
            Not After : Mar  6 13:09:50 2026 GMT
        Subject: CN=C50BE8698846A82B5BC5CC1DAB80B3EBF2329897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:72:95:de:a4:3d:11:9a:f3:b1:42:f2:88:40:
                    29:e6:10:99:b4:ff:58:dc:0c:e6:53:61:99:bf:bd:
                    06:3b:32:14:95:7f:4f:94:84:b5:ff:2d:e8:8c:b3:
                    86:5b:f1:59:32:b2:ed:03:1e:47:62:42:a0:f0:97:
                    71:87:6d:71:1e:0d:d1:75:e1:88:d1:6a:c1:02:34:
                    2e:ae:49:16:2e:65:db:4a:42:cf:83:86:8b:02:7e:
                    56:81:67:b8:29:56:b1:9c:59:41:37:99:4c:1e:82:
                    db:e9:f7:c6:11:ce:c0:90:7e:0c:1d:bb:52:4f:4c:
                    92:9d:9e:88:56:42:7c:7f:42:4f:f2:02:31:a6:58:
                    f7:e1:1d:66:be:ac:9f:b2:39:37:e4:51:eb:ef:68:
                    f8:1b:20:87:96:d8:db:fd:97:2c:4d:0d:fa:43:5f:
                    5e:15:70:87:69:07:05:99:81:ce:83:1b:17:43:1f:
                    c5:4f:50:20:33:39:94:b5:87:fa:be:e4:77:76:ae:
                    d1:c4:17:64:18:14:d8:bc:6c:bb:ee:e0:7f:e9:dc:
                    03:70:7f:40:1f:5b:93:76:03:a6:ec:2e:cd:09:97:
                    d9:3a:e4:cc:22:7e:9d:ae:f1:7c:65:ae:7e:d8:a0:
                    9c:68:07:b9:54:1e:16:73:ad:21:83:99:49:e5:20:
                    a7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0B:E8:69:88:46:A8:2B:5B:C5:CC:1D:AB:80:B3:EB:F2:32:98:97
            X509v3 Authority Key Identifier:
                keyid:34:FA:07:AB:85:3C:64:31:DB:34:40:2F:63:6F:4C:BE:04:66:33:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/34FA07AB853C6431DB34402F636F4CBE0466335C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34FA07AB853C6431DB34402F636F4CBE0466335C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:05:60:52:0b:c7:33:a1:1b:bf:e6:40:f0:0c:8d:25:dd:1b:
         8e:33:1c:06:9b:ff:ff:89:07:34:85:72:4d:4e:ac:32:13:ca:
         8d:73:84:b3:19:70:82:9b:fd:b7:8c:e5:ec:57:62:62:ff:f7:
         2b:63:9c:f7:e2:4e:f6:a1:4c:e9:3a:8c:eb:3b:c7:c0:d1:96:
         66:f6:14:0a:61:9d:34:e7:58:c6:d6:1d:cc:c3:14:86:e4:a3:
         1f:9f:a8:91:17:73:54:7f:fd:d9:d6:3b:8b:89:f3:90:d8:52:
         22:6a:6c:1b:5b:b3:89:39:5d:14:fb:d6:a4:d3:cf:7f:13:53:
         36:3a:3f:6e:56:34:74:b7:42:2a:3d:13:fb:1c:77:01:bc:8a:
         07:4d:de:1b:fb:ea:95:8e:3d:f2:f1:2f:1b:5a:59:e7:71:2b:
         55:86:b2:11:41:31:73:5c:24:17:ff:23:14:8f:52:62:e9:96:
         97:f8:52:39:ef:fc:37:3a:0d:d2:e3:65:63:4b:f2:4c:fe:8f:
         89:11:b3:61:b4:23:af:95:80:1c:1a:2b:08:5e:c9:7e:a5:cd:
         6f:12:09:6a:95:c7:89:e6:1f:2a:c3:b9:3f:51:ea:29:bd:27:
         27:2a:92:e5:f9:c5:a4:48:ba:4e:fb:87:42:50:19:f2:14:e1:
         89:f8:05:d2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNAFmY2ZIr0iTQXUd8x+wLKLNKUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRGQTA3QUI4NTNDNjQzMURCMzQ0MDJGNjM2RjRDQkUw
NDY2MzM1QzAeFw0yNTAzMDcxMzA0NTBaFw0yNjAzMDYxMzA5NTBaMDMxMTAvBgNV
BAMTKEM1MEJFODY5ODg0NkE4MkI1QkM1Q0MxREFCODBCM0VCRjIzMjk4OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgcpXepD0RmvOxQvKIQCnmEJm0
/1jcDOZTYZm/vQY7MhSVf0+UhLX/LeiMs4Zb8Vkysu0DHkdiQqDwl3GHbXEeDdF1
4YjRasECNC6uSRYuZdtKQs+DhosCflaBZ7gpVrGcWUE3mUwegtvp98YRzsCQfgwd
u1JPTJKdnohWQnx/Qk/yAjGmWPfhHWa+rJ+yOTfkUevvaPgbIIeW2Nv9lyxNDfpD
X14VcIdpBwWZgc6DGxdDH8VPUCAzOZS1h/q+5Hd2rtHEF2QYFNi8bLvu4H/p3ANw
f0AfW5N2A6bsLs0Jl9k65Mwifp2u8Xxlrn7YoJxoB7lUHhZzrSGDmUnlIKcZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUxQvoaYhGqCtbxcwdq4Cz6/IymJcwHwYDVR0j
BBgwFoAUNPoHq4U8ZDHbNEAvY29MvgRmM1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVJ5TnhKOTNKS2U3c3NiN3hLaTZOTjFjTXNGcDgxRndNb0d3UllaQjdn
eHUvMC8zNEZBMDdBQjg1M0M2NDMxREIzNDQwMkY2MzZGNENCRTA0NjYzMzVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0RkEwN0FCODUzQzY0MzFE
QjM0NDAyRjYzNkY0Q0JFMDQ2NjMzNUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FSeU54SjkzSktlN3NzYjd4S2k2Tk4xY01zRnA4MUZ3TW9Hd1JZWkI3Z3h1LzAv
MzEzNjM4MmUzMTM5MzcyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDMyMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjF3DANBgkqhkiG9w0BAQsFAAOCAQEAGQVg
UgvHM6Ebv+ZA8AyNJd0bjjMcBpv//4kHNIVyTU6sMhPKjXOEsxlwgpv9t4zl7Fdi
Yv/3K2Oc9+JO9qFM6TqM6zvHwNGWZvYUCmGdNOdYxtYdzMMUhuSjH5+okRdzVH/9
2dY7i4nzkNhSImpsG1uziTldFPvWpNPPfxNTNjo/blY0dLdCKj0T+xx3AbyKB03e
G/vqlY498vEvG1pZ53ErVYayEUExc1wkF/8jFI9SYumWl/hSOe/8NzoN0uNlY0vy
TP6PiRGzYbQjr5WAHBorCF7JfqXNbxIJapXHieYfKsO5P1HqKb0nJyqS5fnFpEi6
TvuHQlAZ8hThifgF0g==
-----END CERTIFICATE-----
Generated at Fri Apr 18 01:28:19 2025 by rpki-client