Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/3137302e38342e3232302e302f32322d3234203d3e20323635303337.roa
File:                     3137302e38342e3232302e302f32322d3234203d3e20323635303337.roa (raw, json)
Hash identifier:          bo887UoITFipCIJskhmTWUErD8qOCCWyvRkbX5ioXBU=
Subject key identifier:   E5:E2:48:9D:8A:CF:27:A3:CA:F2:6C:08:EC:80:5A:BB:55:42:4A:E8
Certificate issuer:       /CN=ABE088E5E13DCF0FED5715CC44730ED6FD52199E
Certificate serial:       26E42CA196AE1B2767CC045E5DF1B030E9B8D4C1
Authority key identifier: AB:E0:88:E5:E1:3D:CF:0F:ED:57:15:CC:44:73:0E:D6:FD:52:19:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/3137302e38342e3232302e302f32322d3234203d3e20323635303337.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     265037
IP address blocks:        170.84.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.crl
                          rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e4:2c:a1:96:ae:1b:27:67:cc:04:5e:5d:f1:b0:30:e9:b8:d4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABE088E5E13DCF0FED5715CC44730ED6FD52199E
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6d:21:ed:d4:fb:3c:5b:e9:0a:97:54:01:df:
                    90:18:40:7b:ed:e8:ca:00:34:71:be:37:ee:1e:5c:
                    fb:bd:df:00:12:90:2f:7b:58:1d:65:e1:2f:70:5e:
                    e5:ab:4d:d6:07:85:88:ed:2b:bc:f4:7c:e1:af:7c:
                    fc:37:f9:0a:fa:02:2d:36:7e:d4:d8:db:82:5f:c4:
                    5a:6f:34:6d:97:66:42:67:0a:ef:cb:94:3c:c9:04:
                    58:11:aa:e2:96:1a:d2:e5:5b:21:f2:f3:49:fc:1f:
                    bf:2d:de:cc:61:fd:3f:ce:ce:93:6a:11:3f:b3:9b:
                    bf:da:35:f2:15:89:d2:83:4e:ca:0e:58:f5:01:93:
                    7d:cc:65:d3:57:c0:db:25:8c:94:29:b9:57:ac:2e:
                    ac:90:31:58:23:22:a0:52:0b:bc:b9:84:15:d8:a1:
                    58:0f:70:e2:61:58:42:2c:f2:cd:f7:22:0a:2c:e8:
                    80:22:3b:2b:31:9c:ad:b6:5d:00:7d:f6:b9:66:2e:
                    57:a2:fc:cb:6e:3c:9c:c9:88:92:4c:7e:c8:31:11:
                    6c:7c:12:77:12:71:8f:2b:7a:38:df:b7:bc:4f:aa:
                    b9:bd:67:60:c3:01:95:a9:db:33:71:ad:2a:ac:53:
                    4a:0f:bc:46:ac:35:c9:15:d6:72:b7:61:b8:c5:ee:
                    24:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E2:48:9D:8A:CF:27:A3:CA:F2:6C:08:EC:80:5A:BB:55:42:4A:E8
            X509v3 Authority Key Identifier:
                keyid:AB:E0:88:E5:E1:3D:CF:0F:ED:57:15:CC:44:73:0E:D6:FD:52:19:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/3137302e38342e3232302e302f32322d3234203d3e20323635303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:5e:1c:19:eb:66:0e:eb:3c:ac:84:78:29:98:a1:b2:ef:51:
         8e:34:22:13:5d:ca:a8:2f:7b:26:8b:bd:ff:fc:22:4e:09:c3:
         1e:f0:d9:97:62:41:c9:8e:4c:2f:70:b5:79:d7:c7:ac:0c:c9:
         3c:44:27:3b:b6:34:bd:de:7b:f3:1e:a2:7e:ef:5b:76:a4:95:
         a2:85:88:00:1c:21:97:b5:85:c0:c5:73:23:44:0c:00:48:4b:
         19:76:30:30:35:e4:77:9a:a3:77:99:08:22:da:27:8f:96:8b:
         79:d5:0c:6f:2e:65:76:92:6a:12:2e:6f:79:2b:de:1e:ff:4a:
         4d:ff:64:c6:23:b2:4d:0b:91:14:a7:3b:ce:ac:f5:1b:e3:35:
         e6:74:06:41:fd:b8:39:f6:d1:2b:79:37:fe:a2:61:94:0c:10:
         81:1d:2c:f1:bc:dd:bb:85:ab:11:cd:d6:a1:4c:f4:d3:3f:6d:
         90:88:e4:95:c4:99:4b:67:cb:53:b8:f9:5d:04:e8:d5:8c:70:
         85:95:2a:28:96:99:bc:19:c9:a8:69:b2:91:8e:62:e8:58:07:
         cf:91:3f:0c:f4:eb:b5:a3:47:73:28:11:1e:8a:a1:be:55:88:
         b9:d9:fb:9e:f2:f8:53:87:1b:75:f8:31:34:5f:ad:00:29:25:
         1a:d7:85:28
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUJuQsoZauGydnzAReXfGwMOm41MEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJFMDg4RTVFMTNEQ0YwRkVENTcxNUNDNDQ3MzBFRDZG
RDUyMTk5RTAeFw0yNTAzMDUxODU1MDFaFw0yNjAzMDQxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzY2RDIxRURENEZCM0M1QkU5
MEE5NzU0MDFERjkwMTg0MDdCRURFOENBMDAzNDcxQkUzN0VFMUU1Q0ZCQkRERjAw
MTI5MDJGN0I1ODFENjVFMTJGNzA1RUU1QUI0REQ2MDc4NTg4RUQyQkJDRjQ3Q0Ux
QUY3Q0ZDMzdGOTBBRkEwMjJEMzY3RUQ0RDhEQjgyNUZDNDVBNkYzNDZEOTc2NjQy
NjcwQUVGQ0I5NDNDQzkwNDU4MTFBQUUyOTYxQUQyRTU1QjIxRjJGMzQ5RkMxRkJG
MkRERUNDNjFGRDNGQ0VDRTkzNkExMTNGQjM5QkJGREEzNUYyMTU4OUQyODM0RUNB
MEU1OEY1MDE5MzdEQ0M2NUQzNTdDMERCMjU4Qzk0MjlCOTU3QUMyRUFDOTAzMTU4
MjMyMkEwNTIwQkJDQjk4NDE1RDhBMTU4MEY3MEUyNjE1ODQyMkNGMkNERjcyMjBB
MkNFODgwMjIzQjJCMzE5Q0FEQjY1RDAwN0RGNkI5NjYyRTU3QTJGQ0NCNkUzQzlD
Qzk4ODkyNEM3RUM4MzExMTZDN0MxMjc3MTI3MThGMkI3QTM4REZCN0JDNEZBQUI5
QkQ2NzYwQzMwMTk1QTlEQjMzNzFBRDJBQUM1MzRBMEZCQzQ2QUMzNUM5MTVENjcy
Qjc2MUI4QzVFRTI0MEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxm0h7dT7PFvpCpdUAd+QGEB77ejKADRxvjfuHlz7vd8AEpAve1gd
ZeEvcF7lq03WB4WI7Su89Hzhr3z8N/kK+gItNn7U2NuCX8RabzRtl2ZCZwrvy5Q8
yQRYEarilhrS5Vsh8vNJ/B+/Ld7MYf0/zs6TahE/s5u/2jXyFYnSg07KDlj1AZN9
zGXTV8DbJYyUKblXrC6skDFYIyKgUgu8uYQV2KFYD3DiYVhCLPLN9yIKLOiAIjsr
MZyttl0Affa5Zi5XovzLbjycyYiSTH7IMRFsfBJ3EnGPK3o437e8T6q5vWdgwwGV
qdszca0qrFNKD7xGrDXJFdZyt2G4xe4kDQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FOXiSJ2KzyejyvJsCOyAWrtVQkroMB8GA1UdIwQYMBaAFKvgiOXhPc8P7VcVzERz
Dtb9UhmeMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FUM1pYY1J2Z1dZcnhz
UWd2Sk5FeEJkVWptdUpERU5kaDRYbzVYSnM2U0Z5LzEvQUJFMDg4RTVFMTNEQ0Yw
RkVENTcxNUNDNDQ3MzBFRDZGRDUyMTk5RS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BQkUwODhFNUUxM0RDRjBGRUQ1NzE1Q0M0NDczMEVENkZENTIx
OTlFLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BVDNaWGNSdmdXWXJ4c1FndkpO
RXhCZFVqbXVKREVOZGg0WG81WEpzNlNGeS8xLzMxMzczMDJlMzgzNDJlMzIzMjMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzAzMzM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
qlTcMA0GCSqGSIb3DQEBCwUAA4IBAQC2XhwZ62YO6zyshHgpmKGy71GONCITXcqo
L3smi73//CJOCcMe8NmXYkHJjkwvcLV518esDMk8RCc7tjS93nvzHqJ+71t2pJWi
hYgAHCGXtYXAxXMjRAwASEsZdjAwNeR3mqN3mQgi2iePlot51QxvLmV2kmoSLm95
K94e/0pN/2TGI7JNC5EUpzvOrPUb4zXmdAZB/bg59tEreTf+omGUDBCBHSzxvN27
hasRzdahTPTTP22QiOSVxJlLZ8tTuPldBOjVjHCFlSoolpm8GcmoabKRjmLoWAfP
kT8M9Ou1o0dzKBEeiqG+VYi52fue8vhThxt1+DE0X60AKSUa14Uo
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:16:54 2025 by rpki-client