Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/3136382e39302e3230342e302f32322d3232203d3e20323635323930.roa
File:                     3136382e39302e3230342e302f32322d3232203d3e20323635323930.roa (raw, json)
Hash identifier:          ZU9KvqVGm8P3mgQ79bZVqEr6CzwEvUL9dvZSWmDkOZI=
Subject key identifier:   30:CE:5C:7C:0A:0A:F7:53:2F:37:7F:FD:56:79:93:EB:77:43:FD:8C
Certificate issuer:       /CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
Certificate serial:       2DE612A8F3E8F6D68B5B5C348F07E9F698DE8BA3
Authority key identifier: D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/3136382e39302e3230342e302f32322d3232203d3e20323635323930.roa
Signing time:             Thu 06 Mar 2025 11:29:27 +0000
ROA not before:           Thu 06 Mar 2025 11:24:27 +0000
ROA not after:            Thu 05 Mar 2026 11:29:27 +0000
asID:                     265290
IP address blocks:        168.90.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl
                          rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 19:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e6:12:a8:f3:e8:f6:d6:8b:5b:5c:34:8f:07:e9:f6:98:de:8b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
        Validity
            Not Before: Mar  6 11:24:27 2025 GMT
            Not After : Mar  5 11:29:27 2026 GMT
        Subject: CN=30CE5C7C0A0AF7532F377FFD567993EB7743FD8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:45:f8:ce:55:19:9e:98:6f:bc:27:ab:a5:ea:
                    92:7d:6e:2e:0e:36:20:0f:ee:58:41:82:dd:ca:6a:
                    85:81:14:7d:02:6f:19:58:3e:00:ff:0d:06:0c:24:
                    f5:aa:ed:10:f7:a8:f4:9f:11:e2:e2:a1:97:cd:87:
                    c6:8d:04:ae:54:05:83:67:87:72:16:29:17:55:58:
                    0a:d7:9a:4c:cf:e3:4a:1a:4e:b4:41:9f:e8:45:e7:
                    e7:59:3b:28:8d:b9:97:e6:d9:ba:1c:54:6d:b0:e6:
                    d7:86:4f:01:4d:00:04:2d:64:26:f2:2f:a3:81:88:
                    c6:a2:4a:c6:45:23:24:c9:61:94:56:22:c1:c6:88:
                    7f:c4:7f:07:13:e9:1a:2f:10:ba:50:c9:c7:06:c1:
                    59:ca:cf:cc:73:3c:0e:4a:c7:1c:e6:59:0e:b3:f8:
                    9b:d9:1c:df:5c:94:88:4e:14:af:d8:78:af:c0:49:
                    88:bc:fa:be:b1:3f:d8:7b:11:05:a2:5d:09:85:cb:
                    69:58:38:65:27:75:30:76:cc:ed:f5:96:5b:fe:ec:
                    08:93:1b:0b:12:f1:c4:5f:20:bd:28:be:fd:e5:50:
                    e7:6a:6a:c8:ce:1e:e0:53:b3:81:40:db:7c:78:87:
                    a0:64:08:50:96:1d:c3:7f:7c:92:68:00:43:5a:19:
                    24:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CE:5C:7C:0A:0A:F7:53:2F:37:7F:FD:56:79:93:EB:77:43:FD:8C
            X509v3 Authority Key Identifier:
                keyid:D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/3136382e39302e3230342e302f32322d3232203d3e20323635323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:27:c4:1d:03:62:e1:8d:29:09:e0:3d:7d:01:57:c5:6d:3f:
         ad:88:5b:3e:ff:af:f1:10:5d:f5:e6:f5:d9:3d:20:0f:f5:8d:
         a1:17:70:4b:ee:0e:53:26:7c:a2:48:39:01:cc:45:96:b9:91:
         14:81:0c:be:6f:8b:71:1d:06:9d:3d:1a:90:be:a9:2c:38:42:
         29:61:0e:aa:66:e8:a1:35:b7:cd:6b:7a:fa:f1:1f:d1:6a:e5:
         2c:95:e4:eb:52:ff:e8:13:16:ac:03:79:22:56:c0:d7:32:da:
         36:13:f0:05:5c:b4:e6:cd:c4:ea:81:34:0e:94:2a:b8:68:ab:
         5f:46:47:3b:3a:d0:8a:09:16:ad:b0:5d:74:7c:90:22:c9:fc:
         83:17:9b:aa:b0:f1:ae:56:bb:a9:fa:c9:8e:b9:de:a8:0e:9e:
         e5:f8:be:f8:d9:86:b8:c9:62:00:35:fc:c2:e3:c9:c0:58:b7:
         3d:8c:45:1f:dd:c6:55:af:50:cd:e1:bd:e3:83:be:09:dd:ea:
         35:f1:31:7c:d3:46:39:66:00:f0:43:4d:71:f7:2b:6b:fc:2e:
         76:6f:a9:fb:ba:18:76:9b:d5:15:83:72:d7:ed:61:62:9e:0d:
         38:f2:5d:b8:7e:0b:cb:83:27:78:1f:45:72:c4:7e:d3:ff:4a:
         ee:68:c3:28
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULeYSqPPo9taLW1w0jwfp9pjei6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDczQjZFQjlCOTcyRDVGM0I3MzUzQTMyQkJGMTFDQURC
NjIwN0QzODAeFw0yNTAzMDYxMTI0MjdaFw0yNjAzMDUxMTI5MjdaMDMxMTAvBgNV
BAMTKDMwQ0U1QzdDMEEwQUY3NTMyRjM3N0ZGRDU2Nzk5M0VCNzc0M0ZEOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvRfjOVRmemG+8J6ul6pJ9bi4O
NiAP7lhBgt3KaoWBFH0CbxlYPgD/DQYMJPWq7RD3qPSfEeLioZfNh8aNBK5UBYNn
h3IWKRdVWArXmkzP40oaTrRBn+hF5+dZOyiNuZfm2bocVG2w5teGTwFNAAQtZCby
L6OBiMaiSsZFIyTJYZRWIsHGiH/EfwcT6RovELpQyccGwVnKz8xzPA5KxxzmWQ6z
+JvZHN9clIhOFK/YeK/ASYi8+r6xP9h7EQWiXQmFy2lYOGUndTB2zO31llv+7AiT
GwsS8cRfIL0ovv3lUOdqasjOHuBTs4FA23x4h6BkCFCWHcN/fJJoAENaGST1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMM5cfAoK91MvN3/9VnmT63dD/YwwHwYDVR0j
BBgwFoAU1ztuubly1fO3NToyu/EcrbYgfTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVluWFFHM1pXRVJqbW50Z3lIWDdSQXAxSHhRY24zSmhERDV2VXpSWVRS
UUsvMi9ENzNCNkVCOUI5NzJENUYzQjczNTNBMzJCQkYxMUNBREI2MjA3RDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3M0I2RUI5Qjk3MkQ1RjNC
NzM1M0EzMkJCRjExQ0FEQjYyMDdEMzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FZblhRRzNaV0VSam1udGd5SFg3UkFwMUh4UWNuM0poREQ1dlV6UllUUlFLLzIv
MzEzNjM4MmUzOTMwMmUzMjMwMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzMjM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoWswwDQYJKoZIhvcNAQELBQADggEBAJsnxB0D
YuGNKQngPX0BV8VtP62IWz7/r/EQXfXm9dk9IA/1jaEXcEvuDlMmfKJIOQHMRZa5
kRSBDL5vi3EdBp09GpC+qSw4QilhDqpm6KE1t81revrxH9Fq5SyV5OtS/+gTFqwD
eSJWwNcy2jYT8AVctObNxOqBNA6UKrhoq19GRzs60IoJFq2wXXR8kCLJ/IMXm6qw
8a5Wu6n6yY653qgOnuX4vvjZhrjJYgA1/MLjycBYtz2MRR/dxlWvUM3hveODvgnd
6jXxMXzTRjlmAPBDTXH3K2v8LnZvqfu6GHab1RWDctftYWKeDTjyXbh+C8uDJ3gf
RXLEftP/Su5owyg=
-----END CERTIFICATE-----
Generated at Fri Apr 18 12:49:38 2025 by rpki-client