Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3137302e38322e3134302e302f32322d3332203d3e20323634343034.roa
File:                     3137302e38322e3134302e302f32322d3332203d3e20323634343034.roa (raw, json)
Hash identifier:          Pr3FB6N7/fnnubm+xzlGWqAog5Eg3D0n86eXpZJwgjA=
Subject key identifier:   F7:D3:05:D5:DC:93:BB:D6:90:8F:3F:B0:46:CD:C3:D5:0F:FC:E8:92
Certificate issuer:       /CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4
Certificate serial:       49320512CFE53CC54EE33FBE2326CB1D2F289313
Authority key identifier: 08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3137302e38322e3134302e302f32322d3332203d3e20323634343034.roa
Signing time:             Wed 16 Jul 2025 15:50:07 +0000
ROA not before:           Wed 16 Jul 2025 15:45:07 +0000
ROA not after:            Wed 15 Jul 2026 15:50:07 +0000
asID:                     264404
IP address blocks:        170.82.140.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl
                          rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 21:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:32:05:12:cf:e5:3c:c5:4e:e3:3f:be:23:26:cb:1d:2f:28:93:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4
        Validity
            Not Before: Jul 16 15:45:07 2025 GMT
            Not After : Jul 15 15:50:07 2026 GMT
        Subject: CN=F7D305D5DC93BBD6908F3FB046CDC3D50FFCE892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:91:64:86:8d:a4:7c:53:6f:4a:8a:26:e5:
                    3d:52:2e:7b:cd:17:a5:d2:88:eb:70:4d:5f:1f:38:
                    b3:3d:db:65:6c:e7:75:c1:a2:2a:55:d5:24:2e:db:
                    82:d2:00:f2:59:d3:f1:ec:6b:09:31:b1:b9:3c:62:
                    b0:76:f1:56:1f:44:b3:17:7d:9a:8f:70:cf:35:36:
                    53:bd:e5:2f:8b:ce:13:82:c4:81:2a:28:a8:a6:63:
                    25:b7:e9:a9:52:f4:3c:4d:3d:41:59:37:cd:b4:35:
                    2c:ed:cf:d1:90:0a:78:91:c6:d0:ed:62:08:e5:f4:
                    5b:51:7c:22:79:58:37:e2:b9:24:81:49:c8:37:66:
                    5d:e6:8d:14:81:50:ea:54:f6:93:75:1c:66:f5:cb:
                    dd:14:f2:98:ad:92:dd:b7:34:ea:ec:2f:da:db:0c:
                    e1:ad:52:2f:25:4d:99:12:99:b4:6e:b7:ed:41:f8:
                    3c:cc:2c:0b:06:89:3e:aa:e3:d5:47:7e:e2:48:6d:
                    d7:3c:e3:44:86:dc:45:e2:c6:38:77:6f:4d:03:5f:
                    17:df:e0:51:96:5b:a0:4a:72:8b:37:f6:91:c1:0a:
                    62:62:aa:d9:0d:25:25:df:b5:6b:ec:74:9e:f8:c4:
                    c9:44:51:c4:1e:4a:66:27:f4:61:5e:a2:7c:a6:26:
                    38:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D3:05:D5:DC:93:BB:D6:90:8F:3F:B0:46:CD:C3:D5:0F:FC:E8:92
            X509v3 Authority Key Identifier:
                keyid:08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3137302e38322e3134302e302f32322d3332203d3e20323634343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:b1:a8:bb:b0:89:61:f0:df:78:b8:88:79:94:9e:a2:cc:83:
         d4:bd:6f:6e:c5:43:31:66:ce:8f:11:cb:c4:d3:db:03:a6:a5:
         5a:72:3a:32:bd:aa:2d:81:f4:45:0c:ae:56:79:d8:ac:b9:e6:
         fa:a0:f1:f1:4d:c4:a5:e1:dc:6f:f8:72:e3:0e:3a:f8:75:24:
         de:2c:7f:97:f1:2f:f4:c9:b0:25:37:79:17:67:0c:69:06:b0:
         b9:f3:3f:99:99:c4:d3:3c:b7:6b:20:c0:f7:f4:49:cb:f9:bb:
         99:93:88:af:d8:a9:4f:9c:bb:74:46:3f:58:c8:5a:74:25:db:
         a3:48:32:5e:ff:48:09:43:2e:bd:6f:fb:fe:20:40:4b:6f:63:
         af:22:98:3c:dd:f1:40:92:54:f5:5d:bd:f8:de:f7:45:12:9a:
         73:21:7c:2d:ca:ec:77:c5:c9:f9:17:a5:d1:a2:95:01:9e:9d:
         2c:96:f1:c4:1e:3a:c4:30:39:49:db:d7:44:a4:0d:8f:33:67:
         33:01:59:4a:56:11:f5:f7:f8:8e:05:ac:a4:4a:85:88:0b:b8:
         b5:b5:7b:ac:c8:90:69:ad:b4:c5:cf:c7:ba:b1:c4:4a:0a:a4:
         11:25:49:1f:54:96:b1:7e:04:61:01:b9:f6:8b:d6:98:86:03:
         c5:62:4f:86
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSTIFEs/lPMVO4z++IybLHS8okxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhCMzkyQzgxNzNCQzA2M0FDRTlGNEY0MkM4NUU4RjNC
QzI5N0ZBNDAeFw0yNTA3MTYxNTQ1MDdaFw0yNjA3MTUxNTUwMDdaMDMxMTAvBgNV
BAMTKEY3RDMwNUQ1REM5M0JCRDY5MDhGM0ZCMDQ2Q0RDM0Q1MEZGQ0U4OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1YpFkho2kfFNvSoom5T1SLnvN
F6XSiOtwTV8fOLM922Vs53XBoipV1SQu24LSAPJZ0/Hsawkxsbk8YrB28VYfRLMX
fZqPcM81NlO95S+LzhOCxIEqKKimYyW36alS9DxNPUFZN820NSztz9GQCniRxtDt
Ygjl9FtRfCJ5WDfiuSSBScg3Zl3mjRSBUOpU9pN1HGb1y90U8pitkt23NOrsL9rb
DOGtUi8lTZkSmbRut+1B+DzMLAsGiT6q49VHfuJIbdc840SG3EXixjh3b00DXxff
4FGWW6BKcos39pHBCmJiqtkNJSXftWvsdJ74xMlEUcQeSmYn9GFeonymJji3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU99MF1dyTu9aQjz+wRs3D1Q/86JIwHwYDVR0j
BBgwFoAUCLOSyBc7wGOs6fT0LIXo87wpf6QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWE3aHNraTFmU3drVnBnRGNqeVpCUHNBNU5ZZ1lHTG44Vzlza3lDNXc1
aUIvMC8wOEIzOTJDODE3M0JDMDYzQUNFOUY0RjQyQzg1RThGM0JDMjk3RkE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4QjM5MkM4MTczQkMwNjNB
Q0U5RjRGNDJDODVFOEYzQkMyOTdGQTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FhN2hza2kxZlN3a1ZwZ0RjanlaQlBzQTVOWWdZR0xuOFc5c2t5QzV3NWlCLzAv
MzEzNzMwMmUzODMyMmUzMTM0MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzQzNDMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqUowwDQYJKoZIhvcNAQELBQADggEBAB+xqLuw
iWHw33i4iHmUnqLMg9S9b27FQzFmzo8Ry8TT2wOmpVpyOjK9qi2B9EUMrlZ52Ky5
5vqg8fFNxKXh3G/4cuMOOvh1JN4sf5fxL/TJsCU3eRdnDGkGsLnzP5mZxNM8t2sg
wPf0Scv5u5mTiK/YqU+cu3RGP1jIWnQl26NIMl7/SAlDLr1v+/4gQEtvY68imDzd
8UCSVPVdvfje90USmnMhfC3K7HfFyfkXpdGilQGenSyW8cQeOsQwOUnb10SkDY8z
ZzMBWUpWEfX3+I4FrKRKhYgLuLW1e6zIkGmttMXPx7qxxEoKpBElSR9UlrF+BGEB
ufaL1piGA8ViT4Y=
-----END CERTIFICATE-----
Generated at Thu Aug 21 00:19:55 2025 by rpki-client