Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/3137302e3233392e37322e302f32322d3234203d3e203532373635.roa
File:                     3137302e3233392e37322e302f32322d3234203d3e203532373635.roa (raw, json)
Hash identifier:          YG8MK5i53pOtSjSF2swhO2zvKt0n8IMFMMP94C9iVgU=
Subject key identifier:   84:76:6C:25:25:9F:57:CF:7C:99:5F:A5:69:76:D4:28:AE:DA:2E:F0
Certificate issuer:       /CN=A601CC15A099E546A3DCBD53AF497300DAA65598
Certificate serial:       509560FE8FF91DC4ED73E256BC03DEB9F48C1EA2
Authority key identifier: A6:01:CC:15:A0:99:E5:46:A3:DC:BD:53:AF:49:73:00:DA:A6:55:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/3137302e3233392e37322e302f32322d3234203d3e203532373635.roa
Signing time:             Thu 06 Mar 2025 18:33:29 +0000
ROA not before:           Thu 06 Mar 2025 18:28:29 +0000
ROA not after:            Thu 05 Mar 2026 18:33:29 +0000
asID:                     52765
IP address blocks:        170.239.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.crl
                          rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 20:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:95:60:fe:8f:f9:1d:c4:ed:73:e2:56:bc:03:de:b9:f4:8c:1e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A601CC15A099E546A3DCBD53AF497300DAA65598
        Validity
            Not Before: Mar  6 18:28:29 2025 GMT
            Not After : Mar  5 18:33:29 2026 GMT
        Subject: CN=84766C25259F57CF7C995FA56976D428AEDA2EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a0:6f:bc:63:07:e2:f3:c9:ea:08:f6:53:76:
                    69:36:93:41:f1:0f:1a:e5:92:71:ec:37:4f:cb:19:
                    ec:e8:59:1e:83:3a:d9:44:a5:61:23:65:bc:97:e0:
                    6c:bb:91:f2:26:f7:22:4f:fe:42:db:dc:ca:30:e0:
                    a9:76:6c:10:a1:e8:a7:f1:d1:01:8c:93:48:16:a4:
                    94:8d:a0:41:de:0c:f0:5c:70:57:1c:8a:44:85:56:
                    30:b5:da:d5:e6:8e:ec:13:6a:a3:22:95:df:9f:b9:
                    eb:4d:37:1c:c2:52:be:fc:e7:16:e6:61:5a:23:b0:
                    72:1b:4a:6a:af:8b:8e:a1:90:96:8d:a5:d0:63:fb:
                    19:be:44:ad:79:da:f3:3c:bd:ad:0d:97:a3:7d:1e:
                    1d:14:a0:43:cf:a8:16:31:95:26:83:46:de:a9:04:
                    e6:c5:b3:d9:4b:e9:f1:bd:b6:65:00:68:97:79:89:
                    6e:e5:9b:b1:91:85:9f:fa:a8:6e:03:b3:85:65:d6:
                    de:69:22:36:bf:bb:68:cf:62:ce:cf:e7:8a:af:23:
                    ee:be:99:52:4f:90:00:2a:b7:b4:8e:41:0d:d8:01:
                    33:ee:9f:0a:5e:c3:ac:8a:a8:97:f7:e2:a5:92:06:
                    40:06:a0:bf:f6:27:64:f7:d4:7d:09:a4:81:6d:05:
                    23:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:76:6C:25:25:9F:57:CF:7C:99:5F:A5:69:76:D4:28:AE:DA:2E:F0
            X509v3 Authority Key Identifier:
                keyid:A6:01:CC:15:A0:99:E5:46:A3:DC:BD:53:AF:49:73:00:DA:A6:55:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/3137302e3233392e37322e302f32322d3234203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:f9:55:df:b4:fc:11:dc:27:55:32:7a:29:92:33:e0:68:1d:
         d7:e1:54:7c:39:af:64:f7:ea:a6:0d:0f:e5:14:ca:f6:e0:76:
         44:80:3f:84:fe:92:15:4c:5d:81:0d:a4:01:c0:90:12:7d:53:
         88:d2:99:5e:74:77:0b:86:4a:6e:48:91:e6:08:f2:a9:e5:58:
         be:05:2d:61:38:78:90:49:d4:fc:a3:f1:d6:b8:71:2d:4b:f7:
         88:1c:ec:81:0c:83:85:7c:57:63:89:21:f7:2e:69:d3:a2:d8:
         3e:87:e9:5c:0d:29:38:38:b4:e7:ac:86:14:6a:e0:6d:6b:23:
         2b:a6:48:9f:61:35:6e:ee:a8:32:82:d3:41:04:2c:0b:d2:a5:
         ae:9a:2d:77:e9:1e:f8:e6:1c:9e:24:02:67:7d:18:38:59:0d:
         e2:f1:f9:07:22:6e:c0:61:0c:f2:2d:06:8b:0e:b1:86:41:2e:
         48:3d:7f:04:66:b0:41:88:58:f2:4e:5d:4a:55:42:7a:8a:b0:
         65:c8:83:29:34:06:f7:1a:a6:36:29:b6:de:8d:d2:4e:f3:38:
         42:f3:01:ef:c2:23:ec:75:d2:e1:4b:ca:37:9d:af:fa:e7:7c:
         80:5f:93:90:50:36:90:da:65:b2:99:97:9f:51:c5:14:ad:91:
         20:c7:98:9b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUJVg/o/5HcTtc+JWvAPeufSMHqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwMUNDMTVBMDk5RTU0NkEzRENCRDUzQUY0OTczMDBE
QUE2NTU5ODAeFw0yNTAzMDYxODI4MjlaFw0yNjAzMDUxODMzMjlaMDMxMTAvBgNV
BAMTKDg0NzY2QzI1MjU5RjU3Q0Y3Qzk5NUZBNTY5NzZENDI4QUVEQTJFRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWoG+8Ywfi88nqCPZTdmk2k0Hx
DxrlknHsN0/LGezoWR6DOtlEpWEjZbyX4Gy7kfIm9yJP/kLb3Mow4Kl2bBCh6Kfx
0QGMk0gWpJSNoEHeDPBccFccikSFVjC12tXmjuwTaqMild+fuetNNxzCUr785xbm
YVojsHIbSmqvi46hkJaNpdBj+xm+RK152vM8va0Nl6N9Hh0UoEPPqBYxlSaDRt6p
BObFs9lL6fG9tmUAaJd5iW7lm7GRhZ/6qG4Ds4Vl1t5pIja/u2jPYs7P54qvI+6+
mVJPkAAqt7SOQQ3YATPunwpew6yKqJf34qWSBkAGoL/2J2T31H0JpIFtBSOlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhHZsJSWfV898mV+laXbUKK7aLvAwHwYDVR0j
BBgwFoAUpgHMFaCZ5Uaj3L1Tr0lzANqmVZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlJobXg3WWV1U1hOdjJITjNoOG4yYmFxM2l6bXlNOWZKSGhjeFNWVmFl
U1kvMS9BNjAxQ0MxNUEwOTlFNTQ2QTNEQ0JENTNBRjQ5NzMwMERBQTY1NTk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MDFDQzE1QTA5OUU1NDZB
M0RDQkQ1M0FGNDk3MzAwREFBNjU1OTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JSaG14N1lldVNYTnYySE4zaDhuMmJhcTNpem15TTlmSkhoY3hTVlZhZVNZLzEv
MzEzNzMwMmUzMjMzMzkyZTM3MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzczNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqu9IMA0GCSqGSIb3DQEBCwUAA4IBAQDD+VXftPwR
3CdVMnopkjPgaB3X4VR8Oa9k9+qmDQ/lFMr24HZEgD+E/pIVTF2BDaQBwJASfVOI
0pledHcLhkpuSJHmCPKp5Vi+BS1hOHiQSdT8o/HWuHEtS/eIHOyBDIOFfFdjiSH3
LmnTotg+h+lcDSk4OLTnrIYUauBtayMrpkifYTVu7qgygtNBBCwL0qWumi136R74
5hyeJAJnfRg4WQ3i8fkHIm7AYQzyLQaLDrGGQS5IPX8EZrBBiFjyTl1KVUJ6irBl
yIMpNAb3GqY2KbbejdJO8zhC8wHvwiPsddLhS8o3na/653yAX5OQUDaQ2mWymZef
UcUUrZEgx5ib
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:58:24 2025 by rpki-client