Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e39302e302f32332d3233203d3e20323731313334.roa
File:                     3136372e3234392e39302e302f32332d3233203d3e20323731313334.roa (raw, json)
Hash identifier:          Pn8PatVl27vV+H996BfD3IzvydmBNYGSGpUH/uxFsbo=
Subject key identifier:   AE:6B:33:79:10:3C:35:A9:9F:03:73:6F:14:B0:39:AE:2C:93:59:0C
Certificate issuer:       /CN=C0DA5845CF951A8ECD8332855BC18916639F81DF
Certificate serial:       5ED16FE633235EA783A9216BFDBF25F540A8395A
Authority key identifier: C0:DA:58:45:CF:95:1A:8E:CD:83:32:85:5B:C1:89:16:63:9F:81:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DA5845CF951A8ECD8332855BC18916639F81DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e39302e302f32332d3233203d3e20323731313334.roa
Signing time:             Sat 01 Mar 2025 16:24:30 +0000
ROA not before:           Sat 01 Mar 2025 16:19:30 +0000
ROA not after:            Sat 28 Feb 2026 16:24:30 +0000
asID:                     271134
IP address blocks:        167.249.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/C0DA5845CF951A8ECD8332855BC18916639F81DF.crl
                          rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/C0DA5845CF951A8ECD8332855BC18916639F81DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DA5845CF951A8ECD8332855BC18916639F81DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 22:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d1:6f:e6:33:23:5e:a7:83:a9:21:6b:fd:bf:25:f5:40:a8:39:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DA5845CF951A8ECD8332855BC18916639F81DF
        Validity
            Not Before: Mar  1 16:19:30 2025 GMT
            Not After : Feb 28 16:24:30 2026 GMT
        Subject: CN=AE6B3379103C35A99F03736F14B039AE2C93590C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:07:f9:fd:65:b2:db:fb:70:32:de:ef:1a:
                    e7:08:e2:f0:6b:9e:1a:24:4b:7f:8f:8d:4a:94:ef:
                    7a:91:66:97:27:95:d3:99:65:a2:28:12:22:99:e3:
                    a0:65:60:67:35:ef:6f:01:b0:3f:60:eb:f7:5b:64:
                    76:f5:76:82:2c:61:d5:cf:19:c5:d1:e3:3e:a5:52:
                    bf:df:e9:86:5e:ef:e7:35:f7:c5:55:ba:c4:5e:27:
                    f6:f5:02:2d:03:4f:b5:fc:1e:cc:93:70:56:fa:27:
                    66:8d:a1:ea:ed:96:c4:05:a8:85:56:2c:03:a3:8e:
                    25:7d:cc:1f:5c:58:e9:65:9d:cd:9a:d4:d2:5f:7f:
                    16:16:f9:76:27:e6:0d:92:ad:51:1d:c4:5b:0b:dd:
                    10:b0:b1:ce:3a:18:c5:b3:4a:d0:b3:b8:75:7e:06:
                    74:27:c8:53:4d:f3:2a:34:f9:7e:43:5e:60:91:24:
                    d2:f0:8e:e4:a7:fa:ac:4d:fe:50:da:96:65:e9:a4:
                    e9:0d:44:e0:86:5d:97:df:18:9c:ac:6e:dc:74:80:
                    e2:bd:78:bf:55:ba:23:03:78:93:52:fa:f9:e0:3b:
                    82:5e:83:d7:d7:14:5d:53:b9:ca:8d:c5:50:0b:38:
                    01:25:7a:cc:8b:84:46:90:73:bb:fa:48:e3:38:15:
                    29:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6B:33:79:10:3C:35:A9:9F:03:73:6F:14:B0:39:AE:2C:93:59:0C
            X509v3 Authority Key Identifier:
                keyid:C0:DA:58:45:CF:95:1A:8E:CD:83:32:85:5B:C1:89:16:63:9F:81:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/C0DA5845CF951A8ECD8332855BC18916639F81DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DA5845CF951A8ECD8332855BC18916639F81DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e39302e302f32332d3233203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:8a:bb:e2:0a:61:10:36:52:4c:8f:46:7b:66:6e:9a:62:91:
         04:df:70:f7:4f:50:10:c6:56:92:29:c7:0a:67:f3:4f:68:e2:
         df:c1:82:28:b9:2c:a5:0f:9b:da:f1:7b:86:4a:4d:59:b6:27:
         56:5e:5a:56:f3:ea:75:d7:0f:f4:d5:94:12:f2:0a:98:b0:84:
         0c:a5:d5:55:29:4e:2b:57:be:78:48:6f:fb:30:fe:ed:11:e9:
         30:b1:62:9c:19:68:8c:60:33:26:94:29:e1:98:8b:21:d6:8b:
         61:10:59:d5:8a:0c:a5:8b:ea:80:13:47:43:77:ce:11:a1:71:
         e4:f1:4d:f5:35:ab:61:d6:fc:1e:a2:8b:54:b8:5f:e6:71:68:
         ca:e3:76:fb:a5:39:c3:90:e1:09:8b:fd:17:2a:ad:45:b3:12:
         a0:52:51:3c:5b:8d:ed:20:4e:65:20:f7:af:39:fd:e4:fc:80:
         05:28:01:7e:2f:b5:79:23:a9:26:e3:c6:50:1c:df:0f:a1:5d:
         db:42:32:d3:b1:7a:df:42:8e:47:9d:13:0f:be:7b:ed:9b:c8:
         71:96:ed:74:1b:63:47:ba:b0:dd:a9:1e:ff:1a:3a:17:13:1a:
         40:f4:7a:c3:f0:bc:1e:1d:d9:c2:d0:31:48:9e:18:c2:39:ec:
         d2:7e:08:db
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXtFv5jMjXqeDqSFr/b8l9UCoOVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBEQTU4NDVDRjk1MUE4RUNEODMzMjg1NUJDMTg5MTY2
MzlGODFERjAeFw0yNTAzMDExNjE5MzBaFw0yNjAyMjgxNjI0MzBaMDMxMTAvBgNV
BAMTKEFFNkIzMzc5MTAzQzM1QTk5RjAzNzM2RjE0QjAzOUFFMkM5MzU5MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7Qf5/WWy2/twMt7vGucI4vBr
nhokS3+PjUqU73qRZpcnldOZZaIoEiKZ46BlYGc1728BsD9g6/dbZHb1doIsYdXP
GcXR4z6lUr/f6YZe7+c198VVusReJ/b1Ai0DT7X8HsyTcFb6J2aNoertlsQFqIVW
LAOjjiV9zB9cWOllnc2a1NJffxYW+XYn5g2SrVEdxFsL3RCwsc46GMWzStCzuHV+
BnQnyFNN8yo0+X5DXmCRJNLwjuSn+qxN/lDalmXppOkNROCGXZffGJysbtx0gOK9
eL9VuiMDeJNS+vngO4Jeg9fXFF1TucqNxVALOAElesyLhEaQc7v6SOM4FSnrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrmszeRA8NamfA3NvFLA5riyTWQwwHwYDVR0j
BBgwFoAUwNpYRc+VGo7NgzKFW8GJFmOfgd8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhVM1FoTWF0aldYQW8yWEUzVTkzekxTR0hHY0JFR1pycmQ2MTdnTWFw
NHovMC9DMERBNTg0NUNGOTUxQThFQ0Q4MzMyODU1QkMxODkxNjYzOUY4MURGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwREE1ODQ1Q0Y5NTFBOEVD
RDgzMzI4NTVCQzE4OTE2NjM5RjgxREYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JoVTNRaE1hdGpXWEFvMlhFM1U5M3pMU0dIR2NCRUdacnJkNjE3Z01hcDR6LzAv
MzEzNjM3MmUzMjM0MzkyZTM5MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzEzMTMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGn+VowDQYJKoZIhvcNAQELBQADggEBACeKu+IK
YRA2UkyPRntmbppikQTfcPdPUBDGVpIpxwpn809o4t/Bgii5LKUPm9rxe4ZKTVm2
J1ZeWlbz6nXXD/TVlBLyCpiwhAyl1VUpTitXvnhIb/sw/u0R6TCxYpwZaIxgMyaU
KeGYiyHWi2EQWdWKDKWL6oATR0N3zhGhceTxTfU1q2HW/B6ii1S4X+ZxaMrjdvul
OcOQ4QmL/RcqrUWzEqBSUTxbje0gTmUg9685/eT8gAUoAX4vtXkjqSbjxlAc3w+h
XdtCMtOxet9CjkedEw++e+2byHGW7XQbY0e6sN2pHv8aOhcTGkD0esPwvB4d2cLQ
MUieGMI57NJ+CNs=
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:50:41 2025 by rpki-client