Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/3136382e3139372e3134382e302f32322d3234203d3e20323635343833.roa
File:                     3136382e3139372e3134382e302f32322d3234203d3e20323635343833.roa (raw, json)
Hash identifier:          E5qoBXr4oTY6QTX7EYkjyrfuGgD2aWcgq+lD1ik24wk=
Subject key identifier:   B9:0F:83:25:3E:DF:9E:C4:5B:C4:52:CF:B9:B4:39:F3:6E:71:C8:46
Certificate issuer:       /CN=0848CF0033EBDC84F70FE97CEF07FDEA40979FF9
Certificate serial:       4005BEEE1731F0572BE414960F8A1917BB6AE76F
Authority key identifier: 08:48:CF:00:33:EB:DC:84:F7:0F:E9:7C:EF:07:FD:EA:40:97:9F:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/3136382e3139372e3134382e302f32322d3234203d3e20323635343833.roa
Signing time:             Thu 06 Mar 2025 16:52:18 +0000
ROA not before:           Thu 06 Mar 2025 16:47:18 +0000
ROA not after:            Thu 05 Mar 2026 16:52:18 +0000
asID:                     265483
IP address blocks:        168.197.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.crl
                          rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:05:be:ee:17:31:f0:57:2b:e4:14:96:0f:8a:19:17:bb:6a:e7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0848CF0033EBDC84F70FE97CEF07FDEA40979FF9
        Validity
            Not Before: Mar  6 16:47:18 2025 GMT
            Not After : Mar  5 16:52:18 2026 GMT
        Subject: CN=B90F83253EDF9EC45BC452CFB9B439F36E71C846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b4:78:82:c7:37:59:c2:f5:6a:66:be:30:97:
                    6a:4e:5d:03:a6:10:78:75:17:0f:fc:97:40:49:0f:
                    0b:fc:1f:16:62:84:d6:db:43:58:65:7f:a4:60:f4:
                    46:ab:b5:d9:8b:f7:4f:66:f6:d1:17:d6:ac:45:d5:
                    3a:be:9b:6d:76:1c:bc:b9:28:88:14:ce:98:68:bf:
                    08:49:bd:c3:f4:c3:9f:06:9a:99:d7:aa:21:25:92:
                    96:8f:83:50:f1:7b:a3:51:6b:4e:7e:4c:19:1a:cf:
                    df:83:67:94:78:c0:0d:b5:99:12:f7:10:92:b4:9c:
                    f3:47:88:dc:26:b9:92:ed:76:f3:7d:cb:eb:ab:1b:
                    e9:2e:34:fe:35:8f:b5:e3:68:9c:4d:db:c0:b1:26:
                    37:d3:18:73:05:5e:51:6f:90:18:4a:54:da:0b:b1:
                    9e:c3:d5:a2:63:38:fc:f7:e9:c3:42:e7:25:48:a0:
                    3e:53:5d:13:db:86:58:44:a6:10:41:53:d9:8a:e7:
                    37:93:67:aa:b0:4e:b9:c4:57:36:b1:ac:49:f5:74:
                    5d:e7:69:71:b7:88:c2:46:4f:f5:b0:51:b6:84:51:
                    e7:96:44:7c:1a:7e:15:68:ad:1c:08:f4:f7:bb:03:
                    3b:8d:06:7f:ba:8d:4b:15:d8:25:52:87:60:a4:e4:
                    53:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0F:83:25:3E:DF:9E:C4:5B:C4:52:CF:B9:B4:39:F3:6E:71:C8:46
            X509v3 Authority Key Identifier:
                keyid:08:48:CF:00:33:EB:DC:84:F7:0F:E9:7C:EF:07:FD:EA:40:97:9F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/3136382e3139372e3134382e302f32322d3234203d3e20323635343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:84:00:cf:3a:45:eb:e1:9c:fa:78:62:b6:b6:62:f7:6f:e2:
         11:84:30:16:f6:39:80:e7:8b:e4:0d:05:c6:d7:e8:65:61:bb:
         92:27:78:47:83:91:c4:0d:4d:cf:76:42:98:e9:2a:18:2a:9a:
         ef:65:e3:5c:6e:71:6b:31:1e:89:fd:96:6a:3d:9a:1c:73:68:
         53:fe:3c:f9:5c:14:72:c2:d6:05:6e:b2:6c:9c:30:2d:7d:6a:
         59:75:0c:69:e5:dd:67:86:25:04:57:41:56:db:eb:cb:4f:cf:
         59:0c:c1:7d:6e:b3:f3:35:f4:f3:8e:d6:e5:ca:96:e8:a6:f6:
         7c:b2:3d:71:20:c4:da:1d:b3:d6:51:59:fd:6c:f0:2c:ec:cd:
         58:f1:af:db:63:64:f3:65:69:3d:b4:a1:8e:32:6c:5b:5b:5c:
         c1:c9:f5:5d:47:8d:74:bd:f7:e7:e1:10:08:6c:8a:9a:15:10:
         63:85:f5:d6:7e:1a:26:cd:7c:8c:36:08:42:b1:e9:96:2c:c1:
         62:8a:28:84:ff:33:8a:22:78:bf:91:6b:97:03:0d:b9:2e:91:
         48:5b:b5:26:d2:09:04:73:e7:61:5c:f2:1b:74:ea:80:c4:7d:
         e1:c1:a4:2e:e3:6e:c9:60:fc:12:14:bf:d1:5b:80:5d:dc:84:
         47:4c:91:5b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQAW+7hcx8Fcr5BSWD4oZF7tq528wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg0OENGMDAzM0VCREM4NEY3MEZFOTdDRUYwN0ZERUE0
MDk3OUZGOTAeFw0yNTAzMDYxNjQ3MThaFw0yNjAzMDUxNjUyMThaMDMxMTAvBgNV
BAMTKEI5MEY4MzI1M0VERjlFQzQ1QkM0NTJDRkI5QjQzOUYzNkU3MUM4NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDttHiCxzdZwvVqZr4wl2pOXQOm
EHh1Fw/8l0BJDwv8HxZihNbbQ1hlf6Rg9EartdmL909m9tEX1qxF1Tq+m212HLy5
KIgUzphovwhJvcP0w58GmpnXqiElkpaPg1Dxe6NRa05+TBkaz9+DZ5R4wA21mRL3
EJK0nPNHiNwmuZLtdvN9y+urG+kuNP41j7XjaJxN28CxJjfTGHMFXlFvkBhKVNoL
sZ7D1aJjOPz36cNC5yVIoD5TXRPbhlhEphBBU9mK5zeTZ6qwTrnEVzaxrEn1dF3n
aXG3iMJGT/WwUbaEUeeWRHwafhVorRwI9Pe7AzuNBn+6jUsV2CVSh2Ck5FN7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUuQ+DJT7fnsRbxFLPubQ5825xyEYwHwYDVR0j
BBgwFoAUCEjPADPr3IT3D+l87wf96kCXn/kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnVLaUxFeEpEZnpTcHAyVWNVQlpzU3gyRmtIdWJ1cmQ0NWpTR2Fra2pL
YjQvMS8wODQ4Q0YwMDMzRUJEQzg0RjcwRkU5N0NFRjA3RkRFQTQwOTc5RkY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4NDhDRjAwMzNFQkRDODRG
NzBGRTk3Q0VGMDdGREVBNDA5NzlGRjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J1S2lMRXhKRGZ6U3BwMlVjVUJac1N4MkZrSHVidXJkNDVqU0dha2tqS2I0LzEv
MzEzNjM4MmUzMTM5MzcyZTMxMzQzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjFlDANBgkqhkiG9w0BAQsFAAOCAQEAW4QA
zzpF6+Gc+nhitrZi92/iEYQwFvY5gOeL5A0FxtfoZWG7kid4R4ORxA1Nz3ZCmOkq
GCqa72XjXG5xazEeif2Waj2aHHNoU/48+VwUcsLWBW6ybJwwLX1qWXUMaeXdZ4Yl
BFdBVtvry0/PWQzBfW6z8zX0847W5cqW6Kb2fLI9cSDE2h2z1lFZ/WzwLOzNWPGv
22Nk82VpPbShjjJsW1tcwcn1XUeNdL335+EQCGyKmhUQY4X11n4aJs18jDYIQrHp
lizBYooohP8ziiJ4v5FrlwMNuS6RSFu1JtIJBHPnYVzyG3TqgMR94cGkLuNuyWD8
EhS/0VuAXdyER0yRWw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 08:13:26 2025 by rpki-client