Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3137302e3234342e3233362e302f32322d3234203d3e20323633303537.roa
File:                     3137302e3234342e3233362e302f32322d3234203d3e20323633303537.roa (raw, json)
Hash identifier:          q1y+jdCn8SZdfVYyj4OS6XcOjcINQa0bh+WpfZ3byg4=
Subject key identifier:   D3:C9:27:40:7B:EA:18:49:1C:06:F2:5B:9E:E2:22:82:D2:D5:33:7B
Certificate issuer:       /CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
Certificate serial:       41A5D8B9CC1C5E6F4D893F4292EDA6A3063321B8
Authority key identifier: 76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3137302e3234342e3233362e302f32322d3234203d3e20323633303537.roa
Signing time:             Fri 05 Sep 2025 12:37:45 +0000
ROA not before:           Fri 05 Sep 2025 12:32:45 +0000
ROA not after:            Fri 04 Sep 2026 12:37:45 +0000
asID:                     263057
IP address blocks:        170.244.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.crl
                          rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 08:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a5:d8:b9:cc:1c:5e:6f:4d:89:3f:42:92:ed:a6:a3:06:33:21:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
        Validity
            Not Before: Sep  5 12:32:45 2025 GMT
            Not After : Sep  4 12:37:45 2026 GMT
        Subject: CN=D3C927407BEA18491C06F25B9EE22282D2D5337B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5a:a2:77:b9:7f:57:5f:bb:eb:63:b7:9d:85:
                    0c:d7:e0:95:b9:32:2e:26:e1:60:2b:0d:e0:ae:b5:
                    02:05:aa:ec:a3:88:32:a0:d3:e4:9a:4a:bb:c7:e3:
                    85:5b:e0:dd:7a:d3:a3:96:22:5f:8a:00:a7:06:95:
                    91:a3:02:81:85:2e:20:c0:ee:fa:b0:b2:ed:6c:8a:
                    03:83:6c:8e:96:a2:82:21:ce:e0:fa:cb:fe:6a:e6:
                    21:8c:11:2c:f4:92:ee:7b:24:06:f7:70:8b:3e:a5:
                    96:61:81:98:c7:26:f7:f4:05:5c:d1:83:06:53:ca:
                    ab:83:7d:25:a1:a1:22:64:0b:a1:1a:99:3a:ed:75:
                    03:ee:30:60:ed:84:3a:4d:58:5e:60:9a:2e:5c:c4:
                    07:7a:e5:3c:da:6c:26:55:a3:a2:b8:04:8b:93:9f:
                    6c:89:ff:30:78:d6:01:fd:e7:46:47:af:7b:03:c8:
                    03:ef:d7:da:a3:7d:25:d0:89:f3:7c:6c:25:7c:cc:
                    88:15:1e:ec:96:47:56:6d:89:cb:7d:a0:57:68:7c:
                    34:a7:2b:a0:2b:d7:f7:8d:62:05:00:cd:a8:7c:eb:
                    87:35:2b:80:ea:ea:04:9b:54:a7:4b:ae:76:96:1a:
                    45:3b:79:bf:3c:22:10:e4:62:40:8f:e1:b5:4d:53:
                    da:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C9:27:40:7B:EA:18:49:1C:06:F2:5B:9E:E2:22:82:D2:D5:33:7B
            X509v3 Authority Key Identifier:
                keyid:76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3137302e3234342e3233362e302f32322d3234203d3e20323633303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:0a:56:ec:d2:03:6e:68:5e:8a:38:d2:14:b8:97:59:b7:de:
         38:a9:29:37:e0:8f:b4:24:78:6e:b9:62:32:3d:df:d5:03:fc:
         20:3b:45:57:f0:03:f9:ca:b9:45:ab:a8:b4:46:8f:3c:e1:9c:
         79:c6:6f:8a:52:56:6b:10:da:7f:11:59:1f:c8:17:53:bc:05:
         63:13:15:18:b9:4f:4a:7e:de:91:1d:db:46:c5:d5:0e:33:67:
         76:b7:75:c3:59:07:ce:66:c0:c9:71:3d:5a:65:b9:b8:23:ac:
         04:e8:f7:c1:d4:4c:2b:d8:b5:25:ce:b7:be:2f:e7:84:f8:f0:
         8e:cd:a2:2f:50:bd:64:67:a4:37:7b:55:b1:c2:0a:88:72:a8:
         6d:bb:4a:24:e8:e3:0b:a8:8a:02:8c:ec:e0:be:b3:80:f3:c6:
         7b:3b:54:49:a0:a0:89:b9:77:2c:68:33:38:a0:14:d9:53:2a:
         8e:5c:96:f6:88:e6:07:e1:85:73:2c:89:31:0b:ad:3f:84:54:
         96:dd:67:d0:b9:6e:d2:49:5b:20:9b:a9:79:6d:9c:8e:45:5f:
         2d:b5:68:64:64:56:dd:79:58:f6:44:bc:e7:c8:eb:9f:d3:5d:
         f8:25:a6:06:44:e5:6d:61:bb:6b:40:c8:eb:fc:1f:49:68:0f:
         d5:59:7f:2c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQaXYucwcXm9NiT9Cku2mowYzIbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY0MEVENTM2N0FFOTNCRUI4RDZGRDJFOThCNkI5MTEx
M0NERDJCQzAeFw0yNTA5MDUxMjMyNDVaFw0yNjA5MDQxMjM3NDVaMDMxMTAvBgNV
BAMTKEQzQzkyNzQwN0JFQTE4NDkxQzA2RjI1QjlFRTIyMjgyRDJENTMzN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxWqJ3uX9XX7vrY7edhQzX4JW5
Mi4m4WArDeCutQIFquyjiDKg0+SaSrvH44Vb4N1606OWIl+KAKcGlZGjAoGFLiDA
7vqwsu1sigODbI6WooIhzuD6y/5q5iGMESz0ku57JAb3cIs+pZZhgZjHJvf0BVzR
gwZTyquDfSWhoSJkC6EamTrtdQPuMGDthDpNWF5gmi5cxAd65TzabCZVo6K4BIuT
n2yJ/zB41gH950ZHr3sDyAPv19qjfSXQifN8bCV8zIgVHuyWR1Ztict9oFdofDSn
K6Ar1/eNYgUAzah864c1K4Dq6gSbVKdLrnaWGkU7eb88IhDkYkCP4bVNU9rfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU08knQHvqGEkcBvJbnuIigtLVM3swHwYDVR0j
BBgwFoAUdkDtU2euk7641v0umLa5ERPN0rwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1BCZ3hKZVhwNXJOYmRMMlNZYkVLR1VBZjVjdmhxTXpCRjNUN2RQbjNI
VW0vMC83NjQwRUQ1MzY3QUU5M0JFQjhENkZEMkU5OEI2QjkxMTEzQ0REMkJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2NDBFRDUzNjdBRTkzQkVC
OEQ2RkQyRTk4QjZCOTExMTNDREQyQkMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NQQmd4SmVYcDVyTmJkTDJTWWJFS0dVQWY1Y3ZocU16QkYzVDdkUG4zSFVtLzAv
MzEzNzMwMmUzMjM0MzQyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzMwMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr07DANBgkqhkiG9w0BAQsFAAOCAQEAQwpW
7NIDbmheijjSFLiXWbfeOKkpN+CPtCR4brliMj3f1QP8IDtFV/AD+cq5RauotEaP
POGcecZvilJWaxDafxFZH8gXU7wFYxMVGLlPSn7ekR3bRsXVDjNndrd1w1kHzmbA
yXE9WmW5uCOsBOj3wdRMK9i1Jc63vi/nhPjwjs2iL1C9ZGekN3tVscIKiHKobbtK
JOjjC6iKAozs4L6zgPPGeztUSaCgibl3LGgzOKAU2VMqjlyW9ojmB+GFcyyJMQut
P4RUlt1n0Llu0klbIJupeW2cjkVfLbVoZGRW3XlY9kS858jrn9Nd+CWmBkTlbWG7
a0DI6/wfSWgP1Vl/LA==
-----END CERTIFICATE-----
Generated at Fri Sep 19 00:43:46 2025 by rpki-client