Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3137302e3135302e3234302e302f32322d3332203d3e203631353838.roa
File:                     3137302e3135302e3234302e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          mhnxKYcU3Yh5E8KUiiOwQdvcsdxNHkKn7HLOWqvuK0I=
Subject key identifier:   BA:F8:E2:E8:6F:CE:0D:05:E5:62:40:33:16:52:C7:3D:9A:1D:D1:90
Certificate issuer:       /CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
Certificate serial:       34DB6EC81BA5E101837B4AE72E11190C6016091B
Authority key identifier: 9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3137302e3135302e3234302e302f32322d3332203d3e203631353838.roa
Signing time:             Thu 06 Mar 2025 09:00:39 +0000
ROA not before:           Thu 06 Mar 2025 08:55:39 +0000
ROA not after:            Thu 05 Mar 2026 09:00:39 +0000
asID:                     61588
IP address blocks:        170.150.240.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl
                          rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 12:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:db:6e:c8:1b:a5:e1:01:83:7b:4a:e7:2e:11:19:0c:60:16:09:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
        Validity
            Not Before: Mar  6 08:55:39 2025 GMT
            Not After : Mar  5 09:00:39 2026 GMT
        Subject: CN=BAF8E2E86FCE0D05E56240331652C73D9A1DD190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:60:cb:21:55:29:9d:a0:d2:0b:15:41:d7:
                    e8:09:63:e9:f5:63:c9:f4:b3:8d:7e:74:5b:b1:74:
                    86:ac:06:91:5f:d9:8a:b4:37:d2:f0:b3:22:e5:bc:
                    b5:3e:8c:82:ce:a0:7d:37:d8:fc:a4:69:2d:95:1d:
                    32:4d:80:38:ec:e3:7d:72:dc:d2:7d:99:15:1d:a2:
                    1a:29:53:9c:ce:0a:f0:31:0d:59:2b:0e:9b:bf:e9:
                    d1:c0:f3:b4:61:e9:f2:28:91:f0:42:94:ef:57:7e:
                    b9:09:63:f4:61:88:b5:0b:dd:59:6e:f0:32:02:2b:
                    a1:81:64:c3:f2:ae:f0:1c:7d:22:d4:73:de:79:95:
                    34:6d:7a:b1:25:4c:0d:36:32:45:18:59:18:1b:95:
                    83:c8:1a:cd:3f:f0:e4:f1:6f:9b:b4:c6:53:fc:23:
                    9e:e9:db:51:5f:ac:0b:28:cc:6d:4f:7e:de:f9:a8:
                    88:20:cd:80:d3:8d:38:a6:fd:c2:f1:11:aa:23:f7:
                    26:8c:07:dc:cc:a0:89:4d:fb:40:24:38:2d:d0:f2:
                    92:83:06:e8:34:e2:3a:65:35:72:22:51:fa:9d:6f:
                    2d:98:35:9b:9b:ae:57:26:64:9b:87:fb:ca:72:60:
                    25:3c:34:bf:6b:8e:b4:2e:da:58:3c:1d:c6:93:b4:
                    2d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F8:E2:E8:6F:CE:0D:05:E5:62:40:33:16:52:C7:3D:9A:1D:D1:90
            X509v3 Authority Key Identifier:
                keyid:9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3137302e3135302e3234302e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:95:16:46:1a:23:b4:26:2c:77:7d:bc:26:5e:27:e4:a0:35:
         b7:fb:ca:10:dd:5a:8c:4b:d9:ef:dd:7b:d0:66:a4:c4:16:8f:
         12:37:b9:84:29:b4:1f:ee:39:b3:de:23:f5:61:97:d0:93:8c:
         8f:6c:cc:e5:df:bf:bd:37:bb:68:bf:9b:13:31:f0:d8:ab:ca:
         5e:f8:bc:1f:74:55:a2:0e:cc:c1:82:a2:f0:04:60:08:7b:b3:
         d4:ea:b8:1e:4c:e3:fe:95:c7:0a:f4:c0:60:15:5f:64:60:c5:
         e2:fc:6c:84:14:52:ee:a0:51:3f:1f:9b:f5:cf:6c:f4:d7:70:
         c5:58:d9:39:ed:58:28:56:ed:db:68:e7:57:10:6a:af:64:a4:
         40:d5:f9:c4:d9:3c:b5:f5:1a:2a:68:d8:78:ac:57:9d:66:09:
         a6:bb:fa:2b:7c:82:4a:dc:ce:e2:77:e4:2e:66:10:bb:03:29:
         79:24:35:5a:b3:5b:6e:f9:d0:9f:9c:8b:98:6a:d4:e3:5e:f2:
         23:37:d4:a1:2b:40:4d:35:72:16:68:b2:96:2f:1e:20:85:6a:
         11:c7:5c:77:d3:96:44:83:70:01:43:29:aa:f7:fe:5f:03:3d:
         c9:a9:16:69:8e:f9:ca:fe:32:a6:90:d2:a1:83:e9:18:e8:53:
         b8:61:58:74
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNNtuyBul4QGDe0rnLhEZDGAWCRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUFFQTREQzE0MUZDMjBEN0JBMkE1MzgxQzUyQkMzNEEy
OUFCNjgxNTAeFw0yNTAzMDYwODU1MzlaFw0yNjAzMDUwOTAwMzlaMDMxMTAvBgNV
BAMTKEJBRjhFMkU4NkZDRTBEMDVFNTYyNDAzMzE2NTJDNzNEOUExREQxOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8WmDLIVUpnaDSCxVB1+gJY+n1
Y8n0s41+dFuxdIasBpFf2Yq0N9LwsyLlvLU+jILOoH032PykaS2VHTJNgDjs431y
3NJ9mRUdohopU5zOCvAxDVkrDpu/6dHA87Rh6fIokfBClO9XfrkJY/RhiLUL3Vlu
8DICK6GBZMPyrvAcfSLUc955lTRterElTA02MkUYWRgblYPIGs0/8OTxb5u0xlP8
I57p21FfrAsozG1Pft75qIggzYDTjTim/cLxEaoj9yaMB9zMoIlN+0AkOC3Q8pKD
Bug04jplNXIiUfqdby2YNZubrlcmZJuH+8pyYCU8NL9rjrQu2lg8HcaTtC03AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuvji6G/ODQXlYkAzFlLHPZod0ZAwHwYDVR0j
BBgwFoAUmupNwUH8INe6KlOBxSvDSimraBUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREJkVldtTkR6QXJEZ1UxRm9uRkpLSE1pWHRwNDRZZDNiU1Q2TnlmZkdD
Z2cvMS85QUVBNERDMTQxRkMyMEQ3QkEyQTUzODFDNTJCQzM0QTI5QUI2ODE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBRUE0REMxNDFGQzIwRDdC
QTJBNTM4MUM1MkJDMzRBMjlBQjY4MTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RCZFZXbU5EekFyRGdVMUZvbkZKS0hNaVh0cDQ0WWQzYlNUNk55ZmZHQ2dnLzEv
MzEzNzMwMmUzMTM1MzAyZTMyMzQzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM2
MzEzNTM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqlvAwDQYJKoZIhvcNAQELBQADggEBAHCVFkYa
I7QmLHd9vCZeJ+SgNbf7yhDdWoxL2e/de9BmpMQWjxI3uYQptB/uObPeI/Vhl9CT
jI9szOXfv703u2i/mxMx8Niryl74vB90VaIOzMGCovAEYAh7s9TquB5M4/6Vxwr0
wGAVX2RgxeL8bIQUUu6gUT8fm/XPbPTXcMVY2TntWChW7dto51cQaq9kpEDV+cTZ
PLX1Gipo2HisV51mCaa7+it8gkrczuJ35C5mELsDKXkkNVqzW2750J+ci5hq1ONe
8iM31KErQE01chZospYvHiCFahHHXHfTlkSDcAFDKar3/l8DPcmpFmmO+cr+MqaQ
0qGD6RjoU7hhWHQ=
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:23:03 2025 by rpki-client