Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/3137302e3234342e3230302e302f32342d3234203d3e20323636303133.roa
File:                     3137302e3234342e3230302e302f32342d3234203d3e20323636303133.roa (raw, json)
Hash identifier:          9EIMs5/0GBn3LyBUp8WiXNy3CDFIzRVs7d4or11k7Xw=
Subject key identifier:   1D:6B:6D:1A:B6:E7:48:53:8F:E9:3E:B9:31:50:64:FE:C1:F6:83:B9
Certificate issuer:       /CN=0CF49321F81789A195BED10A6CB07A13AF657F42
Certificate serial:       012FFA7CC832D7DBDB4C0A3DC3A12A5D92106DE3
Authority key identifier: 0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/3137302e3234342e3230302e302f32342d3234203d3e20323636303133.roa
Signing time:             Thu 06 Mar 2025 13:27:22 +0000
ROA not before:           Thu 06 Mar 2025 13:22:22 +0000
ROA not after:            Thu 05 Mar 2026 13:27:22 +0000
asID:                     266013
IP address blocks:        170.244.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl
                          rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 12:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2f:fa:7c:c8:32:d7:db:db:4c:0a:3d:c3:a1:2a:5d:92:10:6d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF49321F81789A195BED10A6CB07A13AF657F42
        Validity
            Not Before: Mar  6 13:22:22 2025 GMT
            Not After : Mar  5 13:27:22 2026 GMT
        Subject: CN=1D6B6D1AB6E748538FE93EB9315064FEC1F683B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:df:29:15:fe:9f:b4:99:d3:a8:76:5e:c8:1b:
                    68:e2:2e:67:8c:5c:a9:9e:f4:cc:00:16:d4:67:b3:
                    d9:8e:85:ff:d5:99:38:3c:ad:99:d7:47:ff:9c:4a:
                    14:81:77:93:fb:f7:12:27:9c:02:ee:1b:67:ff:ba:
                    19:2d:13:a8:23:5b:4d:62:ff:be:4b:54:eb:3f:6d:
                    bc:e3:82:e6:11:d8:8c:5d:5d:a6:20:9b:9b:1e:28:
                    15:0d:8a:c2:3d:53:a7:8a:01:f5:85:03:2b:94:a9:
                    e4:51:b2:c6:ec:76:4d:59:c8:2c:32:3c:f9:91:9d:
                    dc:eb:fb:f9:d6:e2:fa:c3:e2:87:92:63:f6:7e:b6:
                    9a:93:f2:d8:6d:88:e1:67:18:3f:fc:8e:d3:d0:36:
                    d8:a6:7d:df:3d:65:6a:da:07:db:29:c9:1d:d4:80:
                    47:e7:0b:bc:d4:54:22:65:79:d0:4f:53:6d:ee:89:
                    a6:2d:6d:9f:90:83:c2:5c:15:7b:ff:83:db:19:b4:
                    d2:ff:74:94:5e:58:81:e9:9f:55:98:eb:0d:9f:34:
                    4d:bb:a3:1d:c6:62:ff:c2:f6:cc:21:45:89:a3:1e:
                    2f:9a:69:c4:14:4a:c2:65:30:68:c7:e2:16:40:27:
                    0e:b6:6f:97:10:d0:74:bf:0a:b9:0f:25:23:ac:fe:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6B:6D:1A:B6:E7:48:53:8F:E9:3E:B9:31:50:64:FE:C1:F6:83:B9
            X509v3 Authority Key Identifier:
                keyid:0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/3137302e3234342e3230302e302f32342d3234203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:35:89:d0:b9:bc:8f:52:4d:29:15:ea:83:3b:03:b2:7d:62:
         06:b2:8e:88:e8:5c:7a:09:03:24:8c:50:f5:f9:ad:45:af:40:
         0b:17:00:33:0b:99:06:df:12:e4:07:14:4a:70:a9:d6:70:88:
         f1:5f:b5:f4:99:fc:ce:c6:df:02:7b:4d:34:47:22:a4:4b:58:
         9b:4e:0f:f5:c4:f1:45:bd:3b:e5:4c:fb:fe:2d:3c:15:c7:58:
         df:5d:a3:84:d1:45:5c:71:83:19:50:7c:2b:4b:11:55:1c:bf:
         7b:ef:66:ae:f5:9e:43:b3:91:a8:bb:89:59:09:22:b1:9f:04:
         8a:1c:76:b7:48:1c:cb:b6:51:24:10:d1:80:64:77:62:ac:2c:
         3c:02:4c:5e:ca:ee:2c:b1:d8:cc:09:f2:60:1e:ef:7f:84:3a:
         87:c1:4f:f8:1a:27:d7:79:15:59:5f:cd:ca:e5:ad:02:04:e4:
         e7:f7:20:f6:5b:65:dc:42:66:ff:9b:bf:fe:19:b1:de:25:d1:
         43:fd:f7:03:f4:d4:08:98:a5:4b:4c:fe:b7:9c:d4:26:66:07:
         ef:5e:75:63:ff:45:4e:cd:d9:08:db:86:ed:fb:e9:06:a9:a1:
         85:04:c2:cd:c9:72:b7:69:97:28:c0:33:91:ff:24:3b:56:96:
         26:31:87:b2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAS/6fMgy19vbTAo9w6EqXZIQbeMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENGNDkzMjFGODE3ODlBMTk1QkVEMTBBNkNCMDdBMTNB
RjY1N0Y0MjAeFw0yNTAzMDYxMzIyMjJaFw0yNjAzMDUxMzI3MjJaMDMxMTAvBgNV
BAMTKDFENkI2RDFBQjZFNzQ4NTM4RkU5M0VCOTMxNTA2NEZFQzFGNjgzQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ3ykV/p+0mdOodl7IG2jiLmeM
XKme9MwAFtRns9mOhf/VmTg8rZnXR/+cShSBd5P79xInnALuG2f/uhktE6gjW01i
/75LVOs/bbzjguYR2IxdXaYgm5seKBUNisI9U6eKAfWFAyuUqeRRssbsdk1ZyCwy
PPmRndzr+/nW4vrD4oeSY/Z+tpqT8thtiOFnGD/8jtPQNtimfd89ZWraB9spyR3U
gEfnC7zUVCJledBPU23uiaYtbZ+Qg8JcFXv/g9sZtNL/dJReWIHpn1WY6w2fNE27
ox3GYv/C9swhRYmjHi+aacQUSsJlMGjH4hZAJw62b5cQ0HS/CrkPJSOs/vT9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUHWttGrbnSFOP6T65MVBk/sH2g7kwHwYDVR0j
BBgwFoAUDPSTIfgXiaGVvtEKbLB6E69lf0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZLRW54OVdXZHB5NmJmblVMQjg3d0tKTERZc3htUUs1SlJoZmFoWnFO
V00vMi8wQ0Y0OTMyMUY4MTc4OUExOTVCRUQxMEE2Q0IwN0ExM0FGNjU3RjQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDRjQ5MzIxRjgxNzg5QTE5
NUJFRDEwQTZDQjA3QTEzQUY2NTdGNDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGS0VueDlXV2RweTZiZm5VTEI4N3dLSkxEWXN4bVFLNUpSaGZhaFpxTldNLzIv
MzEzNzMwMmUzMjM0MzQyZTMyMzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjMwMzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr0yDANBgkqhkiG9w0BAQsFAAOCAQEAxzWJ
0Lm8j1JNKRXqgzsDsn1iBrKOiOhcegkDJIxQ9fmtRa9ACxcAMwuZBt8S5AcUSnCp
1nCI8V+19Jn8zsbfAntNNEcipEtYm04P9cTxRb075Uz7/i08FcdY312jhNFFXHGD
GVB8K0sRVRy/e+9mrvWeQ7ORqLuJWQkisZ8Eihx2t0gcy7ZRJBDRgGR3YqwsPAJM
XsruLLHYzAnyYB7vf4Q6h8FP+Bon13kVWV/NyuWtAgTk5/cg9ltl3EJm/5u//hmx
3iXRQ/33A/TUCJilS0z+t5zUJmYH7151Y/9FTs3ZCNuG7fvpBqmhhQTCzclyt2mX
KMAzkf8kO1aWJjGHsg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:50 2025 by rpki-client