Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231362e302f32322d3232203d3e20323635313431.roa
File:                     3137302e302e3231362e302f32322d3232203d3e20323635313431.roa (raw, json)
Hash identifier:          WChbUTeiDJUjluJnuXRSWAfrWNrYM39uLeyJuP6p5DM=
Subject key identifier:   68:56:94:06:61:3A:60:22:4B:90:FA:6A:98:6B:4A:1F:FA:00:FD:DA
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       5B53160CA436F0AB3E241334CAAB4BB9FB8952CA
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231362e302f32322d3232203d3e20323635313431.roa
Signing time:             Mon 24 Jun 2024 17:44:55 +0000
ROA not before:           Mon 24 Jun 2024 17:39:55 +0000
ROA not after:            Mon 23 Jun 2025 17:44:55 +0000
asID:                     265141
IP address blocks:        170.0.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:53:16:0c:a4:36:f0:ab:3e:24:13:34:ca:ab:4b:b9:fb:89:52:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: Jun 24 17:39:55 2024 GMT
            Not After : Jun 23 17:44:55 2025 GMT
        Subject: CN=68569406613A60224B90FA6A986B4A1FFA00FDDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:61:ab:ec:58:b3:3f:19:eb:0a:af:73:8d:7d:
                    cc:b5:bd:54:e3:1e:2d:bb:51:1a:58:f5:85:93:15:
                    ca:3d:d8:0e:bf:5c:f6:d1:fa:48:65:da:3a:58:60:
                    a8:80:e0:8e:fd:1e:43:bc:83:16:20:ef:9b:97:3e:
                    95:dd:e7:e2:2c:cb:d7:6a:88:e9:b2:33:5c:53:d6:
                    69:a4:28:3f:c7:97:8c:9e:6a:8e:b8:97:ea:eb:27:
                    4f:a2:3e:c5:bb:e3:b4:fd:64:23:9e:fe:30:7e:7c:
                    af:a2:8c:da:7a:ad:f8:96:35:71:65:ec:bd:7f:50:
                    20:01:18:75:28:34:d0:58:53:33:96:f3:3e:a9:73:
                    c7:d0:25:2c:b0:e6:1b:ad:ca:2c:b2:ae:7c:c8:77:
                    18:fb:12:de:9a:73:27:65:f0:4d:5f:51:7c:bc:a9:
                    ee:62:60:8f:18:5c:24:a0:b5:b4:cc:71:7d:ad:0d:
                    b2:a4:1b:db:80:85:94:ac:3d:90:c8:f6:6e:ee:ac:
                    ac:41:25:8e:23:3f:72:38:4a:ed:d8:5d:31:59:3d:
                    69:e3:d9:cb:d4:c5:ea:7e:13:77:7d:74:bc:5d:35:
                    b8:35:75:75:33:85:d9:b3:1a:3b:cd:f9:ee:dc:1d:
                    cc:b2:5d:0c:a5:94:8c:55:d1:4d:a7:3b:b1:8b:6b:
                    8c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:56:94:06:61:3A:60:22:4B:90:FA:6A:98:6B:4A:1F:FA:00:FD:DA
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231362e302f32322d3232203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:f6:39:cf:05:37:86:54:77:b1:59:ee:63:24:c2:9a:d5:a2:
         ef:eb:0e:26:0b:2b:c5:1e:3a:44:38:f6:93:6a:e7:90:bd:f2:
         0e:a4:19:01:62:a3:a7:b1:6d:16:d0:64:d7:b2:26:0d:c7:7d:
         6f:b1:74:61:7d:b9:2d:3b:fb:ba:31:44:92:cf:82:a3:7c:fb:
         37:f6:ec:f3:66:e3:4d:7c:fc:8d:29:9f:8d:4d:8d:fb:ba:c2:
         be:15:25:84:70:ce:6d:57:a1:75:3e:c2:38:f2:88:c0:61:46:
         25:96:b1:84:0b:85:ab:8f:f5:8a:d0:30:a4:3e:2f:92:64:02:
         ed:98:06:ef:68:4e:e0:54:e1:42:fa:f9:fc:68:a5:9c:68:63:
         24:43:39:99:63:23:3e:6e:07:ef:77:60:a9:8f:ab:d9:ed:81:
         59:a2:11:18:40:11:2e:bb:10:de:53:80:37:a3:20:8d:76:8e:
         6c:f3:ae:c3:2d:d0:40:9a:84:5a:1d:fb:4c:16:a5:94:29:73:
         fb:1e:2e:f2:d4:de:a0:4f:b5:17:db:66:bd:cc:7a:f7:e3:f2:
         07:e5:ab:83:46:b3:23:5b:e0:a6:30:9c:5a:53:60:74:cd:34:
         9e:6a:fe:8b:34:71:4c:6f:2c:f3:88:da:31:64:72:11:49:92:
         15:f5:53:80
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUW1MWDKQ28Ks+JBM0yqtLufuJUsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZFNzdCODg1NUY2MURGMkFENjgxODVERDA5NzdCQ0I0
MkM3MDhGNDAeFw0yNDA2MjQxNzM5NTVaFw0yNTA2MjMxNzQ0NTVaMDMxMTAvBgNV
BAMTKDY4NTY5NDA2NjEzQTYwMjI0QjkwRkE2QTk4NkI0QTFGRkEwMEZEREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaYavsWLM/GesKr3ONfcy1vVTj
Hi27URpY9YWTFco92A6/XPbR+khl2jpYYKiA4I79HkO8gxYg75uXPpXd5+Isy9dq
iOmyM1xT1mmkKD/Hl4yeao64l+rrJ0+iPsW747T9ZCOe/jB+fK+ijNp6rfiWNXFl
7L1/UCABGHUoNNBYUzOW8z6pc8fQJSyw5hutyiyyrnzIdxj7Et6acydl8E1fUXy8
qe5iYI8YXCSgtbTMcX2tDbKkG9uAhZSsPZDI9m7urKxBJY4jP3I4Su3YXTFZPWnj
2cvUxep+E3d9dLxdNbg1dXUzhdmzGjvN+e7cHcyyXQyllIxV0U2nO7GLa4y9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUaFaUBmE6YCJLkPpqmGtKH/oA/dowHwYDVR0j
BBgwFoAUP+d7iFX2HfKtaBhd0Jd7y0LHCPQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVhad0pMZUJETkF5UXVHaG5UdlNja3FTbXE3OVF1WGdCNDYzUm9OeW1j
djEvMC8zRkU3N0I4ODU1RjYxREYyQUQ2ODE4NUREMDk3N0JDQjQyQzcwOEY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGRTc3Qjg4NTVGNjFERjJB
RDY4MTg1REQwOTc3QkNCNDJDNzA4RjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VYWndKTGVCRE5BeVF1R2huVHZTY2txU21xNzlRdVhnQjQ2M1JvTnltY3YxLzAv
MzEzNzMwMmUzMDJlMzIzMTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM1
MzEzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqgDYMA0GCSqGSIb3DQEBCwUAA4IBAQBy9jnPBTeG
VHexWe5jJMKa1aLv6w4mCyvFHjpEOPaTaueQvfIOpBkBYqOnsW0W0GTXsiYNx31v
sXRhfbktO/u6MUSSz4KjfPs39uzzZuNNfPyNKZ+NTY37usK+FSWEcM5tV6F1PsI4
8ojAYUYllrGEC4Wrj/WK0DCkPi+SZALtmAbvaE7gVOFC+vn8aKWcaGMkQzmZYyM+
bgfvd2Cpj6vZ7YFZohEYQBEuuxDeU4A3oyCNdo5s867DLdBAmoRaHftMFqWUKXP7
Hi7y1N6gT7UX22a9zHr34/IH5auDRrMjW+CmMJxaU2B0zTSeav6LNHFMbyzziNox
ZHIRSZIV9VOA
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:27:50 2025 by rpki-client