Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/3230302e33362e3134342e302f32322d3234203d3e20323731333033.roa
File:                     3230302e33362e3134342e302f32322d3234203d3e20323731333033.roa (raw, json)
Hash identifier:          Uq+wGa4SI7eAAvXe8op278X4ukvmDK2GpgO/geIV/VY=
Subject key identifier:   D7:CD:3D:0D:F2:15:14:CE:9E:15:A3:F4:6C:9D:5E:87:80:3F:64:8E
Certificate issuer:       /CN=636B79A9B69034C7907429A3D4D5FF5D5A6275E7
Certificate serial:       260344138BB2C6D37B27FE5B19B69F69E9E1DDA8
Authority key identifier: 63:6B:79:A9:B6:90:34:C7:90:74:29:A3:D4:D5:FF:5D:5A:62:75:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636B79A9B69034C7907429A3D4D5FF5D5A6275E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/3230302e33362e3134342e302f32322d3234203d3e20323731333033.roa
Signing time:             Tue 21 Jan 2025 17:14:32 +0000
ROA not before:           Tue 21 Jan 2025 17:09:32 +0000
ROA not after:            Tue 20 Jan 2026 17:14:32 +0000
asID:                     271303
IP address blocks:        200.36.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/636B79A9B69034C7907429A3D4D5FF5D5A6275E7.crl
                          rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/636B79A9B69034C7907429A3D4D5FF5D5A6275E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636B79A9B69034C7907429A3D4D5FF5D5A6275E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Feb 2025 22:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:03:44:13:8b:b2:c6:d3:7b:27:fe:5b:19:b6:9f:69:e9:e1:dd:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=636B79A9B69034C7907429A3D4D5FF5D5A6275E7
        Validity
            Not Before: Jan 21 17:09:32 2025 GMT
            Not After : Jan 20 17:14:32 2026 GMT
        Subject: CN=D7CD3D0DF21514CE9E15A3F46C9D5E87803F648E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f4:a7:66:bf:13:1c:f5:64:87:fc:c6:3d:b8:
                    66:4e:e7:b3:9e:13:ce:2a:ca:68:52:33:06:58:84:
                    cf:63:46:1b:7f:24:68:76:88:87:ad:80:ae:04:71:
                    3e:18:bf:e0:77:cb:08:1f:1e:86:2c:b7:4c:ec:3a:
                    65:f6:bd:28:65:4f:3d:9e:0c:5a:79:83:9b:27:ef:
                    e1:36:64:e6:06:bb:2b:64:4c:02:13:fb:56:1d:1e:
                    9b:13:6f:7e:9e:97:08:0d:6a:39:86:f0:77:b5:31:
                    66:fc:04:a4:d0:94:a7:d8:6c:08:6a:3a:f4:dd:aa:
                    fc:94:74:d6:bb:58:0f:8a:5b:23:f2:f3:bc:02:88:
                    0a:ff:f7:8c:25:ec:67:e1:b6:7b:2e:e1:c6:57:45:
                    2c:39:ff:f3:53:bc:30:f4:26:1d:82:65:65:5b:9d:
                    e9:97:b3:84:e8:88:f0:a3:ac:74:bf:6e:3a:21:90:
                    d9:35:8a:8e:8b:b4:00:76:5f:e4:6a:a0:39:a9:68:
                    ba:a5:11:81:38:7f:27:5f:5f:6c:c9:5a:75:d0:d8:
                    6e:41:33:ea:06:a0:df:3d:5e:c2:c0:52:39:54:f4:
                    c7:41:0b:80:a0:04:29:3b:f6:1e:da:86:ba:d9:d5:
                    11:53:73:97:4f:c6:8c:d2:e7:20:b7:59:d2:77:89:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CD:3D:0D:F2:15:14:CE:9E:15:A3:F4:6C:9D:5E:87:80:3F:64:8E
            X509v3 Authority Key Identifier:
                keyid:63:6B:79:A9:B6:90:34:C7:90:74:29:A3:D4:D5:FF:5D:5A:62:75:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/636B79A9B69034C7907429A3D4D5FF5D5A6275E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636B79A9B69034C7907429A3D4D5FF5D5A6275E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/3230302e33362e3134342e302f32322d3234203d3e20323731333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:3d:f3:77:af:2c:9e:df:11:51:b8:75:72:4b:7f:ea:59:34:
         5d:06:50:ef:af:ac:b1:64:07:43:5b:2a:4d:8c:45:37:f3:c0:
         b4:d2:e1:6e:ec:37:7e:2e:46:67:30:3d:43:49:a6:90:25:37:
         a4:e8:ba:47:e4:a4:ba:17:23:79:61:b6:23:22:d6:84:75:a8:
         b0:15:46:ac:3d:a2:f1:af:61:d0:93:24:c1:d1:97:a5:52:13:
         59:56:9e:f1:81:67:2c:f9:bf:8d:66:db:97:39:68:58:e1:b4:
         66:1c:15:48:cf:1f:83:e5:7c:9e:b0:d8:60:9b:05:92:da:70:
         13:dd:a2:7f:f3:fc:f2:f9:04:4b:91:19:37:bf:ca:dd:63:0f:
         e0:a2:95:a9:85:c4:3d:a7:37:8a:6c:3f:74:0c:6b:b3:cb:87:
         43:0d:dc:0c:f2:88:42:71:6f:d6:ce:d2:41:ed:60:71:74:1b:
         9b:ad:a6:20:77:e4:da:e2:c1:04:91:ef:65:8d:76:d2:c2:4f:
         b2:60:d3:ff:9b:7b:66:16:30:63:97:84:19:ab:81:0c:bc:d3:
         8d:64:10:c0:ec:62:dc:3f:b0:c5:aa:1a:1c:1d:c1:34:34:d5:
         12:27:60:c5:8f:79:9b:4b:62:fb:9f:a5:4f:54:51:4d:07:d1:
         c8:fd:a0:af
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJgNEE4uyxtN7J/5bGbafaenh3agwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM2Qjc5QTlCNjkwMzRDNzkwNzQyOUEzRDRENUZGNUQ1
QTYyNzVFNzAeFw0yNTAxMjExNzA5MzJaFw0yNjAxMjAxNzE0MzJaMDMxMTAvBgNV
BAMTKEQ3Q0QzRDBERjIxNTE0Q0U5RTE1QTNGNDZDOUQ1RTg3ODAzRjY0OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg9KdmvxMc9WSH/MY9uGZO57Oe
E84qymhSMwZYhM9jRht/JGh2iIetgK4EcT4Yv+B3ywgfHoYst0zsOmX2vShlTz2e
DFp5g5sn7+E2ZOYGuytkTAIT+1YdHpsTb36elwgNajmG8He1MWb8BKTQlKfYbAhq
OvTdqvyUdNa7WA+KWyPy87wCiAr/94wl7Gfhtnsu4cZXRSw5//NTvDD0Jh2CZWVb
nemXs4ToiPCjrHS/bjohkNk1io6LtAB2X+RqoDmpaLqlEYE4fydfX2zJWnXQ2G5B
M+oGoN89XsLAUjlU9MdBC4CgBCk79h7ahrrZ1RFTc5dPxozS5yC3WdJ3iRLLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1809DfIVFM6eFaP0bJ1eh4A/ZI4wHwYDVR0j
BBgwFoAUY2t5qbaQNMeQdCmj1NX/XVpidecwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVpaNjdzN1hpaTJ3dTJkR3FmOW5xZEo3WWtRaFhLUkJhWnRqUEVoWFRq
NEsvMC82MzZCNzlBOUI2OTAzNEM3OTA3NDI5QTNENEQ1RkY1RDVBNjI3NUU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzNkI3OUE5QjY5MDM0Qzc5
MDc0MjlBM0Q0RDVGRjVENUE2Mjc1RTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VaWjY3czdYaWkyd3UyZEdxZjlucWRKN1lrUWhYS1JCYVp0alBFaFhUajRLLzAv
MzIzMDMwMmUzMzM2MmUzMTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzMzMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIJJAwDQYJKoZIhvcNAQELBQADggEBAGU983ev
LJ7fEVG4dXJLf+pZNF0GUO+vrLFkB0NbKk2MRTfzwLTS4W7sN34uRmcwPUNJppAl
N6ToukfkpLoXI3lhtiMi1oR1qLAVRqw9ovGvYdCTJMHRl6VSE1lWnvGBZyz5v41m
25c5aFjhtGYcFUjPH4PlfJ6w2GCbBZLacBPdon/z/PL5BEuRGTe/yt1jD+CilamF
xD2nN4psP3QMa7PLh0MN3AzyiEJxb9bO0kHtYHF0G5utpiB35NriwQSR72WNdtLC
T7Jg0/+be2YWMGOXhBmrgQy8041kEMDsYtw/sMWqGhwdwTQ01RInYMWPeZtLYvuf
pU9UUU0H0cj9oK8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:04 2025 by rpki-client