Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3137302e3135302e3233362e302f32322d3234203d3e203533303632.roa
File:                     3137302e3135302e3233362e302f32322d3234203d3e203533303632.roa (raw, json)
Hash identifier:          J1XVGbGY0DZHxXcLjKtiLikZotQwgbpbUGty9hrZsrI=
Subject key identifier:   49:C2:83:F2:18:24:C5:69:EA:4B:1C:C0:76:72:01:4B:17:91:6B:D8
Certificate issuer:       /CN=F8410D54252926C3AE5A91AFD3992AC828829031
Certificate serial:       43C4677CD29BD96143463F5510F7252B3CC895
Authority key identifier: F8:41:0D:54:25:29:26:C3:AE:5A:91:AF:D3:99:2A:C8:28:82:90:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3137302e3135302e3233362e302f32322d3234203d3e203533303632.roa
Signing time:             Mon 07 Apr 2025 18:10:08 +0000
ROA not before:           Mon 07 Apr 2025 18:05:08 +0000
ROA not after:            Mon 06 Apr 2026 18:10:08 +0000
asID:                     53062
IP address blocks:        170.150.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.crl
                          rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c4:67:7c:d2:9b:d9:61:43:46:3f:55:10:f7:25:2b:3c:c8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8410D54252926C3AE5A91AFD3992AC828829031
        Validity
            Not Before: Apr  7 18:05:08 2025 GMT
            Not After : Apr  6 18:10:08 2026 GMT
        Subject: CN=49C283F21824C569EA4B1CC07672014B17916BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:35:c7:dd:43:bd:62:68:3e:81:e9:ca:94:ca:
                    be:4b:00:6e:34:e8:9f:9d:f3:f9:a7:3e:e8:49:ed:
                    29:b8:17:bb:be:3f:46:eb:58:1a:1f:86:ee:54:82:
                    37:99:78:e5:99:17:c2:8b:6b:15:83:0d:7e:d7:fb:
                    bd:84:56:de:d6:64:fa:c5:8b:fb:25:5d:52:0e:f2:
                    be:c1:9f:c7:32:e9:65:36:f0:5b:28:e5:31:da:09:
                    8c:91:1e:21:fd:4b:99:e8:f6:e7:10:42:90:d9:f6:
                    ae:4a:b4:0d:3c:51:11:70:b6:e6:7a:b3:59:8f:d4:
                    07:21:1e:ad:92:4c:6d:f5:64:f9:eb:3b:35:ba:a2:
                    fa:78:cb:da:4f:7f:f8:ae:62:3c:7e:56:93:93:59:
                    2d:1c:fd:53:1f:24:93:31:62:af:6f:87:1e:1e:42:
                    b2:f6:e6:2c:69:30:83:51:ea:bd:12:1d:77:f6:e1:
                    58:c5:02:e2:aa:87:f0:74:8f:dd:a4:8c:63:61:b3:
                    7a:d1:25:bd:70:9f:90:d3:e0:b3:08:94:a8:3d:b4:
                    70:00:9a:35:d8:4d:15:cc:e9:45:bb:a5:1b:bc:a1:
                    65:cf:64:bc:eb:0c:ef:8c:b5:5f:6f:ce:a7:50:32:
                    e9:39:e8:0e:d3:2f:87:d6:d6:d2:0e:ec:79:91:3a:
                    e3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C2:83:F2:18:24:C5:69:EA:4B:1C:C0:76:72:01:4B:17:91:6B:D8
            X509v3 Authority Key Identifier:
                keyid:F8:41:0D:54:25:29:26:C3:AE:5A:91:AF:D3:99:2A:C8:28:82:90:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3137302e3135302e3233362e302f32322d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:21:01:38:26:3d:4b:40:2d:60:3c:78:d1:17:c0:44:7a:4f:
         fa:70:2c:3b:9c:76:83:bd:e6:4c:4f:bf:4a:a4:61:82:1c:86:
         c4:34:75:c7:c8:96:26:87:d9:50:f5:fb:22:64:7d:d1:bc:e0:
         53:4b:92:42:f7:30:9d:d8:c9:2e:3f:33:ff:ab:9c:08:0d:4c:
         67:18:8a:d0:4d:db:40:5a:fc:e1:db:bd:1e:f0:27:5d:f2:b6:
         19:87:7f:a5:ca:2a:58:39:72:10:ad:d3:c1:dd:cc:db:87:da:
         f9:ac:4a:bf:7d:af:62:e7:0e:0c:13:2e:39:21:32:51:4f:65:
         00:4b:f6:5b:4f:e8:36:10:43:97:8d:23:7f:a0:ac:4f:14:06:
         c3:e4:a0:fd:87:ec:4a:e5:8d:24:8e:05:45:ba:74:93:9a:34:
         56:9e:39:7f:09:92:b7:16:7d:bc:d7:87:78:be:2b:aa:f0:22:
         cc:67:c3:3a:8f:a0:e3:a6:ca:0c:da:48:d1:64:50:4b:58:77:
         5b:d4:51:02:42:e6:59:56:e0:de:39:91:b3:a3:22:85:cb:45:
         26:90:cd:97:fa:50:cc:f8:41:32:62:89:62:bb:12:82:b8:96:
         07:1c:de:8a:2f:0b:29:40:41:13:a3:f1:c6:ab:47:76:bc:1a:
         7d:b6:1e:32
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgITQ8RnfNKb2WFDRj9VEPclKzzIlTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhGODQxMEQ1NDI1MjkyNkMzQUU1QTkxQUZEMzk5MkFDODI4
ODI5MDMxMB4XDTI1MDQwNzE4MDUwOFoXDTI2MDQwNjE4MTAwOFowMzExMC8GA1UE
AxMoNDlDMjgzRjIxODI0QzU2OUVBNEIxQ0MwNzY3MjAxNEIxNzkxNkJEODCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK81x91DvWJoPoHpypTKvksAbjTo
n53z+ac+6EntKbgXu74/RutYGh+G7lSCN5l45ZkXwotrFYMNftf7vYRW3tZk+sWL
+yVdUg7yvsGfxzLpZTbwWyjlMdoJjJEeIf1Lmej25xBCkNn2rkq0DTxREXC25nqz
WY/UByEerZJMbfVk+es7Nbqi+njL2k9/+K5iPH5Wk5NZLRz9Ux8kkzFir2+HHh5C
svbmLGkwg1HqvRIdd/bhWMUC4qqH8HSP3aSMY2GzetElvXCfkNPgswiUqD20cACa
NdhNFczpRbulG7yhZc9kvOsM74y1X2/Op1Ay6TnoDtMvh9bW0g7seZE643cCAwEA
AaOCAk4wggJKMB0GA1UdDgQWBBRJwoPyGCTFaepLHMB2cgFLF5Fr2DAfBgNVHSME
GDAWgBT4QQ1UJSkmw65aka/TmSrIKIKQMTAOBgNVHQ8BAf8EBAMCB4AwgZIGA1Ud
HwSBijCBhzCBhKCBgaB/hn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9y
ZXBvL0VoZ0RXQUFaNzRqWWgxOUxVNnY3QVJxU3hOVjRqdmRFaURGVzkyOXd1dnAv
Mi9GODQxMEQ1NDI1MjkyNkMzQUU1QTkxQUZEMzk5MkFDODI4ODI5MDMxLmNybDB4
BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4NDEwRDU0MjUyOTI2QzNBRTVB
OTFBRkQzOTkyQUM4Mjg4MjkwMzEuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYI
KwYBBQUHMAuGgY1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vo
Z0RXQUFaNzRqWWgxOUxVNnY3QVJxU3hOVjRqdmRFaURGVzkyOXd1dnAvMi8zMTM3
MzAyZTMxMzUzMDJlMzIzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMzMw
MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqqW7DANBgkqhkiG9w0BAQsFAAOCAQEAnCEBOCY9S0At
YDx40RfARHpP+nAsO5x2g73mTE+/SqRhghyGxDR1x8iWJofZUPX7ImR90bzgU0uS
QvcwndjJLj8z/6ucCA1MZxiK0E3bQFr84du9HvAnXfK2GYd/pcoqWDlyEK3Twd3M
24fa+axKv32vYucODBMuOSEyUU9lAEv2W0/oNhBDl40jf6CsTxQGw+Sg/YfsSuWN
JI4FRbp0k5o0Vp45fwmStxZ9vNeHeL4rqvAizGfDOo+g46bKDNpI0WRQS1h3W9RR
AkLmWVbg3jmRs6MihctFJpDNl/pQzPhBMmKJYrsSgriWBxzeii8LKUBBE6PxxqtH
drwafbYeMg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:43:15 2025 by rpki-client