Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/3137302e38322e3232302e302f32322d3232203d3e20323636343438.roa
File:                     3137302e38322e3232302e302f32322d3232203d3e20323636343438.roa (raw, json)
Hash identifier:          2zslkVGhELzRCKPMOYVfKhCU7Ml3/1nsZpxhG02X8iA=
Subject key identifier:   D8:FC:E9:A5:5A:B5:1B:FF:B9:86:C2:34:40:65:A3:02:83:85:2F:9A
Certificate issuer:       /CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
Certificate serial:       5792917CC21D8DB70724C96CB56C43173D0D9291
Authority key identifier: 10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/3137302e38322e3232302e302f32322d3232203d3e20323636343438.roa
Signing time:             Thu 06 Mar 2025 04:42:07 +0000
ROA not before:           Thu 06 Mar 2025 04:37:07 +0000
ROA not after:            Thu 05 Mar 2026 04:42:07 +0000
asID:                     266448
IP address blocks:        170.82.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl
                          rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 09:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:92:91:7c:c2:1d:8d:b7:07:24:c9:6c:b5:6c:43:17:3d:0d:92:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
        Validity
            Not Before: Mar  6 04:37:07 2025 GMT
            Not After : Mar  5 04:42:07 2026 GMT
        Subject: CN=D8FCE9A55AB51BFFB986C2344065A30283852F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5f:40:dc:59:88:c5:02:67:8d:08:02:61:01:
                    fb:77:70:76:73:7d:e4:42:43:d7:d4:16:18:0f:7a:
                    da:64:6b:ee:f7:51:5c:0a:0e:e7:ea:36:56:a3:83:
                    b7:ce:28:69:ed:52:f0:af:9f:e0:0c:a5:34:f6:7e:
                    b4:c7:f5:49:19:b2:60:7b:07:cf:91:d3:8b:d5:ca:
                    88:e6:5d:c7:89:8a:6c:e4:f1:aa:08:1a:45:dc:ee:
                    b1:c3:bf:25:c1:7b:0f:48:1d:05:cc:1d:74:01:b6:
                    a5:05:a4:2b:82:84:67:0b:32:3b:25:4f:f2:6a:66:
                    e0:88:37:7f:b0:59:37:1e:8b:59:d8:de:c1:1a:bf:
                    07:ed:a6:5b:28:cf:52:b3:92:f0:c0:6c:ca:0b:a6:
                    ee:4f:5c:77:41:71:2f:61:6c:e6:4b:f0:0b:af:b7:
                    82:93:65:c9:3b:3e:20:3a:26:fb:73:49:5a:83:a5:
                    c1:ab:ae:b0:66:99:36:d0:6c:02:c0:cc:7d:79:e0:
                    10:68:e8:e4:30:39:d6:4a:ac:51:d4:36:d4:a8:1c:
                    e2:5c:d4:9b:e1:4f:2a:8a:ed:ee:6b:f0:d5:b8:92:
                    f0:1f:e1:6e:c9:13:ae:e5:df:6c:6f:36:fa:3a:f4:
                    91:21:af:d1:e7:b1:9f:00:e8:b1:72:cb:dc:1c:60:
                    a6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FC:E9:A5:5A:B5:1B:FF:B9:86:C2:34:40:65:A3:02:83:85:2F:9A
            X509v3 Authority Key Identifier:
                keyid:10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/3137302e38322e3232302e302f32322d3232203d3e20323636343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:20:ec:d5:78:8d:4f:8f:63:71:57:8e:94:64:6e:ab:e8:27:
         52:e9:14:87:c2:2e:7d:1d:a3:26:5e:79:9a:7a:15:16:8f:c2:
         bf:cc:42:48:54:45:01:f7:90:dc:1c:fa:f8:5e:de:6d:fd:c9:
         2d:8c:b5:5c:83:ec:1c:33:0a:ee:18:9d:22:70:89:c9:33:0b:
         f4:43:3b:1e:5d:19:d7:34:01:c5:7a:87:8a:02:9b:9f:20:3d:
         d7:e1:77:ef:50:60:08:ea:40:6c:96:ef:53:6b:b1:9c:4e:ff:
         de:c7:37:65:a8:1e:cd:6d:1b:0a:11:e1:83:a2:46:59:1d:da:
         6f:47:24:10:16:5f:9e:94:f9:1f:0b:88:3b:aa:80:ec:4b:4a:
         d0:21:94:06:d8:75:2c:e3:38:c2:b3:bf:b6:d1:3b:17:23:b4:
         34:c3:2a:ac:50:51:f7:d6:c9:0e:1e:0b:b4:b1:b5:75:bf:4f:
         d4:f1:30:d6:cc:22:dd:79:c0:1f:e1:19:81:2b:13:34:95:8c:
         88:80:cd:5c:cf:7a:21:44:fa:2f:44:02:f0:0e:0a:e8:14:c6:
         7d:8e:b5:ee:13:ae:c4:b4:7d:b2:16:f2:ff:84:93:d6:74:b4:
         5e:d0:fb:27:e4:64:eb:14:50:02:4d:57:64:7a:f1:9f:1e:42:
         fc:95:8f:ba
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUV5KRfMIdjbcHJMlstWxDFz0NkpEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAxQzg1NUYxMzFFQ0NENjUxQjM0MzU3RkZEN0NBQTkz
OTBDRjZGQzAeFw0yNTAzMDYwNDM3MDdaFw0yNjAzMDUwNDQyMDdaMDMxMTAvBgNV
BAMTKEQ4RkNFOUE1NUFCNTFCRkZCOTg2QzIzNDQwNjVBMzAyODM4NTJGOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0X0DcWYjFAmeNCAJhAft3cHZz
feRCQ9fUFhgPetpka+73UVwKDufqNlajg7fOKGntUvCvn+AMpTT2frTH9UkZsmB7
B8+R04vVyojmXceJimzk8aoIGkXc7rHDvyXBew9IHQXMHXQBtqUFpCuChGcLMjsl
T/JqZuCIN3+wWTcei1nY3sEavwftplsoz1KzkvDAbMoLpu5PXHdBcS9hbOZL8Auv
t4KTZck7PiA6JvtzSVqDpcGrrrBmmTbQbALAzH154BBo6OQwOdZKrFHUNtSoHOJc
1JvhTyqK7e5r8NW4kvAf4W7JE67l32xvNvo69JEhr9HnsZ8A6LFyy9wcYKazAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2PzppVq1G/+5hsI0QGWjAoOFL5owHwYDVR0j
BBgwFoAUEByFXxMezNZRs0NX/9fKqTkM9vwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjlaMTFRVHhlbXk5Sm1EQURQQXhVNVRHMXN0NlE4Zm1hOHZnNWhuakhQ
Y2IvMS8xMDFDODU1RjEzMUVDQ0Q2NTFCMzQzNTdGRkQ3Q0FBOTM5MENGNkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwMUM4NTVGMTMxRUNDRDY1
MUIzNDM1N0ZGRDdDQUE5MzkwQ0Y2RkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y5WjExUVR4ZW15OUptREFEUEF4VTVURzFzdDZROGZtYTh2ZzVobmpIUGNiLzEv
MzEzNzMwMmUzODMyMmUzMjMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzYzNDM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqUtwwDQYJKoZIhvcNAQELBQADggEBADQg7NV4
jU+PY3FXjpRkbqvoJ1LpFIfCLn0doyZeeZp6FRaPwr/MQkhURQH3kNwc+vhe3m39
yS2MtVyD7BwzCu4YnSJwickzC/RDOx5dGdc0AcV6h4oCm58gPdfhd+9QYAjqQGyW
71NrsZxO/97HN2WoHs1tGwoR4YOiRlkd2m9HJBAWX56U+R8LiDuqgOxLStAhlAbY
dSzjOMKzv7bROxcjtDTDKqxQUffWyQ4eC7SxtXW/T9TxMNbMIt15wB/hGYErEzSV
jIiAzVzPeiFE+i9EAvAOCugUxn2Ote4TrsS0fbIW8v+Ek9Z0tF7Q+yfkZOsUUAJN
V2R68Z8eQvyVj7o=
-----END CERTIFICATE-----
Generated at Fri Apr 18 14:04:54 2025 by rpki-client