Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32322d3234203d3e20323636343731.roa
File:                     3137302e38332e34382e302f32322d3234203d3e20323636343731.roa (raw, json)
Hash identifier:          AP2ddneZ30E/NWQBq1lV0e6VtMoqYccePtS+iVFel5M=
Subject key identifier:   90:34:BE:14:85:E7:E4:3F:68:F0:83:A6:7B:F7:A1:1F:2E:9D:70:6A
Certificate issuer:       /CN=7450D09D3099C74B5BA0650438B50168D9296DA8
Certificate serial:       3D870B669A84AAB4C8D30E862A94CE780F2E75E6
Authority key identifier: 74:50:D0:9D:30:99:C7:4B:5B:A0:65:04:38:B5:01:68:D9:29:6D:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7450D09D3099C74B5BA0650438B50168D9296DA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32322d3234203d3e20323636343731.roa
Signing time:             Thu 07 Aug 2025 12:37:41 +0000
ROA not before:           Thu 07 Aug 2025 12:32:41 +0000
ROA not after:            Thu 06 Aug 2026 12:37:41 +0000
asID:                     266471
IP address blocks:        170.83.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/7450D09D3099C74B5BA0650438B50168D9296DA8.crl
                          rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/7450D09D3099C74B5BA0650438B50168D9296DA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7450D09D3099C74B5BA0650438B50168D9296DA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 06:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:87:0b:66:9a:84:aa:b4:c8:d3:0e:86:2a:94:ce:78:0f:2e:75:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7450D09D3099C74B5BA0650438B50168D9296DA8
        Validity
            Not Before: Aug  7 12:32:41 2025 GMT
            Not After : Aug  6 12:37:41 2026 GMT
        Subject: CN=9034BE1485E7E43F68F083A67BF7A11F2E9D706A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6b:8c:5b:c1:ef:09:87:46:21:a6:d5:a3:54:
                    12:10:a1:16:53:8c:d9:ce:af:a0:a9:02:76:ac:45:
                    80:fc:78:c9:57:2f:2e:0f:13:76:03:01:e3:7c:d2:
                    9b:84:5b:e8:32:5d:f4:b2:0e:ba:1a:27:87:e0:a9:
                    ac:0f:01:6e:04:4e:f6:5b:12:c2:d5:42:ea:d5:28:
                    e7:e6:8c:0d:bc:ea:3b:07:15:7d:bc:d5:2e:c4:18:
                    2d:04:a8:5a:08:00:54:12:01:13:9e:29:70:75:4e:
                    17:9c:81:d7:76:a3:9f:e7:f7:ae:c1:5b:35:1a:75:
                    a5:c2:27:48:40:a3:b9:e1:30:0d:f8:e0:aa:c4:42:
                    fa:5b:c7:ec:de:81:b9:e4:83:51:fe:0a:ef:10:c1:
                    45:4f:78:ba:77:c2:74:ba:70:a3:54:96:25:4f:06:
                    17:36:0a:86:df:2f:0d:18:3f:50:7b:19:87:7e:88:
                    57:31:88:41:b0:2a:d8:b9:dd:f3:36:77:51:4e:93:
                    b7:48:09:c7:58:e3:40:c6:b6:19:90:66:b4:72:5a:
                    8a:0e:56:5c:52:d3:c0:b3:6c:72:4f:b1:d1:d5:9b:
                    2f:db:c9:36:4f:38:c4:70:5d:61:cf:c3:46:a4:81:
                    93:d4:66:45:3c:c9:58:03:c4:1a:43:38:ca:1f:6d:
                    3f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:34:BE:14:85:E7:E4:3F:68:F0:83:A6:7B:F7:A1:1F:2E:9D:70:6A
            X509v3 Authority Key Identifier:
                keyid:74:50:D0:9D:30:99:C7:4B:5B:A0:65:04:38:B5:01:68:D9:29:6D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/7450D09D3099C74B5BA0650438B50168D9296DA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7450D09D3099C74B5BA0650438B50168D9296DA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32322d3234203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:9f:8b:8c:0c:bc:9b:57:d6:ee:97:67:5c:35:dc:a8:f3:54:
         44:2f:91:b4:6b:a3:9f:f0:7a:ba:37:e1:17:36:ae:48:f9:ac:
         a2:c0:07:ce:e9:8c:24:50:dc:13:12:48:2f:58:0d:3f:0b:96:
         4f:e0:d1:3e:16:90:bd:1f:78:23:40:2b:10:3d:0f:e4:df:82:
         dc:11:ad:ef:30:e4:47:a3:dd:c3:6f:c5:0f:52:6b:b2:b1:fd:
         68:86:dd:8e:28:0f:69:a2:a3:13:4f:f4:40:42:7e:cf:e7:86:
         46:b0:a9:84:01:af:d8:17:9d:b2:62:a6:60:c8:05:fb:99:65:
         bb:d7:19:c0:f5:56:fd:e6:3e:c8:fe:86:77:3f:4f:5f:a4:b7:
         a1:34:77:57:99:b4:f7:2e:71:63:59:2d:d9:6e:cb:86:02:67:
         72:fd:74:34:ce:ac:5e:f3:22:d5:01:9a:ce:e4:c6:ab:84:d8:
         c0:ed:b1:77:b4:67:81:ec:5a:13:7a:6d:37:97:79:74:d1:8b:
         9e:b0:af:5f:6c:85:0e:64:8d:2e:1a:8b:1e:01:9c:6b:57:10:
         9b:58:28:7a:0b:f9:e3:e4:33:77:52:21:af:b7:8b:c4:16:19:
         c4:f9:62:1f:88:c6:99:03:5b:b0:6c:7b:29:06:76:92:9c:16:
         f0:6d:52:26
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUPYcLZpqEqrTI0w6GKpTOeA8udeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ1MEQwOUQzMDk5Qzc0QjVCQTA2NTA0MzhCNTAxNjhE
OTI5NkRBODAeFw0yNTA4MDcxMjMyNDFaFw0yNjA4MDYxMjM3NDFaMDMxMTAvBgNV
BAMTKDkwMzRCRTE0ODVFN0U0M0Y2OEYwODNBNjdCRjdBMTFGMkU5RDcwNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDua4xbwe8Jh0YhptWjVBIQoRZT
jNnOr6CpAnasRYD8eMlXLy4PE3YDAeN80puEW+gyXfSyDroaJ4fgqawPAW4ETvZb
EsLVQurVKOfmjA286jsHFX281S7EGC0EqFoIAFQSAROeKXB1Thecgdd2o5/n967B
WzUadaXCJ0hAo7nhMA344KrEQvpbx+zegbnkg1H+Cu8QwUVPeLp3wnS6cKNUliVP
Bhc2CobfLw0YP1B7GYd+iFcxiEGwKti53fM2d1FOk7dICcdY40DGthmQZrRyWooO
VlxS08CzbHJPsdHVmy/byTZPOMRwXWHPw0akgZPUZkU8yVgDxBpDOMofbT/3AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUkDS+FIXn5D9o8IOme/ehHy6dcGowHwYDVR0j
BBgwFoAUdFDQnTCZx0tboGUEOLUBaNkpbagwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9GREFyNEFWNm9jYkxwN1ltVmJxeWlhb1RZa1J4ZlNvQWc0NmR6dWhrV3ZU
LzAvNzQ1MEQwOUQzMDk5Qzc0QjVCQTA2NTA0MzhCNTAxNjhEOTI5NkRBOC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83NDUwRDA5RDMwOTlDNzRCNUJB
MDY1MDQzOEI1MDE2OEQ5Mjk2REE4LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9G
REFyNEFWNm9jYkxwN1ltVmJxeWlhb1RZa1J4ZlNvQWc0NmR6dWhrV3ZULzAvMzEz
NzMwMmUzODMzMmUzNDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2MzQz
NzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCqlMwMA0GCSqGSIb3DQEBCwUAA4IBAQAQn4uMDLybV9bu
l2dcNdyo81REL5G0a6Of8Hq6N+EXNq5I+ayiwAfO6YwkUNwTEkgvWA0/C5ZP4NE+
FpC9H3gjQCsQPQ/k34LcEa3vMORHo93Db8UPUmuysf1oht2OKA9poqMTT/RAQn7P
54ZGsKmEAa/YF52yYqZgyAX7mWW71xnA9Vb95j7I/oZ3P09fpLehNHdXmbT3LnFj
WS3ZbsuGAmdy/XQ0zqxe8yLVAZrO5MarhNjA7bF3tGeB7FoTem03l3l00YuesK9f
bIUOZI0uGoseAZxrVxCbWCh6C/nj5DN3UiGvt4vEFhnE+WIfiMaZA1uwbHspBnaS
nBbwbVIm
-----END CERTIFICATE-----
Generated at Fri Sep 19 10:20:13 2025 by rpki-client