Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136372e3235302e302e302f32322d3234203d3e20313938393439.roa
File:                     3136372e3235302e302e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          klnbtNZroZ1blNgqdS8CNdgqiJN0AVH7wJCL/RFwn4c=
Subject key identifier:   82:F9:D7:69:14:92:9C:CF:EE:B4:E4:7D:43:D9:BB:D9:D0:74:5A:8F
Certificate issuer:       /CN=9D35D29D04D84C156E4112BF977E37E007A4B928
Certificate serial:       198BEBC4CB070EC67AFFA3CE13F0E3C5D3092360
Authority key identifier: 9D:35:D2:9D:04:D8:4C:15:6E:41:12:BF:97:7E:37:E0:07:A4:B9:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136372e3235302e302e302f32322d3234203d3e20313938393439.roa
Signing time:             Fri 04 Jul 2025 14:00:05 +0000
ROA not before:           Fri 04 Jul 2025 13:55:05 +0000
ROA not after:            Fri 03 Jul 2026 14:00:05 +0000
asID:                     198949
IP address blocks:        167.250.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.crl
                          rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8b:eb:c4:cb:07:0e:c6:7a:ff:a3:ce:13:f0:e3:c5:d3:09:23:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D35D29D04D84C156E4112BF977E37E007A4B928
        Validity
            Not Before: Jul  4 13:55:05 2025 GMT
            Not After : Jul  3 14:00:05 2026 GMT
        Subject: CN=82F9D76914929CCFEEB4E47D43D9BBD9D0745A8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6d:25:8e:4f:8b:e3:8b:51:d5:ef:c4:c5:20:
                    47:23:27:f8:84:cc:8e:2f:8e:aa:38:11:eb:8f:7c:
                    b8:93:35:93:02:22:6c:19:74:89:94:79:63:d8:e2:
                    0a:cc:ae:25:03:32:30:1f:46:95:0e:39:3b:23:d7:
                    a4:18:ad:ae:01:1f:db:2e:6d:f7:ff:b6:69:9f:1f:
                    5e:fa:83:eb:64:91:b9:70:a4:9c:af:85:24:d4:cb:
                    50:5d:0b:1b:c5:67:0e:b7:1a:ec:95:fc:99:01:0c:
                    3b:f2:63:aa:d6:49:c8:e2:50:67:58:35:33:2e:bc:
                    bb:91:8a:0a:05:50:42:17:51:9f:83:be:ef:a6:40:
                    c8:9a:1b:86:10:e7:f2:7c:ae:4c:da:9a:e2:39:7b:
                    88:e1:18:31:bb:d0:50:ea:92:fa:af:ab:d9:03:73:
                    92:84:ee:55:8a:46:28:16:3c:c8:94:ac:ee:08:4a:
                    ad:a9:98:44:ba:a4:12:4c:22:c1:d3:45:99:1a:97:
                    fd:39:18:0f:8c:14:32:20:37:aa:86:78:dc:6a:73:
                    12:dd:ed:01:3e:3e:58:6d:ae:57:68:33:13:1a:16:
                    8b:1a:99:a9:28:f8:9f:21:c5:30:e1:9b:13:1b:6a:
                    15:40:cb:c7:3f:f8:87:8a:e5:c5:9f:0a:b4:be:8c:
                    13:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F9:D7:69:14:92:9C:CF:EE:B4:E4:7D:43:D9:BB:D9:D0:74:5A:8F
            X509v3 Authority Key Identifier:
                keyid:9D:35:D2:9D:04:D8:4C:15:6E:41:12:BF:97:7E:37:E0:07:A4:B9:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/9D35D29D04D84C156E4112BF977E37E007A4B928.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D35D29D04D84C156E4112BF977E37E007A4B928.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136372e3235302e302e302f32322d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:d1:7f:cb:b2:63:e7:16:96:e1:6c:fd:5c:45:01:17:a8:4d:
         aa:e2:48:cb:04:dd:3a:68:6f:69:8e:40:1f:bb:02:e8:24:e3:
         c4:04:71:37:d4:e0:6b:25:43:31:0f:10:f0:e6:6e:c7:e4:ec:
         f8:db:8c:a0:2d:c5:3d:90:f3:5b:35:c8:80:33:43:af:f1:6e:
         e3:28:da:25:e7:39:10:91:21:fb:e6:1e:30:06:71:96:28:89:
         cf:f6:1d:2a:38:9b:55:b6:3c:79:61:ca:f6:42:b2:87:7e:07:
         39:c9:8a:bc:64:7e:2d:e4:d1:92:35:ca:53:8e:cb:db:46:64:
         2c:df:06:46:6e:94:bc:60:fb:71:02:7c:04:7a:cf:95:6b:bb:
         27:35:96:23:19:a7:c2:f2:46:29:d0:87:dc:9c:55:5d:d0:16:
         f8:1e:9f:59:7d:98:e2:26:87:d7:fd:e5:87:f1:75:39:55:c0:
         c3:49:71:4c:4c:12:db:29:7f:37:ae:e3:f7:d7:77:aa:c7:ea:
         e1:5e:3d:13:1f:bd:fb:ee:1c:6d:b2:82:f5:75:d7:3e:44:58:
         ae:61:91:e5:27:b2:4d:ed:4c:76:f1:33:6a:56:f3:a7:06:d1:
         83:5a:c4:83:15:97:d1:58:b9:33:5d:bb:74:60:10:19:d6:b0:
         fb:ee:6c:cf
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGYvrxMsHDsZ6/6POE/DjxdMJI2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQzNUQyOUQwNEQ4NEMxNTZFNDExMkJGOTc3RTM3RTAw
N0E0QjkyODAeFw0yNTA3MDQxMzU1MDVaFw0yNjA3MDMxNDAwMDVaMDMxMTAvBgNV
BAMTKDgyRjlENzY5MTQ5MjlDQ0ZFRUI0RTQ3RDQzRDlCQkQ5RDA3NDVBOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfbSWOT4vji1HV78TFIEcjJ/iE
zI4vjqo4EeuPfLiTNZMCImwZdImUeWPY4grMriUDMjAfRpUOOTsj16QYra4BH9su
bff/tmmfH176g+tkkblwpJyvhSTUy1BdCxvFZw63GuyV/JkBDDvyY6rWScjiUGdY
NTMuvLuRigoFUEIXUZ+Dvu+mQMiaG4YQ5/J8rkzamuI5e4jhGDG70FDqkvqvq9kD
c5KE7lWKRigWPMiUrO4ISq2pmES6pBJMIsHTRZkal/05GA+MFDIgN6qGeNxqcxLd
7QE+PlhtrldoMxMaFosamako+J8hxTDhmxMbahVAy8c/+IeK5cWfCrS+jBORAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgvnXaRSSnM/utOR9Q9m72dB0Wo8wHwYDVR0j
BBgwFoAUnTXSnQTYTBVuQRK/l3434AekuSgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRk1rZWY3OXhyUllQNnY2VWdQVXFROGo5Q0JNa2FtaUVZQjZKa3dSUFpk
TlEvMC85RDM1RDI5RDA0RDg0QzE1NkU0MTEyQkY5NzdFMzdFMDA3QTRCOTI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEMzVEMjlEMDREODRDMTU2
RTQxMTJCRjk3N0UzN0UwMDdBNEI5MjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZNa2VmNzl4clJZUDZ2NlVnUFVxUThqOUNCTWthbWlFWUI2Smt3UlBaZE5RLzAv
MzEzNjM3MmUzMjM1MzAyZTMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzOTM4
MzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCp/oAMA0GCSqGSIb3DQEBCwUAA4IBAQA/0X/LsmPn
FpbhbP1cRQEXqE2q4kjLBN06aG9pjkAfuwLoJOPEBHE31OBrJUMxDxDw5m7H5Oz4
24ygLcU9kPNbNciAM0Ov8W7jKNol5zkQkSH75h4wBnGWKInP9h0qOJtVtjx5Ycr2
QrKHfgc5yYq8ZH4t5NGSNcpTjsvbRmQs3wZGbpS8YPtxAnwEes+Va7snNZYjGafC
8kYp0IfcnFVd0Bb4Hp9ZfZjiJofX/eWH8XU5VcDDSXFMTBLbKX83ruP313eqx+rh
Xj0TH7377hxtsoL1ddc+RFiuYZHlJ7JN7Ux28TNqVvOnBtGDWsSDFZfRWLkzXbt0
YBAZ1rD77mzP
-----END CERTIFICATE-----
Generated at Mon Jul 7 04:45:49 2025 by rpki-client