Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37362e302f32322d3232203d3e20323731363432.roa
File:                     3139302e392e37362e302f32322d3232203d3e20323731363432.roa (raw, json)
Hash identifier:          vkdrLfrEgIF4V9ADn9mDWAlBjZbSAmaarjhEV5821lo=
Subject key identifier:   49:6B:5D:0E:2A:DA:03:05:0F:BA:08:C0:09:2A:3B:F3:82:17:C6:22
Certificate issuer:       /CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
Certificate serial:       3BEE34C8C0DAC140D9A7EDB8447E5DB5828E37E8
Authority key identifier: 3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37362e302f32322d3232203d3e20323731363432.roa
Signing time:             Thu 06 Mar 2025 14:57:47 +0000
ROA not before:           Thu 06 Mar 2025 14:52:47 +0000
ROA not after:            Thu 05 Mar 2026 14:57:47 +0000
asID:                     271642
IP address blocks:        190.9.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl
                          rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 03:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ee:34:c8:c0:da:c1:40:d9:a7:ed:b8:44:7e:5d:b5:82:8e:37:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
        Validity
            Not Before: Mar  6 14:52:47 2025 GMT
            Not After : Mar  5 14:57:47 2026 GMT
        Subject: CN=496B5D0E2ADA03050FBA08C0092A3BF38217C622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:14:a5:99:61:6a:62:a6:c3:3b:2a:d1:98:
                    eb:bd:6e:08:f8:a8:db:67:5f:5d:41:63:06:0d:c9:
                    d9:49:13:40:0c:d6:e9:b2:c4:8d:4a:39:c1:c5:e7:
                    7c:3e:f7:1d:82:6a:c1:13:73:6f:46:9a:91:8f:a0:
                    61:1d:94:eb:9e:c4:a2:73:9b:39:f1:00:7d:07:7c:
                    13:35:41:71:76:33:a5:bf:20:c6:76:e5:a7:59:36:
                    15:73:19:22:4c:f1:6a:16:90:41:45:bf:67:08:e6:
                    3a:94:e4:f1:8f:6f:04:0b:30:13:23:b2:62:5b:c0:
                    6f:53:d4:6e:be:2b:2b:37:ce:50:58:4b:6e:d4:f9:
                    5c:3e:48:43:5c:3a:a2:71:9d:01:2b:9d:cb:c8:c7:
                    53:66:1a:1c:1c:3a:6e:5e:97:60:aa:02:2f:4e:57:
                    87:04:0c:45:71:08:11:ea:29:f6:b2:56:29:8b:c7:
                    f4:52:5d:95:1e:1e:86:3d:61:f3:31:32:5f:27:0c:
                    f0:e6:d6:ad:57:ec:69:f1:6a:dc:65:88:df:27:be:
                    e2:2f:42:c8:02:f7:69:2b:41:da:04:d2:29:08:9e:
                    a2:19:eb:6f:2f:5a:c2:42:f7:34:d5:ac:67:a6:e4:
                    37:85:52:d5:9f:f5:c6:4f:9e:84:4b:08:11:17:8e:
                    74:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6B:5D:0E:2A:DA:03:05:0F:BA:08:C0:09:2A:3B:F3:82:17:C6:22
            X509v3 Authority Key Identifier:
                keyid:3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37362e302f32322d3232203d3e20323731363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:85:1a:1f:d9:18:da:a2:5f:df:e8:36:ce:3f:e1:00:3a:53:
         a5:6a:55:a0:7b:b1:a5:cb:67:cc:1e:cc:2b:6a:de:cc:57:5b:
         79:0e:8d:04:ec:51:8c:1e:c0:ee:34:9c:ef:0c:ab:6e:9a:d6:
         c4:57:7a:ae:69:43:ad:3f:a3:00:f7:19:b7:55:35:88:6c:6d:
         69:40:bd:ad:87:12:fc:b1:9c:a8:ba:0f:b5:e2:eb:73:ac:3e:
         04:de:6f:7e:61:a7:c8:d4:1d:f9:82:8c:43:49:37:a7:a5:1a:
         46:bd:49:64:a2:f8:f5:c8:18:0e:fa:10:f2:bc:2b:6d:5b:8f:
         b3:89:c2:d8:c8:2d:b2:28:d2:41:e0:bb:85:e6:c9:30:5a:b6:
         2b:b8:7c:37:c9:7e:5d:4e:fc:2a:49:d2:fe:7c:7e:b1:57:a0:
         3a:dd:ca:1e:61:e3:11:2b:b8:95:49:99:52:f8:7f:29:5f:53:
         9d:93:88:42:13:1b:4f:59:68:69:63:5d:33:0e:02:56:5a:54:
         80:ad:3e:85:95:bc:90:1d:e7:73:ed:8a:70:1f:63:be:b8:47:
         9f:37:fc:31:16:83:97:e5:7a:28:26:34:49:64:f4:e0:db:be:
         17:c2:d1:55:02:c1:96:5b:ed:1c:cf:d1:3d:18:78:8b:b1:32:
         28:c5:5c:90
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUO+40yMDawUDZp+24RH5dtYKON+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NGMTI5RDI0NzYwQ0E1OERFRTFCNDJDREFDQUU0NDA3
NzEwQTIxOTAeFw0yNTAzMDYxNDUyNDdaFw0yNjAzMDUxNDU3NDdaMDMxMTAvBgNV
BAMTKDQ5NkI1RDBFMkFEQTAzMDUwRkJBMDhDMDA5MkEzQkYzODIxN0M2MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/UxSlmWFqYqbDOyrRmOu9bgj4
qNtnX11BYwYNydlJE0AM1umyxI1KOcHF53w+9x2CasETc29GmpGPoGEdlOuexKJz
mznxAH0HfBM1QXF2M6W/IMZ25adZNhVzGSJM8WoWkEFFv2cI5jqU5PGPbwQLMBMj
smJbwG9T1G6+Kys3zlBYS27U+Vw+SENcOqJxnQErncvIx1NmGhwcOm5el2CqAi9O
V4cEDEVxCBHqKfayVimLx/RSXZUeHoY9YfMxMl8nDPDm1q1X7GnxatxliN8nvuIv
QsgC92krQdoE0ikInqIZ628vWsJC9zTVrGem5DeFUtWf9cZPnoRLCBEXjnTvAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUSWtdDiraAwUPugjACSo784IXxiIwHwYDVR0j
BBgwFoAUPPEp0kdgylje4bQs2srkQHcQohkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlF5dktOTEF4R1hGaXkzcFFWbmcyZWh6NVJSMTFVV0I1eGk4enk1MVVL
YVEvMS8zQ0YxMjlEMjQ3NjBDQTU4REVFMUI0MkNEQUNBRTQ0MDc3MTBBMjE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRjEyOUQyNDc2MENBNThE
RUUxQjQyQ0RBQ0FFNDQwNzcxMEEyMTkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZReXZLTkxBeEdYRml5M3BRVm5nMmVoejVSUjExVVdCNXhpOHp5NTFVS2FRLzEv
MzEzOTMwMmUzOTJlMzczNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzczMTM2
MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAr4JTDANBgkqhkiG9w0BAQsFAAOCAQEAjoUaH9kY2qJf
3+g2zj/hADpTpWpVoHuxpctnzB7MK2rezFdbeQ6NBOxRjB7A7jSc7wyrbprWxFd6
rmlDrT+jAPcZt1U1iGxtaUC9rYcS/LGcqLoPteLrc6w+BN5vfmGnyNQd+YKMQ0k3
p6UaRr1JZKL49cgYDvoQ8rwrbVuPs4nC2MgtsijSQeC7hebJMFq2K7h8N8l+XU78
KknS/nx+sVegOt3KHmHjESu4lUmZUvh/KV9TnZOIQhMbT1loaWNdMw4CVlpUgK0+
hZW8kB3nc+2KcB9jvrhHnzf8MRaDl+V6KCY0SWT04Nu+F8LRVQLBllvtHM/RPRh4
i7EyKMVckA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 06:35:32 2025 by rpki-client