Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/3230312e39342e3135322e302f32322d3332203d3e20323732353335.roa
File:                     3230312e39342e3135322e302f32322d3332203d3e20323732353335.roa (raw, json)
Hash identifier:          8/RYnsvG5o8e8mVXICeObu4r9QuNXa3bI0L8JgshNVw=
Subject key identifier:   30:1E:50:F3:51:4B:E2:EF:09:00:DD:2A:33:A7:A8:F2:74:71:FB:60
Certificate issuer:       /CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218
Certificate serial:       1B0353B3DBCFC6E334587105C8A25F7606D1A5E5
Authority key identifier: 35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/3230312e39342e3135322e302f32322d3332203d3e20323732353335.roa
Signing time:             Thu 06 Mar 2025 02:54:39 +0000
ROA not before:           Thu 06 Mar 2025 02:49:39 +0000
ROA not after:            Thu 05 Mar 2026 02:54:39 +0000
asID:                     272535
IP address blocks:        201.94.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl
                          rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 08:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:03:53:b3:db:cf:c6:e3:34:58:71:05:c8:a2:5f:76:06:d1:a5:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218
        Validity
            Not Before: Mar  6 02:49:39 2025 GMT
            Not After : Mar  5 02:54:39 2026 GMT
        Subject: CN=301E50F3514BE2EF0900DD2A33A7A8F27471FB60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:f8:30:01:84:6b:8b:ff:e7:2a:17:1a:80:
                    50:d7:fb:64:c2:ce:eb:e4:c2:44:f8:af:a0:08:ae:
                    c7:d2:b0:b7:f2:08:60:53:19:15:3f:54:0c:40:c8:
                    9c:bb:c5:92:5b:08:30:86:d7:0e:b9:74:5d:18:17:
                    b3:90:57:84:b8:fe:1d:01:6a:19:a2:0f:bb:a9:76:
                    fc:08:0c:7f:89:e7:a7:2a:62:b9:de:47:8c:b3:25:
                    4d:40:8f:c6:23:bc:e6:35:4d:e7:77:d3:76:f9:91:
                    9f:7a:b3:50:29:d7:e3:f8:4f:59:bc:3c:21:fc:0a:
                    2e:be:12:e7:a4:6a:b8:29:56:35:2c:be:53:7e:6b:
                    4b:66:bd:1c:8a:ac:3d:81:6b:35:57:08:d3:28:ab:
                    1d:4b:38:1d:d4:f7:08:d7:ec:4e:da:b4:ac:ca:04:
                    32:5c:79:2b:a6:b3:50:ac:cc:7a:3b:49:ec:e4:93:
                    77:32:d6:eb:fd:fb:87:c0:3a:1b:f4:18:37:a2:bb:
                    fe:77:f1:8f:86:22:e3:20:aa:d8:01:a0:99:89:d0:
                    d3:86:7e:1f:dc:aa:a4:d0:ae:8a:53:1a:af:0e:d5:
                    51:af:cd:c5:53:a0:ba:fb:55:0a:90:91:6c:ed:75:
                    9d:27:23:ea:74:54:3b:5d:88:cc:0c:b2:a8:3f:85:
                    16:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1E:50:F3:51:4B:E2:EF:09:00:DD:2A:33:A7:A8:F2:74:71:FB:60
            X509v3 Authority Key Identifier:
                keyid:35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/3230312e39342e3135322e302f32322d3332203d3e20323732353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:77:7a:62:50:f3:df:4c:70:81:93:5a:2b:e2:66:a3:f5:9b:
         33:2f:7e:67:49:c8:0e:33:6f:27:61:96:bc:6d:c0:e2:64:01:
         22:3d:cc:1a:4a:a0:91:af:3c:c0:32:da:f4:ca:4c:bc:38:bc:
         7d:63:ea:83:94:aa:3b:a1:16:36:2d:06:6a:0a:ce:19:b8:2d:
         f0:54:c4:da:02:af:ef:12:dd:4d:03:1f:d0:c3:97:9f:78:bd:
         4a:88:57:53:5c:df:81:2f:89:7c:ca:26:8a:6e:36:07:3d:a4:
         e6:5a:65:ad:4b:9b:d3:70:2d:c6:6a:6f:16:15:60:81:42:6b:
         3e:50:ff:91:ba:96:dc:2f:ef:6b:e1:0d:e5:8c:b7:75:ab:ef:
         ab:fb:0b:3c:52:b7:b2:a9:0f:9a:fd:c0:ea:43:aa:10:77:c7:
         70:ec:45:47:50:48:08:79:19:67:a5:ac:9d:8e:e3:62:45:94:
         ff:da:1b:2c:44:13:b5:ad:c9:2d:a7:8d:9c:2e:84:78:44:74:
         b1:30:6f:cb:7b:95:65:bf:a4:a0:07:7b:80:47:54:47:11:a4:
         ed:6e:ce:16:23:b8:ba:ff:ad:a5:13:bd:9d:62:02:d7:64:75:
         0a:86:2a:77:e4:38:57:7f:ae:07:b4:61:2a:b5:82:fc:54:a9:
         d7:b0:77:4e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGwNTs9vPxuM0WHEFyKJfdgbRpeUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVCNkYyRDJDRTFGQjg5MDE4RkU3MDkwOUMzQUQyMkVF
NDY1OTIxODAeFw0yNTAzMDYwMjQ5MzlaFw0yNjAzMDUwMjU0MzlaMDMxMTAvBgNV
BAMTKDMwMUU1MEYzNTE0QkUyRUYwOTAwREQyQTMzQTdBOEYyNzQ3MUZCNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgPgwAYRri//nKhcagFDX+2TC
zuvkwkT4r6AIrsfSsLfyCGBTGRU/VAxAyJy7xZJbCDCG1w65dF0YF7OQV4S4/h0B
ahmiD7updvwIDH+J56cqYrneR4yzJU1Aj8YjvOY1Ted303b5kZ96s1Ap1+P4T1m8
PCH8Ci6+EuekargpVjUsvlN+a0tmvRyKrD2BazVXCNMoqx1LOB3U9wjX7E7atKzK
BDJceSums1CszHo7Sezkk3cy1uv9+4fAOhv0GDeiu/538Y+GIuMgqtgBoJmJ0NOG
fh/cqqTQropTGq8O1VGvzcVToLr7VQqQkWztdZ0nI+p0VDtdiMwMsqg/hRZ5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMB5Q81FL4u8JAN0qM6eo8nRx+2AwHwYDVR0j
BBgwFoAUNbby0s4fuJAY/nCQnDrSLuRlkhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRm9IZjFxWTgzQTd3eFpTMUFmWE0zQlM3eEszVFpiSlViam52QlU1aUxK
VVkvMS8zNUI2RjJEMkNFMUZCODkwMThGRTcwOTA5QzNBRDIyRUU0NjU5MjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1QjZGMkQyQ0UxRkI4OTAx
OEZFNzA5MDlDM0FEMjJFRTQ2NTkyMTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZvSGYxcVk4M0E3d3haUzFBZlhNM0JTN3hLM1RaYkpVYmpudkJVNWlMSlVZLzEv
MzIzMDMxMmUzOTM0MmUzMTM1MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzIzNTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJXpgwDQYJKoZIhvcNAQELBQADggEBACN3emJQ
899McIGTWiviZqP1mzMvfmdJyA4zbydhlrxtwOJkASI9zBpKoJGvPMAy2vTKTLw4
vH1j6oOUqjuhFjYtBmoKzhm4LfBUxNoCr+8S3U0DH9DDl594vUqIV1Nc34EviXzK
JopuNgc9pOZaZa1Lm9NwLcZqbxYVYIFCaz5Q/5G6ltwv72vhDeWMt3Wr76v7CzxS
t7KpD5r9wOpDqhB3x3DsRUdQSAh5GWelrJ2O42JFlP/aGyxEE7WtyS2njZwuhHhE
dLEwb8t7lWW/pKAHe4BHVEcRpO1uzhYjuLr/raUTvZ1iAtdkdQqGKnfkOFd/rge0
YSq1gvxUqdewd04=
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:58:28 2025 by rpki-client