Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa
File:                     3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa (raw, json)
Hash identifier:          qsHEzva0imSPbl/kqUJw0DgNm7tAJDGrmbBl7cT1WC0=
Subject key identifier:   58:1F:83:91:A7:2C:33:9E:C3:6C:A7:23:92:F3:60:26:DE:61:D2:99
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       078CEA75B5071214355A55849E0DD855357B2F08
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     266320
IP address blocks:        170.238.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 12:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8c:ea:75:b5:07:12:14:35:5a:55:84:9e:0d:d8:55:35:7b:2f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject: CN=581F8391A72C339EC36CA72392F36026DE61D299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:07:9d:4f:dc:9d:89:70:1d:54:c7:5d:21:
                    f8:5b:2f:29:39:a6:50:16:66:80:aa:ee:ed:11:d1:
                    ce:30:4e:db:60:34:84:85:a6:86:cd:c4:f1:cf:bc:
                    53:c8:32:d1:7a:73:b8:4f:75:07:0e:ee:f0:80:47:
                    f2:80:20:d5:7a:d8:fc:6c:e9:66:f1:51:6c:66:06:
                    8c:7d:08:3c:2c:82:79:b2:f1:59:1f:a9:1e:79:2c:
                    8b:3f:45:09:26:c8:c1:12:fa:69:3f:78:b1:15:7c:
                    35:c5:6f:4a:60:cc:58:6c:2f:6f:ab:29:32:b3:29:
                    32:84:8a:ed:e9:b8:50:52:cd:6d:55:e2:c7:b9:bf:
                    22:a8:9b:47:b8:c5:90:a2:9e:c1:e4:a1:a2:ea:83:
                    3f:f5:62:14:f0:1b:09:a9:c3:69:61:f5:fa:89:8d:
                    73:bf:1f:7f:2e:76:7d:34:8e:4e:2d:5b:f3:8b:aa:
                    b3:f9:c5:8c:81:4f:6c:34:b6:9a:6b:04:7a:bc:c3:
                    c0:0b:75:e2:0e:05:32:d0:a3:92:e4:0b:19:47:14:
                    58:3c:5c:59:31:85:6b:6f:f5:ed:5f:d7:3a:6f:90:
                    e4:86:3d:4c:a0:69:ee:e8:6b:98:3b:9f:69:3e:41:
                    29:a0:f1:04:c1:82:ca:00:a5:1b:41:8d:6e:1c:3b:
                    7b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1F:83:91:A7:2C:33:9E:C3:6C:A7:23:92:F3:60:26:DE:61:D2:99
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:f5:c1:5d:dd:28:2d:a3:48:d2:cd:2b:05:49:47:20:b2:5d:
         4a:85:3c:ca:dc:58:72:a5:fc:ef:e1:28:0d:b4:f0:ce:07:d5:
         99:25:26:82:8e:e5:52:b0:e9:2f:1d:1b:b8:0e:41:c3:f6:c5:
         cf:fd:1a:69:54:9c:33:01:25:ac:41:65:6f:ad:d8:8c:57:8e:
         cf:b6:fb:6f:06:ad:c4:54:6a:30:61:20:19:dd:e3:36:73:43:
         75:b5:e7:fa:71:70:04:e7:98:a2:ce:b0:c1:4d:62:67:fb:e2:
         73:78:99:21:80:8b:89:9b:53:88:8a:6b:c4:e4:e2:5b:08:1c:
         05:63:ff:8d:8e:4e:26:4b:92:ec:6f:c3:93:16:62:04:08:5e:
         ff:a1:85:5b:46:54:ed:2a:64:15:f4:04:81:7f:d5:b1:04:ee:
         da:4f:ef:12:25:fc:ea:e0:90:21:83:b2:ed:99:f5:4e:03:97:
         29:27:29:9e:64:8f:32:08:a3:5b:4a:24:5c:60:1e:47:23:ae:
         35:17:4e:d2:bb:17:d8:ec:9b:3f:5e:55:a1:bb:2b:6d:51:8c:
         c2:88:24:1c:7f:3e:df:d6:e3:a4:e8:12:ef:a7:df:bd:93:65:
         41:d7:32:01:3a:95:e6:fb:09:a6:34:0c:bb:dc:a8:42:ca:8c:
         b4:a8:0f:fe
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUB4zqdbUHEhQ1WlWEng3YVTV7LwgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM3RDgzOEYxQjU5ODk5RDQ0QjRGQzQwMEZCQzFEREEz
QzBCM0QzMDAeFw0yNTAzMDUxODU1MDRaFw0yNjAzMDQxOTAwMDRaMDMxMTAvBgNV
BAMTKDU4MUY4MzkxQTcyQzMzOUVDMzZDQTcyMzkyRjM2MDI2REU2MUQyOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxYgedT9ydiXAdVMddIfhbLyk5
plAWZoCq7u0R0c4wTttgNISFpobNxPHPvFPIMtF6c7hPdQcO7vCAR/KAINV62Pxs
6WbxUWxmBox9CDwsgnmy8VkfqR55LIs/RQkmyMES+mk/eLEVfDXFb0pgzFhsL2+r
KTKzKTKEiu3puFBSzW1V4se5vyKom0e4xZCinsHkoaLqgz/1YhTwGwmpw2lh9fqJ
jXO/H38udn00jk4tW/OLqrP5xYyBT2w0tpprBHq8w8ALdeIOBTLQo5LkCxlHFFg8
XFkxhWtv9e1f1zpvkOSGPUygae7oa5g7n2k+QSmg8QTBgsoApRtBjW4cO3tHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUWB+DkacsM57DbKcjkvNgJt5h0pkwHwYDVR0j
BBgwFoAUHH2DjxtZiZ1EtPxAD7wd2jwLPTAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzZSTnlWamlxWkhRSnM0eGU5OVBuaTU1WndjMzZhcldhdHpEVFIzM0I1
OFcvMS8xQzdEODM4RjFCNTk4OTlENDRCNEZDNDAwRkJDMUREQTNDMEIzRDMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDN0Q4MzhGMUI1OTg5OUQ0
NEI0RkM0MDBGQkMxRERBM0MwQjNEMzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c2Uk55VmppcVpIUUpzNHhlOTlQbmk1NVp3YzM2YXJXYXR6RFRSMzNCNThXLzEv
MzEzNzMwMmUzMjMzMzgyZTMxMzMzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNjMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaruiDANBgkqhkiG9w0BAQsFAAOCAQEAHPXB
Xd0oLaNI0s0rBUlHILJdSoU8ytxYcqX87+EoDbTwzgfVmSUmgo7lUrDpLx0buA5B
w/bFz/0aaVScMwElrEFlb63YjFeOz7b7bwatxFRqMGEgGd3jNnNDdbXn+nFwBOeY
os6wwU1iZ/vic3iZIYCLiZtTiIprxOTiWwgcBWP/jY5OJkuS7G/DkxZiBAhe/6GF
W0ZU7SpkFfQEgX/VsQTu2k/vEiX86uCQIYOy7Zn1TgOXKScpnmSPMgijW0okXGAe
RyOuNRdO0rsX2OybP15VobsrbVGMwogkHH8+39bjpOgS76ffvZNlQdcyATqV5vsJ
pjQMu9yoQsqMtKgP/g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:30:53 2025 by rpki-client