Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa
File:                     3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          R9VJgduOwDGHqgHWWiBcHcRN/IxmDUXGj1Kb5FiKt4I=
Subject key identifier:   83:96:01:B9:9C:F2:C1:FB:A4:95:EC:B6:01:1C:06:89:7D:81:E9:8D
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       0685C4C32C39ACAD523D607D9B007B1A28CB8B6F
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa
Signing time:             Thu 29 May 2025 14:29:00 +0000
ROA not before:           Thu 29 May 2025 14:24:00 +0000
ROA not after:            Thu 28 May 2026 14:29:00 +0000
asID:                     263518
IP address blocks:        168.197.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 18:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:85:c4:c3:2c:39:ac:ad:52:3d:60:7d:9b:00:7b:1a:28:cb:8b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: May 29 14:24:00 2025 GMT
            Not After : May 28 14:29:00 2026 GMT
        Subject: CN=839601B99CF2C1FBA495ECB6011C06897D81E98D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:fb:e3:43:bc:e8:34:9c:52:3d:60:ef:3f:
                    51:d1:ac:92:1b:2d:4c:8b:bf:aa:54:d2:ec:80:be:
                    bf:75:a0:e6:c2:ea:a9:12:c2:35:df:77:00:e9:d2:
                    df:6e:de:57:c0:a7:fe:ec:61:49:76:f4:54:8f:fe:
                    35:36:7d:ee:57:97:64:23:3c:93:84:34:3b:8c:f5:
                    6f:da:a0:39:73:ae:61:b6:3e:2e:57:ec:36:91:b8:
                    c8:39:47:51:c0:d0:75:a8:bd:79:4a:9e:02:32:50:
                    e4:e0:aa:87:73:17:a2:77:0e:77:43:73:5f:89:ff:
                    e6:27:c7:ff:bb:3d:79:90:90:a2:01:f8:10:92:2a:
                    fb:6f:65:df:4d:85:a3:a7:b3:94:b9:e3:b7:b4:d9:
                    43:fd:16:4b:d5:65:65:1c:2c:4b:0b:7f:f3:6d:59:
                    0b:3b:41:66:a7:fa:06:80:1e:95:bc:97:94:73:78:
                    71:e4:22:72:68:58:e6:09:53:be:55:f3:21:85:2f:
                    38:cf:98:48:0c:7e:64:be:db:02:bf:36:9a:2d:01:
                    90:d1:13:f8:e4:76:6f:e5:d8:a8:a3:d9:0e:79:2b:
                    fd:5d:09:09:ba:e7:f5:70:2f:a1:a2:eb:41:49:59:
                    9f:b7:ba:86:84:52:67:83:05:66:ab:eb:67:d0:26:
                    45:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:96:01:B9:9C:F2:C1:FB:A4:95:EC:B6:01:1C:06:89:7D:81:E9:8D
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:de:ea:64:90:71:44:f5:3e:bf:6b:15:4d:c5:a9:c6:f6:26:
         94:d6:eb:40:6b:39:56:45:bb:1d:3f:93:bf:aa:06:e2:77:67:
         f6:3a:a5:44:63:73:1c:9e:89:d6:5d:a4:ed:0b:7d:14:2b:ee:
         8e:34:dc:85:6c:aa:27:3f:33:04:12:f5:59:d8:ab:49:da:17:
         d7:6a:f7:36:35:fc:ab:2e:d6:95:b9:f5:6f:ac:cc:38:4f:bd:
         76:a4:1d:84:91:5e:10:f9:fd:b8:08:e7:f7:62:f5:3c:4f:f8:
         f9:b8:81:48:c1:52:2b:5f:25:69:4e:a7:8b:f9:6a:0e:35:c3:
         ca:45:87:de:81:4b:06:fd:94:63:01:cc:1c:2e:c9:cd:e7:3c:
         26:84:53:40:83:df:04:01:87:f3:b6:10:30:f2:e7:4d:6b:d4:
         a2:24:69:ed:f1:98:67:bf:25:16:8f:ef:b3:cb:e3:d6:72:ca:
         f2:51:e5:f7:cd:f9:8f:25:7c:2e:a5:9f:46:09:f3:ae:aa:8e:
         3b:6e:5d:36:8a:54:32:7f:c2:d2:89:b7:7c:c5:24:37:12:e8:
         a2:d2:dc:e9:d1:1d:9a:58:59:a2:13:ae:5c:38:4c:f6:c5:6d:
         20:ea:f0:12:eb:2f:41:05:7c:30:19:eb:f5:78:ac:b0:a8:9c:
         26:e8:b1:fb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBoXEwyw5rK1SPWB9mwB7GijLi28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY0OTE2QzBFQzVGMUU2QkZGMUE2NERDOTYwNDQ1NDcz
ODc3NUUyNzAeFw0yNTA1MjkxNDI0MDBaFw0yNjA1MjgxNDI5MDBaMDMxMTAvBgNV
BAMTKDgzOTYwMUI5OUNGMkMxRkJBNDk1RUNCNjAxMUMwNjg5N0Q4MUU5OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4UPvjQ7zoNJxSPWDvP1HRrJIb
LUyLv6pU0uyAvr91oObC6qkSwjXfdwDp0t9u3lfAp/7sYUl29FSP/jU2fe5Xl2Qj
PJOENDuM9W/aoDlzrmG2Pi5X7DaRuMg5R1HA0HWovXlKngIyUOTgqodzF6J3DndD
c1+J/+Ynx/+7PXmQkKIB+BCSKvtvZd9NhaOns5S547e02UP9FkvVZWUcLEsLf/Nt
WQs7QWan+gaAHpW8l5RzeHHkInJoWOYJU75V8yGFLzjPmEgMfmS+2wK/NpotAZDR
E/jkdm/l2Kij2Q55K/1dCQm65/VwL6Gi60FJWZ+3uoaEUmeDBWar62fQJkVNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUg5YBuZzywfukley2ARwGiX2B6Y0wHwYDVR0j
BBgwFoAUL0kWwOxfHmv/GmTclgRFRzh3XicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG05OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZp
VG4vMC8yRjQ5MTZDMEVDNUYxRTZCRkYxQTY0REM5NjA0NDU0NzM4Nzc1RTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNDkxNkMwRUM1RjFFNkJG
RjFBNjREQzk2MDQ0NTQ3Mzg3NzVFMjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htOTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAv
MzEzNjM4MmUzMTM5MzcyZTM4MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoxVYwDQYJKoZIhvcNAQELBQADggEBAHbe6mSQ
cUT1Pr9rFU3Fqcb2JpTW60BrOVZFux0/k7+qBuJ3Z/Y6pURjcxyeidZdpO0LfRQr
7o403IVsqic/MwQS9VnYq0naF9dq9zY1/Ksu1pW59W+szDhPvXakHYSRXhD5/bgI
5/di9TxP+Pm4gUjBUitfJWlOp4v5ag41w8pFh96BSwb9lGMBzBwuyc3nPCaEU0CD
3wQBh/O2EDDy501r1KIkae3xmGe/JRaP77PL49ZyyvJR5ffN+Y8lfC6ln0YJ866q
jjtuXTaKVDJ/wtKJt3zFJDcS6KLS3OnRHZpYWaITrlw4TPbFbSDq8BLrL0EFfDAZ
6/V4rLConCbosfs=
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:26:50 2025 by rpki-client