Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrTsAhFRBVkoAbDjz8zL2JvZpcWfh1Sswe2FdQqHaWu2/1/3137302e38312e36382e302f32322d3234203d3e20323636343039.roa
File:                     3137302e38312e36382e302f32322d3234203d3e20323636343039.roa (raw, json)
Hash identifier:          ALoaAQf6l7zVt14i/H4MJHT9dc6un1nowSi7znpb+b8=
Subject key identifier:   0C:C8:E7:02:AD:F0:EA:AF:F8:D2:65:1F:02:93:C1:79:43:50:91:55
Certificate issuer:       /CN=314F41E3C4735B02BD8E51866CB2C95BAA6B192D
Certificate serial:       6E6DE5EF37E574161D154B9464F6953737FB8C50
Authority key identifier: 31:4F:41:E3:C4:73:5B:02:BD:8E:51:86:6C:B2:C9:5B:AA:6B:19:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314F41E3C4735B02BD8E51866CB2C95BAA6B192D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrTsAhFRBVkoAbDjz8zL2JvZpcWfh1Sswe2FdQqHaWu2/1/3137302e38312e36382e302f32322d3234203d3e20323636343039.roa
Signing time:             Thu 13 Mar 2025 12:15:24 +0000
ROA not before:           Thu 13 Mar 2025 12:10:24 +0000
ROA not after:            Thu 12 Mar 2026 12:15:24 +0000
asID:                     266409
IP address blocks:        170.81.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrTsAhFRBVkoAbDjz8zL2JvZpcWfh1Sswe2FdQqHaWu2/1/314F41E3C4735B02BD8E51866CB2C95BAA6B192D.crl
                          rsync://rpki-repo.registro.br/repo/HrTsAhFRBVkoAbDjz8zL2JvZpcWfh1Sswe2FdQqHaWu2/1/314F41E3C4735B02BD8E51866CB2C95BAA6B192D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314F41E3C4735B02BD8E51866CB2C95BAA6B192D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 01:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6d:e5:ef:37:e5:74:16:1d:15:4b:94:64:f6:95:37:37:fb:8c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314F41E3C4735B02BD8E51866CB2C95BAA6B192D
        Validity
            Not Before: Mar 13 12:10:24 2025 GMT
            Not After : Mar 12 12:15:24 2026 GMT
        Subject: CN=0CC8E702ADF0EAAFF8D2651F0293C17943509155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:6f:fd:c1:46:51:52:3c:25:2c:f8:8a:f2:
                    b9:ed:1c:51:c4:6b:a4:17:38:4b:f7:55:c6:d2:5e:
                    ed:c5:96:ae:0a:6d:cf:36:74:59:9f:d0:c1:6a:6c:
                    0b:27:df:34:74:8a:50:06:db:a3:84:de:bf:78:45:
                    47:7f:43:09:bb:0f:1f:e7:24:bd:1d:8c:ae:fd:71:
                    56:5c:34:e1:22:58:96:7d:63:25:f0:ed:00:c2:0e:
                    57:82:fb:b5:ca:4d:79:b9:f7:fd:cf:ba:9e:58:46:
                    68:42:ac:39:10:33:4d:3d:87:da:e4:db:f3:e0:ca:
                    03:f1:dc:eb:fb:7f:24:29:56:f0:67:7e:31:a2:ea:
                    85:7d:8d:10:74:ba:95:33:65:a1:fc:39:34:a1:87:
                    d7:34:79:9c:de:eb:17:ea:ba:c7:17:29:54:7a:7f:
                    76:5c:a4:61:25:20:2d:97:9f:cb:95:35:e0:58:2d:
                    ed:04:d6:7d:f2:eb:05:89:eb:1f:62:a7:fd:d8:76:
                    14:4f:16:64:f6:01:8b:ec:f3:9b:f7:9d:b2:f0:bb:
                    28:95:f7:fd:43:c8:d7:77:d1:ea:bc:f7:58:ef:3d:
                    4f:0b:0d:c3:72:8c:62:26:03:23:30:95:3d:26:66:
                    62:ea:a7:09:2e:20:a6:8e:c3:f3:c9:00:67:04:d3:
                    4f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C8:E7:02:AD:F0:EA:AF:F8:D2:65:1F:02:93:C1:79:43:50:91:55
            X509v3 Authority Key Identifier:
                keyid:31:4F:41:E3:C4:73:5B:02:BD:8E:51:86:6C:B2:C9:5B:AA:6B:19:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrTsAhFRBVkoAbDjz8zL2JvZpcWfh1Sswe2FdQqHaWu2/1/314F41E3C4735B02BD8E51866CB2C95BAA6B192D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314F41E3C4735B02BD8E51866CB2C95BAA6B192D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrTsAhFRBVkoAbDjz8zL2JvZpcWfh1Sswe2FdQqHaWu2/1/3137302e38312e36382e302f32322d3234203d3e20323636343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:a9:34:f3:3b:9d:e7:4b:63:cf:9f:39:58:d0:6e:1e:9f:82:
         09:0e:3a:2b:e4:5a:58:6d:71:d2:f6:59:82:7b:d9:a1:2e:c2:
         d3:5f:6f:32:b1:05:9b:c5:f2:49:32:39:f8:80:e8:1c:c1:de:
         9c:7c:ef:de:81:0d:9b:42:40:0e:e2:82:0a:6a:5b:b4:98:6b:
         d0:d4:fd:25:5f:d3:22:13:db:04:2b:2f:cb:ee:e5:1b:de:86:
         3f:03:93:b0:6e:07:06:50:b5:64:fc:e8:1e:ec:33:69:b6:e4:
         3c:75:73:03:89:fe:a1:71:e7:83:8a:38:dc:30:fd:d5:91:7c:
         14:16:36:b1:53:fa:b5:66:59:78:15:c5:77:cf:0b:a3:37:27:
         5f:c2:61:ad:50:b5:de:79:15:08:29:23:15:39:c1:99:55:b4:
         e6:0b:1d:9b:8a:70:6a:9b:d6:c9:79:c6:2e:b0:ed:e7:92:87:
         f0:3f:e9:05:78:d0:01:e5:f8:78:9e:f8:c1:a1:2c:b5:d8:cd:
         1a:69:dd:e1:c0:e1:c0:93:8d:64:8e:35:75:ce:eb:52:50:23:
         d5:3d:e6:20:54:8f:73:6a:b5:80:45:3f:a6:e7:fa:3b:36:0d:
         98:fb:33:d8:44:b4:94:f5:2a:79:0e:af:bf:53:5e:c4:cc:b3:
         98:12:c8:a7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbm3l7zfldBYdFUuUZPaVNzf7jFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE0RjQxRTNDNDczNUIwMkJEOEU1MTg2NkNCMkM5NUJB
QTZCMTkyRDAeFw0yNTAzMTMxMjEwMjRaFw0yNjAzMTIxMjE1MjRaMDMxMTAvBgNV
BAMTKDBDQzhFNzAyQURGMEVBQUZGOEQyNjUxRjAyOTNDMTc5NDM1MDkxNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcWm/9wUZRUjwlLPiK8rntHFHE
a6QXOEv3VcbSXu3Flq4Kbc82dFmf0MFqbAsn3zR0ilAG26OE3r94RUd/Qwm7Dx/n
JL0djK79cVZcNOEiWJZ9YyXw7QDCDleC+7XKTXm59/3Pup5YRmhCrDkQM009h9rk
2/PgygPx3Ov7fyQpVvBnfjGi6oV9jRB0upUzZaH8OTShh9c0eZze6xfquscXKVR6
f3ZcpGElIC2Xn8uVNeBYLe0E1n3y6wWJ6x9ip/3YdhRPFmT2AYvs85v3nbLwuyiV
9/1DyNd30eq891jvPU8LDcNyjGImAyMwlT0mZmLqpwkuIKaOw/PJAGcE009zAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDMjnAq3w6q/40mUfApPBeUNQkVUwHwYDVR0j
BBgwFoAUMU9B48RzWwK9jlGGbLLJW6prGS0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJUc0FoRlJCVmtvQWJEano4ekwySnZacGNXZmgxU3N3ZTJGZFFxSGFX
dTIvMS8zMTRGNDFFM0M0NzM1QjAyQkQ4RTUxODY2Q0IyQzk1QkFBNkIxOTJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxNEY0MUUzQzQ3MzVCMDJC
RDhFNTE4NjZDQjJDOTVCQUE2QjE5MkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyVHNBaEZSQlZrb0FiRGp6OHpMMkp2WnBjV2ZoMVNzd2UyRmRRcUhhV3UyLzEv
MzEzNzMwMmUzODMxMmUzNjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2
MzQzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlFEMA0GCSqGSIb3DQEBCwUAA4IBAQAxqTTzO53n
S2PPnzlY0G4en4IJDjor5FpYbXHS9lmCe9mhLsLTX28ysQWbxfJJMjn4gOgcwd6c
fO/egQ2bQkAO4oIKalu0mGvQ1P0lX9MiE9sEKy/L7uUb3oY/A5OwbgcGULVk/Oge
7DNptuQ8dXMDif6hceeDijjcMP3VkXwUFjaxU/q1Zll4FcV3zwujNydfwmGtULXe
eRUIKSMVOcGZVbTmCx2binBqm9bJecYusO3nkofwP+kFeNAB5fh4nvjBoSy12M0a
ad3hwOHAk41kjjV1zutSUCPVPeYgVI9zarWART+m5/o7Ng2Y+zPYRLSU9Sp5Dq+/
U17EzLOYEsin
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:00:10 2025 by rpki-client