Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/3137302e3234362e31362e302f32322d3234203d3e20323634323935.roa
File:                     3137302e3234362e31362e302f32322d3234203d3e20323634323935.roa (raw, json)
Hash identifier:          IXAcJxqZI63Go2BxgrQ8LCd/9vvuV6xvwNwnHHN92jU=
Subject key identifier:   02:A9:66:3F:58:08:4E:9A:92:1F:D8:39:EE:6A:9C:6F:FB:97:0B:6E
Certificate issuer:       /CN=FF378FCED112801045DB136F6CA069344BA08F50
Certificate serial:       2F1A0B01DB98BAF2B009C77C39A9A1F6BC7BE7C2
Authority key identifier: FF:37:8F:CE:D1:12:80:10:45:DB:13:6F:6C:A0:69:34:4B:A0:8F:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF378FCED112801045DB136F6CA069344BA08F50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/3137302e3234362e31362e302f32322d3234203d3e20323634323935.roa
Signing time:             Tue 03 Jun 2025 18:12:18 +0000
ROA not before:           Tue 03 Jun 2025 18:07:18 +0000
ROA not after:            Tue 02 Jun 2026 18:12:18 +0000
asID:                     264295
IP address blocks:        170.246.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/FF378FCED112801045DB136F6CA069344BA08F50.crl
                          rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/FF378FCED112801045DB136F6CA069344BA08F50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF378FCED112801045DB136F6CA069344BA08F50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:1a:0b:01:db:98:ba:f2:b0:09:c7:7c:39:a9:a1:f6:bc:7b:e7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF378FCED112801045DB136F6CA069344BA08F50
        Validity
            Not Before: Jun  3 18:07:18 2025 GMT
            Not After : Jun  2 18:12:18 2026 GMT
        Subject: CN=02A9663F58084E9A921FD839EE6A9C6FFB970B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:7d:f1:94:16:6d:78:f8:2e:2f:b1:6b:d3:
                    c0:24:6b:76:0b:cf:d6:14:74:e7:49:50:81:b8:21:
                    4e:f6:fb:a7:aa:05:b7:f1:9d:bb:27:ab:76:ba:fd:
                    8b:b0:05:fa:76:72:f9:81:f9:d2:75:2f:45:b4:78:
                    da:cf:ec:d1:97:46:28:be:b4:c0:7e:f5:a8:8d:65:
                    bf:bf:3d:42:b2:c2:e4:0d:e3:78:4a:a6:09:02:54:
                    6e:42:d5:06:44:90:c9:a3:b2:bb:29:44:d2:7b:bc:
                    dc:08:ba:f6:0e:96:3c:38:a9:58:bc:6d:06:af:35:
                    ec:0d:06:52:f3:28:5e:78:45:95:6e:bc:d8:bc:52:
                    df:fd:15:06:81:fd:2d:1b:27:e9:5d:61:92:c6:be:
                    12:07:97:36:ec:82:a8:77:30:5b:93:e4:76:e8:ad:
                    74:06:57:b8:b9:12:2b:46:2e:97:12:01:f1:b4:42:
                    90:e1:03:d9:41:5d:44:37:79:c7:9f:d5:87:36:93:
                    4e:50:2c:65:47:41:74:fb:6d:5d:43:12:48:cf:66:
                    16:9b:8f:dc:83:59:ed:11:4a:fc:1b:97:ff:0f:a0:
                    f8:80:f7:0e:ca:39:7c:72:bf:97:d4:3e:78:bd:a8:
                    dd:18:f0:b0:28:cd:dd:d3:f4:3b:46:00:80:72:6f:
                    75:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A9:66:3F:58:08:4E:9A:92:1F:D8:39:EE:6A:9C:6F:FB:97:0B:6E
            X509v3 Authority Key Identifier:
                keyid:FF:37:8F:CE:D1:12:80:10:45:DB:13:6F:6C:A0:69:34:4B:A0:8F:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/FF378FCED112801045DB136F6CA069344BA08F50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF378FCED112801045DB136F6CA069344BA08F50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/3137302e3234362e31362e302f32322d3234203d3e20323634323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:cb:18:f8:a1:17:7a:a6:fe:f4:63:79:59:ac:51:35:14:58:
         06:73:2d:9b:7c:df:71:6e:20:8b:44:3a:df:53:35:03:ff:12:
         7c:2d:c8:79:cd:9f:3f:5e:46:cb:b3:57:16:3b:ba:0d:14:7a:
         60:6c:8c:fe:aa:ac:4a:f5:81:fe:6e:0d:d5:ed:dc:47:6e:b8:
         6e:73:16:f0:d6:50:cc:d0:04:bf:2d:96:8a:2c:3b:95:d7:23:
         1c:b2:1c:d0:43:31:07:05:32:a9:2f:42:23:3d:31:57:e9:9f:
         24:d1:f3:82:77:a3:c7:7e:b3:fd:2e:b0:8d:74:43:10:30:d8:
         db:cd:f4:ed:04:51:66:44:d7:b5:fc:48:8b:25:71:bc:36:5c:
         85:e1:73:6f:d4:22:ef:ea:15:2e:8e:26:56:ac:b9:1d:c7:a9:
         b6:99:9e:35:73:77:65:bf:5e:4e:31:0a:98:5c:87:61:52:84:
         1f:de:99:a9:10:56:f9:08:22:33:2e:98:ab:34:af:87:ab:b9:
         5b:7f:b2:ca:46:5d:ed:37:5d:be:f5:6b:d0:a7:27:22:c3:32:
         fa:47:96:18:a4:26:16:af:a7:6e:70:bf:69:ba:9b:49:72:d7:
         8d:ea:97:55:5a:fa:48:13:4e:a7:05:07:73:45:88:c4:24:2f:
         36:a7:99:2e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIULxoLAduYuvKwCcd8Oamh9rx758IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYzNzhGQ0VEMTEyODAxMDQ1REIxMzZGNkNBMDY5MzQ0
QkEwOEY1MDAeFw0yNTA2MDMxODA3MThaFw0yNjA2MDIxODEyMThaMDMxMTAvBgNV
BAMTKDAyQTk2NjNGNTgwODRFOUE5MjFGRDgzOUVFNkE5QzZGRkI5NzBCNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKY33xlBZtePguL7Fr08Aka3YL
z9YUdOdJUIG4IU72+6eqBbfxnbsnq3a6/YuwBfp2cvmB+dJ1L0W0eNrP7NGXRii+
tMB+9aiNZb+/PUKywuQN43hKpgkCVG5C1QZEkMmjsrspRNJ7vNwIuvYOljw4qVi8
bQavNewNBlLzKF54RZVuvNi8Ut/9FQaB/S0bJ+ldYZLGvhIHlzbsgqh3MFuT5Hbo
rXQGV7i5EitGLpcSAfG0QpDhA9lBXUQ3ecef1Yc2k05QLGVHQXT7bV1DEkjPZhab
j9yDWe0RSvwbl/8PoPiA9w7KOXxyv5fUPni9qN0Y8LAozd3T9DtGAIByb3XnAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUAqlmP1gITpqSH9g57mqcb/uXC24wHwYDVR0j
BBgwFoAU/zePztESgBBF2xNvbKBpNEugj1AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ybjRYb0htTlpuZ25kR2JGb0RBOUc3WDV0WkxjU2hEY3ZOTjN0NUI0UXh3
LzAvRkYzNzhGQ0VEMTEyODAxMDQ1REIxMzZGNkNBMDY5MzQ0QkEwOEY1MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GRjM3OEZDRUQxMTI4MDEwNDVE
QjEzNkY2Q0EwNjkzNDRCQTA4RjUwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9y
bjRYb0htTlpuZ25kR2JGb0RBOUc3WDV0WkxjU2hEY3ZOTjN0NUI0UXh3LzAvMzEz
NzMwMmUzMjM0MzYyZTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQz
MjM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKq9hAwDQYJKoZIhvcNAQELBQADggEBAKnLGPihF3qm
/vRjeVmsUTUUWAZzLZt833FuIItEOt9TNQP/EnwtyHnNnz9eRsuzVxY7ug0UemBs
jP6qrEr1gf5uDdXt3EduuG5zFvDWUMzQBL8tloosO5XXIxyyHNBDMQcFMqkvQiM9
MVfpnyTR84J3o8d+s/0usI10QxAw2NvN9O0EUWZE17X8SIslcbw2XIXhc2/UIu/q
FS6OJlasuR3HqbaZnjVzd2W/Xk4xCphch2FShB/emakQVvkIIjMumKs0r4eruVt/
sspGXe03Xb71a9CnJyLDMvpHlhikJhavp25wv2m6m0ly143ql1Va+kgTTqcFB3NF
iMQkLzanmS4=
-----END CERTIFICATE-----
Generated at Mon Jun 9 18:37:20 2025 by rpki-client