Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Skq9FfBsrF5pmRKScpmBru2EvEgAvHxMUEAaXck3Lup/0/3137302e3135302e37322e302f32322d3234203d3e20323635303332.roa
File:                     3137302e3135302e37322e302f32322d3234203d3e20323635303332.roa (raw, json)
Hash identifier:          61Ph14ytquTIxkLpuzEkGI55dtWs95WZJo9ETVcFs6Y=
Subject key identifier:   C8:12:54:7E:9F:56:6F:B8:F1:1E:56:93:18:CB:EE:2D:0B:2F:E5:FF
Certificate issuer:       /CN=0074D472FF61725B9E23F430F6625BC0305CCC10
Certificate serial:       4B3349B92CCAEC7CED9FDB91E32FBF181D068805
Authority key identifier: 00:74:D4:72:FF:61:72:5B:9E:23:F4:30:F6:62:5B:C0:30:5C:CC:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0074D472FF61725B9E23F430F6625BC0305CCC10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Skq9FfBsrF5pmRKScpmBru2EvEgAvHxMUEAaXck3Lup/0/3137302e3135302e37322e302f32322d3234203d3e20323635303332.roa
Signing time:             Mon 07 Jul 2025 18:01:17 +0000
ROA not before:           Mon 07 Jul 2025 17:56:17 +0000
ROA not after:            Mon 06 Jul 2026 18:01:17 +0000
asID:                     265032
IP address blocks:        170.150.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Skq9FfBsrF5pmRKScpmBru2EvEgAvHxMUEAaXck3Lup/0/0074D472FF61725B9E23F430F6625BC0305CCC10.crl
                          rsync://rpki-repo.registro.br/repo/2Skq9FfBsrF5pmRKScpmBru2EvEgAvHxMUEAaXck3Lup/0/0074D472FF61725B9E23F430F6625BC0305CCC10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0074D472FF61725B9E23F430F6625BC0305CCC10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 06:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:33:49:b9:2c:ca:ec:7c:ed:9f:db:91:e3:2f:bf:18:1d:06:88:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0074D472FF61725B9E23F430F6625BC0305CCC10
        Validity
            Not Before: Jul  7 17:56:17 2025 GMT
            Not After : Jul  6 18:01:17 2026 GMT
        Subject: CN=C812547E9F566FB8F11E569318CBEE2D0B2FE5FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d7:f6:3d:88:ab:8a:f1:65:50:46:29:00:cc:
                    c5:e1:6b:37:34:27:f4:55:26:44:a5:a2:7b:15:85:
                    e2:a7:dd:62:6f:82:21:3a:74:66:bd:4b:69:3d:6b:
                    af:2c:a2:54:65:5d:fc:4c:a1:69:0c:fe:e5:59:df:
                    30:d5:36:a1:2c:17:1a:e1:f1:3e:30:80:11:c4:b8:
                    e2:af:09:57:6b:40:8d:7e:70:aa:b8:5a:f8:8c:fe:
                    b4:8f:ea:c7:c2:ba:d7:b3:a9:b1:be:d7:11:b7:54:
                    76:6f:47:a3:8c:51:28:9d:c0:ba:0d:84:d9:d0:59:
                    57:35:70:43:b4:f8:67:31:a4:e1:e0:c9:52:3f:a9:
                    06:3e:da:44:2b:f8:2f:53:62:c0:a9:ce:26:10:de:
                    98:df:7c:bc:1e:9c:14:08:75:02:9d:6b:13:84:b8:
                    02:4f:23:42:77:a9:50:1f:92:75:e7:47:32:68:64:
                    41:86:42:66:e0:78:47:88:5c:90:3b:f8:8b:2d:19:
                    80:8d:47:4e:81:84:dc:49:80:4d:88:eb:32:01:a4:
                    a6:12:ea:a6:9e:9c:2b:0e:41:c1:5b:16:83:78:95:
                    5d:80:f7:70:6e:1c:98:a0:22:ab:1f:b4:9a:d6:2f:
                    cf:18:18:52:6d:90:29:6f:a3:69:77:b4:3f:14:1a:
                    20:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:12:54:7E:9F:56:6F:B8:F1:1E:56:93:18:CB:EE:2D:0B:2F:E5:FF
            X509v3 Authority Key Identifier:
                keyid:00:74:D4:72:FF:61:72:5B:9E:23:F4:30:F6:62:5B:C0:30:5C:CC:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Skq9FfBsrF5pmRKScpmBru2EvEgAvHxMUEAaXck3Lup/0/0074D472FF61725B9E23F430F6625BC0305CCC10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0074D472FF61725B9E23F430F6625BC0305CCC10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Skq9FfBsrF5pmRKScpmBru2EvEgAvHxMUEAaXck3Lup/0/3137302e3135302e37322e302f32322d3234203d3e20323635303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:9d:86:db:84:a6:9b:af:f2:a9:9a:ff:8f:c5:3a:38:b0:96:
         05:65:cd:61:cf:cd:ea:1e:a1:10:7f:6d:0d:05:91:50:84:c7:
         89:57:26:8a:e0:a8:f9:c0:8a:ab:c4:d9:c2:29:93:d1:fa:c7:
         5e:a9:b9:49:9b:84:de:4f:ae:bf:eb:31:e6:ab:42:78:fa:27:
         ec:4f:4a:fe:fb:b4:3b:92:43:56:5b:e7:70:f4:51:a1:eb:2a:
         9d:35:1d:04:35:1c:13:df:ce:4b:10:e3:d3:66:54:2d:fc:aa:
         f0:b1:28:dd:a2:d6:4c:c6:94:7f:10:03:69:25:92:5e:db:41:
         8b:29:a6:f3:fc:88:71:c6:5b:a1:1c:c8:d6:20:c7:5f:18:72:
         59:c2:bf:91:f6:82:f5:01:85:e0:6b:d3:82:c6:96:5a:e8:20:
         01:3e:14:fd:0e:55:d0:6a:6b:53:9e:f4:51:5e:21:aa:65:88:
         a6:ec:28:ec:a5:b4:e7:e3:12:94:b1:44:2e:db:3c:df:1f:15:
         82:a9:fc:55:44:dc:d3:70:bf:a6:e4:5b:ac:59:24:aa:8f:06:
         74:fb:d2:95:3b:bd:da:a9:4e:08:e2:6f:fe:63:b9:6f:c6:cc:
         03:87:71:63:b0:76:ce:a7:2e:76:d3:24:ad:cb:21:f1:c1:01:
         1b:2e:e3:39
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSzNJuSzK7Hztn9uR4y+/GB0GiAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA3NEQ0NzJGRjYxNzI1QjlFMjNGNDMwRjY2MjVCQzAz
MDVDQ0MxMDAeFw0yNTA3MDcxNzU2MTdaFw0yNjA3MDYxODAxMTdaMDMxMTAvBgNV
BAMTKEM4MTI1NDdFOUY1NjZGQjhGMTFFNTY5MzE4Q0JFRTJEMEIyRkU1RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1/Y9iKuK8WVQRikAzMXhazc0
J/RVJkSlonsVheKn3WJvgiE6dGa9S2k9a68solRlXfxMoWkM/uVZ3zDVNqEsFxrh
8T4wgBHEuOKvCVdrQI1+cKq4WviM/rSP6sfCutezqbG+1xG3VHZvR6OMUSidwLoN
hNnQWVc1cEO0+GcxpOHgyVI/qQY+2kQr+C9TYsCpziYQ3pjffLwenBQIdQKdaxOE
uAJPI0J3qVAfknXnRzJoZEGGQmbgeEeIXJA7+IstGYCNR06BhNxJgE2I6zIBpKYS
6qaenCsOQcFbFoN4lV2A93BuHJigIqsftJrWL88YGFJtkClvo2l3tD8UGiAXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyBJUfp9Wb7jxHlaTGMvuLQsv5f8wHwYDVR0j
BBgwFoAUAHTUcv9hclueI/Qw9mJbwDBczBAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlNrcTlGZkJzckY1cG1SS1NjcG1CcnUyRXZFZ0F2SHhNVUVBYVhjazNM
dXAvMC8wMDc0RDQ3MkZGNjE3MjVCOUUyM0Y0MzBGNjYyNUJDMDMwNUNDQzEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwNzRENDcyRkY2MTcyNUI5
RTIzRjQzMEY2NjI1QkMwMzA1Q0NDMTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJTa3E5RmZCc3JGNXBtUktTY3BtQnJ1MkV2RWdBdkh4TVVFQWFYY2szTHVwLzAv
MzEzNzMwMmUzMTM1MzAyZTM3MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzUzMDMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqlkgwDQYJKoZIhvcNAQELBQADggEBAKmdhtuE
ppuv8qma/4/FOjiwlgVlzWHPzeoeoRB/bQ0FkVCEx4lXJorgqPnAiqvE2cIpk9H6
x16puUmbhN5Prr/rMearQnj6J+xPSv77tDuSQ1Zb53D0UaHrKp01HQQ1HBPfzksQ
49NmVC38qvCxKN2i1kzGlH8QA2klkl7bQYsppvP8iHHGW6EcyNYgx18YclnCv5H2
gvUBheBr04LGllroIAE+FP0OVdBqa1Oe9FFeIapliKbsKOyltOfjEpSxRC7bPN8f
FYKp/FVE3NNwv6bkW6xZJKqPBnT70pU7vdqpTgjib/5juW/GzAOHcWOwds6nLnbT
JK3LIfHBARsu4zk=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:37:56 2025 by rpki-client