Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/3137302e38322e3130382e302f32322d3234203d3e20323633323636.roa
File:                     3137302e38322e3130382e302f32322d3234203d3e20323633323636.roa (raw, json)
Hash identifier:          kcAYafFPF77NZtnIITDZotOC2SHZrkeRMzYIWU3I0qU=
Subject key identifier:   CC:49:6C:60:CC:D4:DB:57:88:D3:B6:51:A7:E4:36:68:EB:28:FC:39
Certificate issuer:       /CN=8A093B42E9C642176E9BD34BD501752936B07CA6
Certificate serial:       4DB7CBC73685E890C541ADC65FA4CD04E3E10ABB
Authority key identifier: 8A:09:3B:42:E9:C6:42:17:6E:9B:D3:4B:D5:01:75:29:36:B0:7C:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A093B42E9C642176E9BD34BD501752936B07CA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/3137302e38322e3130382e302f32322d3234203d3e20323633323636.roa
Signing time:             Wed 20 Aug 2025 13:21:44 +0000
ROA not before:           Wed 20 Aug 2025 13:16:44 +0000
ROA not after:            Wed 19 Aug 2026 13:21:44 +0000
asID:                     263266
IP address blocks:        170.82.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/8A093B42E9C642176E9BD34BD501752936B07CA6.crl
                          rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/8A093B42E9C642176E9BD34BD501752936B07CA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A093B42E9C642176E9BD34BD501752936B07CA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 07:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b7:cb:c7:36:85:e8:90:c5:41:ad:c6:5f:a4:cd:04:e3:e1:0a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A093B42E9C642176E9BD34BD501752936B07CA6
        Validity
            Not Before: Aug 20 13:16:44 2025 GMT
            Not After : Aug 19 13:21:44 2026 GMT
        Subject: CN=CC496C60CCD4DB5788D3B651A7E43668EB28FC39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:b3:db:03:a2:37:d6:76:ab:8b:24:a4:7e:
                    ec:99:db:c0:21:ed:a9:35:15:2e:b9:3b:d7:5d:43:
                    81:4c:95:92:f5:14:26:b3:82:72:69:bf:5e:99:85:
                    0c:d0:63:5e:f7:41:6f:07:03:95:d7:f9:3d:70:98:
                    d3:56:dd:b9:7e:0a:1b:ae:4e:1b:02:de:de:cd:57:
                    ef:21:71:58:be:95:b9:53:da:52:85:53:a0:70:86:
                    53:3f:5e:74:61:2e:88:ce:f3:46:6c:9d:96:aa:56:
                    b6:ed:64:42:42:5b:ec:01:6d:26:a4:54:17:71:2a:
                    9e:37:2a:71:d2:17:bb:7e:99:4d:1a:57:90:be:67:
                    f3:03:ce:40:17:53:c1:bb:ff:de:a4:bd:38:a2:a2:
                    25:83:27:89:3e:cf:1e:a5:b8:a3:31:16:e3:48:40:
                    37:34:09:86:84:5d:a0:d5:a5:b1:6a:6a:36:9e:b0:
                    77:52:70:03:e9:68:76:b2:e7:9a:73:64:dc:46:ac:
                    22:af:a9:a8:08:f9:7d:b9:a3:e1:27:21:89:4f:55:
                    46:93:59:10:6b:8d:41:6b:8f:7f:f0:50:fb:30:ff:
                    c1:c8:4c:af:e1:82:ce:2b:33:db:78:57:2a:a2:a8:
                    99:33:8c:13:aa:1b:0a:33:82:46:a2:f3:36:ed:9d:
                    6f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:49:6C:60:CC:D4:DB:57:88:D3:B6:51:A7:E4:36:68:EB:28:FC:39
            X509v3 Authority Key Identifier:
                keyid:8A:09:3B:42:E9:C6:42:17:6E:9B:D3:4B:D5:01:75:29:36:B0:7C:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/8A093B42E9C642176E9BD34BD501752936B07CA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A093B42E9C642176E9BD34BD501752936B07CA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/3137302e38322e3130382e302f32322d3234203d3e20323633323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:bd:ea:64:3f:e1:5a:38:0e:bb:6b:17:07:31:29:a7:21:c6:
         b5:ef:5a:e7:19:b2:43:a8:ac:b8:15:9d:06:05:b7:64:ea:65:
         68:1a:40:ca:b5:bd:83:db:60:61:80:f7:ef:2b:87:87:b0:ce:
         3b:bc:19:27:f6:41:04:1d:80:49:db:38:a7:f4:03:7f:7b:bb:
         7e:70:f9:fe:a4:00:c1:1f:ea:a2:36:7a:e5:5a:f3:20:e8:88:
         81:c7:95:c3:bb:ba:3d:bb:66:25:86:e3:d4:31:fb:1d:cc:f3:
         12:fe:2b:28:f7:81:ea:a8:6b:79:44:f4:1c:28:5d:44:1f:76:
         a1:9d:aa:19:1f:29:40:42:a3:ee:c9:e7:46:80:83:d5:81:f6:
         0a:62:ee:7c:a4:e0:c7:5f:ed:9c:83:a8:53:e6:fa:a3:06:52:
         38:e3:7c:0a:74:10:4d:48:58:c7:00:9a:3e:0c:aa:a7:c9:4f:
         12:8f:cd:6d:ea:a1:33:bf:19:cb:b2:32:61:3e:0f:81:3d:35:
         05:c7:c3:d7:ae:12:6f:9e:2e:61:6a:7e:c2:dc:a3:c9:8e:bb:
         87:63:49:39:7e:b5:26:4a:d5:d7:87:8e:45:aa:2e:f6:75:de:
         53:4c:a1:2d:22:f5:78:af:4a:e4:68:76:0a:e0:a7:27:78:0c:
         27:52:3d:e8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTbfLxzaF6JDFQa3GX6TNBOPhCrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEEwOTNCNDJFOUM2NDIxNzZFOUJEMzRCRDUwMTc1Mjkz
NkIwN0NBNjAeFw0yNTA4MjAxMzE2NDRaFw0yNjA4MTkxMzIxNDRaMDMxMTAvBgNV
BAMTKENDNDk2QzYwQ0NENERCNTc4OEQzQjY1MUE3RTQzNjY4RUIyOEZDMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNLPbA6I31nariySkfuyZ28Ah
7ak1FS65O9ddQ4FMlZL1FCazgnJpv16ZhQzQY173QW8HA5XX+T1wmNNW3bl+Chuu
ThsC3t7NV+8hcVi+lblT2lKFU6BwhlM/XnRhLojO80ZsnZaqVrbtZEJCW+wBbSak
VBdxKp43KnHSF7t+mU0aV5C+Z/MDzkAXU8G7/96kvTiioiWDJ4k+zx6luKMxFuNI
QDc0CYaEXaDVpbFqajaesHdScAPpaHay55pzZNxGrCKvqagI+X25o+EnIYlPVUaT
WRBrjUFrj3/wUPsw/8HITK/hgs4rM9t4VyqiqJkzjBOqGwozgkai8zbtnW8HAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzElsYMzU21eI07ZRp+Q2aOso/DkwHwYDVR0j
BBgwFoAUigk7QunGQhdum9NL1QF1KTawfKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlVXajdXTWFLUjdiR25pNWJvUnNiNjNvNlV4TDlDNzl1NXViNk5ua1Jn
ZTIvMC84QTA5M0I0MkU5QzY0MjE3NkU5QkQzNEJENTAxNzUyOTM2QjA3Q0E2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBMDkzQjQyRTlDNjQyMTc2
RTlCRDM0QkQ1MDE3NTI5MzZCMDdDQTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJVV2o3V01hS1I3YkduaTVib1JzYjYzbzZVeEw5Qzc5dTV1YjZObmtSZ2UyLzAv
MzEzNzMwMmUzODMyMmUzMTMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzMjM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqUmwwDQYJKoZIhvcNAQELBQADggEBACy96mQ/
4Vo4DrtrFwcxKachxrXvWucZskOorLgVnQYFt2TqZWgaQMq1vYPbYGGA9+8rh4ew
zju8GSf2QQQdgEnbOKf0A397u35w+f6kAMEf6qI2euVa8yDoiIHHlcO7uj27ZiWG
49Qx+x3M8xL+Kyj3geqoa3lE9BwoXUQfdqGdqhkfKUBCo+7J50aAg9WB9gpi7nyk
4Mdf7ZyDqFPm+qMGUjjjfAp0EE1IWMcAmj4MqqfJTxKPzW3qoTO/GcuyMmE+D4E9
NQXHw9euEm+eLmFqfsLco8mOu4djSTl+tSZK1deHjkWqLvZ13lNMoS0i9XivSuRo
dgrgpyd4DCdSPeg=
-----END CERTIFICATE-----
Generated at Sun Aug 24 09:39:59 2025 by rpki-client