Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/3136302e32302e32302e302f32322d3234203d3e20323636313433.roa
File:                     3136302e32302e32302e302f32322d3234203d3e20323636313433.roa (raw, json)
Hash identifier:          OomXrdPs8dELsiPSTDiVuKxLUJ9ztg6/tT72Pi346+g=
Subject key identifier:   AC:22:E5:64:5C:94:0D:68:6C:D1:30:5F:0E:D6:CA:E5:FC:3C:CA:A6
Certificate issuer:       /CN=B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2
Certificate serial:       1402C82A2FBF2226F4709B62F87C89803ECED103
Authority key identifier: B4:02:2F:9C:6A:00:6A:A6:CF:0F:6C:3A:F5:C0:A2:4B:BE:14:B0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/3136302e32302e32302e302f32322d3234203d3e20323636313433.roa
Signing time:             Wed 07 May 2025 20:31:24 +0000
ROA not before:           Wed 07 May 2025 20:26:24 +0000
ROA not after:            Wed 06 May 2026 20:31:24 +0000
asID:                     266143
IP address blocks:        160.20.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.crl
                          rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 20:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:02:c8:2a:2f:bf:22:26:f4:70:9b:62:f8:7c:89:80:3e:ce:d1:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2
        Validity
            Not Before: May  7 20:26:24 2025 GMT
            Not After : May  6 20:31:24 2026 GMT
        Subject: CN=AC22E5645C940D686CD1305F0ED6CAE5FC3CCAA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:55:dc:e5:57:90:16:20:6b:e0:1f:7e:f4:78:
                    61:52:fd:e0:41:14:a9:e6:19:c5:93:92:df:75:4d:
                    a5:e6:3d:17:ce:07:40:e3:61:c3:99:8c:5f:1f:65:
                    cb:14:12:e5:09:0b:55:53:c9:58:24:cf:ac:e8:90:
                    9a:20:37:a0:38:23:88:f0:e8:e1:71:86:75:0c:ec:
                    be:f8:59:a6:d7:50:3f:60:59:11:90:27:4d:35:69:
                    ac:63:61:0d:c7:66:3c:1b:0c:3a:00:2f:72:39:9a:
                    3e:50:b9:2b:6f:8f:8c:f7:9a:de:6a:b6:06:bb:9a:
                    98:34:53:af:6b:b1:5f:e3:72:b6:f6:d6:f8:ac:2a:
                    9b:3e:cc:12:31:da:cb:88:39:5f:c8:56:c2:91:f8:
                    9c:f2:99:40:1d:d7:2c:96:cc:74:19:30:41:9c:f4:
                    77:78:14:b5:3b:a3:3e:18:e8:22:85:7e:c5:71:99:
                    5e:00:87:91:9b:30:aa:23:82:fe:a3:af:c3:f9:2c:
                    23:52:2e:7b:ee:44:e1:6b:84:6d:79:43:0c:a2:ae:
                    7d:6a:04:ab:ae:ff:1c:fb:03:b3:dc:42:7a:ae:63:
                    d9:68:3a:64:c1:65:7b:d8:b9:74:64:29:4e:67:13:
                    bd:f4:20:94:3c:8c:f2:29:60:af:7f:f2:49:ca:e0:
                    67:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:22:E5:64:5C:94:0D:68:6C:D1:30:5F:0E:D6:CA:E5:FC:3C:CA:A6
            X509v3 Authority Key Identifier:
                keyid:B4:02:2F:9C:6A:00:6A:A6:CF:0F:6C:3A:F5:C0:A2:4B:BE:14:B0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/3136302e32302e32302e302f32322d3234203d3e20323636313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:da:7e:62:e4:7c:8b:45:ad:bb:af:d4:3a:f9:9c:92:be:0e:
         5b:dc:78:52:12:56:6f:a7:04:d1:68:fa:1e:33:f6:6f:20:51:
         d4:99:70:21:b8:16:3b:26:c3:c0:8f:77:f3:81:57:58:e9:32:
         48:c3:c2:63:75:8d:32:d5:a4:81:a2:09:f6:a5:8a:eb:23:ac:
         b9:b2:ce:a7:9c:41:c5:ef:6a:01:37:07:be:39:76:48:f9:c3:
         46:26:5c:89:9a:e6:a7:c3:02:ef:30:c9:f2:45:9b:80:ed:9b:
         83:03:5b:60:a5:45:38:ef:84:63:67:35:a8:ed:b4:01:46:24:
         95:73:0f:45:e3:f2:9b:d0:58:30:d1:b0:d5:24:0d:2d:02:55:
         32:fe:69:78:d8:a3:cd:4f:e5:94:eb:16:eb:cb:36:b9:82:15:
         32:89:03:47:16:50:0c:6e:c2:45:e5:25:d7:1b:5f:ff:83:e2:
         f8:14:4e:21:2b:8a:7c:64:de:59:c2:15:f3:2c:24:02:74:2d:
         7f:a5:c0:15:9e:5d:d1:56:63:f8:00:e9:37:fd:87:03:4e:80:
         b7:ba:2c:6d:6c:df:5e:c5:b3:a6:9f:3f:ae:1a:b3:b3:32:33:
         04:6d:3d:7a:e8:09:eb:35:3e:95:3b:49:0b:f8:e3:e1:41:2c:
         95:79:ab:74
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFALIKi+/Iib0cJti+HyJgD7O0QMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQwMjJGOUM2QTAwNkFBNkNGMEY2QzNBRjVDMEEyNEJC
RTE0QjBBMjAeFw0yNTA1MDcyMDI2MjRaFw0yNjA1MDYyMDMxMjRaMDMxMTAvBgNV
BAMTKEFDMjJFNTY0NUM5NDBENjg2Q0QxMzA1RjBFRDZDQUU1RkMzQ0NBQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhVdzlV5AWIGvgH370eGFS/eBB
FKnmGcWTkt91TaXmPRfOB0DjYcOZjF8fZcsUEuUJC1VTyVgkz6zokJogN6A4I4jw
6OFxhnUM7L74WabXUD9gWRGQJ001aaxjYQ3HZjwbDDoAL3I5mj5QuStvj4z3mt5q
tga7mpg0U69rsV/jcrb21visKps+zBIx2suIOV/IVsKR+JzymUAd1yyWzHQZMEGc
9Hd4FLU7oz4Y6CKFfsVxmV4Ah5GbMKojgv6jr8P5LCNSLnvuROFrhG15Qwyirn1q
BKuu/xz7A7PcQnquY9loOmTBZXvYuXRkKU5nE730IJQ8jPIpYK9/8knK4Ge1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrCLlZFyUDWhs0TBfDtbK5fw8yqYwHwYDVR0j
BBgwFoAUtAIvnGoAaqbPD2w69cCiS74UsKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEw1bXBMak15NTNnUlBqOUFDbUxMNG1MUDEzdGJmNjROOUVlMThzVWpL
VGQvMC9CNDAyMkY5QzZBMDA2QUE2Q0YwRjZDM0FGNUMwQTI0QkJFMTRCMEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0MDIyRjlDNkEwMDZBQTZD
RjBGNkMzQUY1QzBBMjRCQkUxNEIwQTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRMNW1wTGpNeTUzZ1JQajlBQ21MTDRtTFAxM3RiZjY0TjlFZTE4c1VqS1RkLzAv
MzEzNjMwMmUzMjMwMmUzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2
MzEzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCoBQUMA0GCSqGSIb3DQEBCwUAA4IBAQBu2n5i5HyL
Ra27r9Q6+ZySvg5b3HhSElZvpwTRaPoeM/ZvIFHUmXAhuBY7JsPAj3fzgVdY6TJI
w8JjdY0y1aSBogn2pYrrI6y5ss6nnEHF72oBNwe+OXZI+cNGJlyJmuanwwLvMMny
RZuA7ZuDA1tgpUU474RjZzWo7bQBRiSVcw9F4/Kb0Fgw0bDVJA0tAlUy/ml42KPN
T+WU6xbryza5ghUyiQNHFlAMbsJF5SXXG1//g+L4FE4hK4p8ZN5ZwhXzLCQCdC1/
pcAVnl3RVmP4AOk3/YcDToC3uixtbN9exbOmnz+uGrOzMjMEbT166AnrNT6VO0kL
+OPhQSyVeat0
-----END CERTIFICATE-----
Generated at Mon May 12 03:53:19 2025 by rpki-client