Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137342e302f32342d3234203d3e20323632343835.roa
File:                     3137302e3233382e3137342e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          iHxhVOttgTkE3SyUKcx5+8AelrTTdPWdwtFhrcdTvts=
Subject key identifier:   18:6E:C1:86:F1:B2:72:DE:AD:3C:90:37:02:37:8D:BC:9A:58:FA:58
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       3CD6A975F69EDAB04CC15F41B48CBA3C1730C870
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137342e302f32342d3234203d3e20323632343835.roa
Signing time:             Sat 28 Jun 2025 21:33:40 +0000
ROA not before:           Sat 28 Jun 2025 21:28:40 +0000
ROA not after:            Sat 27 Jun 2026 21:33:40 +0000
asID:                     262485
IP address blocks:        170.238.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 21:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d6:a9:75:f6:9e:da:b0:4c:c1:5f:41:b4:8c:ba:3c:17:30:c8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jun 28 21:28:40 2025 GMT
            Not After : Jun 27 21:33:40 2026 GMT
        Subject: CN=186EC186F1B272DEAD3C903702378DBC9A58FA58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2a:25:1a:8b:32:2a:3b:12:6b:7f:3b:38:68:
                    eb:bb:30:25:0d:49:c6:74:a4:55:53:a8:f0:18:f1:
                    13:c9:f3:1c:a1:43:dc:24:65:c3:ad:a2:20:22:cc:
                    85:3b:b4:f8:e9:79:04:ca:ba:4c:37:24:2b:1f:5b:
                    c2:68:74:25:1b:3c:24:23:b5:b2:2d:89:1e:c4:60:
                    86:e2:e4:90:4b:3a:10:fa:a6:05:93:a9:cc:b8:7e:
                    52:ff:fd:2a:4f:72:83:d1:aa:80:0e:05:57:00:31:
                    d8:55:91:9f:fa:12:27:59:01:f6:42:f0:24:a7:32:
                    71:35:45:90:19:93:ef:8e:fe:39:99:71:6e:20:d4:
                    c7:df:56:4b:ed:83:89:6b:8e:41:9a:05:58:2a:9f:
                    0d:51:57:97:a8:06:c4:c8:37:9a:ee:0b:18:24:a8:
                    c4:20:5c:1e:dd:b3:b9:84:9f:53:f8:cd:2e:e5:e8:
                    d0:73:bd:9d:ad:7a:18:62:60:14:5a:a9:70:bb:4a:
                    fc:07:6e:89:b8:b9:fd:8d:d6:d8:98:ab:b5:86:5d:
                    2a:b9:69:96:c8:d0:2d:7c:21:16:ca:03:8d:36:26:
                    3e:6a:a8:71:47:f9:ca:75:62:49:1c:21:93:bd:02:
                    5b:50:8f:dd:26:3d:c7:a7:63:3f:4c:2d:55:c5:10:
                    03:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6E:C1:86:F1:B2:72:DE:AD:3C:90:37:02:37:8D:BC:9A:58:FA:58
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137342e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:80:66:b5:4c:b0:46:af:63:0a:77:c8:8d:25:cc:af:0a:2e:
         ef:38:b9:df:b4:07:b0:aa:a4:0b:ba:5c:f9:f6:60:31:58:86:
         e0:b8:49:4b:9c:b9:0b:26:11:09:40:ea:eb:b9:7e:bf:a6:07:
         8f:47:fb:a8:39:13:61:01:a6:2f:6d:37:5b:56:d6:eb:2a:e2:
         22:61:11:f1:7a:8f:64:54:bc:3d:f3:ab:51:ec:7f:2b:89:5c:
         6e:45:a4:81:90:7c:12:6e:f2:66:07:ff:cf:7f:6d:76:1c:49:
         ac:d4:ab:dd:af:52:ed:61:e2:79:0c:8d:31:1a:43:e2:3a:dd:
         36:ac:e8:84:cf:17:e8:e2:5e:3b:c3:51:8f:76:c5:2a:aa:6c:
         0e:d5:46:56:26:af:b9:dc:98:32:08:28:6f:b4:82:38:74:cd:
         f4:41:ff:39:28:03:73:bf:bd:ce:66:c1:e8:da:2b:b1:ba:12:
         65:c3:71:af:04:68:44:bb:d1:85:5e:3e:42:6b:74:d0:7f:8f:
         fe:74:07:1c:b0:5c:fa:5d:61:55:46:3c:c3:68:d8:19:39:ea:
         38:3e:70:04:e0:c1:7c:b0:8c:a8:3c:72:ef:9a:9a:74:51:bc:
         eb:55:21:c2:0c:04:c0:f0:c6:91:42:93:2a:85:20:62:78:8c:
         0d:a6:82:1d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPNapdfae2rBMwV9BtIy6PBcwyHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc3NEQwODZFMTBGMjlGNDJCNjk5Rjk5M0RFNDA2MUUw
RkRGODg2MjAeFw0yNTA2MjgyMTI4NDBaFw0yNjA2MjcyMTMzNDBaMDMxMTAvBgNV
BAMTKDE4NkVDMTg2RjFCMjcyREVBRDNDOTAzNzAyMzc4REJDOUE1OEZBNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2KiUaizIqOxJrfzs4aOu7MCUN
ScZ0pFVTqPAY8RPJ8xyhQ9wkZcOtoiAizIU7tPjpeQTKukw3JCsfW8JodCUbPCQj
tbItiR7EYIbi5JBLOhD6pgWTqcy4flL//SpPcoPRqoAOBVcAMdhVkZ/6EidZAfZC
8CSnMnE1RZAZk++O/jmZcW4g1MffVkvtg4lrjkGaBVgqnw1RV5eoBsTIN5ruCxgk
qMQgXB7ds7mEn1P4zS7l6NBzvZ2tehhiYBRaqXC7SvwHbom4uf2N1tiYq7WGXSq5
aZbI0C18IRbKA402Jj5qqHFH+cp1YkkcIZO9AltQj90mPcenYz9MLVXFEAO/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUGG7BhvGyct6tPJA3AjeNvJpY+lgwHwYDVR0j
BBgwFoAUR3TQhuEPKfQraZ+ZPeQGHg/fiGIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWV3eG1vMkROWEc2Unhnd1JnUkFqQ05CbmhxR1RONkU0OVVKWG9kQTJy
NTgvMC80Nzc0RDA4NkUxMEYyOUY0MkI2OTlGOTkzREU0MDYxRTBGREY4ODYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3NzREMDg2RTEwRjI5RjQy
QjY5OUY5OTNERTQwNjFFMEZERjg4NjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVld3htbzJETlhHNlJ4Z3dSZ1JBakNOQm5ocUdUTjZFNDlVSlhvZEEycjU4LzAv
MzEzNzMwMmUzMjMzMzgyZTMxMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrurjANBgkqhkiG9w0BAQsFAAOCAQEAh4Bm
tUywRq9jCnfIjSXMrwou7zi537QHsKqkC7pc+fZgMViG4LhJS5y5CyYRCUDq67l+
v6YHj0f7qDkTYQGmL203W1bW6yriImER8XqPZFS8PfOrUex/K4lcbkWkgZB8Em7y
Zgf/z39tdhxJrNSr3a9S7WHieQyNMRpD4jrdNqzohM8X6OJeO8NRj3bFKqpsDtVG
ViavudyYMggob7SCOHTN9EH/OSgDc7+9zmbB6NorsboSZcNxrwRoRLvRhV4+Qmt0
0H+P/nQHHLBc+l1hVUY8w2jYGTnqOD5wBODBfLCMqDxy75qadFG861UhwgwEwPDG
kUKTKoUgYniMDaaCHQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 03:51:13 2025 by rpki-client