Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa
File:                     3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa (raw, json)
Hash identifier:          5VzUlaflKgw6o6VQHM06HQyybfVzD9ZBaSJMie8WTRs=
Subject key identifier:   7D:4A:24:37:AC:6D:2D:83:30:4C:CB:1D:03:4C:9B:95:39:B8:1E:01
Certificate issuer:       /CN=66B03F54D91D92AB0222173C178095462152C2A6
Certificate serial:       417C28849BC0385A9287FAB90DCB0FEB2DAD5096
Authority key identifier: 66:B0:3F:54:D9:1D:92:AB:02:22:17:3C:17:80:95:46:21:52:C2:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B03F54D91D92AB0222173C178095462152C2A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa
Signing time:             Wed 30 Apr 2025 18:45:37 +0000
ROA not before:           Wed 30 Apr 2025 18:40:37 +0000
ROA not after:            Wed 29 Apr 2026 18:45:37 +0000
asID:                     263360
IP address blocks:        191.37.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/66B03F54D91D92AB0222173C178095462152C2A6.crl
                          rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/66B03F54D91D92AB0222173C178095462152C2A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B03F54D91D92AB0222173C178095462152C2A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 13:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7c:28:84:9b:c0:38:5a:92:87:fa:b9:0d:cb:0f:eb:2d:ad:50:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B03F54D91D92AB0222173C178095462152C2A6
        Validity
            Not Before: Apr 30 18:40:37 2025 GMT
            Not After : Apr 29 18:45:37 2026 GMT
        Subject: CN=7D4A2437AC6D2D83304CCB1D034C9B9539B81E01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ad:56:1d:ea:48:c3:f2:b2:b9:98:69:24:48:
                    48:0c:5c:bd:14:39:7f:36:58:7b:17:06:ba:b2:a5:
                    d6:7f:af:69:aa:86:eb:c3:18:ab:7c:ec:d6:01:89:
                    94:2a:68:d8:b2:9f:d4:9d:5f:66:ff:47:81:04:15:
                    0a:52:21:9f:83:2b:c9:99:ed:4f:af:d2:a5:6b:7e:
                    f2:82:4d:72:32:25:96:45:59:13:4f:4f:11:85:14:
                    3c:4e:b4:d2:93:63:2e:0e:07:ac:a5:81:69:d6:f4:
                    a2:ee:26:03:37:39:29:70:ca:01:6d:73:07:83:63:
                    66:4e:65:95:52:8f:1c:55:83:e4:7a:00:7f:bc:3c:
                    01:4e:c6:ad:4b:a5:51:20:a1:e2:66:b5:d0:80:3f:
                    b2:3d:0b:41:72:2a:80:2a:95:57:1c:3c:d8:67:04:
                    c2:7e:bf:9c:d1:7d:d9:5d:bc:a6:61:8e:0f:b0:d8:
                    54:d5:57:ad:48:3f:b8:a0:8e:bf:14:de:27:93:09:
                    b1:ef:16:2b:1c:e8:9c:2e:17:0e:f4:a9:ce:e7:10:
                    18:11:26:1e:aa:65:04:42:9a:86:48:06:cd:77:24:
                    75:46:f5:0e:4e:06:23:cb:d6:35:9e:79:e9:85:b4:
                    b2:fe:85:0a:85:31:37:e4:45:e3:d9:d5:08:f4:81:
                    7a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4A:24:37:AC:6D:2D:83:30:4C:CB:1D:03:4C:9B:95:39:B8:1E:01
            X509v3 Authority Key Identifier:
                keyid:66:B0:3F:54:D9:1D:92:AB:02:22:17:3C:17:80:95:46:21:52:C2:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/66B03F54D91D92AB0222173C178095462152C2A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B03F54D91D92AB0222173C178095462152C2A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:13:04:d7:fc:f8:34:08:be:5f:9e:a7:c5:e6:4d:05:85:26:
         56:49:5e:b0:aa:8f:4e:ee:ce:fb:ae:cb:18:26:dc:80:48:da:
         27:1b:03:6d:95:86:b1:2b:60:ca:57:4a:61:1a:43:cd:93:74:
         9b:f6:72:1e:3c:e5:a9:0b:e5:c6:67:81:7f:2c:82:a5:79:a0:
         c0:d9:14:d1:92:b5:4a:bc:93:ef:40:f0:91:38:37:1b:9e:f9:
         f6:70:9b:91:39:ce:f8:fa:a0:73:26:c8:ae:a7:05:b2:1b:52:
         91:80:1c:e1:d3:17:d4:7a:cd:f8:7d:76:72:62:45:17:a9:1b:
         66:c2:04:03:89:0e:39:87:bc:0d:ac:14:f1:ed:06:e4:ed:74:
         94:b5:c1:e8:e0:59:8a:c4:0e:11:3d:23:02:f7:f0:f2:f8:c6:
         6f:a7:00:6d:d1:7e:55:23:53:70:9a:11:6f:2d:f9:83:f9:cc:
         4f:0a:f3:0a:f2:1e:1b:fa:05:48:ad:ff:a1:e4:09:0f:51:6b:
         c8:e7:14:01:2b:29:b0:92:2a:b3:c9:4c:d5:2e:c0:32:40:b8:
         4f:ed:bb:dc:b5:b7:d6:a3:a2:77:2c:3c:9f:a2:cd:4b:d4:d6:
         c3:c0:61:15:0c:44:fb:6d:fe:53:ef:2f:63:8b:b4:b8:fa:11:
         af:31:1b:e5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQXwohJvAOFqSh/q5DcsP6y2tUJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZCMDNGNTREOTFEOTJBQjAyMjIxNzNDMTc4MDk1NDYy
MTUyQzJBNjAeFw0yNTA0MzAxODQwMzdaFw0yNjA0MjkxODQ1MzdaMDMxMTAvBgNV
BAMTKDdENEEyNDM3QUM2RDJEODMzMDRDQ0IxRDAzNEM5Qjk1MzlCODFFMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfrVYd6kjD8rK5mGkkSEgMXL0U
OX82WHsXBrqypdZ/r2mqhuvDGKt87NYBiZQqaNiyn9SdX2b/R4EEFQpSIZ+DK8mZ
7U+v0qVrfvKCTXIyJZZFWRNPTxGFFDxOtNKTYy4OB6ylgWnW9KLuJgM3OSlwygFt
cweDY2ZOZZVSjxxVg+R6AH+8PAFOxq1LpVEgoeJmtdCAP7I9C0FyKoAqlVccPNhn
BMJ+v5zRfdldvKZhjg+w2FTVV61IP7igjr8U3ieTCbHvFisc6JwuFw70qc7nEBgR
Jh6qZQRCmoZIBs13JHVG9Q5OBiPL1jWeeemFtLL+hQqFMTfkRePZ1Qj0gXphAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfUokN6xtLYMwTMsdA0yblTm4HgEwHwYDVR0j
BBgwFoAUZrA/VNkdkqsCIhc8F4CVRiFSwqYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHBKM296eFpIZ1R0V3RYTUpZRUZoOTVmRjd0enAxU0RHdWkyS2FETWhm
RXkvMC82NkIwM0Y1NEQ5MUQ5MkFCMDIyMjE3M0MxNzgwOTU0NjIxNTJDMkE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2QjAzRjU0RDkxRDkyQUIw
MjIyMTczQzE3ODA5NTQ2MjE1MkMyQTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhwSjNvenhaSGdUdFd0WE1KWUVGaDk1ZkY3dHpwMVNER3VpMkthRE1oZkV5LzAv
MzEzOTMxMmUzMzM3MmUzMTMzMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG/JYowDQYJKoZIhvcNAQELBQADggEBABsTBNf8
+DQIvl+ep8XmTQWFJlZJXrCqj07uzvuuyxgm3IBI2icbA22VhrErYMpXSmEaQ82T
dJv2ch485akL5cZngX8sgqV5oMDZFNGStUq8k+9A8JE4Nxue+fZwm5E5zvj6oHMm
yK6nBbIbUpGAHOHTF9R6zfh9dnJiRRepG2bCBAOJDjmHvA2sFPHtBuTtdJS1wejg
WYrEDhE9IwL38PL4xm+nAG3RflUjU3CaEW8t+YP5zE8K8wryHhv6BUit/6HkCQ9R
a8jnFAErKbCSKrPJTNUuwDJAuE/tu9y1t9ajoncsPJ+izUvU1sPAYRUMRPtt/lPv
L2OLtLj6Ea8xG+U=
-----END CERTIFICATE-----
Generated at Wed May 14 19:15:44 2025 by rpki-client