Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137302e3234362e3139322e302f32322d3234203d3e203238313538.roa
File:                     3137302e3234362e3139322e302f32322d3234203d3e203238313538.roa (raw, json)
Hash identifier:          bDj0a6NIM1dl/KzH3Q5dtA/uHKbrM1Ckerr3OoIJN5I=
Subject key identifier:   81:EB:A0:26:96:38:90:27:0C:4B:63:C8:3F:0F:20:11:87:37:77:D4
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       4691656BA37D7F048E8F02425E5B77D69B1493E0
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137302e3234362e3139322e302f32322d3234203d3e203238313538.roa
Signing time:             Thu 21 Aug 2025 15:08:28 +0000
ROA not before:           Thu 21 Aug 2025 15:03:28 +0000
ROA not after:            Thu 20 Aug 2026 15:08:28 +0000
asID:                     28158
IP address blocks:        170.246.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:91:65:6b:a3:7d:7f:04:8e:8f:02:42:5e:5b:77:d6:9b:14:93:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Aug 21 15:03:28 2025 GMT
            Not After : Aug 20 15:08:28 2026 GMT
        Subject: CN=81EBA026963890270C4B63C83F0F2011873777D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ff:c3:46:6a:94:ce:e7:fd:db:3d:7b:33:5f:
                    0f:2f:71:c0:c8:70:85:97:59:81:4c:1d:6b:1a:86:
                    16:66:cc:65:d5:23:d6:88:97:21:f0:f8:6b:4a:24:
                    22:47:33:dd:29:d1:91:94:26:30:ee:41:d6:60:13:
                    f9:94:06:a5:e8:30:31:a3:1d:2e:7d:9f:01:a6:85:
                    6a:3c:74:b2:23:db:7b:ec:35:43:14:cc:be:21:18:
                    7e:30:09:79:42:4b:be:98:53:3a:f1:d7:6b:3a:37:
                    05:8f:96:db:7c:fe:24:9e:88:33:ea:ff:27:27:78:
                    e4:ed:46:ef:c3:99:a2:e7:46:09:ee:fc:ca:7b:46:
                    0c:00:ee:d9:04:b3:c3:8d:51:34:8b:da:91:ae:f9:
                    9c:98:70:ed:ef:98:8e:4d:26:59:d8:d6:5d:4a:3a:
                    8a:ea:a0:91:df:8f:07:96:ce:ca:a0:ef:09:18:e8:
                    09:8c:4c:b4:c8:8e:d0:cc:d3:07:82:14:9c:07:71:
                    ff:70:86:4c:2a:cb:b0:34:1e:e8:77:a1:21:8b:1d:
                    ac:26:39:36:49:7c:0c:e0:1a:67:aa:c8:2c:56:52:
                    ce:ed:11:c6:01:b9:28:71:88:b3:9d:1c:5c:97:e7:
                    37:70:f1:52:28:2b:52:91:58:af:1b:a5:6c:14:94:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EB:A0:26:96:38:90:27:0C:4B:63:C8:3F:0F:20:11:87:37:77:D4
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137302e3234362e3139322e302f32322d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:d1:37:e2:c0:56:a2:f8:ce:d5:62:20:bd:e9:93:64:e4:e2:
         67:f6:94:0a:f7:e3:80:30:33:58:2b:b9:b3:40:69:8c:67:58:
         e7:b2:f0:94:6c:55:e2:55:25:f8:dc:ba:bc:cc:2b:f0:a8:06:
         7b:d2:c7:6b:b6:7e:55:8c:fe:61:d2:48:6f:bd:f3:8a:e1:39:
         ee:45:62:be:cb:6a:8b:3e:84:bd:0f:2b:13:28:48:a2:97:34:
         f1:5f:bf:83:42:22:47:55:1c:4c:c2:e3:11:c4:dc:66:ef:98:
         76:20:27:64:9f:74:f3:ab:ce:e6:d2:cd:c0:b9:bc:62:45:33:
         3e:3f:f0:cb:41:25:df:6e:89:dc:21:57:38:24:c3:85:d6:89:
         8d:8f:4c:95:a3:50:a9:30:08:77:cb:c0:8f:69:f3:ae:b9:3f:
         45:74:14:59:c6:1c:70:97:c0:43:f5:95:9f:b8:76:fb:82:67:
         b2:b0:c5:57:45:c4:85:65:c7:3b:7f:23:a3:10:c6:79:ec:48:
         ff:72:f6:57:77:70:12:96:b1:8e:d2:f0:a4:aa:f0:f1:95:64:
         49:e1:fb:2e:df:52:18:ab:3a:02:9c:aa:58:99:58:11:55:d1:
         cc:aa:21:cf:3b:06:98:a1:61:60:ea:1e:bd:dc:a1:2d:ed:2c:
         b2:a6:1b:ef
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURpFla6N9fwSOjwJCXlt31psUk+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ1RDFBOEFGNzREOTRCMEUwQjEzNTY3MzZDOEJDOUFG
QjAxODVGRTAeFw0yNTA4MjExNTAzMjhaFw0yNjA4MjAxNTA4MjhaMDMxMTAvBgNV
BAMTKDgxRUJBMDI2OTYzODkwMjcwQzRCNjNDODNGMEYyMDExODczNzc3RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ/8NGapTO5/3bPXszXw8vccDI
cIWXWYFMHWsahhZmzGXVI9aIlyHw+GtKJCJHM90p0ZGUJjDuQdZgE/mUBqXoMDGj
HS59nwGmhWo8dLIj23vsNUMUzL4hGH4wCXlCS76YUzrx12s6NwWPltt8/iSeiDPq
/ycneOTtRu/DmaLnRgnu/Mp7RgwA7tkEs8ONUTSL2pGu+ZyYcO3vmI5NJlnY1l1K
OorqoJHfjweWzsqg7wkY6AmMTLTIjtDM0weCFJwHcf9whkwqy7A0Huh3oSGLHawm
OTZJfAzgGmeqyCxWUs7tEcYBuShxiLOdHFyX5zdw8VIoK1KRWK8bpWwUlPm/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgeugJpY4kCcMS2PIPw8gEYc3d9QwHwYDVR0j
BBgwFoAUtF0aivdNlLDgsTVnNsi8mvsBhf4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzd6d3hiQzJBaHJjWHZvQ2U2TUVvTURKQ2dGZVJnZ2diTFo4NFVoUENt
dGsvMC9CNDVEMUE4QUY3NEQ5NEIwRTBCMTM1NjczNkM4QkM5QUZCMDE4NUZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0NUQxQThBRjc0RDk0QjBF
MEIxMzU2NzM2QzhCQzlBRkIwMTg1RkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3end4YkMyQWhyY1h2b0NlNk1Fb01ESkNnRmVSZ2dnYkxaODRVaFBDbXRrLzAv
MzEzNzMwMmUzMjM0MzYyZTMxMzkzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzgzMTM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9sAwDQYJKoZIhvcNAQELBQADggEBAMvRN+LA
VqL4ztViIL3pk2Tk4mf2lAr344AwM1grubNAaYxnWOey8JRsVeJVJfjcurzMK/Co
BnvSx2u2flWM/mHSSG+984rhOe5FYr7Laos+hL0PKxMoSKKXNPFfv4NCIkdVHEzC
4xHE3GbvmHYgJ2SfdPOrzubSzcC5vGJFMz4/8MtBJd9uidwhVzgkw4XWiY2PTJWj
UKkwCHfLwI9p8665P0V0FFnGHHCXwEP1lZ+4dvuCZ7KwxVdFxIVlxzt/I6MQxnns
SP9y9ld3cBKWsY7S8KSq8PGVZEnh+y7fUhirOgKcqliZWBFV0cyqIc87BpihYWDq
Hr3coS3tLLKmG+8=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:49:30 2025 by rpki-client