Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34342e302f32322d3232203d3e20323731343230.roa
File:                     3138312e3233332e34342e302f32322d3232203d3e20323731343230.roa (raw, json)
Hash identifier:          +U/lcfICKz2gN1MxDkSQbw/GMsAS+5yr+s5JNybs9sA=
Subject key identifier:   36:3A:57:DE:1F:0E:3D:53:B8:F5:C9:5E:AC:CB:05:A7:A3:DB:57:74
Certificate issuer:       /CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
Certificate serial:       524352D7BB0163AEAF5FDE1DD2E7D6B522EC38C9
Authority key identifier: 68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34342e302f32322d3232203d3e20323731343230.roa
Signing time:             Mon 30 Jun 2025 01:10:22 +0000
ROA not before:           Mon 30 Jun 2025 01:05:22 +0000
ROA not after:            Mon 29 Jun 2026 01:10:22 +0000
asID:                     271420
IP address blocks:        181.233.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 17:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:43:52:d7:bb:01:63:ae:af:5f:de:1d:d2:e7:d6:b5:22:ec:38:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
        Validity
            Not Before: Jun 30 01:05:22 2025 GMT
            Not After : Jun 29 01:10:22 2026 GMT
        Subject: CN=363A57DE1F0E3D53B8F5C95EACCB05A7A3DB5774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:10:ca:d9:80:53:6c:12:3f:b0:cb:63:95:ff:
                    3a:33:3b:ca:30:8d:98:b5:97:5a:2f:e8:d3:41:65:
                    a5:b7:41:a9:b6:22:fa:04:9c:33:ca:27:0c:ad:48:
                    68:35:94:1e:a6:50:a4:2c:2e:20:7a:f9:41:c0:5c:
                    dc:63:8c:d4:43:2c:bc:42:f1:c4:f1:df:fb:66:6a:
                    02:20:46:eb:07:b3:3a:34:78:2b:ee:00:d6:90:64:
                    ac:9d:5b:6b:83:9d:ec:3e:29:d6:fa:e2:69:21:12:
                    e5:79:40:12:c5:2c:85:11:6a:bd:7b:d7:5f:08:55:
                    6f:55:58:c1:79:a4:4c:84:3b:8e:06:d1:4c:38:c9:
                    a6:3a:0c:e0:b9:f2:05:9b:ff:0b:fc:57:04:df:78:
                    ce:aa:c0:94:ed:4a:21:c7:ac:97:c2:4d:94:16:57:
                    db:0c:19:80:4e:2b:5f:4d:59:b5:5a:ee:0e:3c:63:
                    51:73:ba:77:e9:6e:7c:51:8a:17:c3:c0:25:ed:74:
                    13:c9:9a:55:d2:17:48:7f:48:dd:59:24:3f:a1:a1:
                    66:30:31:80:fe:66:33:54:02:e2:61:88:20:9c:f7:
                    93:e7:5b:db:bc:2e:b3:46:24:6c:be:6b:10:28:7c:
                    47:9a:4d:cb:b6:92:2d:17:cb:27:b5:39:3b:cc:c0:
                    3d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3A:57:DE:1F:0E:3D:53:B8:F5:C9:5E:AC:CB:05:A7:A3:DB:57:74
            X509v3 Authority Key Identifier:
                keyid:68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34342e302f32322d3232203d3e20323731343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:87:8e:96:f5:b8:f3:c3:a5:9a:be:15:ef:7b:6a:03:e1:b3:
         4e:7d:ec:a9:70:a5:ea:7f:ff:47:5a:72:18:fd:d0:e7:ed:f1:
         e3:4a:4c:0f:b5:a1:c7:06:8c:00:1b:71:72:b0:12:f3:f4:8a:
         8e:72:9c:93:d3:84:7c:83:e8:fd:3a:a3:69:1d:94:52:48:5f:
         d6:96:63:9b:1e:17:28:79:44:4e:35:93:6c:93:21:f4:7c:ed:
         46:57:48:99:f4:d4:81:be:13:92:bc:2a:cc:f4:74:cf:1a:aa:
         03:64:2e:0f:93:29:1b:4e:4a:23:23:82:f8:9a:48:e4:b8:dd:
         e7:0e:69:d3:30:32:1a:1d:39:ad:21:ff:b1:20:41:15:ee:3c:
         c8:62:b4:2f:c2:f3:26:76:b4:1f:b2:eb:0b:e2:50:5e:06:52:
         94:01:68:42:0a:eb:14:ec:8d:da:20:15:06:d3:e3:de:f9:48:
         71:e9:8c:a0:99:0e:07:5f:73:86:d8:e8:ba:ea:88:91:6a:b8:
         b2:aa:5e:d0:23:b8:47:69:d8:a9:c3:8e:fb:ea:39:0a:7c:db:
         b0:fa:e7:46:0b:eb:d9:7e:26:84:ee:e3:e8:ef:c7:90:6d:9c:
         7f:dc:c9:df:33:27:a7:64:e0:89:cc:c4:cf:9e:0c:b4:0c:86:
         18:c1:14:ab
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUkNS17sBY66vX94d0ufWtSLsOMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhEMkQzRDdDMkY3QTczRjhENUQyMkJDNTMwRDAyRjhB
MzY0NDYxRjAeFw0yNTA2MzAwMTA1MjJaFw0yNjA2MjkwMTEwMjJaMDMxMTAvBgNV
BAMTKDM2M0E1N0RFMUYwRTNENTNCOEY1Qzk1RUFDQ0IwNUE3QTNEQjU3NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEMrZgFNsEj+wy2OV/zozO8ow
jZi1l1ov6NNBZaW3Qam2IvoEnDPKJwytSGg1lB6mUKQsLiB6+UHAXNxjjNRDLLxC
8cTx3/tmagIgRusHszo0eCvuANaQZKydW2uDnew+Kdb64mkhEuV5QBLFLIURar17
118IVW9VWMF5pEyEO44G0Uw4yaY6DOC58gWb/wv8VwTfeM6qwJTtSiHHrJfCTZQW
V9sMGYBOK19NWbVa7g48Y1FzunfpbnxRihfDwCXtdBPJmlXSF0h/SN1ZJD+hoWYw
MYD+ZjNUAuJhiCCc95PnW9u8LrNGJGy+axAofEeaTcu2ki0Xyye1OTvMwD0JAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNjpX3h8OPVO49clerMsFp6PbV3QwHwYDVR0j
BBgwFoAUaNLT18L3pz+NXSK8Uw0C+KNkRh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhm
a2EvMC82OEQyRDNEN0MyRjdBNzNGOEQ1RDIyQkM1MzBEMDJGOEEzNjQ0NjFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RDJEM0Q3QzJGN0E3M0Y4
RDVEMjJCQzUzMEQwMkY4QTM2NDQ2MUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NKdnd4QktNb3FQRTV1bnpLRjZSeHN1MWNCeGE1UFpBRmJQcHVTSEZ4ZmthLzAv
MzEzODMxMmUzMjMzMzMyZTM0MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzEzNDMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK16SwwDQYJKoZIhvcNAQELBQADggEBADKHjpb1
uPPDpZq+Fe97agPhs0597Klwpep//0dachj90Oft8eNKTA+1occGjAAbcXKwEvP0
io5ynJPThHyD6P06o2kdlFJIX9aWY5seFyh5RE41k2yTIfR87UZXSJn01IG+E5K8
Ksz0dM8aqgNkLg+TKRtOSiMjgviaSOS43ecOadMwMhodOa0h/7EgQRXuPMhitC/C
8yZ2tB+y6wviUF4GUpQBaEIK6xTsjdogFQbT4975SHHpjKCZDgdfc4bY6LrqiJFq
uLKqXtAjuEdp2KnDjvvqOQp827D650YL69l+JoTu4+jvx5BtnH/cyd8zJ6dk4InM
xM+eDLQMhhjBFKs=
-----END CERTIFICATE-----
Generated at Fri Jul 4 07:25:09 2025 by rpki-client