Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3137302e3234372e3135362e302f32322d3234203d3e203533303738.roa
File:                     3137302e3234372e3135362e302f32322d3234203d3e203533303738.roa (raw, json)
Hash identifier:          fCD7FthU6WKoidsH28JhaZ06zfDAC12Eiu+9Twb1bRU=
Subject key identifier:   C7:2D:3F:94:54:EC:CD:4A:B4:75:31:23:F1:47:E6:D9:7C:56:25:86
Certificate issuer:       /CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21
Certificate serial:       0996CF7648C23A458100150BCBE71F9700AF0B1B
Authority key identifier: 3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3137302e3234372e3135362e302f32322d3234203d3e203533303738.roa
Signing time:             Thu 26 Jun 2025 11:56:37 +0000
ROA not before:           Thu 26 Jun 2025 11:51:37 +0000
ROA not after:            Thu 25 Jun 2026 11:56:37 +0000
asID:                     53078
IP address blocks:        170.247.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl
                          rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 12:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:96:cf:76:48:c2:3a:45:81:00:15:0b:cb:e7:1f:97:00:af:0b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21
        Validity
            Not Before: Jun 26 11:51:37 2025 GMT
            Not After : Jun 25 11:56:37 2026 GMT
        Subject: CN=C72D3F9454ECCD4AB4753123F147E6D97C562586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9a:e5:d1:e2:0d:8a:36:fd:57:5b:4a:10:de:
                    0e:b3:89:13:1c:bf:fa:24:eb:30:6f:c9:64:6c:c5:
                    b8:63:3d:46:dc:80:95:85:e1:33:d6:3d:3f:90:9f:
                    e5:3b:0a:29:ea:14:7e:9b:d3:74:38:95:76:8b:e3:
                    e5:e9:e1:a0:27:a5:a1:db:2d:a5:6d:64:ed:b7:ed:
                    fa:e9:69:1d:60:a2:33:f9:76:16:e1:ae:44:6b:1f:
                    3c:ad:d3:1a:8b:63:86:9d:27:b4:4b:4d:a4:bb:a1:
                    66:6c:5d:36:1d:81:76:73:ec:93:e7:a2:66:2d:64:
                    ee:1d:15:32:57:01:db:2c:8f:6b:82:c0:f0:df:c8:
                    e7:07:17:1f:83:d6:ef:f1:ce:5b:a8:00:4d:0b:ad:
                    ca:e8:cc:0a:bb:5a:0d:92:c0:a1:35:e4:b8:a6:9f:
                    35:87:6f:9b:1c:ca:0d:8a:c2:8d:e9:11:41:8d:94:
                    1b:2f:e8:1a:33:58:b4:71:b4:0e:10:8a:ab:17:ba:
                    19:12:0c:a8:76:2b:90:de:f2:5d:8b:ac:d2:b0:d9:
                    db:26:75:88:b5:4b:f1:54:cf:39:37:81:f2:3e:8f:
                    6c:dc:6a:db:93:ed:f7:85:37:77:1c:0d:00:38:1f:
                    6d:19:10:f9:c3:03:02:eb:3d:2a:87:4c:c8:00:56:
                    9d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2D:3F:94:54:EC:CD:4A:B4:75:31:23:F1:47:E6:D9:7C:56:25:86
            X509v3 Authority Key Identifier:
                keyid:3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3137302e3234372e3135362e302f32322d3234203d3e203533303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:3e:0a:83:72:dd:10:b6:84:43:a9:e9:7a:6f:00:da:ed:4e:
         46:51:4e:43:a0:b0:8d:55:e5:df:b4:67:bd:06:ca:82:45:98:
         55:75:27:2e:04:db:b1:27:8f:b2:ba:6c:38:c4:ff:3c:a1:5d:
         26:05:64:4a:57:2b:2f:9d:3b:23:b7:af:20:b5:c3:c2:1c:60:
         2f:0d:4d:1a:e3:cb:70:32:44:54:a1:85:29:80:54:88:45:df:
         cc:ee:80:00:d5:8c:af:61:f5:26:7d:fa:a0:d2:99:28:d8:bc:
         37:3d:76:50:25:63:50:98:e8:05:29:aa:bb:55:70:c4:c2:96:
         a1:d7:c7:a3:da:a5:39:3b:01:39:fd:d2:35:da:99:81:e6:00:
         72:2f:c2:77:69:c0:29:1f:2d:89:82:20:24:48:7f:e5:6e:48:
         d7:a1:10:7b:bb:bf:99:7d:44:6e:2e:c7:5e:87:c9:d7:10:8a:
         13:db:28:37:90:a4:5d:41:e0:ad:eb:27:5b:f3:e2:43:c3:36:
         47:bb:32:13:59:3d:62:52:9f:28:c1:25:f5:f2:79:cb:6a:67:
         b6:ab:5f:87:f2:08:cb:1d:88:86:62:16:c6:d9:07:be:5a:7d:
         c0:22:23:8c:bd:67:61:32:99:2b:0f:cc:f4:a6:a0:da:2b:4c:
         d1:90:2a:25
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCZbPdkjCOkWBABULy+cflwCvCxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M4RTVGNDFGM0FGNzQwRTk0MjdGOEVEMjM1QzEyMDA5
OEFBMEMyMTAeFw0yNTA2MjYxMTUxMzdaFw0yNjA2MjUxMTU2MzdaMDMxMTAvBgNV
BAMTKEM3MkQzRjk0NTRFQ0NENEFCNDc1MzEyM0YxNDdFNkQ5N0M1NjI1ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYmuXR4g2KNv1XW0oQ3g6ziRMc
v/ok6zBvyWRsxbhjPUbcgJWF4TPWPT+Qn+U7CinqFH6b03Q4lXaL4+Xp4aAnpaHb
LaVtZO237frpaR1gojP5dhbhrkRrHzyt0xqLY4adJ7RLTaS7oWZsXTYdgXZz7JPn
omYtZO4dFTJXAdssj2uCwPDfyOcHFx+D1u/xzluoAE0LrcrozAq7Wg2SwKE15Lim
nzWHb5scyg2Kwo3pEUGNlBsv6BozWLRxtA4QiqsXuhkSDKh2K5De8l2LrNKw2dsm
dYi1S/FUzzk3gfI+j2zcatuT7feFN3ccDQA4H20ZEPnDAwLrPSqHTMgAVp1BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxy0/lFTszUq0dTEj8Ufm2XxWJYYwHwYDVR0j
BBgwFoAUPI5fQfOvdA6UJ/jtI1wSAJiqDCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0txYWJTeEpEbTlLZGtoM3kzRk0zVkZVVEtZQVFIVWI1WFZzRnFwbndp
U2IvMC8zQzhFNUY0MUYzQUY3NDBFOTQyN0Y4RUQyMzVDMTIwMDk4QUEwQzIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDOEU1RjQxRjNBRjc0MEU5
NDI3RjhFRDIzNUMxMjAwOThBQTBDMjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NLcWFiU3hKRG05S2RraDN5M0ZNM1ZGVVRLWUFRSFViNVhWc0ZxcG53aVNiLzAv
MzEzNzMwMmUzMjM0MzcyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1
MzMzMDM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq95wwDQYJKoZIhvcNAQELBQADggEBAKY+CoNy
3RC2hEOp6XpvANrtTkZRTkOgsI1V5d+0Z70GyoJFmFV1Jy4E27Enj7K6bDjE/zyh
XSYFZEpXKy+dOyO3ryC1w8IcYC8NTRrjy3AyRFShhSmAVIhF38zugADVjK9h9SZ9
+qDSmSjYvDc9dlAlY1CY6AUpqrtVcMTClqHXx6PapTk7ATn90jXamYHmAHIvwndp
wCkfLYmCICRIf+VuSNehEHu7v5l9RG4ux16HydcQihPbKDeQpF1B4K3rJ1vz4kPD
Nke7MhNZPWJSnyjBJfXyectqZ7arX4fyCMsdiIZiFsbZB75afcAiI4y9Z2EymSsP
zPSmoNorTNGQKiU=
-----END CERTIFICATE-----
Generated at Thu Jul 3 16:57:37 2025 by rpki-client