Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/3137302e3233332e37362e302f32322d3234203d3e20323633343935.roa
File:                     3137302e3233332e37362e302f32322d3234203d3e20323633343935.roa (raw, json)
Hash identifier:          Gwy9zblG706ghCX5/JVGDiaxPqAmIwnXEqUmjq1gI0c=
Subject key identifier:   91:42:E0:9E:E8:59:9A:19:BC:01:D2:80:26:5F:0D:27:E1:D5:37:3F
Certificate issuer:       /CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7
Certificate serial:       225808948B53E7C4B4F26F3110DEBFCB5A1B7CC7
Authority key identifier: DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/3137302e3233332e37362e302f32322d3234203d3e20323633343935.roa
Signing time:             Wed 07 May 2025 19:31:16 +0000
ROA not before:           Wed 07 May 2025 19:26:16 +0000
ROA not after:            Wed 06 May 2026 19:31:16 +0000
asID:                     263495
IP address blocks:        170.233.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl
                          rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 12:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:58:08:94:8b:53:e7:c4:b4:f2:6f:31:10:de:bf:cb:5a:1b:7c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7
        Validity
            Not Before: May  7 19:26:16 2025 GMT
            Not After : May  6 19:31:16 2026 GMT
        Subject: CN=9142E09EE8599A19BC01D280265F0D27E1D5373F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:99:ce:47:45:f2:3f:05:d6:a8:27:1c:40:77:
                    4b:a4:5f:d4:3b:89:ce:a3:e4:15:47:d0:cb:03:98:
                    23:9c:3e:b5:4a:ea:47:3d:d9:d0:bf:8c:8a:6e:d2:
                    8e:87:01:f7:d8:67:75:25:fe:dd:ff:0e:e0:91:a9:
                    6b:ae:47:2b:e7:27:e6:47:f8:f6:c3:47:25:a4:9f:
                    39:e6:a7:be:a0:c7:30:f6:49:5f:7e:ad:8b:d9:a4:
                    87:d0:75:e3:d7:4b:7e:b9:fc:ae:c4:a7:33:8c:2b:
                    e1:d7:67:eb:c7:45:ff:11:b0:91:3d:1c:11:79:c3:
                    17:cb:04:87:0d:c1:a3:bf:76:f8:e8:2c:2b:57:47:
                    81:27:25:62:31:f6:db:6d:fc:7e:97:13:13:a2:2b:
                    c5:2a:ab:c3:fb:b2:9e:41:e9:ce:55:6b:70:88:c2:
                    91:af:e6:c2:cc:7c:5a:0d:5f:7b:50:f9:d5:11:de:
                    31:7e:ae:46:6f:29:67:46:49:23:71:6a:1a:3e:41:
                    59:c8:9e:07:98:99:51:54:e9:db:29:d2:39:b4:c3:
                    94:2c:5e:0a:06:93:68:90:4a:5f:01:ba:7d:99:72:
                    1d:a3:2e:5b:b5:77:87:13:2b:f2:d6:2a:64:6d:de:
                    35:93:c3:8c:69:ad:ee:5f:cc:b9:e9:21:a5:c9:e2:
                    ae:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:42:E0:9E:E8:59:9A:19:BC:01:D2:80:26:5F:0D:27:E1:D5:37:3F
            X509v3 Authority Key Identifier:
                keyid:DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/3137302e3233332e37362e302f32322d3234203d3e20323633343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:04:a3:20:76:de:e3:46:b3:7c:02:30:17:dd:3e:43:d8:73:
         8d:58:7a:f9:b8:ed:f1:15:a9:7a:55:df:19:bf:76:20:8d:aa:
         88:ee:ff:00:48:b6:fd:c1:d2:aa:a5:f9:3a:3e:08:93:5c:bf:
         c3:b4:3c:df:00:bc:e2:7a:0d:8b:72:c8:51:bc:cd:90:24:a9:
         59:06:9f:d8:a8:02:e9:f8:a4:8e:09:ce:b6:f7:52:17:ae:aa:
         22:6e:29:bc:13:7e:91:5e:c3:44:dd:b7:de:94:40:1b:49:d9:
         8a:b9:e8:91:ae:68:76:23:a5:27:34:6c:40:e6:ce:e0:6d:93:
         67:26:ee:32:0c:4e:92:2f:56:2d:9c:69:e1:a6:e1:6a:ce:01:
         15:22:92:fc:12:24:4a:0a:9f:1c:9b:e1:f4:f1:dd:9f:7f:88:
         0c:92:29:51:c8:20:0c:9c:ee:fb:f7:6b:6a:4f:63:dc:98:71:
         01:d3:f7:0d:5f:43:d6:91:c0:3a:1a:e0:6d:66:f0:cd:5e:f5:
         e3:15:f8:e8:1e:92:7b:07:7f:1d:7a:49:62:e2:a6:d6:9c:8a:
         90:6d:88:d3:b9:56:55:67:50:1e:9f:2c:b0:ce:76:19:a7:28:
         cf:fd:74:56:3b:30:3b:43:8f:8c:dc:13:f2:4b:c6:fb:28:e8:
         f2:5f:f5:f6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIlgIlItT58S08m8xEN6/y1obfMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU0RkM1NjgwNUM3NjY3RTE4MDE4NTRCM0M3N0FEQ0I2
NEE2M0RENzAeFw0yNTA1MDcxOTI2MTZaFw0yNjA1MDYxOTMxMTZaMDMxMTAvBgNV
BAMTKDkxNDJFMDlFRTg1OTlBMTlCQzAxRDI4MDI2NUYwRDI3RTFENTM3M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXmc5HRfI/BdaoJxxAd0ukX9Q7
ic6j5BVH0MsDmCOcPrVK6kc92dC/jIpu0o6HAffYZ3Ul/t3/DuCRqWuuRyvnJ+ZH
+PbDRyWknznmp76gxzD2SV9+rYvZpIfQdePXS365/K7EpzOMK+HXZ+vHRf8RsJE9
HBF5wxfLBIcNwaO/dvjoLCtXR4EnJWIx9ttt/H6XExOiK8Uqq8P7sp5B6c5Va3CI
wpGv5sLMfFoNX3tQ+dUR3jF+rkZvKWdGSSNxaho+QVnIngeYmVFU6dsp0jm0w5Qs
XgoGk2iQSl8Bun2Zch2jLlu1d4cTK/LWKmRt3jWTw4xpre5fzLnpIaXJ4q47AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkULgnuhZmhm8AdKAJl8NJ+HVNz8wHwYDVR0j
BBgwFoAU3k/FaAXHZn4YAYVLPHety2SmPdcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VpeUJYV3BQVUhKenpQWjFCRWJTazZZQzJ1dEhOQWlTNXJFb1Vtb2Zp
U1kvMC9ERTRGQzU2ODA1Qzc2NjdFMTgwMTg1NEIzQzc3QURDQjY0QTYzREQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFNEZDNTY4MDVDNzY2N0Ux
ODAxODU0QjNDNzdBRENCNjRBNjNERDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1aXlCWFdwUFVISnp6UFoxQkViU2s2WUMydXRITkFpUzVyRW9VbW9maVNZLzAv
MzEzNzMwMmUzMjMzMzMyZTM3MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzNDM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq6UwwDQYJKoZIhvcNAQELBQADggEBAH0EoyB2
3uNGs3wCMBfdPkPYc41Yevm47fEVqXpV3xm/diCNqoju/wBItv3B0qql+To+CJNc
v8O0PN8AvOJ6DYtyyFG8zZAkqVkGn9ioAun4pI4Jzrb3UheuqiJuKbwTfpFew0Td
t96UQBtJ2Yq56JGuaHYjpSc0bEDmzuBtk2cm7jIMTpIvVi2caeGm4WrOARUikvwS
JEoKnxyb4fTx3Z9/iAySKVHIIAyc7vv3a2pPY9yYcQHT9w1fQ9aRwDoa4G1m8M1e
9eMV+OgeknsHfx16SWLiptacipBtiNO5VlVnUB6fLLDOdhmnKM/9dFY7MDtDj4zc
E/JLxvso6PJf9fY=
-----END CERTIFICATE-----
Generated at Wed May 14 15:07:02 2025 by rpki-client