Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38342e302f32322d3332203d3e20323635343437.roa
File:                     3136382e3139362e38342e302f32322d3332203d3e20323635343437.roa (raw, json)
Hash identifier:          6BJpTw13FnfDYXziEGVzxUQWcS2cUiUdYiuGs5yxNQY=
Subject key identifier:   D8:FD:7E:E0:09:9D:76:46:D0:E8:8C:04:7A:F2:D1:C6:EB:41:A5:5D
Certificate issuer:       /CN=37898D289E6CB57451BCE99712B6273334A80F13
Certificate serial:       65C0625F26F7BA6AA4DBD916AA39B48EEA24B067
Authority key identifier: 37:89:8D:28:9E:6C:B5:74:51:BC:E9:97:12:B6:27:33:34:A8:0F:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37898D289E6CB57451BCE99712B6273334A80F13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38342e302f32322d3332203d3e20323635343437.roa
Signing time:             Wed 30 Apr 2025 20:08:32 +0000
ROA not before:           Wed 30 Apr 2025 20:03:32 +0000
ROA not after:            Wed 29 Apr 2026 20:08:32 +0000
asID:                     265447
IP address blocks:        168.196.84.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/37898D289E6CB57451BCE99712B6273334A80F13.crl
                          rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/37898D289E6CB57451BCE99712B6273334A80F13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37898D289E6CB57451BCE99712B6273334A80F13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 22:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c0:62:5f:26:f7:ba:6a:a4:db:d9:16:aa:39:b4:8e:ea:24:b0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37898D289E6CB57451BCE99712B6273334A80F13
        Validity
            Not Before: Apr 30 20:03:32 2025 GMT
            Not After : Apr 29 20:08:32 2026 GMT
        Subject: CN=D8FD7EE0099D7646D0E88C047AF2D1C6EB41A55D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e7:92:52:5d:3b:df:da:2f:a4:ec:44:a7:85:
                    34:26:e1:71:95:ff:80:6f:be:a6:cc:2d:43:89:23:
                    81:61:84:17:97:2a:9a:ef:67:cd:00:09:1d:b5:5f:
                    f4:e2:02:ad:5d:4e:bb:89:5f:10:67:5b:01:c5:92:
                    a4:51:71:b4:27:c3:1c:15:d2:06:21:f2:3f:5c:39:
                    b6:ce:a2:61:01:b0:a5:79:31:78:d7:8d:6c:40:3b:
                    73:7f:90:d3:24:03:0f:03:52:6d:53:59:eb:4b:a9:
                    8c:13:c1:8c:3e:40:28:59:11:19:6b:03:da:02:fa:
                    80:fb:2e:62:42:bf:3d:13:9e:91:bd:d0:64:ea:67:
                    0e:9b:91:6f:f5:e5:e8:cf:7e:d4:9d:0c:e3:68:7b:
                    09:5a:c7:05:a1:40:dd:21:6e:f3:ea:72:60:84:7f:
                    01:95:1b:a4:b9:1f:b0:30:17:a1:31:60:b7:c8:e1:
                    38:6a:09:00:92:cf:32:bb:95:4b:6a:c0:3d:49:25:
                    8d:a3:29:d3:11:17:71:a7:ea:56:7f:7e:a8:9b:2b:
                    b2:52:db:b4:22:61:f5:ad:01:fe:3f:df:ae:69:2f:
                    c4:7e:1f:37:74:c1:18:58:31:ab:53:f3:dc:49:9f:
                    4d:c8:63:ad:51:45:9f:0c:f3:c5:37:de:98:3b:30:
                    4b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FD:7E:E0:09:9D:76:46:D0:E8:8C:04:7A:F2:D1:C6:EB:41:A5:5D
            X509v3 Authority Key Identifier:
                keyid:37:89:8D:28:9E:6C:B5:74:51:BC:E9:97:12:B6:27:33:34:A8:0F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/37898D289E6CB57451BCE99712B6273334A80F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37898D289E6CB57451BCE99712B6273334A80F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38342e302f32322d3332203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:dc:b5:7f:f7:a4:9b:ab:4d:38:2f:80:7c:c7:21:30:0b:8e:
         06:bc:91:32:f7:c1:bb:c3:ca:dc:ae:ba:7d:01:60:f5:75:c9:
         f9:c9:35:4c:57:dc:dd:b3:b7:12:07:04:57:6f:c2:f7:57:52:
         b9:b1:f3:90:1c:36:cf:75:5e:9b:2c:43:16:fd:fe:88:ff:b6:
         30:a4:fa:03:5d:f9:5b:10:72:d6:09:4b:56:61:e4:9c:62:28:
         12:2c:6d:be:85:b5:bf:f9:fb:c6:ea:cb:cb:b5:c3:2c:fe:33:
         de:a1:08:6f:58:ef:69:95:28:bd:b6:bc:5f:80:05:94:50:15:
         17:9e:3c:37:6f:cb:76:93:83:e4:6f:55:e7:93:da:c6:00:79:
         79:4a:a6:70:da:42:d1:61:d8:f9:38:4e:c3:07:0e:d0:cd:b1:
         86:d3:12:bf:53:7c:30:ca:1e:df:82:fd:4e:00:8d:51:33:45:
         0d:27:96:d6:d4:0e:64:43:d8:3e:b9:9f:ba:12:77:bc:67:0f:
         ce:68:06:18:5d:e5:c9:8a:e1:cb:75:96:0f:c8:5c:2e:ba:c0:
         d7:7d:42:3b:a4:2f:74:4b:50:6d:51:f3:c5:96:21:b8:8e:7d:
         8a:57:c1:c8:c7:7c:86:53:76:5b:eb:aa:61:4f:aa:15:a8:14:
         96:2f:10:43
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZcBiXyb3umqk29kWqjm0juoksGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc4OThEMjg5RTZDQjU3NDUxQkNFOTk3MTJCNjI3MzMz
NEE4MEYxMzAeFw0yNTA0MzAyMDAzMzJaFw0yNjA0MjkyMDA4MzJaMDMxMTAvBgNV
BAMTKEQ4RkQ3RUUwMDk5RDc2NDZEMEU4OEMwNDdBRjJEMUM2RUI0MUE1NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl55JSXTvf2i+k7ESnhTQm4XGV
/4BvvqbMLUOJI4FhhBeXKprvZ80ACR21X/TiAq1dTruJXxBnWwHFkqRRcbQnwxwV
0gYh8j9cObbOomEBsKV5MXjXjWxAO3N/kNMkAw8DUm1TWetLqYwTwYw+QChZERlr
A9oC+oD7LmJCvz0TnpG90GTqZw6bkW/15ejPftSdDONoewlaxwWhQN0hbvPqcmCE
fwGVG6S5H7AwF6ExYLfI4ThqCQCSzzK7lUtqwD1JJY2jKdMRF3Gn6lZ/fqibK7JS
27QiYfWtAf4/365pL8R+Hzd0wRhYMatT89xJn03IY61RRZ8M88U33pg7MEtbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2P1+4AmddkbQ6IwEevLRxutBpV0wHwYDVR0j
BBgwFoAUN4mNKJ5stXRRvOmXErYnMzSoDxMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNZS2tLSkhLMmpCYVFRTWRWZFc5cm4zcnZWeDlmc04xaTJzbWZlWExi
RXcvMC8zNzg5OEQyODlFNkNCNTc0NTFCQ0U5OTcxMkI2MjczMzM0QTgwRjEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3ODk4RDI4OUU2Q0I1NzQ1
MUJDRTk5NzEyQjYyNzMzMzRBODBGMTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTWUtrS0pISzJqQmFRUU1kVmRXOXJuM3J2Vng5ZnNOMWkyc21mZVhMYkV3LzAv
MzEzNjM4MmUzMTM5MzYyZTM4MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzUzNDM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoxFQwDQYJKoZIhvcNAQELBQADggEBAJTctX/3
pJurTTgvgHzHITALjga8kTL3wbvDytyuun0BYPV1yfnJNUxX3N2ztxIHBFdvwvdX
Urmx85AcNs91XpssQxb9/oj/tjCk+gNd+VsQctYJS1Zh5JxiKBIsbb6Ftb/5+8bq
y8u1wyz+M96hCG9Y72mVKL22vF+ABZRQFReePDdvy3aTg+RvVeeT2sYAeXlKpnDa
QtFh2Pk4TsMHDtDNsYbTEr9TfDDKHt+C/U4AjVEzRQ0nltbUDmRD2D65n7oSd7xn
D85oBhhd5cmK4ct1lg/IXC66wNd9QjukL3RLUG1R88WWIbiOfYpXwcjHfIZTdlvr
qmFPqhWoFJYvEEM=
-----END CERTIFICATE-----
Generated at Tue May 13 13:15:23 2025 by rpki-client