Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234342e302f32332d3233203d3e20323635313733.roa
File:                     3136372e3234392e3234342e302f32332d3233203d3e20323635313733.roa (raw, json)
Hash identifier:          mWib45VxzqTtIDFo0pUsBgtHjql0ZMDSZQrkSOQEjyk=
Subject key identifier:   8A:73:29:7D:A5:82:B9:A4:8B:5B:1A:6E:ED:D7:1E:88:8A:EA:00:1A
Certificate issuer:       /CN=F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA
Certificate serial:       3F44EFD47A1BA517127CEEE672DE0B7AF54D653F
Authority key identifier: F3:0F:D2:44:C9:8A:98:EC:9B:A0:BD:ED:7B:EF:20:DD:31:ED:58:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234342e302f32332d3233203d3e20323635313733.roa
Signing time:             Fri 18 Apr 2025 15:25:47 +0000
ROA not before:           Fri 18 Apr 2025 15:20:47 +0000
ROA not after:            Fri 17 Apr 2026 15:25:47 +0000
asID:                     265173
IP address blocks:        167.249.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.crl
                          rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 16:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:44:ef:d4:7a:1b:a5:17:12:7c:ee:e6:72:de:0b:7a:f5:4d:65:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA
        Validity
            Not Before: Apr 18 15:20:47 2025 GMT
            Not After : Apr 17 15:25:47 2026 GMT
        Subject: CN=8A73297DA582B9A48B5B1A6EEDD71E888AEA001A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:f9:ec:a4:fa:53:91:9d:7b:8f:9e:5b:35:
                    4d:a3:50:a2:af:c1:b0:53:73:5f:94:bf:f3:3f:b0:
                    e5:e0:98:86:b9:b3:10:8c:22:7d:1a:0d:9c:05:de:
                    04:89:a5:92:19:e2:01:9c:fe:13:80:14:f3:50:83:
                    a6:cb:39:b9:d7:e9:01:f8:f1:78:00:50:6e:b6:dd:
                    b7:76:e3:43:c1:36:71:a6:84:dc:3a:9f:c2:aa:ac:
                    3a:8d:1a:af:1a:c5:69:9f:78:5a:62:0b:6d:b0:fc:
                    cf:e0:d9:55:7f:13:0a:15:dc:53:fb:5a:71:86:07:
                    0a:31:1a:b8:72:5d:e1:34:26:e6:80:27:4d:90:9c:
                    1f:b8:92:1f:e2:b8:e2:61:a9:46:30:3b:ef:ff:19:
                    f1:b9:ff:60:47:36:9a:58:0d:26:71:b9:87:ce:cc:
                    da:e0:0d:59:07:76:3f:fb:a7:bc:d1:ac:b3:8c:0c:
                    78:a0:6d:6b:58:72:9a:f8:1e:56:50:fc:ed:ce:24:
                    9b:cb:a9:cc:d3:e2:1a:9b:4b:02:1a:5e:d2:d8:d9:
                    2e:fb:7f:88:9d:2d:24:20:ad:6b:9b:07:ec:a8:1e:
                    73:f0:7c:1c:3a:7b:6d:44:df:e3:31:54:8e:15:de:
                    21:53:d4:78:40:94:dd:9f:b0:d0:2d:a4:70:0f:8f:
                    34:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:73:29:7D:A5:82:B9:A4:8B:5B:1A:6E:ED:D7:1E:88:8A:EA:00:1A
            X509v3 Authority Key Identifier:
                keyid:F3:0F:D2:44:C9:8A:98:EC:9B:A0:BD:ED:7B:EF:20:DD:31:ED:58:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234342e302f32332d3233203d3e20323635313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:95:bc:c2:11:97:bc:e4:4a:5e:ca:48:7f:be:38:20:f0:a1:
         0d:ca:3e:50:d3:ec:99:2f:10:b4:03:87:1b:1a:5b:e5:36:65:
         70:14:b9:9a:30:ab:0c:1e:31:ef:cc:f6:cb:07:5b:58:46:7c:
         41:ec:e5:17:f8:cc:6f:2c:eb:dd:b1:ab:b4:00:e0:68:78:c4:
         b8:7f:d2:f9:a5:31:ca:e6:13:45:b8:47:4a:65:e6:00:9d:51:
         7e:74:cf:33:cb:c5:bf:ed:24:5c:1c:ad:e8:37:fd:0d:aa:00:
         0d:73:c2:2e:50:57:05:47:be:d5:fd:8c:4e:19:51:fb:3a:d2:
         d8:0f:a1:5f:0e:83:dc:83:d8:b1:84:65:16:0b:df:37:ca:67:
         37:0f:f7:e2:4f:81:6d:6b:4f:c5:92:a7:df:8a:8a:55:ff:5b:
         ed:47:3d:31:95:22:1b:a9:69:4d:e0:5f:d4:04:8f:50:6e:80:
         8f:5b:af:48:fa:84:85:1c:2c:39:2d:9c:ba:bb:58:ee:e4:61:
         06:fa:be:4b:69:e0:e0:a8:c7:dd:75:e9:30:4b:de:6f:f6:52:
         9d:1a:29:e9:86:a8:c1:db:22:c9:08:00:a5:55:17:b5:0c:96:
         19:34:6e:92:f1:cc:34:e9:ae:f1:31:be:a9:9c:f7:7c:de:2b:
         c2:27:57:5d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUP0Tv1HobpRcSfO7mct4LevVNZT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMwRkQyNDRDOThBOThFQzlCQTBCREVEN0JFRjIwREQz
MUVENThDQTAeFw0yNTA0MTgxNTIwNDdaFw0yNjA0MTcxNTI1NDdaMDMxMTAvBgNV
BAMTKDhBNzMyOTdEQTU4MkI5QTQ4QjVCMUE2RUVERDcxRTg4OEFFQTAwMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2QfnspPpTkZ17j55bNU2jUKKv
wbBTc1+Uv/M/sOXgmIa5sxCMIn0aDZwF3gSJpZIZ4gGc/hOAFPNQg6bLObnX6QH4
8XgAUG623bd240PBNnGmhNw6n8KqrDqNGq8axWmfeFpiC22w/M/g2VV/EwoV3FP7
WnGGBwoxGrhyXeE0JuaAJ02QnB+4kh/iuOJhqUYwO+//GfG5/2BHNppYDSZxuYfO
zNrgDVkHdj/7p7zRrLOMDHigbWtYcpr4HlZQ/O3OJJvLqczT4hqbSwIaXtLY2S77
f4idLSQgrWubB+yoHnPwfBw6e21E3+MxVI4V3iFT1HhAlN2fsNAtpHAPjzTnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUinMpfaWCuaSLWxpu7dceiIrqABowHwYDVR0j
BBgwFoAU8w/SRMmKmOyboL3te+8g3THtWMowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEJoZnZLZ0hwTWVoRVg3RFNucUtXelpoNlRCV1NhNXlzRFFLU1lVM2F1
cUUvMC9GMzBGRDI0NEM5OEE5OEVDOUJBMEJERUQ3QkVGMjBERDMxRUQ1OENBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzMEZEMjQ0Qzk4QTk4RUM5
QkEwQkRFRDdCRUYyMEREMzFFRDU4Q0EuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hCaGZ2S2dIcE1laEVYN0RTbnFLV3paaDZUQldTYTV5c0RRS1NZVTNhdXFFLzAv
MzEzNjM3MmUzMjM0MzkyZTMyMzQzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTMxMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaf59DANBgkqhkiG9w0BAQsFAAOCAQEAUJW8
whGXvORKXspIf744IPChDco+UNPsmS8QtAOHGxpb5TZlcBS5mjCrDB4x78z2ywdb
WEZ8QezlF/jMbyzr3bGrtADgaHjEuH/S+aUxyuYTRbhHSmXmAJ1RfnTPM8vFv+0k
XByt6Df9DaoADXPCLlBXBUe+1f2MThlR+zrS2A+hXw6D3IPYsYRlFgvfN8pnNw/3
4k+BbWtPxZKn34qKVf9b7Uc9MZUiG6lpTeBf1ASPUG6Aj1uvSPqEhRwsOS2curtY
7uRhBvq+S2ng4KjH3XXpMEveb/ZSnRop6YaowdsiyQgApVUXtQyWGTRukvHMNOmu
8TG+qZz3fN4rwidXXQ==
-----END CERTIFICATE-----
Generated at Sat May 10 19:13:48 2025 by rpki-client