Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/3137302e38302e3138342e302f32322d3234203d3e20323636333832.roa
File:                     3137302e38302e3138342e302f32322d3234203d3e20323636333832.roa (raw, json)
Hash identifier:          AdEUOJn+RF6A6GW6vepiaLabho76RamU0zT7FRHQxVw=
Subject key identifier:   EE:9E:14:83:6A:76:A2:E2:E2:64:F1:43:A4:65:39:DE:B2:4B:A9:22
Certificate issuer:       /CN=8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5
Certificate serial:       29BACA1B07D3C8002DA9FC034107125D51BF5AE0
Authority key identifier: 8C:EB:93:8E:E7:EE:7A:3D:30:ED:A7:14:BE:1B:C7:A9:15:23:DA:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/3137302e38302e3138342e302f32322d3234203d3e20323636333832.roa
Signing time:             Tue 13 May 2025 15:42:38 +0000
ROA not before:           Tue 13 May 2025 15:37:38 +0000
ROA not after:            Tue 12 May 2026 15:42:38 +0000
asID:                     266382
IP address blocks:        170.80.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.crl
                          rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 08:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ba:ca:1b:07:d3:c8:00:2d:a9:fc:03:41:07:12:5d:51:bf:5a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5
        Validity
            Not Before: May 13 15:37:38 2025 GMT
            Not After : May 12 15:42:38 2026 GMT
        Subject: CN=EE9E14836A76A2E2E264F143A46539DEB24BA922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2d:53:44:2b:1e:0a:e2:5d:14:2f:3d:a9:db:
                    fe:b9:ad:cc:e4:4a:80:10:3f:ff:f0:7a:62:a1:42:
                    d5:6e:b9:d8:a3:c8:3e:04:18:cb:6f:f4:f8:36:a3:
                    22:c0:4c:78:35:99:1b:ae:42:ea:db:ce:8d:b8:ee:
                    1d:02:4a:4d:ac:46:0e:8c:72:60:23:de:33:37:34:
                    0a:60:d8:ad:28:5d:17:ef:17:d6:e2:9d:80:c8:ea:
                    b5:f3:90:2c:8a:2c:39:57:f4:94:6f:b7:6f:1e:26:
                    5e:6a:dc:d2:54:e4:39:38:0e:45:a4:83:03:3d:ed:
                    c2:57:94:b8:e2:19:f1:59:3a:b6:d9:13:42:10:8a:
                    cc:cb:f1:34:ea:62:df:53:f1:a4:f1:71:e5:58:53:
                    dd:00:6f:95:33:cd:4d:0c:84:7b:af:35:57:61:c8:
                    b0:00:c4:27:73:64:e7:e3:a1:9f:ea:d0:d8:ad:c9:
                    63:c7:1a:71:8b:24:55:54:a5:50:d2:9b:a1:41:98:
                    44:81:41:08:04:5a:1e:52:a2:ea:ef:36:8e:4d:de:
                    dd:eb:a0:6c:cf:b9:6d:fa:71:01:b4:4a:6a:e6:f6:
                    6b:c1:89:d3:b0:6f:20:fd:cf:c1:c9:b7:bc:59:0b:
                    61:ba:19:66:d0:48:2c:ae:48:ed:96:e0:95:ed:89:
                    4a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9E:14:83:6A:76:A2:E2:E2:64:F1:43:A4:65:39:DE:B2:4B:A9:22
            X509v3 Authority Key Identifier:
                keyid:8C:EB:93:8E:E7:EE:7A:3D:30:ED:A7:14:BE:1B:C7:A9:15:23:DA:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/3137302e38302e3138342e302f32322d3234203d3e20323636333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:e7:4c:08:4d:56:a4:df:ef:2a:7b:77:5f:ba:df:24:60:24:
         2a:0f:d0:87:1b:fb:5b:02:32:3b:78:12:fe:8b:b3:5a:fe:c1:
         8a:a9:62:7b:d9:92:d2:65:24:ce:04:23:79:6d:87:ef:4c:3f:
         d7:06:46:09:dd:86:62:34:f9:bf:f6:40:2b:45:d0:53:a1:92:
         69:71:c8:6a:30:6e:08:d3:29:ee:92:0a:56:38:69:09:1a:94:
         97:8c:f9:4b:0b:f6:89:b5:29:34:bb:93:f0:fe:01:69:2c:2c:
         f1:a0:0c:17:d7:78:ba:4e:a5:0e:85:51:65:3d:57:c1:29:4d:
         f1:e3:f7:35:21:21:c7:d7:e8:15:71:68:2e:63:86:66:e7:ad:
         d7:a7:da:41:ba:9e:0d:e6:e0:d0:cd:38:f2:4b:35:98:14:3f:
         5f:19:e9:50:7e:9a:38:06:fd:8e:e3:d1:d9:56:ba:ce:43:86:
         a3:1c:93:96:af:d8:6c:6c:2a:fe:79:60:fb:1b:97:e2:72:ab:
         fe:20:95:91:40:e7:48:9b:fd:2c:89:13:c5:bc:d6:cb:59:98:
         a8:1e:9f:6e:d2:c8:54:7b:5b:41:d5:ca:5b:f8:a9:fc:6b:1c:
         a3:e2:cd:92:6e:b4:d7:65:19:ab:84:85:c1:9f:2d:a3:ab:cc:
         54:ef:f7:f1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKbrKGwfTyAAtqfwDQQcSXVG/WuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENFQjkzOEVFN0VFN0EzRDMwRURBNzE0QkUxQkM3QTkx
NTIzREFDNTAeFw0yNTA1MTMxNTM3MzhaFw0yNjA1MTIxNTQyMzhaMDMxMTAvBgNV
BAMTKEVFOUUxNDgzNkE3NkEyRTJFMjY0RjE0M0E0NjUzOURFQjI0QkE5MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZLVNEKx4K4l0ULz2p2/65rczk
SoAQP//wemKhQtVuudijyD4EGMtv9Pg2oyLATHg1mRuuQurbzo247h0CSk2sRg6M
cmAj3jM3NApg2K0oXRfvF9binYDI6rXzkCyKLDlX9JRvt28eJl5q3NJU5Dk4DkWk
gwM97cJXlLjiGfFZOrbZE0IQiszL8TTqYt9T8aTxceVYU90Ab5UzzU0MhHuvNVdh
yLAAxCdzZOfjoZ/q0NityWPHGnGLJFVUpVDSm6FBmESBQQgEWh5SourvNo5N3t3r
oGzPuW36cQG0Smrm9mvBidOwbyD9z8HJt7xZC2G6GWbQSCyuSO2W4JXtiUrpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7p4Ug2p2ouLiZPFDpGU53rJLqSIwHwYDVR0j
BBgwFoAUjOuTjufuej0w7acUvhvHqRUj2sUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG10OWdubUpGdXo4NnQ2WnJ1ZGNhbXJLdVhSbTd1ZDVXSmJvTkRxRzVu
R28vMC84Q0VCOTM4RUU3RUU3QTNEMzBFREE3MTRCRTFCQzdBOTE1MjNEQUM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDRUI5MzhFRTdFRTdBM0Qz
MEVEQTcxNEJFMUJDN0E5MTUyM0RBQzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htdDlnbm1KRnV6ODZ0NlpydWRjYW1yS3VYUm03dWQ1V0pib05EcUc1bkdvLzAv
MzEzNzMwMmUzODMwMmUzMTM4MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqULgwDQYJKoZIhvcNAQELBQADggEBAIbnTAhN
VqTf7yp7d1+63yRgJCoP0Icb+1sCMjt4Ev6Ls1r+wYqpYnvZktJlJM4EI3lth+9M
P9cGRgndhmI0+b/2QCtF0FOhkmlxyGowbgjTKe6SClY4aQkalJeM+UsL9om1KTS7
k/D+AWksLPGgDBfXeLpOpQ6FUWU9V8EpTfHj9zUhIcfX6BVxaC5jhmbnrden2kG6
ng3m4NDNOPJLNZgUP18Z6VB+mjgG/Y7j0dlWus5DhqMck5av2GxsKv55YPsbl+Jy
q/4glZFA50ib/SyJE8W81stZmKgen27SyFR7W0HVylv4qfxrHKPizZJutNdlGauE
hcGfLaOrzFTv9/E=
-----END CERTIFICATE-----
Generated at Tue Jul 1 18:19:47 2025 by rpki-client