Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136372e3234392e34382e302f32322d3332203d3e20323632373733.roa
File:                     3136372e3234392e34382e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          nlO/Ef9X0Urb1bgiun88s7bH4NwPghHDo8xEpK2wO4o=
Subject key identifier:   33:B9:87:4E:DC:5E:F0:CB:54:D0:27:48:46:D7:A0:A2:83:D8:9E:FA
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       F160BCAFECF91B22202BE3A418A8BAA3E5CEFA
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136372e3234392e34382e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 15:47:00 +0000
ROA not before:           Mon 11 Aug 2025 15:42:00 +0000
ROA not after:            Mon 10 Aug 2026 15:47:00 +0000
asID:                     262773
IP address blocks:        167.249.48.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f1:60:bc:af:ec:f9:1b:22:20:2b:e3:a4:18:a8:ba:a3:e5:ce:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 15:42:00 2025 GMT
            Not After : Aug 10 15:47:00 2026 GMT
        Subject: CN=33B9874EDC5EF0CB54D0274846D7A0A283D89EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2a:3a:6a:c5:0b:16:8c:aa:00:d1:de:b9:02:
                    cc:65:7e:83:1e:3e:38:e6:ac:c9:6f:e4:ce:27:1e:
                    42:79:d7:96:f6:13:14:51:0c:e2:c7:47:82:25:12:
                    8f:84:8b:ea:12:92:96:65:cf:b5:42:11:1f:27:85:
                    39:3b:2a:54:1c:cb:fe:fc:f6:e8:72:ad:71:69:69:
                    4a:b9:52:14:d8:f7:92:9a:8f:4e:33:2d:1b:e6:88:
                    57:85:07:40:fc:8b:96:09:1f:cf:a3:2e:fb:4c:d8:
                    f3:0c:90:f5:02:9b:9a:f0:a6:12:b5:d5:8e:aa:6d:
                    21:16:17:22:d7:4f:f3:f0:a4:57:14:20:df:4e:7d:
                    33:a1:8a:55:7c:26:1c:f2:15:f1:58:38:fc:96:f8:
                    ca:9e:fe:7d:73:4a:39:10:5a:4c:03:25:6f:19:47:
                    4b:db:4e:cd:8f:aa:ad:27:8c:b5:49:c0:63:07:32:
                    d4:19:8e:dc:70:a5:48:f5:9a:24:a1:ee:b5:59:1d:
                    bf:ed:9d:c0:ec:96:41:4d:e9:03:e5:fe:46:02:93:
                    66:6d:a9:72:1e:a0:c7:a3:64:37:02:64:bb:6c:ed:
                    3f:87:ac:18:62:75:c1:fd:f0:33:e2:af:5d:f0:51:
                    aa:f1:8a:63:66:4a:ec:5c:33:0c:6b:94:59:90:8c:
                    e3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B9:87:4E:DC:5E:F0:CB:54:D0:27:48:46:D7:A0:A2:83:D8:9E:FA
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136372e3234392e34382e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:80:51:ae:d7:07:36:72:85:b5:c7:14:0f:6f:33:f5:7d:87:
         0d:e8:3e:f5:f4:aa:a8:02:4c:e5:0a:5a:28:b6:c3:a2:0a:d2:
         47:4f:b9:4d:57:34:e2:1a:e8:7f:a4:d6:a6:3e:6a:02:8d:fd:
         c8:1a:6b:6a:c0:9d:67:7a:04:bf:a5:4c:68:87:5b:76:1c:d2:
         c6:a9:55:8c:de:94:f5:8b:58:9c:c9:0e:42:16:ae:fc:aa:ce:
         b4:7e:f3:2f:b7:11:0c:58:8c:61:44:3a:c4:cd:b5:06:a6:0e:
         95:09:d2:7b:de:f0:24:52:24:7f:7b:46:30:c9:15:52:4c:f8:
         7f:1d:9d:03:14:b0:52:73:a5:9f:4a:ab:ce:b1:88:74:22:8d:
         ca:dc:80:cd:4e:2f:9c:ae:cc:2e:61:f5:fe:29:e1:ee:5e:bb:
         78:06:78:d3:02:07:ae:4a:67:4a:f8:d3:96:4b:13:4a:5e:0c:
         fc:96:bb:29:d0:91:b1:ea:0a:28:85:4d:60:13:8a:46:a1:4d:
         a6:01:b9:cd:7b:31:e0:0c:7e:34:d7:ce:20:5a:5a:21:c6:e9:
         8c:2d:8d:cc:cd:5c:c3:e3:51:6b:2d:aa:72:58:7b:be:1e:29:
         4d:96:56:6f:61:6b:08:6b:d0:44:3e:30:28:8e:11:23:3e:49:
         db:dd:a5:02
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAPFgvK/s+RsiICvjpBiouqPlzvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNTA4MTExNTQyMDBaFw0yNjA4MTAxNTQ3MDBaMDMxMTAvBgNV
BAMTKDMzQjk4NzRFREM1RUYwQ0I1NEQwMjc0ODQ2RDdBMEEyODNEODlFRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgKjpqxQsWjKoA0d65AsxlfoMe
PjjmrMlv5M4nHkJ515b2ExRRDOLHR4IlEo+Ei+oSkpZlz7VCER8nhTk7KlQcy/78
9uhyrXFpaUq5UhTY95Kaj04zLRvmiFeFB0D8i5YJH8+jLvtM2PMMkPUCm5rwphK1
1Y6qbSEWFyLXT/PwpFcUIN9OfTOhilV8JhzyFfFYOPyW+Mqe/n1zSjkQWkwDJW8Z
R0vbTs2Pqq0njLVJwGMHMtQZjtxwpUj1miSh7rVZHb/tncDslkFN6QPl/kYCk2Zt
qXIeoMejZDcCZLts7T+HrBhidcH98DPir13wUarximNmSuxcMwxrlFmQjOM3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUM7mHTtxe8MtU0CdIRtegooPYnvowHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzNjM3MmUzMjM0MzkyZTM0MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKn+TAwDQYJKoZIhvcNAQELBQADggEBAHiAUa7X
BzZyhbXHFA9vM/V9hw3oPvX0qqgCTOUKWii2w6IK0kdPuU1XNOIa6H+k1qY+agKN
/cgaa2rAnWd6BL+lTGiHW3Yc0sapVYzelPWLWJzJDkIWrvyqzrR+8y+3EQxYjGFE
OsTNtQamDpUJ0nve8CRSJH97RjDJFVJM+H8dnQMUsFJzpZ9Kq86xiHQijcrcgM1O
L5yuzC5h9f4p4e5eu3gGeNMCB65KZ0r405ZLE0peDPyWuynQkbHqCiiFTWATikah
TaYBuc17MeAMfjTXziBaWiHG6YwtjczNXMPjUWstqnJYe74eKU2WVm9hawhr0EQ+
MCiOESM+SdvdpQI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:05:31 2025 by rpki-client