Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e3232302e302f32322d3332203d3e20323632373733.roa
File:                     3137302e3233312e3232302e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          /TY/NDpRodY/2VJoe9Na9zDJvTEX1Ned9DLYagv1dZI=
Subject key identifier:   CD:19:0D:1E:42:B2:F3:47:7E:C2:85:03:88:BA:A2:EF:F0:96:83:D1
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       4BD3F066CBEB312B8AA6486A5DA8A193D1C77333
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e3232302e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 15:46:58 +0000
ROA not before:           Mon 11 Aug 2025 15:41:58 +0000
ROA not after:            Mon 10 Aug 2026 15:46:58 +0000
asID:                     262773
IP address blocks:        170.231.220.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d3:f0:66:cb:eb:31:2b:8a:a6:48:6a:5d:a8:a1:93:d1:c7:73:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 15:41:58 2025 GMT
            Not After : Aug 10 15:46:58 2026 GMT
        Subject: CN=CD190D1E42B2F3477EC2850388BAA2EFF09683D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6c:7f:ea:58:90:85:49:d3:2c:d0:85:d7:c0:
                    1c:dd:de:59:9a:91:d5:d7:2d:9c:65:0a:1f:9f:4f:
                    a0:84:56:c6:e3:55:60:61:c5:af:47:b6:ee:a8:c6:
                    d1:9c:c9:ef:ca:e5:89:74:8a:9e:d0:7a:c4:51:5f:
                    cb:f0:f8:d9:8b:59:02:f6:fc:78:bd:ad:00:df:f2:
                    08:0c:e6:31:2f:c5:9c:96:12:3f:7c:24:08:4d:73:
                    ab:62:72:44:c0:af:dc:24:dc:e8:eb:5e:02:bd:5c:
                    22:4a:73:28:2c:3d:35:09:97:b6:98:a5:4f:72:43:
                    4c:64:0e:af:76:ea:a5:1f:15:8d:2d:17:c7:15:1f:
                    65:8c:dd:be:89:d9:fe:5f:cc:08:04:1a:bd:cb:b6:
                    2c:50:48:e3:2b:94:68:41:06:fa:8b:8d:9c:3d:25:
                    f3:d6:6c:b0:ff:a7:21:3f:36:51:50:ba:d4:e9:cc:
                    11:aa:75:54:7a:cd:e8:f6:14:14:01:91:6b:04:d8:
                    e2:06:f0:ee:9d:7c:57:b3:4a:51:2f:50:dd:87:05:
                    d3:2d:f5:a7:f5:cd:43:c6:9d:2c:4b:0a:47:a5:12:
                    22:46:5a:d5:7b:78:17:5b:52:0f:cb:a0:f2:96:1a:
                    e4:2a:5c:75:9c:63:58:df:29:a0:3a:66:35:a6:d9:
                    db:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:19:0D:1E:42:B2:F3:47:7E:C2:85:03:88:BA:A2:EF:F0:96:83:D1
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e3232302e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:9d:11:16:b6:2d:22:cb:11:3b:9d:f9:09:00:d3:2f:b9:19:
         62:e2:b7:52:6e:6a:b0:16:67:54:d6:7b:c4:73:f5:d3:90:71:
         00:2a:7c:e9:03:a6:38:ce:23:79:26:01:66:07:56:c0:60:86:
         e6:02:af:cb:12:0e:5d:d6:a0:4c:fe:0d:59:5c:49:38:75:62:
         f0:14:14:fc:be:13:33:1a:10:d8:e7:41:e5:e6:98:c1:17:6e:
         2f:04:55:77:43:03:58:c5:4e:9c:95:d2:30:b2:71:38:a1:a0:
         83:39:33:27:2d:3d:13:ab:01:17:9d:33:83:59:cf:d9:a4:48:
         f4:76:b5:f0:2a:92:39:aa:76:8e:18:ff:0e:82:65:e9:37:fa:
         5d:c1:cf:0d:ff:e0:cd:54:3d:ac:d4:98:49:e2:52:15:54:b9:
         0e:6b:74:44:1c:74:20:9a:33:f5:7a:d0:40:34:93:cf:75:6a:
         50:ab:66:fa:a6:9e:a9:b1:19:e9:d1:0d:d4:65:a4:26:ac:58:
         29:bd:41:f4:b6:db:07:47:29:6e:17:af:a2:4c:db:0f:5d:8e:
         1f:53:7f:90:c7:df:be:28:62:5c:d3:b8:c2:cf:fb:5c:e8:f0:
         a9:29:f5:34:a4:89:db:0c:d4:c4:93:b6:7f:1b:26:bb:cb:65:
         f2:52:3e:40
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUS9PwZsvrMSuKpkhqXaihk9HHczMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNTA4MTExNTQxNThaFw0yNjA4MTAxNTQ2NThaMDMxMTAvBgNV
BAMTKENEMTkwRDFFNDJCMkYzNDc3RUMyODUwMzg4QkFBMkVGRjA5NjgzRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXbH/qWJCFSdMs0IXXwBzd3lma
kdXXLZxlCh+fT6CEVsbjVWBhxa9Htu6oxtGcye/K5Yl0ip7QesRRX8vw+NmLWQL2
/Hi9rQDf8ggM5jEvxZyWEj98JAhNc6tickTAr9wk3OjrXgK9XCJKcygsPTUJl7aY
pU9yQ0xkDq926qUfFY0tF8cVH2WM3b6J2f5fzAgEGr3LtixQSOMrlGhBBvqLjZw9
JfPWbLD/pyE/NlFQutTpzBGqdVR6zej2FBQBkWsE2OIG8O6dfFezSlEvUN2HBdMt
9af1zUPGnSxLCkelEiJGWtV7eBdbUg/LoPKWGuQqXHWcY1jfKaA6ZjWm2du/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUzRkNHkKy80d+woUDiLqi7/CWg9EwHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzNzMwMmUzMjMzMzEyZTMyMzIzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMjM3MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrn3DANBgkqhkiG9w0BAQsFAAOCAQEAQJ0R
FrYtIssRO535CQDTL7kZYuK3Um5qsBZnVNZ7xHP105BxACp86QOmOM4jeSYBZgdW
wGCG5gKvyxIOXdagTP4NWVxJOHVi8BQU/L4TMxoQ2OdB5eaYwRduLwRVd0MDWMVO
nJXSMLJxOKGggzkzJy09E6sBF50zg1nP2aRI9Ha18CqSOap2jhj/DoJl6Tf6XcHP
Df/gzVQ9rNSYSeJSFVS5Dmt0RBx0IJoz9XrQQDSTz3VqUKtm+qaeqbEZ6dEN1GWk
JqxYKb1B9LbbB0cpbhevokzbD12OH1N/kMffvihiXNO4ws/7XOjwqSn1NKSJ2wzU
xJO2fxsmu8tl8lI+QA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:58:43 2025 by rpki-client