Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38342e302f32332d3233203d3e20323632333532.roa
File:                     3137372e3132362e38342e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          o96Daco6xTf0w2rM1hFiTp5Bu8RV7k8+9xnSZs4wbmA=
Subject key identifier:   63:49:67:45:E5:38:1B:14:FF:66:17:E0:B7:34:C7:E5:F9:74:40:05
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       1235D80671F60295DA431A656A0ABA1C7589EEB4
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38342e302f32332d3233203d3e20323632333532.roa
Signing time:             Thu 06 Mar 2025 15:41:20 +0000
ROA not before:           Thu 06 Mar 2025 15:36:20 +0000
ROA not after:            Thu 05 Mar 2026 15:41:20 +0000
asID:                     262352
IP address blocks:        177.126.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 18:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:35:d8:06:71:f6:02:95:da:43:1a:65:6a:0a:ba:1c:75:89:ee:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Mar  6 15:36:20 2025 GMT
            Not After : Mar  5 15:41:20 2026 GMT
        Subject: CN=63496745E5381B14FF6617E0B734C7E5F9744005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3e:4a:6e:30:87:a6:a2:0f:24:75:fd:8b:8d:
                    3a:9a:57:00:f2:e9:07:5c:ad:e9:9b:c1:b0:57:08:
                    c4:77:3e:e7:54:0e:fe:a1:a3:f0:d4:78:3b:41:1b:
                    00:12:82:f2:ed:8b:d1:89:dc:8a:4c:ba:6e:ee:66:
                    bf:c8:4e:a5:c7:67:d1:a4:b0:9c:e2:df:ea:98:64:
                    a6:3e:01:1f:85:c0:3c:2b:db:9d:23:a7:12:19:f0:
                    75:aa:88:2b:7d:d8:76:22:c7:8d:4e:d2:c5:40:b7:
                    dc:9d:0f:39:55:64:1f:69:ad:15:4a:fc:ef:d9:cf:
                    a4:96:9d:cd:bc:2a:fc:f8:49:53:c4:9a:e8:46:66:
                    56:8a:47:66:b2:d9:eb:da:07:8f:f8:f3:a1:7a:3b:
                    21:49:e8:7c:4f:82:b0:90:ed:e7:16:da:5e:1b:18:
                    69:0c:8b:ee:55:79:65:c9:91:7f:23:4c:d3:19:db:
                    ba:12:0a:72:e7:72:04:ce:11:8e:5e:f1:92:2e:85:
                    d0:4d:89:4d:12:47:3f:26:b1:fc:6f:51:a8:50:82:
                    f7:c5:01:ff:94:cf:22:7f:b9:2e:e8:f6:1a:56:0e:
                    06:17:f6:88:6a:7b:8a:72:ec:26:1e:d7:80:56:83:
                    3d:09:97:84:25:7c:aa:6d:7e:e6:3e:22:27:ce:d3:
                    8f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:49:67:45:E5:38:1B:14:FF:66:17:E0:B7:34:C7:E5:F9:74:40:05
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38342e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:f9:a0:3e:d7:d8:1e:52:b5:d7:d6:d1:e0:c3:c4:2d:1e:30:
         06:b9:3c:fb:45:9e:e1:7f:96:16:ef:b8:fa:45:78:99:a6:c1:
         50:04:0f:ae:e4:cb:dc:45:80:f5:0e:e4:69:43:93:26:bf:fc:
         61:ab:e1:bb:e1:04:aa:b9:bc:8e:c8:cc:61:8b:3a:d6:b8:3e:
         64:82:26:c7:80:4c:3a:05:05:df:84:13:e2:a3:72:ef:62:c7:
         18:db:82:4e:31:8d:63:9f:93:7a:14:27:ac:39:6e:10:c5:f2:
         22:90:90:77:e3:6c:9e:ed:1e:60:a5:4b:df:0c:38:a0:ac:de:
         1d:71:05:70:16:03:61:f0:39:71:59:eb:c3:f6:b3:68:85:08:
         c5:10:ef:b2:6e:0f:81:cc:61:2c:75:5f:81:b1:99:a3:dd:7a:
         00:6a:5f:e2:f7:cc:48:15:f4:57:74:8b:10:6e:0f:49:09:29:
         83:6f:0e:60:f5:49:d7:5e:91:09:d4:e8:3e:d0:f7:e0:f8:be:
         ef:0a:bb:d8:a3:7a:f8:db:2a:e7:8b:fd:aa:b8:62:74:dc:3a:
         da:5b:17:24:0f:71:8d:32:57:b4:a5:43:5d:6b:4c:a0:7a:50:
         0f:a1:f1:ea:3f:be:cf:ad:41:f3:fc:87:ad:92:c7:fd:13:0f:
         ec:50:d1:36
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUEjXYBnH2ApXaQxplagq6HHWJ7rQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkND
REJBM0U5NzAeFw0yNTAzMDYxNTM2MjBaFw0yNjAzMDUxNTQxMjBaMDMxMTAvBgNV
BAMTKDYzNDk2NzQ1RTUzODFCMTRGRjY2MTdFMEI3MzRDN0U1Rjk3NDQwMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkPkpuMIemog8kdf2LjTqaVwDy
6QdcrembwbBXCMR3PudUDv6ho/DUeDtBGwASgvLti9GJ3IpMum7uZr/ITqXHZ9Gk
sJzi3+qYZKY+AR+FwDwr250jpxIZ8HWqiCt92HYix41O0sVAt9ydDzlVZB9prRVK
/O/Zz6SWnc28Kvz4SVPEmuhGZlaKR2ay2evaB4/486F6OyFJ6HxPgrCQ7ecW2l4b
GGkMi+5VeWXJkX8jTNMZ27oSCnLncgTOEY5e8ZIuhdBNiU0SRz8msfxvUahQgvfF
Af+UzyJ/uS7o9hpWDgYX9ohqe4py7CYe14BWgz0Jl4QlfKptfuY+IifO04/3AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUY0lnReU4GxT/ZhfgtzTH5fl0QAUwHwYDVR0j
BBgwFoAUgXDECFogzWqkUfvKwsuPLM26PpcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzUvODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkNDREJBM0U5Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MTcwQzQwODVBMjBDRDZBQTQ1
MUZCQ0FDMkNCOEYyQ0NEQkEzRTk3LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzUvMzEz
NzM3MmUzMTMyMzYyZTM4MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIz
MzM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAGxflQwDQYJKoZIhvcNAQELBQADggEBADz5oD7X2B5S
tdfW0eDDxC0eMAa5PPtFnuF/lhbvuPpFeJmmwVAED67ky9xFgPUO5GlDkya//GGr
4bvhBKq5vI7IzGGLOta4PmSCJseATDoFBd+EE+Kjcu9ixxjbgk4xjWOfk3oUJ6w5
bhDF8iKQkHfjbJ7tHmClS98MOKCs3h1xBXAWA2HwOXFZ68P2s2iFCMUQ77JuD4HM
YSx1X4GxmaPdegBqX+L3zEgV9Fd0ixBuD0kJKYNvDmD1SddekQnU6D7Q9+D4vu8K
u9ijevjbKueL/aq4YnTcOtpbFyQPcY0yV7SlQ11rTKB6UA+h8eo/vs+tQfP8h62S
x/0TD+xQ0TY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:20 2025 by rpki-client