Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/3137372e35322e36342e302f32312d3234203d3e20323632343338.roa
File:                     3137372e35322e36342e302f32312d3234203d3e20323632343338.roa (raw, json)
Hash identifier:          K8PQUgh01LzhRhJHkugvECyuCRfTqjC9/MVn46/IUms=
Subject key identifier:   04:00:E3:B3:74:6B:4F:DF:A4:93:FF:E7:ED:7F:7C:AA:9C:8B:F4:40
Certificate issuer:       /CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
Certificate serial:       1B3D6079308D23F13C5ACA1818F543B42C2BB58C
Authority key identifier: AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/3137372e35322e36342e302f32312d3234203d3e20323632343338.roa
Signing time:             Mon 23 Dec 2024 16:08:57 +0000
ROA not before:           Mon 23 Dec 2024 16:03:57 +0000
ROA not after:            Mon 22 Dec 2025 16:08:57 +0000
asID:                     262438
IP address blocks:        177.52.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl
                          rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3d:60:79:30:8d:23:f1:3c:5a:ca:18:18:f5:43:b4:2c:2b:b5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
        Validity
            Not Before: Dec 23 16:03:57 2024 GMT
            Not After : Dec 22 16:08:57 2025 GMT
        Subject: CN=0400E3B3746B4FDFA493FFE7ED7F7CAA9C8BF440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:41:59:a0:ab:34:61:f9:a0:46:c9:2e:6f:
                    d3:04:e5:b1:0a:94:13:36:c0:e2:28:48:ef:86:ba:
                    76:ec:df:54:17:c5:ea:88:fc:2c:18:b3:1f:b0:74:
                    e5:87:43:42:38:c7:f6:c2:ba:5f:a5:1e:51:d8:b4:
                    0e:d1:13:7c:fc:48:84:03:0d:f8:a3:92:6c:01:23:
                    60:89:f9:41:55:17:e7:4f:c6:5f:3f:bf:be:99:aa:
                    bf:0a:5e:04:da:ff:e3:a2:36:4b:cf:19:64:36:33:
                    79:89:64:22:38:05:4b:e5:1c:49:74:02:da:cc:d6:
                    92:41:11:d4:81:68:dc:2e:3d:df:da:cb:98:4e:3f:
                    c6:3e:da:ea:ff:e1:15:76:0a:d7:a2:a1:fe:8b:9e:
                    97:43:42:5d:4b:37:9a:94:27:d9:2f:0d:c6:f7:22:
                    aa:fe:5f:54:dd:4b:91:f0:35:e8:2d:1b:7a:fb:42:
                    aa:e3:f4:30:85:a5:b9:63:49:64:3b:e6:91:ba:cf:
                    f3:7f:5b:d7:3d:33:ea:cf:d6:e3:ae:68:8e:e9:ad:
                    c1:36:d7:7c:07:02:17:ab:13:8e:a0:7e:77:b0:9a:
                    30:ea:bb:f2:f9:31:e9:61:fb:d7:73:db:ac:c8:51:
                    55:e9:55:d5:d7:2a:50:56:84:15:75:4e:e6:2b:4a:
                    08:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:00:E3:B3:74:6B:4F:DF:A4:93:FF:E7:ED:7F:7C:AA:9C:8B:F4:40
            X509v3 Authority Key Identifier:
                keyid:AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/3137372e35322e36342e302f32312d3234203d3e20323632343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:f3:86:52:a5:66:62:46:39:54:85:cf:b5:5a:8d:a5:8d:d9:
         bc:04:7d:b1:c8:6c:aa:f7:4b:31:81:cc:71:07:c9:3d:5c:fc:
         a0:7c:2c:5d:51:cf:41:93:56:6e:2d:f5:36:8b:8f:63:cd:a3:
         15:2b:be:80:2c:01:31:e1:d1:06:f5:aa:d8:cc:93:a7:4c:83:
         4f:4a:ac:fb:cc:44:2f:63:1c:d8:6b:3e:e5:15:ac:af:c6:53:
         95:ba:ff:23:75:3e:ff:24:a7:a7:52:d6:19:f1:14:a8:ee:c8:
         3e:a8:56:89:28:4d:c3:d2:67:22:41:43:79:c7:4a:78:9b:93:
         fd:0f:c7:6c:a0:11:22:e3:38:65:13:5a:af:db:90:e5:d2:6e:
         e7:e8:ef:e3:82:e6:8b:dc:8e:88:1c:ab:6b:04:1d:4b:99:fe:
         d6:b1:fe:f4:bf:62:d5:27:3b:b5:32:de:2c:e0:5e:1e:60:bf:
         f1:c5:44:a0:b0:a8:06:45:2a:87:33:73:42:74:bf:66:a9:98:
         fd:6f:14:70:43:f3:ed:5b:a9:16:f3:c1:a0:2b:93:3d:2c:47:
         31:fa:3e:85:6f:38:77:c4:21:cc:da:35:d6:9b:d9:22:d1:ff:
         17:b4:54:78:dd:53:8f:76:6b:28:6c:ea:ef:e9:93:44:2a:5a:
         6a:52:c9:0b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGz1geTCNI/E8WsoYGPVDtCwrtYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZCMzdFODk4MjU5MUIxOERCREU5RTgyMTcyNzRERkFC
Q0VBQTk0NTAeFw0yNDEyMjMxNjAzNTdaFw0yNTEyMjIxNjA4NTdaMDMxMTAvBgNV
BAMTKDA0MDBFM0IzNzQ2QjRGREZBNDkzRkZFN0VEN0Y3Q0FBOUM4QkY0NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5eEFZoKs0YfmgRskub9ME5bEK
lBM2wOIoSO+Gunbs31QXxeqI/CwYsx+wdOWHQ0I4x/bCul+lHlHYtA7RE3z8SIQD
DfijkmwBI2CJ+UFVF+dPxl8/v76Zqr8KXgTa/+OiNkvPGWQ2M3mJZCI4BUvlHEl0
AtrM1pJBEdSBaNwuPd/ay5hOP8Y+2ur/4RV2Cteiof6LnpdDQl1LN5qUJ9kvDcb3
Iqr+X1TdS5HwNegtG3r7Qqrj9DCFpbljSWQ75pG6z/N/W9c9M+rP1uOuaI7prcE2
13wHAherE46gfnewmjDqu/L5Melh+9dz26zIUVXpVdXXKlBWhBV1TuYrSgi1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBADjs3RrT9+kk//n7X98qpyL9EAwHwYDVR0j
BBgwFoAUr7N+iYJZGxjb3p6CFydN+rzqqUUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnVZU1NEbjJWMlRNNHFlZ1FNVkF5VkM5TWt2Q0JZb3lIaGJhUXJ4bUg1
ODcvMC9BRkIzN0U4OTgyNTkxQjE4REJERTlFODIxNzI3NERGQUJDRUFBOTQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQjM3RTg5ODI1OTFCMThE
QkRFOUU4MjE3Mjc0REZBQkNFQUE5NDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ1WVNTRG4yVjJUTTRxZWdRTVZBeVZDOU1rdkNCWW95SGhiYVFyeG1INTg3LzAv
MzEzNzM3MmUzNTMyMmUzNjM0MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsTRAMA0GCSqGSIb3DQEBCwUAA4IBAQBh84ZSpWZi
RjlUhc+1Wo2ljdm8BH2xyGyq90sxgcxxB8k9XPygfCxdUc9Bk1ZuLfU2i49jzaMV
K76ALAEx4dEG9arYzJOnTINPSqz7zEQvYxzYaz7lFayvxlOVuv8jdT7/JKenUtYZ
8RSo7sg+qFaJKE3D0mciQUN5x0p4m5P9D8dsoBEi4zhlE1qv25Dl0m7n6O/jguaL
3I6IHKtrBB1Lmf7Wsf70v2LVJzu1Mt4s4F4eYL/xxUSgsKgGRSqHM3NCdL9mqZj9
bxRwQ/PtW6kW88GgK5M9LEcx+j6Fbzh3xCHM2jXWm9ki0f8XtFR43VOPdmsobOrv
6ZNEKlpqUskL
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:47:50 2025 by rpki-client