Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/3137392e36332e39332e302f32342d3234203d3e20323731363132.roa
File:                     3137392e36332e39332e302f32342d3234203d3e20323731363132.roa (raw, json)
Hash identifier:          Uiei5BqLiO0cKONkgwHdoOa2wRH22Lo7jbNU0GsSpy8=
Subject key identifier:   86:CB:52:2E:13:02:F8:AE:E5:74:9E:08:7E:10:55:15:8F:1F:B3:04
Certificate issuer:       /CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
Certificate serial:       01353CC9BC00DC858B0A5ED0EFEF9546C678CEB3
Authority key identifier: 6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/3137392e36332e39332e302f32342d3234203d3e20323731363132.roa
Signing time:             Thu 06 Mar 2025 02:58:11 +0000
ROA not before:           Thu 06 Mar 2025 02:53:11 +0000
ROA not after:            Thu 05 Mar 2026 02:58:11 +0000
asID:                     271612
IP address blocks:        179.63.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 23:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:35:3c:c9:bc:00:dc:85:8b:0a:5e:d0:ef:ef:95:46:c6:78:ce:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
        Validity
            Not Before: Mar  6 02:53:11 2025 GMT
            Not After : Mar  5 02:58:11 2026 GMT
        Subject: CN=86CB522E1302F8AEE5749E087E1055158F1FB304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dc:41:04:e2:8b:af:7a:75:b1:88:6b:91:9c:
                    95:e9:1f:06:e6:ce:25:0f:27:00:7d:89:f8:56:7a:
                    95:be:87:a0:62:4c:88:a1:07:03:5d:26:3a:ee:6a:
                    87:12:e4:8e:57:c9:5a:65:2d:66:88:69:41:5b:8e:
                    75:7f:9c:95:4e:93:92:72:11:e9:7f:d9:1c:25:de:
                    fd:46:39:b0:a4:09:cb:6b:24:92:c8:14:88:e1:f1:
                    ec:7c:a4:e3:cf:64:2b:61:8d:ae:f8:85:7d:9d:55:
                    31:c4:49:85:ba:52:95:23:75:9d:75:d7:fc:9a:31:
                    de:8f:e9:39:86:cc:5a:e3:c8:ae:64:92:22:0c:8e:
                    27:dc:83:53:62:2c:54:8f:b5:da:15:10:12:03:4c:
                    d3:45:1d:fc:de:7f:7c:03:15:15:dc:ed:08:71:e2:
                    55:49:65:dc:e5:82:59:d5:e5:a1:10:0b:23:4c:ec:
                    7c:76:3b:a0:f3:65:f5:17:57:29:f4:99:e5:d6:27:
                    2a:96:b7:d2:02:cb:9e:db:da:6e:a6:08:e9:a0:15:
                    8c:aa:5c:94:4c:38:8c:86:f9:b6:e1:c1:81:47:65:
                    3e:ee:e0:8a:1a:49:29:95:19:c8:18:1a:f6:29:a0:
                    2b:a0:ec:c1:e8:f4:b3:c7:b4:65:ac:22:42:bc:4e:
                    49:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CB:52:2E:13:02:F8:AE:E5:74:9E:08:7E:10:55:15:8F:1F:B3:04
            X509v3 Authority Key Identifier:
                keyid:6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/3137392e36332e39332e302f32342d3234203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:28:0d:b9:a7:c2:a8:10:34:e2:ee:bf:6e:e8:96:f3:54:17:
         bd:3f:ed:f6:89:f5:f3:46:09:bb:8f:77:b4:8c:11:ab:05:6a:
         0c:0b:97:3b:fa:5a:8b:dd:c4:85:0e:b9:a6:c6:18:55:f9:4d:
         df:65:6c:d4:75:44:49:08:c8:77:fb:20:4a:df:27:74:7c:e3:
         b6:4d:d2:72:13:6f:43:81:b8:8c:37:04:6e:56:9f:6a:77:ff:
         2e:49:dc:84:ce:21:4b:35:1b:f4:8c:6e:3f:be:70:31:14:27:
         90:06:d2:75:f6:2c:31:30:9d:ad:f7:7a:1b:b7:d5:3a:70:dd:
         57:4c:8d:71:54:79:d9:ce:41:f3:de:61:55:27:b4:f5:c9:eb:
         03:5c:06:08:ad:07:dc:e0:32:6d:69:84:69:c6:04:79:d4:38:
         3f:2c:ba:69:c2:a0:e6:7d:b6:a6:9f:0e:b8:69:eb:fe:1a:1a:
         e1:a1:18:f4:46:d3:b0:f2:66:7c:cb:78:ec:70:dd:99:00:17:
         9a:80:89:8a:f2:ad:69:43:58:44:ea:5c:27:b7:94:98:05:1f:
         30:eb:aa:eb:c3:ed:47:bf:c5:70:fd:cc:37:15:34:70:ad:6e:
         91:95:1a:90:ec:0c:96:9c:ef:9f:63:b0:56:47:6a:ea:47:86:
         e7:5a:f3:6c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUATU8ybwA3IWLCl7Q7++VRsZ4zrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY0RTFGNTlFNjE4NkE3N0IwQURFRjNFNTEwQUNFNzQ3
QkYxQUIxMTAeFw0yNTAzMDYwMjUzMTFaFw0yNjAzMDUwMjU4MTFaMDMxMTAvBgNV
BAMTKDg2Q0I1MjJFMTMwMkY4QUVFNTc0OUUwODdFMTA1NTE1OEYxRkIzMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO3EEE4ouvenWxiGuRnJXpHwbm
ziUPJwB9ifhWepW+h6BiTIihBwNdJjruaocS5I5XyVplLWaIaUFbjnV/nJVOk5Jy
Eel/2Rwl3v1GObCkCctrJJLIFIjh8ex8pOPPZCthja74hX2dVTHESYW6UpUjdZ11
1/yaMd6P6TmGzFrjyK5kkiIMjifcg1NiLFSPtdoVEBIDTNNFHfzef3wDFRXc7Qhx
4lVJZdzlglnV5aEQCyNM7Hx2O6DzZfUXVyn0meXWJyqWt9ICy57b2m6mCOmgFYyq
XJRMOIyG+bbhwYFHZT7u4IoaSSmVGcgYGvYpoCug7MHo9LPHtGWsIkK8TknfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhstSLhMC+K7ldJ4IfhBVFY8fswQwHwYDVR0j
BBgwFoAUb04fWeYYanewre8+UQrOdHvxqxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMno1OEZldVpiOVV0R3dTNVJaQnBiY1BoMm9hcE14ZW5UVmRiTGNoOUxM
bjUvMS82RjRFMUY1OUU2MTg2QTc3QjBBREVGM0U1MTBBQ0U3NDdCRjFBQjExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGNEUxRjU5RTYxODZBNzdC
MEFERUYzRTUxMEFDRTc0N0JGMUFCMTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ6NThGZXVaYjlVdEd3UzVSWkJwYmNQaDJvYXBNeGVuVFZkYkxjaDlMTG41LzEv
MzEzNzM5MmUzNjMzMmUzOTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzYzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsz9dMA0GCSqGSIb3DQEBCwUAA4IBAQCLKA25p8Ko
EDTi7r9u6JbzVBe9P+32ifXzRgm7j3e0jBGrBWoMC5c7+lqL3cSFDrmmxhhV+U3f
ZWzUdURJCMh3+yBK3yd0fOO2TdJyE29DgbiMNwRuVp9qd/8uSdyEziFLNRv0jG4/
vnAxFCeQBtJ19iwxMJ2t93obt9U6cN1XTI1xVHnZzkHz3mFVJ7T1yesDXAYIrQfc
4DJtaYRpxgR51Dg/LLppwqDmfbamnw64aev+GhrhoRj0RtOw8mZ8y3jscN2ZABea
gImK8q1pQ1hE6lwnt5SYBR8w66rrw+1Hv8Vw/cw3FTRwrW6RlRqQ7AyWnO+fY7BW
R2rqR4bnWvNs
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:41 2025 by rpki-client