Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/3137392e36332e38352e302f32342d3234203d3e20323732363737.roa
File:                     3137392e36332e38352e302f32342d3234203d3e20323732363737.roa (raw, json)
Hash identifier:          xNp5tEvN+nChFr/FehwVAcuPNFdglKKwFzasegKy7ZU=
Subject key identifier:   A8:54:54:5F:DF:5D:C3:4E:2D:5A:CD:91:51:B0:11:0A:73:21:1B:CA
Certificate issuer:       /CN=8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672
Certificate serial:       2F579836084675A4587F0E2AB62CD3777C02FE0A
Authority key identifier: 82:38:78:2B:EB:9C:FE:9F:D5:A1:A3:D7:9C:EF:AA:A3:47:B3:16:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/3137392e36332e38352e302f32342d3234203d3e20323732363737.roa
Signing time:             Fri 24 Jan 2025 23:57:31 +0000
ROA not before:           Fri 24 Jan 2025 23:52:31 +0000
ROA not after:            Fri 23 Jan 2026 23:57:31 +0000
asID:                     272677
IP address blocks:        179.63.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.crl
                          rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:57:98:36:08:46:75:a4:58:7f:0e:2a:b6:2c:d3:77:7c:02:fe:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672
        Validity
            Not Before: Jan 24 23:52:31 2025 GMT
            Not After : Jan 23 23:57:31 2026 GMT
        Subject: CN=A854545FDF5DC34E2D5ACD9151B0110A73211BCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:39:4a:f1:4c:ac:08:14:c6:05:cf:b7:d9:
                    7d:ac:12:f2:5d:13:e3:21:93:e7:7a:15:65:f0:0e:
                    6a:f9:04:b4:22:50:2d:85:7d:51:63:8e:47:c1:49:
                    e7:78:ec:3e:c0:2f:c2:62:5e:b5:ed:cd:d1:af:72:
                    2b:32:37:87:17:1d:fa:5e:80:81:87:91:83:83:e8:
                    2a:06:f8:d1:86:f3:64:b9:c6:48:65:fa:68:51:75:
                    88:88:a0:a4:23:a3:43:12:35:5d:1a:db:00:68:b0:
                    02:88:a1:fb:8e:52:b1:47:5a:a5:a9:c5:86:a3:f5:
                    7f:d1:9b:d6:1b:b8:43:4c:02:bb:5a:30:1b:34:ce:
                    15:cf:9d:9d:42:9e:e2:64:95:c5:ee:da:48:eb:40:
                    1d:e9:ed:20:35:77:28:24:cd:cb:b7:79:f4:c6:d5:
                    1a:b5:6a:aa:f0:d6:7f:bc:f5:31:3e:fe:4d:e3:63:
                    fa:5f:d7:05:f8:5b:38:52:a2:f1:a0:10:ac:96:e0:
                    d1:b4:fe:0c:29:57:df:f8:93:ee:91:76:e1:13:17:
                    2c:80:02:b2:6f:e2:84:87:3e:c5:22:67:40:72:da:
                    5e:b6:fd:d4:5b:75:8f:5a:e7:ac:1c:57:7a:d2:b1:
                    0d:d8:c0:f7:cd:57:50:a4:7a:1c:5e:98:d0:1e:ce:
                    a8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:54:54:5F:DF:5D:C3:4E:2D:5A:CD:91:51:B0:11:0A:73:21:1B:CA
            X509v3 Authority Key Identifier:
                keyid:82:38:78:2B:EB:9C:FE:9F:D5:A1:A3:D7:9C:EF:AA:A3:47:B3:16:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/3137392e36332e38352e302f32342d3234203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:7f:c7:fc:e6:60:7e:94:33:4c:d7:e3:13:b2:13:64:d1:d5:
         ce:f7:13:d7:07:9f:10:85:f7:8c:82:49:42:cd:2b:d8:63:a8:
         21:00:67:78:53:ff:41:17:ff:b1:9d:94:25:0f:cb:72:07:53:
         c6:05:02:21:f0:e1:09:b1:38:a0:09:82:be:0d:59:04:68:e5:
         90:02:10:03:ef:9f:d5:69:f0:1a:95:1e:d2:2b:a8:9a:c7:7b:
         ac:f3:ea:e7:32:8b:2e:ba:ab:e8:b8:b3:f0:b2:41:4e:d5:a9:
         54:a0:40:df:bd:6c:af:8d:82:2c:8f:c8:e7:55:a6:ff:02:75:
         eb:1d:66:d3:e0:25:95:fb:cf:35:e8:de:fb:f9:df:52:8a:11:
         8b:67:05:36:56:67:72:9f:5f:41:7e:e8:30:61:ab:45:77:ee:
         05:c9:db:0b:01:c9:6b:ad:fd:76:8a:30:1f:c1:9a:be:f2:b7:
         74:18:73:21:5d:03:58:23:89:44:1b:9d:c6:f8:25:df:95:11:
         30:74:de:e1:5c:88:bd:57:42:6f:76:19:29:6f:49:1e:e0:3a:
         c2:59:57:34:5d:a7:59:34:2f:4a:fb:21:2a:a8:a6:e1:1a:27:
         83:be:c1:9e:d7:da:2f:d0:d4:d2:07:c4:48:c6:ec:a6:4e:bb:
         9e:50:f8:b4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL1eYNghGdaRYfw4qtizTd3wC/gowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIzODc4MkJFQjlDRkU5RkQ1QTFBM0Q3OUNFRkFBQTM0
N0IzMTY3MjAeFw0yNTAxMjQyMzUyMzFaFw0yNjAxMjMyMzU3MzFaMDMxMTAvBgNV
BAMTKEE4NTQ1NDVGREY1REMzNEUyRDVBQ0Q5MTUxQjAxMTBBNzMyMTFCQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDzlK8UysCBTGBc+32X2sEvJd
E+Mhk+d6FWXwDmr5BLQiUC2FfVFjjkfBSed47D7AL8JiXrXtzdGvcisyN4cXHfpe
gIGHkYOD6CoG+NGG82S5xkhl+mhRdYiIoKQjo0MSNV0a2wBosAKIofuOUrFHWqWp
xYaj9X/Rm9YbuENMArtaMBs0zhXPnZ1CnuJklcXu2kjrQB3p7SA1dygkzcu3efTG
1Rq1aqrw1n+89TE+/k3jY/pf1wX4WzhSovGgEKyW4NG0/gwpV9/4k+6RduETFyyA
ArJv4oSHPsUiZ0By2l62/dRbdY9a56wcV3rSsQ3YwPfNV1CkehxemNAezqjRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqFRUX99dw04tWs2RUbARCnMhG8owHwYDVR0j
BBgwFoAUgjh4K+uc/p/VoaPXnO+qo0ezFnIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21KVzliM3l3VjJqTXNSTVg1UlYyUjkzQVZmNzI3TENnalVEc2poWnBK
UlQvMC84MjM4NzgyQkVCOUNGRTlGRDVBMUEzRDc5Q0VGQUFBMzQ3QjMxNjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgyMzg3ODJCRUI5Q0ZFOUZE
NUExQTNENzlDRUZBQUEzNDdCMzE2NzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtSlc5YjN5d1Yyak1zUk1YNVJWMlI5M0FWZjcyN0xDZ2pVRHNqaFpwSlJULzAv
MzEzNzM5MmUzNjMzMmUzODM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMy
MzYzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsz9VMA0GCSqGSIb3DQEBCwUAA4IBAQBZf8f85mB+
lDNM1+MTshNk0dXO9xPXB58QhfeMgklCzSvYY6ghAGd4U/9BF/+xnZQlD8tyB1PG
BQIh8OEJsTigCYK+DVkEaOWQAhAD75/VafAalR7SK6iax3us8+rnMosuuqvouLPw
skFO1alUoEDfvWyvjYIsj8jnVab/AnXrHWbT4CWV+8816N77+d9SihGLZwU2Vmdy
n19BfugwYatFd+4FydsLAclrrf12ijAfwZq+8rd0GHMhXQNYI4lEG53G+CXflREw
dN7hXIi9V0Jvdhkpb0ke4DrCWVc0XadZNC9K+yEqqKbhGieDvsGe19ov0NTSB8RI
xuymTrueUPi0
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:23 2025 by rpki-client