Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38302e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38302e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          8dJnM9/u9krdSX4UCO+CQBI/bVmoS3sYjnlmdXXn8ro=
Subject key identifier:   08:F9:12:C2:A4:6B:A4:32:7D:AC:CA:8E:32:A8:92:B4:60:9D:1A:76
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       682B555FFA650268B3F3AEB50123F8352ACC1E01
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38302e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:03 +0000
ROA not before:           Wed 05 Mar 2025 23:55:03 +0000
ROA not after:            Thu 05 Mar 2026 00:00:03 +0000
asID:                     52653
IP address blocks:        177.221.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2b:55:5f:fa:65:02:68:b3:f3:ae:b5:01:23:f8:35:2a:cc:1e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:03 2025 GMT
            Not After : Mar  5 00:00:03 2026 GMT
        Subject: CN=08F912C2A46BA4327DACCA8E32A892B4609D1A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ba:33:f6:6e:ad:38:cb:7b:9f:ff:ef:3f:c3:
                    68:36:4b:0f:44:f1:33:dc:ce:a6:0a:30:24:48:3f:
                    28:e4:52:3b:89:63:61:76:06:84:df:20:32:e8:f8:
                    3e:25:12:66:88:fa:a4:4c:fb:5e:f4:44:46:b7:4b:
                    d7:89:86:0a:6f:d9:70:41:ba:57:3a:f0:f0:0f:80:
                    cd:07:ec:1c:30:d0:e0:98:eb:cc:02:e8:87:5d:e8:
                    6b:2b:8f:2b:c8:21:dc:fe:80:75:8b:cf:7c:ef:94:
                    c1:be:45:bf:64:5e:ce:fd:3d:86:67:17:58:bb:ef:
                    43:d6:00:b0:9e:e2:1f:87:1f:14:be:00:d6:14:c5:
                    a0:f7:66:4a:b4:fa:57:76:af:60:b3:d5:d0:e2:d5:
                    9e:5a:14:1e:41:fe:e8:0b:60:13:5a:83:8a:c8:b8:
                    45:47:7c:49:3f:30:60:ac:a1:8e:28:91:ff:d3:4b:
                    bc:b9:6d:3c:0c:7d:40:ee:a1:47:9a:8a:a9:aa:cf:
                    ec:37:35:bd:32:a0:f3:c4:0a:7b:a9:98:22:a9:6a:
                    79:b5:af:14:8f:91:6f:75:8f:61:61:c0:e3:c2:71:
                    32:2d:49:b9:3a:2f:a9:3b:47:46:e5:27:25:12:cd:
                    98:a0:25:97:9a:58:33:34:7a:a2:4d:ec:26:e8:d2:
                    70:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F9:12:C2:A4:6B:A4:32:7D:AC:CA:8E:32:A8:92:B4:60:9D:1A:76
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38302e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:4b:72:44:40:d8:84:6b:80:58:40:b8:cf:c4:6a:db:51:8e:
         35:e4:06:77:63:3e:ee:73:41:8e:af:8a:10:b2:5b:0b:ec:f1:
         d7:b8:a3:6f:22:63:aa:31:aa:a9:e3:cd:22:63:83:6e:71:61:
         9e:a6:a8:1d:0d:07:af:73:de:f3:55:7c:ba:fa:b5:75:3d:75:
         9d:b2:2c:0e:20:0c:f5:4c:07:d0:46:6c:28:08:64:81:fc:0a:
         ea:19:1b:69:45:87:8b:11:2e:df:37:0b:ba:82:e9:d4:aa:c4:
         8d:ed:c7:a3:1e:71:ed:98:bf:f1:cf:3d:85:31:d2:8b:ae:42:
         73:15:8c:ee:12:a4:72:53:b4:e9:e2:0b:b9:75:29:65:02:16:
         57:89:a7:0c:20:82:d2:b2:3f:25:ee:df:d9:99:61:44:8d:3d:
         10:33:16:a0:a0:bb:e6:e2:83:85:80:8d:40:b3:8b:6d:34:3d:
         63:5e:0a:42:01:77:5e:74:01:4f:df:c0:0b:28:79:73:1b:01:
         e3:44:fb:06:51:26:ac:3c:fb:8c:c1:72:59:95:7d:c5:87:3d:
         e5:2d:f6:91:49:fb:53:6c:f9:a8:88:a6:b6:c1:12:23:99:89:
         86:dd:a7:0f:de:72:3c:96:c4:ce:20:48:a5:09:91:3a:87:4b:
         79:f1:dd:b0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaCtVX/plAmiz8661ASP4NSrMHgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM3NDg0NDFEOUNDN0VFMkE5M0UxNjBCQUIyNzI0REFF
Qjc5OUYzQjAeFw0yNTAzMDUyMzU1MDNaFw0yNjAzMDUwMDAwMDNaMDMxMTAvBgNV
BAMTKDA4RjkxMkMyQTQ2QkE0MzI3REFDQ0E4RTMyQTg5MkI0NjA5RDFBNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2ujP2bq04y3uf/+8/w2g2Sw9E
8TPczqYKMCRIPyjkUjuJY2F2BoTfIDLo+D4lEmaI+qRM+170REa3S9eJhgpv2XBB
ulc68PAPgM0H7Bww0OCY68wC6Idd6GsrjyvIIdz+gHWLz3zvlMG+Rb9kXs79PYZn
F1i770PWALCe4h+HHxS+ANYUxaD3Zkq0+ld2r2Cz1dDi1Z5aFB5B/ugLYBNag4rI
uEVHfEk/MGCsoY4okf/TS7y5bTwMfUDuoUeaiqmqz+w3Nb0yoPPECnupmCKpanm1
rxSPkW91j2FhwOPCcTItSbk6L6k7R0blJyUSzZigJZeaWDM0eqJN7Cbo0nD5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCPkSwqRrpDJ9rMqOMqiStGCdGnYwHwYDVR0j
BBgwFoAUA3SEQdnMfuKpPhYLqyck2ut5nzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMS8wMzc0ODQ0MUQ5Q0M3RUUyQTkzRTE2MEJBQjI3MjREQUVCNzk5RjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNzQ4NDQxRDlDQzdFRTJB
OTNFMTYwQkFCMjcyNERBRUI3OTlGM0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzEv
MzEzNzM3MmUzMjMyMzEyZTM4MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsd1QMA0GCSqGSIb3DQEBCwUAA4IBAQBKS3JEQNiE
a4BYQLjPxGrbUY415AZ3Yz7uc0GOr4oQslsL7PHXuKNvImOqMaqp480iY4NucWGe
pqgdDQevc97zVXy6+rV1PXWdsiwOIAz1TAfQRmwoCGSB/ArqGRtpRYeLES7fNwu6
gunUqsSN7cejHnHtmL/xzz2FMdKLrkJzFYzuEqRyU7Tp4gu5dSllAhZXiacMIILS
sj8l7t/ZmWFEjT0QMxagoLvm4oOFgI1As4ttND1jXgpCAXdedAFP38ALKHlzGwHj
RPsGUSasPPuMwXJZlX3Fhz3lLfaRSftTbPmoiKa2wRIjmYmG3acP3nI8lsTOIEil
CZE6h0t58d2w
-----END CERTIFICATE-----
Generated at Sun Apr 13 14:48:08 2025 by rpki-client