Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39322e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e39322e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          iSVszkFt4tdiyXoAUr6BUmuzdkEqsPlpu44B6MJWZe8=
Subject key identifier:   31:FD:AD:04:7B:62:03:CF:21:22:B6:F3:5D:0B:9E:59:85:4F:51:91
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       1378493995264E19978C0C009CE0CFE6D39ED1A8
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39322e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:01 +0000
ROA not before:           Wed 05 Mar 2025 23:55:01 +0000
ROA not after:            Thu 05 Mar 2026 00:00:01 +0000
asID:                     52653
IP address blocks:        177.221.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:78:49:39:95:26:4e:19:97:8c:0c:00:9c:e0:cf:e6:d3:9e:d1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:01 2025 GMT
            Not After : Mar  5 00:00:01 2026 GMT
        Subject: CN=31FDAD047B6203CF2122B6F35D0B9E59854F5191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:cc:a2:02:35:09:ff:3f:62:61:b2:03:80:
                    f6:f4:7f:9d:8d:76:3e:56:4c:0c:6b:af:2c:19:8d:
                    dd:19:5c:17:32:a6:36:f7:13:4f:af:c0:a3:de:a2:
                    4b:43:30:79:a0:fb:f4:2a:56:83:c8:45:fc:87:51:
                    8f:39:a5:53:e9:85:86:dd:5e:e3:69:96:54:7d:99:
                    75:8b:cb:8a:2f:f2:7e:18:07:37:42:a2:bd:54:fb:
                    b0:f2:fe:87:08:e7:69:85:2d:0e:17:45:27:db:8e:
                    18:0e:76:0c:93:0e:e0:d5:43:2c:f8:c8:55:62:10:
                    f5:f6:10:2f:49:ea:54:1c:bc:93:d9:5e:b0:b0:c5:
                    d6:df:b2:6e:c6:9c:38:44:1d:95:74:d1:3c:54:3d:
                    78:a0:d9:29:ee:d4:5d:6c:8f:a8:f8:a5:8f:5d:ac:
                    df:36:f4:bb:5b:3f:be:04:50:73:99:51:86:87:9e:
                    44:f8:60:0e:90:bb:9e:ea:75:63:e8:18:85:55:51:
                    42:63:8b:a8:4d:b5:cc:71:3d:ba:5a:34:cc:87:17:
                    58:cc:25:b0:97:de:a8:8b:6c:75:c6:42:4a:a6:21:
                    ee:ae:34:74:a9:b6:5e:aa:e3:73:73:e4:5b:1f:ce:
                    cb:5a:e3:c7:04:4b:b5:9c:9a:cd:a1:ad:14:43:5d:
                    1e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FD:AD:04:7B:62:03:CF:21:22:B6:F3:5D:0B:9E:59:85:4F:51:91
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39322e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:0c:1f:c4:fb:03:4b:9a:f2:87:15:09:d5:62:9d:3a:f8:fc:
         b2:92:0f:25:0c:eb:6c:0c:c0:9d:94:72:17:05:cc:a5:db:c9:
         58:31:7a:17:a7:db:ff:4a:1f:4f:d5:b1:50:04:11:4d:04:de:
         87:6e:4c:97:ed:d6:4e:0a:ee:41:8e:44:7c:81:f9:a2:ee:e3:
         ed:e9:f3:56:70:0b:99:5a:7d:33:ee:cd:e6:76:0f:b1:67:37:
         c8:f6:f4:c4:cd:b1:31:cd:98:25:54:8e:1e:ed:70:ff:4f:a4:
         9d:e7:0f:db:74:59:76:82:10:ac:a7:7f:a3:70:d3:4f:6f:98:
         6b:68:a8:05:76:4e:02:5a:b4:6d:b5:02:aa:50:4b:04:0c:96:
         51:e6:d5:b8:51:ae:7e:a9:76:e8:ba:92:92:5d:48:f7:35:c9:
         b8:45:21:5c:7f:95:a1:5c:69:da:ce:53:3c:3a:c9:6c:a7:4f:
         b5:8e:4d:2b:1d:0e:fe:ff:8b:25:cd:d8:3e:30:2f:82:d0:ca:
         55:26:db:ad:e0:af:fa:9c:64:ce:8c:c2:05:0e:b7:7b:96:d0:
         df:99:5b:f6:c1:3d:89:ad:c0:43:1f:fe:3c:21:e6:83:7e:c5:
         57:52:72:ec:9f:7e:72:f3:65:1d:25:2c:dc:35:54:ef:ba:dd:
         1e:15:5e:95
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUE3hJOZUmThmXjAwAnODP5tOe0agwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM3NDg0NDFEOUNDN0VFMkE5M0UxNjBCQUIyNzI0REFF
Qjc5OUYzQjAeFw0yNTAzMDUyMzU1MDFaFw0yNjAzMDUwMDAwMDFaMDMxMTAvBgNV
BAMTKDMxRkRBRDA0N0I2MjAzQ0YyMTIyQjZGMzVEMEI5RTU5ODU0RjUxOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIUMyiAjUJ/z9iYbIDgPb0f52N
dj5WTAxrrywZjd0ZXBcypjb3E0+vwKPeoktDMHmg+/QqVoPIRfyHUY85pVPphYbd
XuNpllR9mXWLy4ov8n4YBzdCor1U+7Dy/ocI52mFLQ4XRSfbjhgOdgyTDuDVQyz4
yFViEPX2EC9J6lQcvJPZXrCwxdbfsm7GnDhEHZV00TxUPXig2Snu1F1sj6j4pY9d
rN829LtbP74EUHOZUYaHnkT4YA6Qu57qdWPoGIVVUUJji6hNtcxxPbpaNMyHF1jM
JbCX3qiLbHXGQkqmIe6uNHSptl6q43Nz5Fsfzsta48cES7Wcms2hrRRDXR5dAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMf2tBHtiA88hIrbzXQueWYVPUZEwHwYDVR0j
BBgwFoAUA3SEQdnMfuKpPhYLqyck2ut5nzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMS8wMzc0ODQ0MUQ5Q0M3RUUyQTkzRTE2MEJBQjI3MjREQUVCNzk5RjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNzQ4NDQxRDlDQzdFRTJB
OTNFMTYwQkFCMjcyNERBRUI3OTlGM0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzEv
MzEzNzM3MmUzMjMyMzEyZTM5MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsd1cMA0GCSqGSIb3DQEBCwUAA4IBAQCxDB/E+wNL
mvKHFQnVYp06+Pyykg8lDOtsDMCdlHIXBcyl28lYMXoXp9v/Sh9P1bFQBBFNBN6H
bkyX7dZOCu5BjkR8gfmi7uPt6fNWcAuZWn0z7s3mdg+xZzfI9vTEzbExzZglVI4e
7XD/T6Sd5w/bdFl2ghCsp3+jcNNPb5hraKgFdk4CWrRttQKqUEsEDJZR5tW4Ua5+
qXboupKSXUj3Ncm4RSFcf5WhXGnazlM8Oslsp0+1jk0rHQ7+/4slzdg+MC+C0MpV
Jtut4K/6nGTOjMIFDrd7ltDfmVv2wT2JrcBDH/48IeaDfsVXUnLsn35y82UdJSzc
NVTvut0eFV6V
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:12:34 2025 by rpki-client