Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/3137372e3135342e32382e302f32322d3234203d3e20323633313435.roa
File:                     3137372e3135342e32382e302f32322d3234203d3e20323633313435.roa (raw, json)
Hash identifier:          1Q8E5bu+ZPmeb2li1lFpLNPrAAJ90/Fr3SOdNOrwkW4=
Subject key identifier:   CA:FC:AE:6E:EE:87:15:D7:54:1B:E6:38:4B:FE:F1:16:FF:DD:E5:BA
Certificate issuer:       /CN=FA144211F588D96039C8D4D4A6F39AAB0B7B3461
Certificate serial:       4B77590A024EF138961CEEFCD6CC5F308141316E
Authority key identifier: FA:14:42:11:F5:88:D9:60:39:C8:D4:D4:A6:F3:9A:AB:0B:7B:34:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/3137372e3135342e32382e302f32322d3234203d3e20323633313435.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     263145
IP address blocks:        177.154.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.crl
                          rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:77:59:0a:02:4e:f1:38:96:1c:ee:fc:d6:cc:5f:30:81:41:31:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA144211F588D96039C8D4D4A6F39AAB0B7B3461
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a0:5c:67:3f:f1:e2:f9:c6:0f:46:09:d7:e8:
                    55:91:f9:d6:83:00:13:87:85:bc:66:1c:b9:02:72:
                    77:b1:56:d5:56:7e:24:57:02:55:04:53:13:fa:b5:
                    3f:53:c7:a8:b3:15:e6:5a:bf:cc:5b:2e:8d:2a:11:
                    d6:82:b8:e3:7f:1a:fc:17:6d:3b:6c:61:bc:7c:77:
                    fc:37:19:0b:2f:20:55:95:fc:f9:86:4b:5d:4d:a2:
                    ec:6c:54:f1:76:02:b8:b1:6d:f4:94:d0:d5:a6:e0:
                    17:4e:b7:02:00:99:cd:77:19:1c:7e:94:c0:ff:fa:
                    c4:71:e6:bc:f0:c6:29:fd:03:87:ec:8b:57:58:37:
                    08:80:6e:c2:97:e0:29:bf:0e:0d:e5:94:ef:bd:da:
                    66:2a:fb:77:87:12:35:92:3d:16:e6:9d:0c:ed:1f:
                    ff:4d:6d:df:23:b7:ac:ed:37:a4:9e:88:85:9b:c8:
                    f5:07:b8:95:16:61:f4:cc:07:3d:6b:db:4d:89:59:
                    ff:67:aa:73:c1:34:c2:67:26:08:b6:8e:a6:84:0e:
                    a7:8f:58:b5:a5:0a:00:fb:67:97:97:a7:68:85:99:
                    56:86:50:b4:b2:53:10:dc:d0:20:4a:75:28:2e:03:
                    af:4d:9d:e4:b9:08:90:1e:02:89:cb:99:dc:80:f5:
                    27:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FC:AE:6E:EE:87:15:D7:54:1B:E6:38:4B:FE:F1:16:FF:DD:E5:BA
            X509v3 Authority Key Identifier:
                keyid:FA:14:42:11:F5:88:D9:60:39:C8:D4:D4:A6:F3:9A:AB:0B:7B:34:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/3137372e3135342e32382e302f32322d3234203d3e20323633313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:f4:34:46:52:52:19:85:87:5f:90:1e:ad:85:9e:a2:2a:1f:
         8f:b9:3b:c7:68:41:b8:47:5e:5e:c6:ee:de:65:83:0c:cd:6e:
         69:82:05:fa:62:dd:6b:61:92:5c:dc:67:b6:2a:89:a2:24:2b:
         58:c3:f8:bd:85:92:5b:0e:ff:07:c0:d1:9f:11:7c:f1:46:7b:
         44:47:c5:2d:ea:00:34:cb:16:2d:a4:a5:ae:ba:f5:38:d4:32:
         32:1c:71:ea:70:d2:34:50:94:d3:7e:a8:29:22:d1:1b:a2:71:
         15:48:9e:2d:03:33:c2:45:61:a2:b6:00:6e:9a:1d:29:8c:13:
         2e:2a:93:b0:38:c8:61:d3:32:2b:14:0f:a5:79:a0:0c:fa:1c:
         53:e5:ec:c5:3a:6a:ac:96:17:8c:14:a2:e0:01:10:c8:e3:ed:
         fd:7b:55:2b:b1:74:f1:8e:a1:e7:18:88:4a:69:71:e8:db:b0:
         14:0d:44:69:c6:7e:e6:94:79:0c:be:bc:ef:bb:3a:b4:e2:9d:
         a1:72:2f:c8:a2:9e:9a:c6:32:aa:27:c2:db:6c:1e:fb:cc:66:
         32:11:49:25:4e:07:b0:ad:50:f7:31:8a:ea:ac:23:06:02:46:
         ea:b1:7a:2f:bb:b5:ac:74:76:c9:f8:8e:5c:92:f4:6c:5f:ee:
         36:0a:54:f7
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUS3dZCgJO8TiWHO781sxfMIFBMW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkExNDQyMTFGNTg4RDk2MDM5QzhENEQ0QTZGMzlBQUIw
QjdCMzQ2MTAeFw0yNTAzMDUxODU1MDRaFw0yNjAzMDQxOTAwMDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTVBMDVDNjczRkYxRTJGOUM2
MEY0NjA5RDdFODU1OTFGOUQ2ODMwMDEzODc4NUJDNjYxQ0I5MDI3Mjc3QjE1NkQ1
NTY3RTI0NTcwMjU1MDQ1MzEzRkFCNTNGNTNDN0E4QjMxNUU2NUFCRkNDNUIyRThE
MkExMUQ2ODJCOEUzN0YxQUZDMTc2RDNCNkM2MUJDN0M3N0ZDMzcxOTBCMkYyMDU1
OTVGQ0Y5ODY0QjVENERBMkVDNkM1NEYxNzYwMkI4QjE2REY0OTREMEQ1QTZFMDE3
NEVCNzAyMDA5OUNENzcxOTFDN0U5NEMwRkZGQUM0NzFFNkJDRjBDNjI5RkQwMzg3
RUM4QjU3NTgzNzA4ODA2RUMyOTdFMDI5QkYwRTBERTU5NEVGQkREQTY2MkFGQjc3
ODcxMjM1OTIzRDE2RTY5RDBDRUQxRkZGNEQ2RERGMjNCN0FDRUQzN0E0OUU4ODg1
OUJDOEY1MDdCODk1MTY2MUY0Q0MwNzNENkJEQjREODk1OUZGNjdBQTczQzEzNEMy
NjcyNjA4QjY4RUE2ODQwRUE3OEY1OEI1QTUwQTAwRkI2Nzk3OTdBNzY4ODU5OTU2
ODY1MEI0QjI1MzEwRENEMDIwNEE3NTI4MkUwM0FGNEQ5REU0QjkwODkwMUUwMjg5
Q0I5OURDODBGNTI3NjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApaBcZz/x4vnGD0YJ1+hVkfnWgwATh4W8Zhy5AnJ3sVbVVn4kVwJV
BFMT+rU/U8eosxXmWr/MWy6NKhHWgrjjfxr8F207bGG8fHf8NxkLLyBVlfz5hktd
TaLsbFTxdgK4sW30lNDVpuAXTrcCAJnNdxkcfpTA//rEcea88MYp/QOH7ItXWDcI
gG7Cl+Apvw4N5ZTvvdpmKvt3hxI1kj0W5p0M7R//TW3fI7es7TeknoiFm8j1B7iV
FmH0zAc9a9tNiVn/Z6pzwTTCZyYIto6mhA6nj1i1pQoA+2eXl6dohZlWhlC0slMQ
3NAgSnUoLgOvTZ3kuQiQHgKJy5ncgPUnaQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FMr8rm7uhxXXVBvmOEv+8Rb/3eW6MB8GA1UdIwQYMBaAFPoUQhH1iNlgOcjU1Kbz
mqsLezRhMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ1MTFzSFcxQXB3S1JZ
RUFmSGdFTWExQ3pzZ3c4NzFIcDRTTXBYM3BLc1JMLzIvRkExNDQyMTFGNTg4RDk2
MDM5QzhENEQ0QTZGMzlBQUIwQjdCMzQ2MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GQTE0NDIxMUY1ODhEOTYwMzlDOEQ0RDRBNkYzOUFBQjBCN0Iz
NDYxLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80NTExc0hXMUFwd0tSWUVBZkhn
RU1hMUN6c2d3ODcxSHA0U01wWDNwS3NSTC8yLzMxMzczNzJlMzEzNTM0MmUzMjM4
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzEzNDM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
sZocMA0GCSqGSIb3DQEBCwUAA4IBAQAd9DRGUlIZhYdfkB6thZ6iKh+PuTvHaEG4
R15exu7eZYMMzW5pggX6Yt1rYZJc3Ge2KomiJCtYw/i9hZJbDv8HwNGfEXzxRntE
R8Ut6gA0yxYtpKWuuvU41DIyHHHqcNI0UJTTfqgpItEbonEVSJ4tAzPCRWGitgBu
mh0pjBMuKpOwOMhh0zIrFA+leaAM+hxT5ezFOmqslheMFKLgARDI4+39e1UrsXTx
jqHnGIhKaXHo27AUDURpxn7mlHkMvrzvuzq04p2hci/Iop6axjKqJ8LbbB77zGYy
EUklTgewrVD3MYrqrCMGAkbqsXovu7WsdHbJ+I5ckvRsX+42ClT3
-----END CERTIFICATE-----
Generated at Fri Apr 11 07:56:36 2025 by rpki-client