Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/478NMGGTsyAeyF8GKjTXspM74f9LmAGoHHCMvHqZ7BNU/0/3134332e3230382e302e302f32322d3234203d3e20323634333536.roa
File:                     3134332e3230382e302e302f32322d3234203d3e20323634333536.roa (raw, json)
Hash identifier:          t7Xx6Jrvo9nAxKdNcMn2GDVJZ9tQghYv9m6wh/2fbsg=
Subject key identifier:   7B:89:FB:12:04:ED:DC:BA:E3:B6:EC:03:97:4D:A3:ED:17:AF:99:51
Certificate issuer:       /CN=5577374B70385DA5B5D77B657F561AFFAE6F8FCA
Certificate serial:       7D672727F380F87D46DBFE72A4C9D5ADCAC41599
Authority key identifier: 55:77:37:4B:70:38:5D:A5:B5:D7:7B:65:7F:56:1A:FF:AE:6F:8F:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5577374B70385DA5B5D77B657F561AFFAE6F8FCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/478NMGGTsyAeyF8GKjTXspM74f9LmAGoHHCMvHqZ7BNU/0/3134332e3230382e302e302f32322d3234203d3e20323634333536.roa
Signing time:             Tue 11 Mar 2025 20:12:12 +0000
ROA not before:           Tue 11 Mar 2025 20:07:12 +0000
ROA not after:            Tue 10 Mar 2026 20:12:12 +0000
asID:                     264356
IP address blocks:        143.208.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/478NMGGTsyAeyF8GKjTXspM74f9LmAGoHHCMvHqZ7BNU/0/5577374B70385DA5B5D77B657F561AFFAE6F8FCA.crl
                          rsync://rpki-repo.registro.br/repo/478NMGGTsyAeyF8GKjTXspM74f9LmAGoHHCMvHqZ7BNU/0/5577374B70385DA5B5D77B657F561AFFAE6F8FCA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5577374B70385DA5B5D77B657F561AFFAE6F8FCA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 21:22:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:67:27:27:f3:80:f8:7d:46:db:fe:72:a4:c9:d5:ad:ca:c4:15:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5577374B70385DA5B5D77B657F561AFFAE6F8FCA
        Validity
            Not Before: Mar 11 20:07:12 2025 GMT
            Not After : Mar 10 20:12:12 2026 GMT
        Subject: CN=7B89FB1204EDDCBAE3B6EC03974DA3ED17AF9951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:59:2e:4c:3f:a8:ff:c2:77:33:e8:83:33:a5:
                    78:e0:fd:9b:53:5a:db:5d:9a:13:ec:3c:64:4a:e1:
                    a7:fa:a7:f5:c6:65:6f:db:43:a1:cc:d4:10:47:83:
                    2c:71:6c:f3:0e:a6:be:a1:6e:d8:b8:f5:41:c1:04:
                    14:1e:8e:9f:94:16:07:72:a0:ad:52:98:a1:f1:b5:
                    fb:5e:32:ae:53:e7:f7:ea:f3:d2:e9:d2:32:ee:cd:
                    be:7d:f1:3c:d2:b2:f3:c7:08:31:27:13:90:ba:60:
                    2c:63:b5:d4:3e:4e:2d:43:81:1e:1a:e6:d8:ad:5f:
                    97:bc:9c:df:d4:79:c8:da:2d:bd:03:35:a7:e3:83:
                    26:b1:da:8c:df:cf:4d:c7:12:0c:35:ec:7d:90:d5:
                    c6:1f:4d:b7:d6:a6:ab:b9:dc:7b:56:0c:b7:10:a5:
                    5d:58:bd:47:17:3d:bb:14:b5:99:6e:c1:1c:cb:8f:
                    1b:86:95:37:2a:73:93:5a:c4:ce:16:37:dd:30:8f:
                    ec:e7:06:23:c5:27:b5:ad:19:b0:95:db:fa:36:f9:
                    c7:20:c2:1a:e4:c1:b3:c6:78:17:db:8c:23:b9:68:
                    53:0c:01:fc:47:63:98:84:13:6f:3e:7e:b4:71:00:
                    f2:a9:01:f3:b2:56:6a:ed:09:14:9d:0a:d6:95:e9:
                    e8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:89:FB:12:04:ED:DC:BA:E3:B6:EC:03:97:4D:A3:ED:17:AF:99:51
            X509v3 Authority Key Identifier:
                keyid:55:77:37:4B:70:38:5D:A5:B5:D7:7B:65:7F:56:1A:FF:AE:6F:8F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/478NMGGTsyAeyF8GKjTXspM74f9LmAGoHHCMvHqZ7BNU/0/5577374B70385DA5B5D77B657F561AFFAE6F8FCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5577374B70385DA5B5D77B657F561AFFAE6F8FCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/478NMGGTsyAeyF8GKjTXspM74f9LmAGoHHCMvHqZ7BNU/0/3134332e3230382e302e302f32322d3234203d3e20323634333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:ea:09:fd:d2:a2:ee:c6:90:11:79:a1:b4:e9:8a:b5:ef:b5:
         2f:99:d8:32:1c:e1:33:ec:f3:b5:a9:2b:00:49:f4:c8:a0:02:
         37:7b:b3:f7:65:4a:1c:4e:23:ed:e3:df:f9:19:38:bd:41:6d:
         cf:52:93:d6:c8:05:4f:64:3c:a0:35:6e:ab:42:9f:38:80:9c:
         4b:ba:9b:f8:cb:2d:17:0b:a3:b0:ba:67:9e:52:79:23:48:67:
         c1:75:93:1f:af:e2:7b:3c:eb:9a:92:1a:bb:c1:87:78:e7:d0:
         dd:01:1b:f2:da:62:ce:6f:8a:80:bd:18:aa:73:bd:f0:b6:2f:
         0f:82:67:96:38:f3:b9:e7:47:30:92:0b:b9:8d:c9:57:49:ab:
         f2:7b:e0:2c:48:9a:1a:db:bf:b5:41:6e:87:b4:7c:47:7f:ec:
         09:65:e8:c9:5e:49:58:22:2a:74:2c:a9:7a:0b:44:66:4f:75:
         9e:8a:7f:1c:ca:4a:20:54:f4:db:88:dc:b0:be:1f:86:cf:33:
         35:88:c5:a2:25:99:32:9a:62:8e:5c:cd:ac:15:1c:2d:52:99:
         e8:e2:92:50:1d:69:5f:b6:c5:72:29:be:17:6e:bc:5f:3a:83:
         db:54:81:bc:e0:2b:de:2a:f9:ea:f6:33:83:1c:8a:e9:0d:3f:
         b4:09:a2:72
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfWcnJ/OA+H1G2/5ypMnVrcrEFZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU3NzM3NEI3MDM4NURBNUI1RDc3QjY1N0Y1NjFBRkZB
RTZGOEZDQTAeFw0yNTAzMTEyMDA3MTJaFw0yNjAzMTAyMDEyMTJaMDMxMTAvBgNV
BAMTKDdCODlGQjEyMDRFRERDQkFFM0I2RUMwMzk3NERBM0VEMTdBRjk5NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfWS5MP6j/wncz6IMzpXjg/ZtT
WttdmhPsPGRK4af6p/XGZW/bQ6HM1BBHgyxxbPMOpr6hbti49UHBBBQejp+UFgdy
oK1SmKHxtfteMq5T5/fq89Lp0jLuzb598TzSsvPHCDEnE5C6YCxjtdQ+Ti1DgR4a
5titX5e8nN/UecjaLb0DNafjgyax2ozfz03HEgw17H2Q1cYfTbfWpqu53HtWDLcQ
pV1YvUcXPbsUtZluwRzLjxuGlTcqc5NaxM4WN90wj+znBiPFJ7WtGbCV2/o2+ccg
whrkwbPGeBfbjCO5aFMMAfxHY5iEE28+frRxAPKpAfOyVmrtCRSdCtaV6egXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUe4n7EgTt3LrjtuwDl02j7RevmVEwHwYDVR0j
BBgwFoAUVXc3S3A4XaW113tlf1Ya/65vj8owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDc4Tk1HR1RzeUFleUY4R0tqVFhzcE03NGY5TG1BR29ISENNdkhxWjdC
TlUvMC81NTc3Mzc0QjcwMzg1REE1QjVENzdCNjU3RjU2MUFGRkFFNkY4RkNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1NzczNzRCNzAzODVEQTVC
NUQ3N0I2NTdGNTYxQUZGQUU2RjhGQ0EuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ3OE5NR0dUc3lBZXlGOEdLalRYc3BNNzRmOUxtQUdvSEhDTXZIcVo3Qk5VLzAv
MzEzNDMzMmUzMjMwMzgyZTMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzMzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCj9AAMA0GCSqGSIb3DQEBCwUAA4IBAQAI6gn90qLu
xpAReaG06Yq177UvmdgyHOEz7PO1qSsASfTIoAI3e7P3ZUocTiPt49/5GTi9QW3P
UpPWyAVPZDygNW6rQp84gJxLupv4yy0XC6OwumeeUnkjSGfBdZMfr+J7POuakhq7
wYd459DdARvy2mLOb4qAvRiqc73wti8PgmeWOPO550cwkgu5jclXSavye+AsSJoa
27+1QW6HtHxHf+wJZejJXklYIip0LKl6C0RmT3Wein8cykogVPTbiNywvh+GzzM1
iMWiJZkymmKOXM2sFRwtUpno4pJQHWlftsVyKb4XbrxfOoPbVIG84CveKvnq9jOD
HIrpDT+0CaJy
-----END CERTIFICATE-----
Generated at Tue Jun 10 06:36:48 2025 by rpki-client