Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa
File:                     3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa (raw, json)
Hash identifier:          dl2xxNKmpGyFGlF7VUwUzm3hSJXtz/mVLOM/KbR/f88=
Subject key identifier:   E4:A8:BE:3D:23:EC:7F:4B:A0:C6:C7:C7:7B:85:DB:44:45:DD:72:BA
Certificate issuer:       /CN=CA5EB04FC8DA601024E12F23EF139B499E69972D
Certificate serial:       217EE3D492BDFAB5096D826CB0D71ECD41C3DFE5
Authority key identifier: CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa
Signing time:             Thu 06 Mar 2025 05:52:21 +0000
ROA not before:           Thu 06 Mar 2025 05:47:21 +0000
ROA not after:            Thu 05 Mar 2026 05:52:21 +0000
asID:                     271101
IP address blocks:        179.48.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.crl
                          rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7e:e3:d4:92:bd:fa:b5:09:6d:82:6c:b0:d7:1e:cd:41:c3:df:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA5EB04FC8DA601024E12F23EF139B499E69972D
        Validity
            Not Before: Mar  6 05:47:21 2025 GMT
            Not After : Mar  5 05:52:21 2026 GMT
        Subject: CN=E4A8BE3D23EC7F4BA0C6C7C77B85DB4445DD72BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cd:65:bf:6b:60:bc:ea:79:f3:2a:cc:f4:f4:
                    19:cd:59:af:3f:7a:08:96:dc:5b:a3:90:69:02:fb:
                    ce:53:33:5a:c4:96:a4:48:2b:75:9d:02:a6:af:4c:
                    34:0f:7d:d6:5c:91:d3:51:74:29:92:f3:7a:6a:aa:
                    f9:59:5e:b9:17:d2:1c:4f:aa:45:1f:7d:d3:34:53:
                    dc:73:73:f7:ac:18:38:c6:b9:d5:14:6c:ea:6f:6a:
                    48:75:1e:7d:76:26:5d:e0:b2:9c:a7:88:9c:fc:3c:
                    47:67:ae:da:46:30:93:6d:f0:d0:a2:bd:b7:60:71:
                    6f:bd:44:cc:8c:e0:c2:2b:a9:6a:2e:27:4d:a1:10:
                    ea:d7:1c:87:96:c6:f0:14:30:86:a5:90:41:1e:36:
                    ab:5a:a1:f1:27:05:ae:19:68:d3:83:df:0b:dd:0a:
                    8c:56:46:3e:2a:21:48:97:fa:65:94:c1:58:ca:d1:
                    f4:34:cd:bc:d4:9d:80:b1:8d:13:71:d5:e2:a2:10:
                    0a:db:48:21:bf:ee:57:d6:43:30:3d:29:3f:c5:be:
                    75:bb:b2:be:9f:14:cd:37:52:44:7b:69:82:a4:f7:
                    23:14:e1:19:7d:eb:49:26:e5:48:e9:fd:27:41:8f:
                    fc:cf:16:cf:da:94:1a:d1:fd:38:30:4e:aa:80:48:
                    c3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A8:BE:3D:23:EC:7F:4B:A0:C6:C7:C7:7B:85:DB:44:45:DD:72:BA
            X509v3 Authority Key Identifier:
                keyid:CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:9c:5a:c6:5c:3b:79:d4:c6:f2:5d:51:c1:32:ab:5d:c7:4a:
         c4:df:41:c0:9d:a7:b2:63:56:28:6b:62:d1:70:07:dc:cf:1c:
         a9:8d:01:24:c9:45:a2:20:80:1a:4a:96:0c:79:cb:19:cd:64:
         bf:9d:c0:62:24:f7:9c:94:fa:36:32:5d:96:43:8f:5d:2f:00:
         5f:8b:f9:b0:1b:24:3a:39:be:dd:a1:a4:6e:5e:b5:d0:fb:eb:
         a9:77:00:66:d8:79:29:ae:d6:a0:40:44:27:8c:b2:e2:21:61:
         d4:f8:9b:97:b4:57:11:c1:dd:53:b9:e8:a1:f2:7d:98:16:1a:
         37:e3:6a:f3:dc:ea:14:ac:f4:ca:f2:9b:67:6c:7a:48:36:ce:
         c9:00:cc:69:22:94:ed:8f:82:27:d0:f1:ce:33:1c:90:a2:1a:
         71:84:c5:e1:b3:83:a1:18:8f:75:bc:42:22:14:f9:4a:42:44:
         74:11:0a:90:18:b2:72:76:16:52:26:71:89:d3:40:0e:90:b2:
         fd:e3:96:58:49:1a:41:a4:b9:00:a2:9f:5f:c0:de:c6:b3:8e:
         86:92:fb:1b:9b:54:ac:67:84:be:7b:97:77:e4:95:33:86:eb:
         80:10:6f:74:88:b2:78:34:15:db:86:86:5e:4f:6c:c5:a2:ac:
         8d:38:1d:f4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIX7j1JK9+rUJbYJssNcezUHD3+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E1RUIwNEZDOERBNjAxMDI0RTEyRjIzRUYxMzlCNDk5
RTY5OTcyRDAeFw0yNTAzMDYwNTQ3MjFaFw0yNjAzMDUwNTUyMjFaMDMxMTAvBgNV
BAMTKEU0QThCRTNEMjNFQzdGNEJBMEM2QzdDNzdCODVEQjQ0NDVERDcyQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUzWW/a2C86nnzKsz09BnNWa8/
egiW3FujkGkC+85TM1rElqRIK3WdAqavTDQPfdZckdNRdCmS83pqqvlZXrkX0hxP
qkUffdM0U9xzc/esGDjGudUUbOpvakh1Hn12Jl3gspyniJz8PEdnrtpGMJNt8NCi
vbdgcW+9RMyM4MIrqWouJ02hEOrXHIeWxvAUMIalkEEeNqtaofEnBa4ZaNOD3wvd
CoxWRj4qIUiX+mWUwVjK0fQ0zbzUnYCxjRNx1eKiEArbSCG/7lfWQzA9KT/FvnW7
sr6fFM03UkR7aYKk9yMU4Rl960km5Ujp/SdBj/zPFs/alBrR/TgwTqqASMPXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5Ki+PSPsf0ugxsfHe4XbREXdcrowHwYDVR0j
BBgwFoAUyl6wT8jaYBAk4S8j7xObSZ5ply0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDdxNWZZVVZxQXpicmtMUW80UG9ZUzJrR3Y4R1hzS25OOHFBWXc1Ukd4
MkYvMS9DQTVFQjA0RkM4REE2MDEwMjRFMTJGMjNFRjEzOUI0OTlFNjk5NzJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBNUVCMDRGQzhEQTYwMTAy
NEUxMkYyM0VGMTM5QjQ5OUU2OTk3MkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ3cTVmWVVWcUF6YnJrTFFvNFBvWVMya0d2OEdYc0tuTjhxQVl3NVJHeDJGLzEv
MzEzNzM5MmUzNDM4MmUzMjMxMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzEzMTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzMNgwDQYJKoZIhvcNAQELBQADggEBAF2cWsZc
O3nUxvJdUcEyq13HSsTfQcCdp7JjVihrYtFwB9zPHKmNASTJRaIggBpKlgx5yxnN
ZL+dwGIk95yU+jYyXZZDj10vAF+L+bAbJDo5vt2hpG5etdD766l3AGbYeSmu1qBA
RCeMsuIhYdT4m5e0VxHB3VO56KHyfZgWGjfjavPc6hSs9Mrym2dsekg2zskAzGki
lO2PgifQ8c4zHJCiGnGExeGzg6EYj3W8QiIU+UpCRHQRCpAYsnJ2FlImcYnTQA6Q
sv3jllhJGkGkuQCin1/A3sazjoaS+xubVKxnhL57l3fklTOG64AQb3SIsng0FduG
hl5PbMWirI04HfQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:16:47 2025 by rpki-client