Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e31382e302f32332d3233203d3e203532373036.roa
File:                     3137372e3132362e31382e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          tFz/GPhvjRXpsmLcKjESe1XxlkyUPFFrldHagsLA+Vo=
Subject key identifier:   54:33:61:46:F2:7B:40:B5:87:0A:D4:50:6C:53:22:01:FE:89:F8:4C
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       20864A80321204D1E938E0AA4A497E0384007BAA
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e31382e302f32332d3233203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:37 +0000
ROA not before:           Thu 06 Mar 2025 02:26:37 +0000
ROA not after:            Thu 05 Mar 2026 02:31:37 +0000
asID:                     52706
IP address blocks:        177.126.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 10:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:86:4a:80:32:12:04:d1:e9:38:e0:aa:4a:49:7e:03:84:00:7b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:37 2025 GMT
            Not After : Mar  5 02:31:37 2026 GMT
        Subject: CN=54336146F27B40B5870AD4506C532201FE89F84C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fe:27:b8:3d:d5:36:df:8e:10:0f:d6:6a:ce:
                    13:dc:f3:6d:58:3a:98:5f:e5:75:cd:fb:cc:c0:80:
                    28:cf:45:19:4b:e9:b6:f5:06:dc:cd:c1:07:19:db:
                    5c:07:d7:a7:69:c5:26:50:d2:90:b1:e2:35:0d:1e:
                    f3:50:5f:47:09:4c:20:dd:fe:93:a5:4a:96:3e:cb:
                    8b:99:10:6f:d1:c4:fc:4b:1f:e5:27:c0:59:0c:41:
                    d6:91:26:ee:01:33:98:a6:ea:28:3e:b1:cf:b1:08:
                    f4:41:3e:ff:5d:fc:a0:03:89:97:3f:62:7f:7a:28:
                    18:b9:b4:cc:41:eb:d7:eb:cc:99:cf:f8:22:94:4e:
                    8d:b2:43:63:c6:2f:60:1c:f2:4f:91:d2:2f:56:e9:
                    09:7e:ea:20:46:16:a9:b5:53:11:05:2c:e5:b9:0c:
                    a7:23:a0:ef:91:d5:fa:ff:e4:0f:25:f6:88:e4:55:
                    d8:ad:21:a4:89:ac:89:b8:0b:ae:f6:b1:ff:8a:f4:
                    02:ed:50:35:36:e6:2e:32:18:d4:7f:85:75:8a:7c:
                    58:c2:2b:c0:62:65:ea:b4:fd:e2:f3:57:ce:c0:bb:
                    09:96:bc:a4:f1:61:c4:48:19:f3:84:a6:2e:2a:b0:
                    36:1d:57:a6:55:fb:ca:8e:7a:b7:a2:f7:12:db:46:
                    2b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:33:61:46:F2:7B:40:B5:87:0A:D4:50:6C:53:22:01:FE:89:F8:4C
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e31382e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:8c:55:0c:b3:c2:0e:f9:b2:ba:4e:41:1a:da:37:bf:5d:01:
         15:87:2e:7c:3b:a9:47:26:4c:ea:31:2e:4a:04:78:20:2c:21:
         4e:7e:09:c5:61:6c:c3:c9:9b:43:59:a9:6e:be:44:70:2c:3d:
         21:a0:26:6c:98:85:ec:3d:42:ca:ff:95:ff:c4:4b:1c:d5:19:
         a4:52:87:e4:7f:aa:da:2e:5e:be:f9:42:60:9d:ea:1b:ce:da:
         16:68:35:08:bd:5d:32:ec:21:ca:7a:a5:03:1a:93:bb:24:e1:
         94:ec:93:ac:54:88:75:75:a9:da:66:39:2c:e1:46:97:e4:85:
         3c:82:2a:bd:d4:da:cf:41:80:3a:94:ca:24:28:ad:67:c1:04:
         12:f4:c1:20:1a:c3:df:7a:cd:d5:9b:31:97:9a:4b:e9:09:05:
         96:9c:85:20:6f:0d:22:56:21:af:0c:4f:77:2d:c8:56:e6:09:
         38:3d:43:65:e9:7e:3f:f7:a1:78:aa:dd:1a:cb:06:5f:14:65:
         a6:0d:ce:37:3a:d4:9d:80:09:6e:0e:3e:02:bd:2d:11:6f:7b:
         83:23:d9:27:8b:7f:44:39:b4:41:77:e7:76:7a:c9:9b:da:4f:
         18:62:e3:73:3e:af:b6:9f:5a:08:d3:59:2d:72:81:d2:45:c1:
         56:6e:60:e4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIIZKgDISBNHpOOCqSkl+A4QAe6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RTU0RjFEMDI2M0I4RTkwM0EwOTI5QTYxMzEzQzhD
NUJFOERBNjAeFw0yNTAzMDYwMjI2MzdaFw0yNjAzMDUwMjMxMzdaMDMxMTAvBgNV
BAMTKDU0MzM2MTQ2RjI3QjQwQjU4NzBBRDQ1MDZDNTMyMjAxRkU4OUY4NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/ie4PdU2344QD9ZqzhPc821Y
Ophf5XXN+8zAgCjPRRlL6bb1BtzNwQcZ21wH16dpxSZQ0pCx4jUNHvNQX0cJTCDd
/pOlSpY+y4uZEG/RxPxLH+UnwFkMQdaRJu4BM5im6ig+sc+xCPRBPv9d/KADiZc/
Yn96KBi5tMxB69frzJnP+CKUTo2yQ2PGL2Ac8k+R0i9W6Ql+6iBGFqm1UxEFLOW5
DKcjoO+R1fr/5A8l9ojkVditIaSJrIm4C672sf+K9ALtUDU25i4yGNR/hXWKfFjC
K8BiZeq0/eLzV87AuwmWvKTxYcRIGfOEpi4qsDYdV6ZV+8qOerei9xLbRitJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVDNhRvJ7QLWHCtRQbFMiAf6J+EwwHwYDVR0j
BBgwFoAU415U8dAmO46QOgkpphMTyMW+jaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMS9FMzVFNTRGMUQwMjYzQjhFOTAzQTA5MjlBNjEzMTNDOEM1QkU4REE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUU1NEYxRDAyNjNCOEU5
MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzEv
MzEzNzM3MmUzMTMyMzYyZTMxMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsX4SMA0GCSqGSIb3DQEBCwUAA4IBAQAMjFUMs8IO
+bK6TkEa2je/XQEVhy58O6lHJkzqMS5KBHggLCFOfgnFYWzDyZtDWaluvkRwLD0h
oCZsmIXsPULK/5X/xEsc1RmkUofkf6raLl6++UJgneobztoWaDUIvV0y7CHKeqUD
GpO7JOGU7JOsVIh1danaZjks4UaX5IU8giq91NrPQYA6lMokKK1nwQQS9MEgGsPf
es3VmzGXmkvpCQWWnIUgbw0iViGvDE93LchW5gk4PUNl6X4/96F4qt0aywZfFGWm
Dc43OtSdgAluDj4CvS0Rb3uDI9kni39EObRBd+d2esmb2k8YYuNzPq+2n1oI01kt
coHSRcFWbmDk
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:53:01 2025 by rpki-client