Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32392e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e32392e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          stCjbQoLoxWp0eVF3V/fmV2PwOLYU/5yD87i1QF2rgY=
Subject key identifier:   88:FA:9B:C4:55:4F:F3:02:C2:21:47:10:F7:32:21:96:EB:0A:31:73
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       55CA98ABDDBB41B0E986D81BB288BDD50E44C2FE
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32392e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:42 +0000
ROA not before:           Thu 06 Mar 2025 02:26:42 +0000
ROA not after:            Thu 05 Mar 2026 02:31:42 +0000
asID:                     52706
IP address blocks:        177.126.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 10:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ca:98:ab:dd:bb:41:b0:e9:86:d8:1b:b2:88:bd:d5:0e:44:c2:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:42 2025 GMT
            Not After : Mar  5 02:31:42 2026 GMT
        Subject: CN=88FA9BC4554FF302C2214710F7322196EB0A3173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:34:8f:7d:92:e5:af:73:f8:44:94:c1:38:65:
                    b9:a6:c7:43:e3:79:9e:b2:e2:70:03:74:94:63:27:
                    dc:a5:58:82:34:c8:a6:c6:01:8b:39:7e:b8:1a:d8:
                    66:05:e6:63:db:d7:d4:7a:f7:19:37:45:a8:b3:94:
                    26:4e:51:a2:c0:e8:4e:c9:05:d6:ee:26:0a:74:2b:
                    f7:5b:9e:da:6c:24:78:4b:83:a2:36:f6:6f:45:8f:
                    36:c2:d4:71:ec:e9:f1:72:b6:f5:94:d9:d7:e7:ab:
                    b7:66:a2:b0:39:51:ea:a1:2e:2c:5b:ec:07:17:a7:
                    71:e6:04:b6:28:53:4c:28:36:20:d3:92:92:a0:33:
                    42:54:73:d8:01:71:33:2e:40:f6:2f:04:ce:f4:07:
                    ad:c3:d4:8b:95:27:5b:6d:c3:c8:a0:3a:4e:40:db:
                    99:63:25:eb:b4:5a:71:6c:77:71:3e:fd:a1:a2:91:
                    f5:57:9a:ba:f8:a4:40:fb:1d:ec:fe:a7:f6:13:fb:
                    53:b2:0b:1d:7d:4a:b8:0a:41:27:79:70:a1:be:cd:
                    72:f7:90:6a:69:9c:23:e2:61:4d:5f:68:62:58:09:
                    37:09:67:e6:ff:f6:c7:79:c1:8d:11:fe:8c:04:8d:
                    dc:b0:55:75:12:17:5d:70:ab:1b:6c:2f:1e:99:e0:
                    a1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FA:9B:C4:55:4F:F3:02:C2:21:47:10:F7:32:21:96:EB:0A:31:73
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32392e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:9f:7a:c3:1f:29:b7:f0:50:4b:73:a2:0e:3e:bb:84:63:5f:
         f5:6e:91:82:63:05:25:2e:ea:ea:52:3f:30:fe:85:27:ac:11:
         63:6a:a9:ae:3a:7d:cb:db:84:e5:be:37:bd:c5:38:31:5c:1b:
         ab:5a:2f:2f:4f:f1:2a:91:58:b8:68:c3:82:af:51:5f:e4:d9:
         a7:91:a4:32:89:54:44:e6:4c:1d:47:18:60:99:aa:ea:79:64:
         d6:84:c9:2f:3c:1e:72:58:1a:79:1a:e3:c4:42:6c:36:c5:cf:
         4b:a1:8f:0c:49:40:e5:51:bc:e9:ff:a0:bc:f8:4e:1e:ce:19:
         6b:4b:ac:00:91:cb:33:41:41:66:f3:0e:10:90:57:dc:83:70:
         4c:59:8e:b1:26:ce:ca:f6:5c:93:45:b0:0e:36:21:2d:4d:46:
         6d:32:10:02:49:c2:6f:da:a2:29:ce:e9:f1:5b:37:f1:4b:b0:
         81:6f:fa:2c:32:2d:25:8d:d3:01:fa:de:e5:c3:a2:1f:3a:8d:
         70:1c:03:cf:9a:fb:89:99:f9:af:44:12:43:ad:81:ac:0f:1d:
         99:0a:19:1b:0c:b1:88:86:28:a1:fe:fb:07:24:16:f2:83:c9:
         bd:58:e4:01:97:57:7c:58:7d:91:c4:e7:db:ee:6d:94:90:dc:
         a3:46:41:e0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVcqYq927QbDphtgbsoi91Q5Ewv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RTU0RjFEMDI2M0I4RTkwM0EwOTI5QTYxMzEzQzhD
NUJFOERBNjAeFw0yNTAzMDYwMjI2NDJaFw0yNjAzMDUwMjMxNDJaMDMxMTAvBgNV
BAMTKDg4RkE5QkM0NTU0RkYzMDJDMjIxNDcxMEY3MzIyMTk2RUIwQTMxNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWNI99kuWvc/hElME4Zbmmx0Pj
eZ6y4nADdJRjJ9ylWII0yKbGAYs5frga2GYF5mPb19R69xk3RaizlCZOUaLA6E7J
BdbuJgp0K/dbntpsJHhLg6I29m9FjzbC1HHs6fFytvWU2dfnq7dmorA5UeqhLixb
7AcXp3HmBLYoU0woNiDTkpKgM0JUc9gBcTMuQPYvBM70B63D1IuVJ1ttw8igOk5A
25ljJeu0WnFsd3E+/aGikfVXmrr4pED7Hez+p/YT+1OyCx19SrgKQSd5cKG+zXL3
kGppnCPiYU1faGJYCTcJZ+b/9sd5wY0R/owEjdywVXUSF11wqxtsLx6Z4KEfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUiPqbxFVP8wLCIUcQ9zIhlusKMXMwHwYDVR0j
BBgwFoAU415U8dAmO46QOgkpphMTyMW+jaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMS9FMzVFNTRGMUQwMjYzQjhFOTAzQTA5MjlBNjEzMTNDOEM1QkU4REE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUU1NEYxRDAyNjNCOEU5
MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzEv
MzEzNzM3MmUzMTMyMzYyZTMyMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsX4dMA0GCSqGSIb3DQEBCwUAA4IBAQAcn3rDHym3
8FBLc6IOPruEY1/1bpGCYwUlLurqUj8w/oUnrBFjaqmuOn3L24Tlvje9xTgxXBur
Wi8vT/EqkVi4aMOCr1Ff5NmnkaQyiVRE5kwdRxhgmarqeWTWhMkvPB5yWBp5GuPE
Qmw2xc9LoY8MSUDlUbzp/6C8+E4ezhlrS6wAkcszQUFm8w4QkFfcg3BMWY6xJs7K
9lyTRbAONiEtTUZtMhACScJv2qIpzunxWzfxS7CBb/osMi0ljdMB+t7lw6IfOo1w
HAPPmvuJmfmvRBJDrYGsDx2ZChkbDLGIhiih/vsHJBbyg8m9WOQBl1d8WH2RxOfb
7m2UkNyjRkHg
-----END CERTIFICATE-----
Generated at Wed Apr 9 21:01:35 2025 by rpki-client