Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/3137392e34382e3138342e302f32322d3232203d3e20323731303935.roa
File:                     3137392e34382e3138342e302f32322d3232203d3e20323731303935.roa (raw, json)
Hash identifier:          mf5kOnGLinzLoK2P/Age80BdVk/qTly4H6v3aFtSNSc=
Subject key identifier:   83:DA:6F:B6:67:70:D8:00:B1:BB:D6:C6:FD:E0:8A:ED:D7:7A:C5:3E
Certificate issuer:       /CN=BB28C577DF924111463D0D089EB3700DB6333A08
Certificate serial:       60BAE76D16741660473C9BAA363F2657A3008F23
Authority key identifier: BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/3137392e34382e3138342e302f32322d3232203d3e20323731303935.roa
Signing time:             Mon 13 Jan 2025 16:25:46 +0000
ROA not before:           Mon 13 Jan 2025 16:20:46 +0000
ROA not after:            Mon 12 Jan 2026 16:25:46 +0000
asID:                     271095
IP address blocks:        179.48.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.crl
                          rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Feb 2025 02:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ba:e7:6d:16:74:16:60:47:3c:9b:aa:36:3f:26:57:a3:00:8f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB28C577DF924111463D0D089EB3700DB6333A08
        Validity
            Not Before: Jan 13 16:20:46 2025 GMT
            Not After : Jan 12 16:25:46 2026 GMT
        Subject: CN=83DA6FB66770D800B1BBD6C6FDE08AEDD77AC53E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:de:55:44:1f:fc:09:8a:95:79:49:3d:b0:ba:
                    cd:bc:4f:4a:5d:6c:54:19:ce:85:72:f7:7f:d3:ca:
                    d1:40:ea:c3:c9:ba:7e:ab:92:2e:e0:33:51:3b:b2:
                    ed:6d:48:8e:1c:ec:5b:6c:db:b1:f8:b6:47:c8:c2:
                    bf:15:5b:1f:c5:06:6c:2f:59:3b:81:c5:0b:6c:b4:
                    80:6b:8c:29:3a:9b:18:a8:6e:4f:7b:19:04:31:19:
                    78:e5:ca:1e:c6:bd:3a:f9:db:ae:b7:ff:04:99:96:
                    a0:cb:07:40:e3:b2:fe:95:83:1a:c3:84:30:0a:53:
                    8d:40:27:1a:d5:45:d3:d3:02:e8:cb:24:3a:e7:39:
                    b4:85:4a:c2:0c:12:37:1e:ac:ad:bc:89:f4:74:ff:
                    dc:94:9a:38:44:56:7e:9f:ab:14:b6:be:e4:25:c0:
                    fe:27:24:1b:b7:38:bb:e5:26:0c:20:64:31:b8:0c:
                    32:d9:09:3b:e7:e3:c9:91:a5:53:36:53:81:4c:1a:
                    7f:79:33:f4:5d:01:8b:50:13:d7:e9:42:f0:32:62:
                    b9:22:ae:47:be:ac:2b:7a:1b:8d:27:9a:55:6d:73:
                    0f:80:42:19:b8:fa:48:71:ec:33:57:d2:9c:39:ce:
                    a3:c9:cd:66:07:73:dd:95:3a:66:ba:e4:38:c1:bd:
                    a0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DA:6F:B6:67:70:D8:00:B1:BB:D6:C6:FD:E0:8A:ED:D7:7A:C5:3E
            X509v3 Authority Key Identifier:
                keyid:BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/3137392e34382e3138342e302f32322d3232203d3e20323731303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:f4:5e:09:31:ae:f7:95:0d:33:22:90:c2:30:da:86:c2:56:
         3b:9c:f4:44:1c:8b:2c:ce:93:77:7e:1a:97:52:7f:32:a5:21:
         9b:fd:31:dd:4f:05:69:82:f4:2d:41:90:73:56:fb:9e:f6:6b:
         58:46:62:d2:9f:bf:0d:e6:a6:92:59:5a:d4:a9:2d:54:e3:d8:
         54:9d:90:3f:45:f7:e6:0e:5c:40:35:77:3b:3e:5c:d4:63:2a:
         08:55:ed:8e:6a:b7:d8:ee:4f:82:f2:00:ef:f6:5f:75:1e:05:
         6f:51:6e:8b:52:3f:19:fc:9f:9a:97:1a:4c:45:5d:ff:64:61:
         a5:ed:60:b1:15:b4:85:3f:1b:a9:87:d3:20:6a:b5:4f:4c:2c:
         8f:dd:bd:ea:9d:69:d9:6c:eb:df:37:31:33:83:1f:81:d3:ff:
         e1:a4:0a:5e:57:06:93:1b:26:60:e7:e2:cc:d1:81:60:fd:a8:
         c0:ae:89:b9:27:4f:41:5f:66:62:75:82:ca:60:32:e1:1c:5a:
         e2:85:87:05:49:82:df:dc:db:b3:f4:99:18:10:e0:f4:70:27:
         fc:e1:35:97:58:98:90:21:5c:a5:e9:f3:78:51:d8:89:6c:c4:
         e3:5b:84:e6:b2:4f:75:9b:35:a7:11:1d:ae:51:d0:6e:de:1b:
         3b:f0:32:ca
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYLrnbRZ0FmBHPJuqNj8mV6MAjyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIyOEM1NzdERjkyNDExMTQ2M0QwRDA4OUVCMzcwMERC
NjMzM0EwODAeFw0yNTAxMTMxNjIwNDZaFw0yNjAxMTIxNjI1NDZaMDMxMTAvBgNV
BAMTKDgzREE2RkI2Njc3MEQ4MDBCMUJCRDZDNkZERTA4QUVERDc3QUM1M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt3lVEH/wJipV5ST2wus28T0pd
bFQZzoVy93/TytFA6sPJun6rki7gM1E7su1tSI4c7Fts27H4tkfIwr8VWx/FBmwv
WTuBxQtstIBrjCk6mxiobk97GQQxGXjlyh7GvTr52663/wSZlqDLB0Djsv6VgxrD
hDAKU41AJxrVRdPTAujLJDrnObSFSsIMEjcerK28ifR0/9yUmjhEVn6fqxS2vuQl
wP4nJBu3OLvlJgwgZDG4DDLZCTvn48mRpVM2U4FMGn95M/RdAYtQE9fpQvAyYrki
rke+rCt6G40nmlVtcw+AQhm4+khx7DNX0pw5zqPJzWYHc92VOma65DjBvaBLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUg9pvtmdw2ACxu9bG/eCK7dd6xT4wHwYDVR0j
BBgwFoAUuyjFd9+SQRFGPQ0InrNwDbYzOggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhWS2JzaG9RVnVGR2pmZWdrSFNDazJOMkhIbzVic2hYelFNZTNHYmNO
WUcvMC9CQjI4QzU3N0RGOTI0MTExNDYzRDBEMDg5RUIzNzAwREI2MzMzQTA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCMjhDNTc3REY5MjQxMTE0
NjNEMEQwODlFQjM3MDBEQjYzMzNBMDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIVktic2hvUVZ1RkdqZmVna0hTQ2syTjJISG81YnNoWHpRTWUzR2JjTllHLzAv
MzEzNzM5MmUzNDM4MmUzMTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzEzMDM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzMLgwDQYJKoZIhvcNAQELBQADggEBADz0Xgkx
rveVDTMikMIw2obCVjuc9EQciyzOk3d+GpdSfzKlIZv9Md1PBWmC9C1BkHNW+572
a1hGYtKfvw3mppJZWtSpLVTj2FSdkD9F9+YOXEA1dzs+XNRjKghV7Y5qt9juT4Ly
AO/2X3UeBW9RbotSPxn8n5qXGkxFXf9kYaXtYLEVtIU/G6mH0yBqtU9MLI/dveqd
adls6983MTODH4HT/+GkCl5XBpMbJmDn4szRgWD9qMCuibknT0FfZmJ1gspgMuEc
WuKFhwVJgt/c27P0mRgQ4PRwJ/zhNZdYmJAhXKXp83hR2IlsxONbhOayT3WbNacR
Ha5R0G7eGzvwMso=
-----END CERTIFICATE-----
Generated at Fri Feb 21 17:39:48 2025 by rpki-client