Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3137372e32322e3138342e302f32322d3232203d3e20323633353633.roa
File:                     3137372e32322e3138342e302f32322d3232203d3e20323633353633.roa (raw, json)
Hash identifier:          Wq4UWOQAuEiYhzPf3AvxJRLR+T3Rir8F3eXE4eTiTdM=
Subject key identifier:   C7:E5:59:32:33:8A:83:A0:6D:05:77:FF:F1:EC:48:76:8D:0C:0A:68
Certificate issuer:       /CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
Certificate serial:       5A02A7EBE73CFD50C9A194F48BB54116359FFB78
Authority key identifier: 8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3137372e32322e3138342e302f32322d3232203d3e20323633353633.roa
Signing time:             Thu 06 Mar 2025 14:54:08 +0000
ROA not before:           Thu 06 Mar 2025 14:49:08 +0000
ROA not after:            Thu 05 Mar 2026 14:54:08 +0000
asID:                     263563
IP address blocks:        177.22.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl
                          rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 15:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:02:a7:eb:e7:3c:fd:50:c9:a1:94:f4:8b:b5:41:16:35:9f:fb:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
        Validity
            Not Before: Mar  6 14:49:08 2025 GMT
            Not After : Mar  5 14:54:08 2026 GMT
        Subject: CN=C7E55932338A83A06D0577FFF1EC48768D0C0A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:6d:cf:50:ec:2a:dd:86:c2:81:f3:f2:eb:
                    ae:da:0d:64:2d:5e:f3:b9:f2:e6:d4:47:ad:60:f1:
                    b2:1c:de:41:a0:d5:5b:f7:07:e3:d5:1b:74:fb:08:
                    97:d5:bc:14:c5:23:61:45:15:bc:fb:05:35:a9:35:
                    23:72:9a:ef:39:aa:2a:85:72:b9:0a:2d:eb:02:0b:
                    55:01:b6:cc:1e:cb:5c:de:be:38:7a:62:94:94:02:
                    0f:65:d1:d7:83:be:e6:0d:55:8c:1c:93:5f:dc:71:
                    de:31:50:e3:52:f4:28:da:98:70:2d:64:b4:ab:6e:
                    de:66:fb:21:a3:77:08:63:a9:cb:33:98:0a:42:e5:
                    0b:dd:f2:89:c4:3b:5b:9c:b0:ad:d4:2a:43:c9:30:
                    96:f1:e6:7b:b6:27:8c:97:21:4b:84:f7:a2:32:b0:
                    82:d0:f2:ef:94:b9:a0:ac:a7:be:80:24:59:aa:bc:
                    cd:c9:f0:52:6f:14:f8:b0:b3:77:8c:c8:b9:49:f0:
                    93:84:81:ee:f0:50:94:3b:19:89:d7:13:0e:84:4a:
                    e0:bc:0b:07:ac:87:23:89:01:6d:2e:6a:79:d6:1a:
                    cc:f8:fc:35:47:bd:92:65:9c:f2:f6:33:45:57:28:
                    17:36:51:fd:9b:e1:07:a2:a1:66:f6:03:d7:19:88:
                    64:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E5:59:32:33:8A:83:A0:6D:05:77:FF:F1:EC:48:76:8D:0C:0A:68
            X509v3 Authority Key Identifier:
                keyid:8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3137372e32322e3138342e302f32322d3232203d3e20323633353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:7b:1d:00:6f:28:9e:bc:c5:8d:19:2a:cd:79:34:e4:d9:76:
         d0:72:83:96:16:93:68:5b:21:44:5b:86:30:9d:77:80:55:55:
         5e:29:fc:27:4a:20:6e:2a:18:79:e1:be:04:b0:82:ca:fd:99:
         3f:92:2a:0b:b9:95:d5:59:53:e6:fd:f5:35:34:d5:bb:e3:45:
         f9:08:9d:db:e3:f5:a4:b1:4a:b5:ca:a6:5f:f7:37:f3:b1:fa:
         90:0e:ae:48:a5:9e:19:4e:5a:60:c0:61:eb:09:6e:9c:8f:58:
         06:93:50:00:2f:a1:e8:78:e1:39:42:55:82:d1:46:5b:42:1f:
         ac:87:49:c4:d4:a0:0d:bf:9b:d0:97:1c:a6:e2:5d:87:39:a2:
         0f:c7:c6:3f:03:21:38:b8:ba:5a:08:a4:94:56:72:09:17:94:
         47:09:36:f7:c2:ca:12:c1:46:4a:dc:fc:52:91:29:a5:47:77:
         a6:6c:20:53:cc:44:ac:d2:8a:01:1d:5c:8a:bd:3f:70:68:2c:
         17:3a:ca:07:5c:cc:ea:a4:fd:54:d2:81:7a:45:4d:bc:42:69:
         b1:7f:66:0a:89:9c:09:2f:f6:36:94:a6:fd:45:54:43:4f:c8:
         ae:81:b5:ad:e6:6f:68:71:e6:bc:da:66:e3:03:30:46:cf:ae:
         be:56:a9:55
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWgKn6+c8/VDJoZT0i7VBFjWf+3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVBRThEMUFFNkE2ODY5Q0ZFNTRFMzc0MjAxQTU0RjJF
MDkzNEVDNzAeFw0yNTAzMDYxNDQ5MDhaFw0yNjAzMDUxNDU0MDhaMDMxMTAvBgNV
BAMTKEM3RTU1OTMyMzM4QTgzQTA2RDA1NzdGRkYxRUM0ODc2OEQwQzBBNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChqG3PUOwq3YbCgfPy667aDWQt
XvO58ubUR61g8bIc3kGg1Vv3B+PVG3T7CJfVvBTFI2FFFbz7BTWpNSNymu85qiqF
crkKLesCC1UBtswey1zevjh6YpSUAg9l0deDvuYNVYwck1/ccd4xUONS9CjamHAt
ZLSrbt5m+yGjdwhjqcszmApC5Qvd8onEO1ucsK3UKkPJMJbx5nu2J4yXIUuE96Iy
sILQ8u+UuaCsp76AJFmqvM3J8FJvFPiws3eMyLlJ8JOEge7wUJQ7GYnXEw6ESuC8
CweshyOJAW0uannWGsz4/DVHvZJlnPL2M0VXKBc2Uf2b4QeioWb2A9cZiGQJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUx+VZMjOKg6BtBXf/8exIdo0MCmgwHwYDVR0j
BBgwFoAUjq6NGuamhpz+VON0IBpU8uCTTscwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFNNdm1zcTFhZXY4QzEzdnJuNWRVMXBMekdwMXdHRkJuemdtTkpqOHNX
NkovMS84RUFFOEQxQUU2QTY4NjlDRkU1NEUzNzQyMDFBNTRGMkUwOTM0RUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQUU4RDFBRTZBNjg2OUNG
RTU0RTM3NDIwMUE1NEYyRTA5MzRFQzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRTTXZtc3ExYWV2OEMxM3ZybjVkVTFwTHpHcDF3R0ZCbnpnbU5KajhzVzZKLzEv
MzEzNzM3MmUzMjMyMmUzMTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzNTM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxFrgwDQYJKoZIhvcNAQELBQADggEBACR7HQBv
KJ68xY0ZKs15NOTZdtByg5YWk2hbIURbhjCdd4BVVV4p/CdKIG4qGHnhvgSwgsr9
mT+SKgu5ldVZU+b99TU01bvjRfkIndvj9aSxSrXKpl/3N/Ox+pAOrkilnhlOWmDA
YesJbpyPWAaTUAAvoeh44TlCVYLRRltCH6yHScTUoA2/m9CXHKbiXYc5og/Hxj8D
ITi4uloIpJRWcgkXlEcJNvfCyhLBRkrc/FKRKaVHd6ZsIFPMRKzSigEdXIq9P3Bo
LBc6ygdczOqk/VTSgXpFTbxCabF/ZgqJnAkv9jaUpv1FVENPyK6Bta3mb2hx5rza
ZuMDMEbPrr5WqVU=
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:53:44 2025 by rpki-client