Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/3137372e38352e3133342e302f32342d3234203d3e20323632363038.roa
File:                     3137372e38352e3133342e302f32342d3234203d3e20323632363038.roa (raw, json)
Hash identifier:          xhG67mKq4pY8aFF8FjbvEOhttXNe59FBYmX/lJQwAlw=
Subject key identifier:   8B:B9:9A:B4:17:8F:39:56:79:D7:A3:4D:F6:78:97:84:88:EA:53:24
Certificate issuer:       /CN=14FF5A751C4E19792B967D92C271B9738745BFED
Certificate serial:       5039C1DBE2548E7F04B9C0B87667261CDEA9F7E7
Authority key identifier: 14:FF:5A:75:1C:4E:19:79:2B:96:7D:92:C2:71:B9:73:87:45:BF:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FF5A751C4E19792B967D92C271B9738745BFED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/3137372e38352e3133342e302f32342d3234203d3e20323632363038.roa
Signing time:             Tue 25 Mar 2025 14:07:25 +0000
ROA not before:           Tue 25 Mar 2025 14:02:25 +0000
ROA not after:            Tue 24 Mar 2026 14:07:25 +0000
asID:                     262608
IP address blocks:        177.85.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.crl
                          rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FF5A751C4E19792B967D92C271B9738745BFED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 12:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:39:c1:db:e2:54:8e:7f:04:b9:c0:b8:76:67:26:1c:de:a9:f7:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14FF5A751C4E19792B967D92C271B9738745BFED
        Validity
            Not Before: Mar 25 14:02:25 2025 GMT
            Not After : Mar 24 14:07:25 2026 GMT
        Subject: CN=8BB99AB4178F395679D7A34DF678978488EA5324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f2:c0:25:9f:72:6b:ff:3b:aa:3e:f7:b6:71:
                    31:47:03:46:35:34:fd:bc:78:28:c6:df:71:57:69:
                    7e:2e:7b:7c:87:4b:07:7b:42:0d:24:5e:40:b7:80:
                    51:c7:1b:43:47:ea:2f:f6:3f:fb:a7:1e:be:b0:eb:
                    d0:83:54:10:66:8d:3c:ee:d7:19:95:a4:80:ce:f5:
                    67:5c:c3:d5:38:4d:29:73:21:4e:bd:49:99:79:54:
                    35:00:ad:d0:65:df:e7:c4:d1:80:e1:cf:7a:94:d4:
                    4b:74:11:40:88:ba:a3:ae:70:7c:d0:d6:97:98:6e:
                    22:18:72:4e:d3:12:3a:6c:d5:83:76:04:74:f5:37:
                    5c:de:32:45:7b:f6:4e:33:02:06:38:76:89:0f:c5:
                    c7:e5:af:6a:37:3d:4c:5a:02:bf:c2:41:cf:d4:a6:
                    b0:95:70:5e:22:68:26:d5:bb:4e:7b:96:12:5d:7f:
                    0e:c8:6b:ef:5d:aa:f7:70:18:78:27:be:a3:05:f4:
                    37:65:0a:db:1a:a6:23:3f:53:6c:2f:49:db:12:3d:
                    0f:73:37:c7:85:30:30:f8:90:66:2a:0b:e9:34:1c:
                    e9:a2:8e:0d:56:22:4d:05:16:0c:24:31:f1:d4:2b:
                    73:95:50:82:16:04:fa:91:0e:54:05:02:dc:36:ad:
                    d9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B9:9A:B4:17:8F:39:56:79:D7:A3:4D:F6:78:97:84:88:EA:53:24
            X509v3 Authority Key Identifier:
                keyid:14:FF:5A:75:1C:4E:19:79:2B:96:7D:92:C2:71:B9:73:87:45:BF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FF5A751C4E19792B967D92C271B9738745BFED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/3137372e38352e3133342e302f32342d3234203d3e20323632363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:bb:a5:37:03:af:92:32:9b:a8:79:de:f6:37:41:bd:27:33:
         56:eb:e3:d3:ff:70:19:06:2e:8d:e6:35:0f:8d:d1:d3:88:ad:
         2c:e5:fe:ee:84:dc:bb:64:42:91:fe:1a:c5:a5:da:37:35:07:
         e4:d0:33:ce:07:5b:8b:cc:75:54:15:b5:89:a1:05:6c:55:12:
         2e:bd:4f:25:62:f5:a7:b4:f2:5a:b2:60:f0:83:f7:f8:6d:65:
         0c:2b:9b:ae:68:e3:a7:5b:b5:f9:01:0e:dd:0b:b0:4b:7c:f3:
         ef:b6:bd:f8:24:6c:db:da:4a:d2:33:07:07:35:a0:76:90:63:
         04:e0:8b:87:2a:c8:f1:a6:6a:8d:ea:d4:44:06:25:03:88:19:
         07:6c:24:a0:3d:b5:3e:78:c5:fc:36:03:24:2e:32:ae:5e:99:
         51:46:29:e2:68:43:d4:9c:ca:fe:99:da:74:fe:cc:54:af:ff:
         a1:ff:07:f2:e0:e5:e9:1d:27:83:2b:f5:72:ef:25:e2:34:af:
         1a:93:7d:38:ca:80:1f:4c:87:6a:7f:6f:5a:00:89:0f:f1:77:
         e0:08:ae:68:f9:c0:6b:2f:b5:5c:a0:85:95:ca:c4:37:e3:30:
         50:f2:be:93:45:5a:55:b3:85:24:9a:e1:43:2c:dc:24:82:40:
         ab:51:a7:99
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUDnB2+JUjn8EucC4dmcmHN6p9+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRGRjVBNzUxQzRFMTk3OTJCOTY3RDkyQzI3MUI5NzM4
NzQ1QkZFRDAeFw0yNTAzMjUxNDAyMjVaFw0yNjAzMjQxNDA3MjVaMDMxMTAvBgNV
BAMTKDhCQjk5QUI0MTc4RjM5NTY3OUQ3QTM0REY2Nzg5Nzg0ODhFQTUzMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8sAln3Jr/zuqPve2cTFHA0Y1
NP28eCjG33FXaX4ue3yHSwd7Qg0kXkC3gFHHG0NH6i/2P/unHr6w69CDVBBmjTzu
1xmVpIDO9Wdcw9U4TSlzIU69SZl5VDUArdBl3+fE0YDhz3qU1Et0EUCIuqOucHzQ
1peYbiIYck7TEjps1YN2BHT1N1zeMkV79k4zAgY4dokPxcflr2o3PUxaAr/CQc/U
prCVcF4iaCbVu057lhJdfw7Ia+9dqvdwGHgnvqMF9DdlCtsapiM/U2wvSdsSPQ9z
N8eFMDD4kGYqC+k0HOmijg1WIk0FFgwkMfHUK3OVUIIWBPqRDlQFAtw2rdmDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUi7matBePOVZ516NN9niXhIjqUyQwHwYDVR0j
BBgwFoAUFP9adRxOGXkrln2SwnG5c4dFv+0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHFuQjhySjFVVWN5c01RNnRBblB5SzladGNSQVRiTkhSY2Zza3FIcHJv
WTkvMC8xNEZGNUE3NTFDNEUxOTc5MkI5NjdEOTJDMjcxQjk3Mzg3NDVCRkVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0RkY1QTc1MUM0RTE5Nzky
Qjk2N0Q5MkMyNzFCOTczODc0NUJGRUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRxbkI4ckoxVVVjeXNNUTZ0QW5QeUs5WnRjUkFUYk5IUmNmc2txSHByb1k5LzAv
MzEzNzM3MmUzODM1MmUzMTMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxVYYwDQYJKoZIhvcNAQELBQADggEBACm7pTcD
r5Iym6h53vY3Qb0nM1br49P/cBkGLo3mNQ+N0dOIrSzl/u6E3LtkQpH+GsWl2jc1
B+TQM84HW4vMdVQVtYmhBWxVEi69TyVi9ae08lqyYPCD9/htZQwrm65o46dbtfkB
Dt0LsEt88++2vfgkbNvaStIzBwc1oHaQYwTgi4cqyPGmao3q1EQGJQOIGQdsJKA9
tT54xfw2AyQuMq5emVFGKeJoQ9Scyv6Z2nT+zFSv/6H/B/Lg5ekdJ4Mr9XLvJeI0
rxqTfTjKgB9Mh2p/b1oAiQ/xd+AIrmj5wGsvtVyghZXKxDfjMFDyvpNFWlWzhSSa
4UMs3CSCQKtRp5k=
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:11:13 2025 by rpki-client