Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234342e302f32332d3233203d3e20323632383636.roa
File:                     3137372e31322e3234342e302f32332d3233203d3e20323632383636.roa (raw, json)
Hash identifier:          YQdzz2WyvGCdTrLAAj5+ao1iC2/8bEw3wTD9kuAzYyg=
Subject key identifier:   3C:47:23:7F:31:85:69:F5:DE:23:D7:81:68:03:60:C2:CE:F5:35:C9
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       1D03C77AD679AA5E403B2BFB036BE46752137C2D
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234342e302f32332d3233203d3e20323632383636.roa
Signing time:             Thu 06 Mar 2025 01:21:39 +0000
ROA not before:           Thu 06 Mar 2025 01:16:39 +0000
ROA not after:            Thu 05 Mar 2026 01:21:39 +0000
asID:                     262866
IP address blocks:        177.12.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl
                          rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 19:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:03:c7:7a:d6:79:aa:5e:40:3b:2b:fb:03:6b:e4:67:52:13:7c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Mar  6 01:16:39 2025 GMT
            Not After : Mar  5 01:21:39 2026 GMT
        Subject: CN=3C47237F318569F5DE23D781680360C2CEF535C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ef:56:66:96:c0:ee:3b:3c:da:93:f8:1a:29:
                    69:85:c7:74:d0:65:3f:db:07:a1:81:4a:49:f6:97:
                    9b:49:da:1f:11:d5:28:b8:ee:e1:73:d8:e1:14:8b:
                    fb:7b:b9:92:ab:7c:43:cb:1b:9a:e8:26:fd:36:fd:
                    36:34:0c:a5:a5:3b:12:ee:60:49:cd:e8:e9:d9:35:
                    53:cc:0a:82:85:90:8d:b9:16:6d:9a:bf:54:47:2d:
                    95:44:3e:3e:99:a8:4e:1f:48:a7:15:2a:46:18:82:
                    77:1a:c0:91:25:a0:f2:1e:4d:32:7b:7d:6b:25:06:
                    8c:79:18:2d:e0:b3:d5:25:fe:6b:e5:02:37:27:c3:
                    81:e1:ff:3a:85:e8:4f:46:6d:23:c3:45:19:2c:b1:
                    46:aa:0f:01:78:90:d6:2b:89:45:02:fd:ed:dc:3d:
                    3c:44:0e:fd:6b:41:57:c2:e4:2c:83:66:47:b0:40:
                    0a:c8:f6:91:e2:56:82:8d:f0:45:6c:4b:3c:38:df:
                    d3:9f:80:7f:66:a9:90:a9:80:f5:86:ab:69:dd:44:
                    cc:bd:1a:f9:85:f6:3c:27:cb:27:1f:d5:59:95:57:
                    83:56:23:3d:e4:fa:4f:72:f7:d7:75:a6:4f:e4:85:
                    e6:7b:0a:38:bd:04:7e:e8:52:6b:1c:e2:e9:a0:c2:
                    5e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:47:23:7F:31:85:69:F5:DE:23:D7:81:68:03:60:C2:CE:F5:35:C9
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234342e302f32332d3233203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:ea:27:1f:c8:0c:ed:e4:b7:74:cf:57:29:d5:9f:9f:83:b0:
         26:7d:75:4d:84:db:f2:39:9f:7c:6d:f5:7d:bc:8c:bd:e0:dd:
         df:d7:35:8b:4d:1a:4c:d7:fc:b2:fb:ee:4b:d1:8e:43:00:58:
         40:0c:49:50:21:52:4a:1d:d9:13:78:5d:26:b5:ba:f0:77:2b:
         0a:3a:cd:53:0c:c2:23:b6:a3:06:55:b5:a1:44:84:49:87:bd:
         d0:24:32:df:f9:dc:44:a9:7f:d6:1a:8e:95:ee:c5:7d:29:76:
         41:bb:74:da:8e:6f:f2:3e:f7:3f:4d:de:77:04:ce:81:4b:18:
         bc:99:87:82:29:45:bc:0e:7d:08:a1:e0:88:1c:04:9b:c1:dd:
         82:d3:47:d0:b0:2a:71:25:2c:c2:ac:c5:4b:2a:57:08:93:bb:
         27:d6:34:e5:df:94:93:fc:4b:ec:42:0f:da:10:5c:2a:9f:11:
         4d:69:c3:fc:73:ec:2c:4f:13:e0:b4:82:a6:91:c3:c1:3c:f0:
         df:6e:86:c0:b5:49:8b:8f:91:0d:1b:e5:38:e6:0a:b3:a0:78:
         cb:a3:10:23:df:81:3a:1d:27:de:c9:73:63:10:75:a3:37:91:
         1e:68:c4:09:d5:58:34:e6:9a:19:e2:60:d8:e7:92:81:ee:57:
         87:0b:9f:a3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHQPHetZ5ql5AOyv7A2vkZ1ITfC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMyQjExNDAwODUxNDJBN0Q3NDc0Nzg4RUVGNDY1REVB
QkJFNTA4MDAeFw0yNTAzMDYwMTE2MzlaFw0yNjAzMDUwMTIxMzlaMDMxMTAvBgNV
BAMTKDNDNDcyMzdGMzE4NTY5RjVERTIzRDc4MTY4MDM2MEMyQ0VGNTM1QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD71ZmlsDuOzzak/gaKWmFx3TQ
ZT/bB6GBSkn2l5tJ2h8R1Si47uFz2OEUi/t7uZKrfEPLG5roJv02/TY0DKWlOxLu
YEnN6OnZNVPMCoKFkI25Fm2av1RHLZVEPj6ZqE4fSKcVKkYYgncawJEloPIeTTJ7
fWslBox5GC3gs9Ul/mvlAjcnw4Hh/zqF6E9GbSPDRRkssUaqDwF4kNYriUUC/e3c
PTxEDv1rQVfC5CyDZkewQArI9pHiVoKN8EVsSzw439OfgH9mqZCpgPWGq2ndRMy9
GvmF9jwnyycf1VmVV4NWIz3k+k9y99d1pk/kheZ7Cji9BH7oUmsc4umgwl5/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPEcjfzGFafXeI9eBaANgws71NckwHwYDVR0j
BBgwFoAUcysRQAhRQqfXR0eI7vRl3qu+UIAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHM1aExpblZVYXNhZXU5ZW9KUVB3NkRVeloyNDJMRUI4WHBaVHVLWk5T
RWMvMS83MzJCMTE0MDA4NTE0MkE3RDc0NzQ3ODhFRUY0NjVERUFCQkU1MDgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczMkIxMTQwMDg1MTQyQTdE
NzQ3NDc4OEVFRjQ2NURFQUJCRTUwODAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRzNWhMaW5WVWFzYWV1OWVvSlFQdzZEVXpaMjQyTEVCOFhwWlR1S1pOU0VjLzEv
MzEzNzM3MmUzMTMyMmUzMjM0MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzODM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxDPQwDQYJKoZIhvcNAQELBQADggEBAAbqJx/I
DO3kt3TPVynVn5+DsCZ9dU2E2/I5n3xt9X28jL3g3d/XNYtNGkzX/LL77kvRjkMA
WEAMSVAhUkod2RN4XSa1uvB3Kwo6zVMMwiO2owZVtaFEhEmHvdAkMt/53ESpf9Ya
jpXuxX0pdkG7dNqOb/I+9z9N3ncEzoFLGLyZh4IpRbwOfQih4IgcBJvB3YLTR9Cw
KnElLMKsxUsqVwiTuyfWNOXflJP8S+xCD9oQXCqfEU1pw/xz7CxPE+C0gqaRw8E8
8N9uhsC1SYuPkQ0b5TjmCrOgeMujECPfgTodJ97Jc2MQdaM3kR5oxAnVWDTmmhni
YNjnkoHuV4cLn6M=
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:25:30 2025 by rpki-client