Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234392e302f32342d3234203d3e20323632383636.roa
File:                     3137372e31322e3234392e302f32342d3234203d3e20323632383636.roa (raw, json)
Hash identifier:          L2Gg5VrVMOxUi3BrQamH74aMdLP7kyWwoZzrrsYbAr0=
Subject key identifier:   CF:28:3A:0A:07:31:6C:58:60:C2:D4:61:5C:60:88:4B:0D:51:54:25
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       45D6B08352AC2D19D7DF73F9DD93C22DC39F2A98
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234392e302f32342d3234203d3e20323632383636.roa
Signing time:             Thu 06 Mar 2025 01:21:40 +0000
ROA not before:           Thu 06 Mar 2025 01:16:40 +0000
ROA not after:            Thu 05 Mar 2026 01:21:40 +0000
asID:                     262866
IP address blocks:        177.12.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl
                          rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d6:b0:83:52:ac:2d:19:d7:df:73:f9:dd:93:c2:2d:c3:9f:2a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Mar  6 01:16:40 2025 GMT
            Not After : Mar  5 01:21:40 2026 GMT
        Subject: CN=CF283A0A07316C5860C2D4615C60884B0D515425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fc:96:ea:c6:2d:06:14:8e:2c:01:02:46:75:
                    eb:a7:b8:50:d9:39:e3:36:7a:f2:52:04:c9:fc:90:
                    8c:d2:ab:66:86:93:c0:8b:8a:0c:3a:1f:ae:d5:22:
                    e1:8f:e5:33:63:f2:1c:cb:82:f3:9d:8c:72:00:d0:
                    51:0f:ad:2f:a0:09:b3:34:dc:a6:bc:d3:8b:c8:2c:
                    9a:51:d9:aa:f8:a5:5d:9a:e6:78:41:ad:7e:ea:1e:
                    0f:9b:b2:cd:4c:4f:72:7a:c9:54:9a:49:b5:c1:ee:
                    42:4e:6a:e8:6e:ea:0f:82:11:78:62:d3:fe:0f:9b:
                    76:bb:97:00:ac:17:ca:e6:ba:4f:53:ec:b0:32:94:
                    80:ce:46:4c:45:64:a1:02:01:2a:9f:d5:70:83:b0:
                    70:4d:d7:28:3f:10:92:3b:a9:ff:51:66:49:dc:62:
                    26:22:bd:f4:c6:d2:a0:ca:ed:a9:fc:2e:ea:6d:02:
                    19:87:12:42:bd:0b:57:e1:e4:15:1f:6c:9f:6c:91:
                    6d:8f:7b:0f:45:b9:c3:11:62:cb:54:45:83:0c:b4:
                    d3:99:51:a7:87:54:85:4d:99:5d:4a:a1:4c:39:60:
                    c4:4e:34:2b:86:c2:7a:1b:64:4a:5b:97:31:68:6e:
                    ce:c2:53:4f:4a:ac:ff:e6:65:f8:43:5c:7e:c1:51:
                    f1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:28:3A:0A:07:31:6C:58:60:C2:D4:61:5C:60:88:4B:0D:51:54:25
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234392e302f32342d3234203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:64:1f:0f:75:c9:e0:f8:6e:25:db:7c:5b:f9:2b:76:9f:81:
         a1:1f:93:5d:35:55:e1:f2:6a:db:db:67:9a:aa:60:93:aa:52:
         61:ac:19:c0:80:f8:ff:b3:bd:6e:d0:72:21:6c:68:08:5f:07:
         45:a0:c8:c4:19:c3:d2:0b:11:40:fc:67:49:ad:9c:6f:2e:d5:
         5a:d1:b4:a6:5d:fa:d7:fe:75:04:4c:7b:1e:cd:63:7d:73:7c:
         fd:d0:83:a3:b4:be:79:3b:eb:57:83:07:0a:f1:bc:ec:8f:6e:
         49:d1:bb:14:f4:ce:b4:46:e5:2f:ba:19:52:97:ab:42:56:77:
         6f:7e:06:27:17:88:3d:a3:95:7e:3e:58:ab:07:1d:47:71:95:
         26:17:c1:bc:28:b1:69:2c:05:8c:cd:d3:9a:e1:ef:f8:f0:67:
         8e:6c:a8:56:75:b4:c7:fc:a9:3d:d1:04:f5:ca:9f:8b:52:35:
         7b:69:ee:92:8b:06:7c:1e:2b:18:ab:28:37:31:f7:02:f3:d7:
         db:91:3e:28:21:5b:ea:2f:2c:4b:3f:05:af:13:fe:15:ba:30:
         92:84:08:77:72:49:f5:ca:60:bc:4a:49:e3:5b:0d:3a:ed:4e:
         af:54:df:5e:19:1e:8f:68:43:5b:65:32:96:0a:89:eb:1c:2c:
         81:12:b2:01
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURdawg1KsLRnX33P53ZPCLcOfKpgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMyQjExNDAwODUxNDJBN0Q3NDc0Nzg4RUVGNDY1REVB
QkJFNTA4MDAeFw0yNTAzMDYwMTE2NDBaFw0yNjAzMDUwMTIxNDBaMDMxMTAvBgNV
BAMTKENGMjgzQTBBMDczMTZDNTg2MEMyRDQ2MTVDNjA4ODRCMEQ1MTU0MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV/Jbqxi0GFI4sAQJGdeunuFDZ
OeM2evJSBMn8kIzSq2aGk8CLigw6H67VIuGP5TNj8hzLgvOdjHIA0FEPrS+gCbM0
3Ka804vILJpR2ar4pV2a5nhBrX7qHg+bss1MT3J6yVSaSbXB7kJOauhu6g+CEXhi
0/4Pm3a7lwCsF8rmuk9T7LAylIDORkxFZKECASqf1XCDsHBN1yg/EJI7qf9RZknc
YiYivfTG0qDK7an8LuptAhmHEkK9C1fh5BUfbJ9skW2Pew9FucMRYstURYMMtNOZ
UaeHVIVNmV1KoUw5YMRONCuGwnobZEpblzFobs7CU09KrP/mZfhDXH7BUfGFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzyg6CgcxbFhgwtRhXGCISw1RVCUwHwYDVR0j
BBgwFoAUcysRQAhRQqfXR0eI7vRl3qu+UIAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHM1aExpblZVYXNhZXU5ZW9KUVB3NkRVeloyNDJMRUI4WHBaVHVLWk5T
RWMvMS83MzJCMTE0MDA4NTE0MkE3RDc0NzQ3ODhFRUY0NjVERUFCQkU1MDgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczMkIxMTQwMDg1MTQyQTdE
NzQ3NDc4OEVFRjQ2NURFQUJCRTUwODAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRzNWhMaW5WVWFzYWV1OWVvSlFQdzZEVXpaMjQyTEVCOFhwWlR1S1pOU0VjLzEv
MzEzNzM3MmUzMTMyMmUzMjM0MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxDPkwDQYJKoZIhvcNAQELBQADggEBAFRkHw91
yeD4biXbfFv5K3afgaEfk101VeHyatvbZ5qqYJOqUmGsGcCA+P+zvW7QciFsaAhf
B0WgyMQZw9ILEUD8Z0mtnG8u1VrRtKZd+tf+dQRMex7NY31zfP3Qg6O0vnk761eD
BwrxvOyPbknRuxT0zrRG5S+6GVKXq0JWd29+BicXiD2jlX4+WKsHHUdxlSYXwbwo
sWksBYzN05rh7/jwZ45sqFZ1tMf8qT3RBPXKn4tSNXtp7pKLBnweKxirKDcx9wLz
19uRPighW+ovLEs/Ba8T/hW6MJKECHdySfXKYLxKSeNbDTrtTq9U314ZHo9oQ1tl
MpYKiescLIESsgE=
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:38:03 2025 by rpki-client