Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/3137372e38362e3230302e302f32312d3234203d3e203532353736.roa
File:                     3137372e38362e3230302e302f32312d3234203d3e203532353736.roa (raw, json)
Hash identifier:          TI8fvU+DA9BGVyDJ2qm1cJltZ0I1E38L4u9tbujdTOY=
Subject key identifier:   D4:3C:47:93:A2:64:57:FA:36:7A:74:58:D7:58:68:F3:43:62:E2:6E
Certificate issuer:       /CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995
Certificate serial:       7AB07B6ECD1B3D8B63B9288C2B67BB2AAB3E0AFE
Authority key identifier: 85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/3137372e38362e3230302e302f32312d3234203d3e203532353736.roa
Signing time:             Fri 07 Mar 2025 02:27:52 +0000
ROA not before:           Fri 07 Mar 2025 02:22:52 +0000
ROA not after:            Fri 06 Mar 2026 02:27:52 +0000
asID:                     52576
IP address blocks:        177.86.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl
                          rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 10:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b0:7b:6e:cd:1b:3d:8b:63:b9:28:8c:2b:67:bb:2a:ab:3e:0a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995
        Validity
            Not Before: Mar  7 02:22:52 2025 GMT
            Not After : Mar  6 02:27:52 2026 GMT
        Subject: CN=D43C4793A26457FA367A7458D75868F34362E26E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:e4:09:fd:3d:84:bd:62:7e:2c:14:5a:aa:
                    74:a8:5b:78:72:04:48:00:8d:63:11:b7:46:61:3d:
                    6c:c4:63:3d:db:ae:ff:1a:a3:ec:ed:84:52:3c:86:
                    3c:f4:a1:9a:d3:04:e1:e6:99:9a:4d:74:0c:b1:aa:
                    0e:c4:98:0f:5c:ef:a5:28:2c:b9:56:55:3a:74:18:
                    ab:35:32:1b:f1:65:4b:50:c2:5f:eb:25:9e:22:39:
                    3c:e2:ce:60:72:62:ff:ad:f1:f2:66:43:35:ed:54:
                    c3:79:c0:b7:58:83:41:8a:1e:55:23:47:89:4e:77:
                    5e:64:24:80:c6:f5:f1:f4:f0:73:66:c6:74:c2:dc:
                    50:bc:d3:cf:37:ff:69:e9:71:7a:4f:18:2a:c8:b4:
                    3a:28:ce:48:75:3c:7a:89:fd:a2:2a:84:d8:67:c2:
                    79:ba:96:6f:c0:c5:0f:e3:c8:8e:6d:a2:20:fe:6b:
                    63:22:f2:cf:05:75:cd:5b:9c:a1:4c:6b:51:01:1c:
                    6f:12:39:d3:cf:ff:05:3c:f0:05:36:12:bf:dd:38:
                    5d:ba:68:85:5d:4b:a7:cd:2b:fd:de:9c:0c:da:4e:
                    3a:cb:e2:6a:80:c8:f0:f6:66:4f:b7:ba:0e:5f:fb:
                    f1:15:73:fb:82:9f:a7:11:0b:b4:3c:5f:60:4c:c6:
                    1d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3C:47:93:A2:64:57:FA:36:7A:74:58:D7:58:68:F3:43:62:E2:6E
            X509v3 Authority Key Identifier:
                keyid:85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/3137372e38362e3230302e302f32312d3234203d3e203532353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a9:ae:d3:34:7a:60:b9:49:9e:c6:0a:3d:0a:80:ae:17:e9:1b:
         4d:25:62:57:b3:fc:f1:d3:18:a3:77:65:80:6f:5b:da:5a:80:
         99:81:ca:d8:2d:47:58:f0:1e:9e:24:34:e2:47:5c:d6:87:5b:
         ea:27:39:2b:4c:f9:02:5a:09:75:81:bc:ee:4f:fc:a4:59:1a:
         af:70:b9:a9:fa:96:5c:89:6b:58:19:75:fb:d2:35:d1:95:2c:
         33:57:05:6e:62:47:18:42:34:6b:0b:af:24:9b:9d:67:f4:ef:
         b4:f8:12:a4:7d:fa:15:9b:56:0c:6e:03:f0:d1:5d:f0:39:a5:
         e2:7f:f5:37:6f:52:9f:72:c3:32:c0:09:b8:9e:13:4c:d1:ea:
         fc:15:c8:11:ad:49:86:ca:98:98:41:98:35:a2:2b:44:08:5e:
         26:f5:5c:a4:a7:06:91:9e:70:c2:02:4a:26:5b:ae:6a:65:98:
         5d:aa:ad:20:40:ce:17:b6:4e:49:d0:43:dc:48:85:4b:27:b4:
         0d:95:b0:58:72:d4:45:83:d4:b1:ad:d5:55:81:8a:1e:e3:aa:
         3c:85:26:3f:90:74:94:c7:99:89:bd:29:a2:bb:80:73:58:cd:
         7a:93:24:55:71:2b:c2:ae:a8:04:79:a8:e8:d0:06:21:a8:bf:
         55:74:99:07
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUerB7bs0bPYtjuSiMK2e7Kqs+Cv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVBQzdGRjA3MjI0MDkxMTZDMUUzQzQwRkU0N0VBQTYw
M0RERDk5NTAeFw0yNTAzMDcwMjIyNTJaFw0yNjAzMDYwMjI3NTJaMDMxMTAvBgNV
BAMTKEQ0M0M0NzkzQTI2NDU3RkEzNjdBNzQ1OEQ3NTg2OEYzNDM2MkUyNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCee+QJ/T2EvWJ+LBRaqnSoW3hy
BEgAjWMRt0ZhPWzEYz3brv8ao+zthFI8hjz0oZrTBOHmmZpNdAyxqg7EmA9c76Uo
LLlWVTp0GKs1MhvxZUtQwl/rJZ4iOTzizmByYv+t8fJmQzXtVMN5wLdYg0GKHlUj
R4lOd15kJIDG9fH08HNmxnTC3FC80883/2npcXpPGCrItDoozkh1PHqJ/aIqhNhn
wnm6lm/AxQ/jyI5toiD+a2Mi8s8Fdc1bnKFMa1EBHG8SOdPP/wU88AU2Er/dOF26
aIVdS6fNK/3enAzaTjrL4mqAyPD2Zk+3ug5f+/EVc/uCn6cRC7Q8X2BMxh1JAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1DxHk6JkV/o2enRY11ho80Ni4m4wHwYDVR0j
BBgwFoAUhax/8HIkCRFsHjxA/kfqpgPd2ZUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWNuYTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdK
WFIvMS84NUFDN0ZGMDcyMjQwOTExNkMxRTNDNDBGRTQ3RUFBNjAzREREOTk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1QUM3RkYwNzIyNDA5MTE2
QzFFM0M0MEZFNDdFQUE2MDNEREQ5OTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVjbmE2ZVJNOVRzV2dyYzJ2U3hlN0E0TDNqYmdKSGpvTlhFVUo2Q01HSlhSLzEv
MzEzNzM3MmUzODM2MmUzMjMwMzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMy
MzUzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsVbIMA0GCSqGSIb3DQEBCwUAA4IBAQCprtM0emC5
SZ7GCj0KgK4X6RtNJWJXs/zx0xijd2WAb1vaWoCZgcrYLUdY8B6eJDTiR1zWh1vq
JzkrTPkCWgl1gbzuT/ykWRqvcLmp+pZciWtYGXX70jXRlSwzVwVuYkcYQjRrC68k
m51n9O+0+BKkffoVm1YMbgPw0V3wOaXif/U3b1KfcsMywAm4nhNM0er8FcgRrUmG
ypiYQZg1oitECF4m9VykpwaRnnDCAkomW65qZZhdqq0gQM4Xtk5J0EPcSIVLJ7QN
lbBYctRFg9SxrdVVgYoe46o8hSY/kHSUx5mJvSmiu4BzWM16kyRVcSvCrqgEeajo
0AYhqL9VdJkH
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:03:26 2025 by rpki-client