Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/3137392e39372e3131322e302f32312d3234203d3e203238363336.roa
File:                     3137392e39372e3131322e302f32312d3234203d3e203238363336.roa (raw, json)
Hash identifier:          V2PFMlTVYH4HD/HqpGWeq3IF0Yddf0WHY89E5k9pIoM=
Subject key identifier:   07:3F:91:9E:E5:B0:F3:2F:E6:9A:91:F3:CE:74:BB:C8:D1:17:F6:B3
Certificate issuer:       /CN=8F43BF9E79677F282BF953C8E1F71757E25A9063
Certificate serial:       5A84BD08135A32B2AA169058B996C981636925A5
Authority key identifier: 8F:43:BF:9E:79:67:7F:28:2B:F9:53:C8:E1:F7:17:57:E2:5A:90:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/3137392e39372e3131322e302f32312d3234203d3e203238363336.roa
Signing time:             Tue 08 Apr 2025 16:31:01 +0000
ROA not before:           Tue 08 Apr 2025 16:26:01 +0000
ROA not after:            Tue 07 Apr 2026 16:31:01 +0000
asID:                     28636
IP address blocks:        179.97.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.crl
                          rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:84:bd:08:13:5a:32:b2:aa:16:90:58:b9:96:c9:81:63:69:25:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F43BF9E79677F282BF953C8E1F71757E25A9063
        Validity
            Not Before: Apr  8 16:26:01 2025 GMT
            Not After : Apr  7 16:31:01 2026 GMT
        Subject: CN=073F919EE5B0F32FE69A91F3CE74BBC8D117F6B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fb:88:eb:6a:5f:08:b2:32:86:ff:f7:ec:9b:
                    82:c1:a6:f2:0d:df:f1:5d:65:0d:50:b4:06:f6:07:
                    5f:98:9c:f8:64:91:73:e0:54:d0:2b:ae:59:02:29:
                    cd:a3:f1:79:1c:82:4b:16:f6:31:c9:bc:d2:f2:11:
                    f1:63:e8:aa:e3:0f:79:98:01:36:5a:06:6c:f6:ff:
                    9d:ad:e2:f9:5a:30:a6:55:84:03:7d:45:b2:f2:49:
                    fe:10:3e:a6:4e:b9:7b:39:8e:dc:88:97:7b:e6:4f:
                    9d:44:7d:5e:1e:4b:04:54:32:65:92:34:57:d6:3e:
                    87:8d:96:0a:7d:09:45:70:3d:eb:0b:75:bd:72:ca:
                    f6:af:ee:4e:35:6f:31:cf:a4:e9:f1:66:0b:a3:63:
                    ed:f6:da:09:50:34:7d:37:e0:2a:1b:f8:7b:87:7f:
                    4c:bd:8b:6c:e3:c4:31:56:f6:04:3f:4a:14:06:e4:
                    26:32:59:5f:8f:d2:3e:93:b2:65:82:91:4f:a9:56:
                    63:56:dc:68:c4:5e:25:e1:93:c8:0f:fe:5a:17:08:
                    c5:cc:cd:77:a1:d1:b9:42:47:aa:dd:09:eb:9f:93:
                    c7:17:9f:d1:c0:8f:09:c2:ca:d2:6b:46:5e:48:26:
                    bf:6d:dd:9e:e0:3d:e7:c8:90:75:4e:4f:41:14:8e:
                    00:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3F:91:9E:E5:B0:F3:2F:E6:9A:91:F3:CE:74:BB:C8:D1:17:F6:B3
            X509v3 Authority Key Identifier:
                keyid:8F:43:BF:9E:79:67:7F:28:2B:F9:53:C8:E1:F7:17:57:E2:5A:90:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/3137392e39372e3131322e302f32312d3234203d3e203238363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b3:6a:f9:29:14:6f:94:c0:f3:37:ed:6b:70:d0:7f:3c:dd:5f:
         25:61:05:bb:4a:e5:bf:50:33:0f:4a:04:76:f9:62:b7:ca:c8:
         6e:2f:49:1c:e4:9a:44:11:9a:50:13:02:44:c3:0e:72:e3:b5:
         23:df:bc:6a:c2:47:79:d9:2d:88:aa:43:bd:58:f3:43:c4:94:
         57:82:7d:ca:be:75:27:a5:83:7f:4c:79:12:a0:73:20:a6:87:
         3d:b5:f5:2f:df:e7:48:f6:5a:bc:24:76:05:df:0e:cc:48:a8:
         7c:5c:09:fd:c2:81:e1:15:ba:cd:2e:18:18:07:5e:67:76:50:
         bd:d2:48:14:66:2f:e6:09:8b:fa:35:34:ea:a7:d1:aa:32:5e:
         51:91:b0:99:8b:0f:70:b2:24:fb:0c:c8:42:43:36:3a:82:21:
         80:ff:4b:b8:15:8e:fb:fb:b5:e0:b1:9e:57:16:5d:40:4f:77:
         a8:76:81:b7:40:b0:71:ff:30:50:5c:7d:65:1e:9c:b1:81:60:
         51:80:72:c7:e9:bd:7f:a2:a9:65:bc:1d:77:39:60:96:5c:f0:
         82:3a:d9:cc:9e:fd:c8:a7:56:ba:67:c5:1c:6a:2e:bd:33:13:
         93:56:e3:f2:aa:8c:32:b2:ee:61:1a:7c:d1:fa:8f:c2:49:d9:
         20:98:10:7c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWoS9CBNaMrKqFpBYuZbJgWNpJaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY0M0JGOUU3OTY3N0YyODJCRjk1M0M4RTFGNzE3NTdF
MjVBOTA2MzAeFw0yNTA0MDgxNjI2MDFaFw0yNjA0MDcxNjMxMDFaMDMxMTAvBgNV
BAMTKDA3M0Y5MTlFRTVCMEYzMkZFNjlBOTFGM0NFNzRCQkM4RDExN0Y2QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo+4jral8IsjKG//fsm4LBpvIN
3/FdZQ1QtAb2B1+YnPhkkXPgVNArrlkCKc2j8XkcgksW9jHJvNLyEfFj6KrjD3mY
ATZaBmz2/52t4vlaMKZVhAN9RbLySf4QPqZOuXs5jtyIl3vmT51EfV4eSwRUMmWS
NFfWPoeNlgp9CUVwPesLdb1yyvav7k41bzHPpOnxZgujY+322glQNH034Cob+HuH
f0y9i2zjxDFW9gQ/ShQG5CYyWV+P0j6TsmWCkU+pVmNW3GjEXiXhk8gP/loXCMXM
zXeh0blCR6rdCeufk8cXn9HAjwnCytJrRl5IJr9t3Z7gPefIkHVOT0EUjgCHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBz+RnuWw8y/mmpHzznS7yNEX9rMwHwYDVR0j
BBgwFoAUj0O/nnlnfygr+VPI4fcXV+JakGMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWl5SG84M1NOa2FRQjFQc2llVFF1UFRqRndvR281aHJoOUpVaTV3MU1E
NW4vMC84RjQzQkY5RTc5Njc3RjI4MkJGOTUzQzhFMUY3MTc1N0UyNUE5MDYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGNDNCRjlFNzk2NzdGMjgy
QkY5NTNDOEUxRjcxNzU3RTI1QTkwNjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVpeUhvODNTTmthUUIxUHNpZVRRdVBUakZ3b0dvNWhyaDlKVWk1dzFNRDVuLzAv
MzEzNzM5MmUzOTM3MmUzMTMxMzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4
MzYzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDs2FwMA0GCSqGSIb3DQEBCwUAA4IBAQCzavkpFG+U
wPM37Wtw0H883V8lYQW7SuW/UDMPSgR2+WK3yshuL0kc5JpEEZpQEwJEww5y47Uj
37xqwkd52S2IqkO9WPNDxJRXgn3KvnUnpYN/THkSoHMgpoc9tfUv3+dI9lq8JHYF
3w7MSKh8XAn9woHhFbrNLhgYB15ndlC90kgUZi/mCYv6NTTqp9GqMl5RkbCZiw9w
siT7DMhCQzY6giGA/0u4FY77+7XgsZ5XFl1AT3eodoG3QLBx/zBQXH1lHpyxgWBR
gHLH6b1/oqllvB13OWCWXPCCOtnMnv3Ip1a6Z8Ucai69MxOTVuPyqowysu5hGnzR
+o/CSdkgmBB8
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:03:56 2025 by rpki-client