Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133372e302f32342d3234203d3e20323632343234.roa
File:                     3137372e34342e3133372e302f32342d3234203d3e20323632343234.roa (raw, json)
Hash identifier:          QX6pzUOgPFMr27GH9kxBAr7BNkxIVwFgSkXqipUfSbw=
Subject key identifier:   A4:8F:7C:F4:26:5E:C7:0E:38:12:D0:D6:48:1B:F1:98:42:50:C3:D6
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       6FFDEF66618A3E62C8E3042382A775094FC47830
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133372e302f32342d3234203d3e20323632343234.roa
Signing time:             Wed 16 Apr 2025 14:25:43 +0000
ROA not before:           Wed 16 Apr 2025 14:20:43 +0000
ROA not after:            Wed 15 Apr 2026 14:25:43 +0000
asID:                     262424
IP address blocks:        177.44.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 22:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fd:ef:66:61:8a:3e:62:c8:e3:04:23:82:a7:75:09:4f:c4:78:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: Apr 16 14:20:43 2025 GMT
            Not After : Apr 15 14:25:43 2026 GMT
        Subject: CN=A48F7CF4265EC70E3812D0D6481BF1984250C3D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:ce:34:4a:57:0a:f3:eb:08:52:5a:17:ae:
                    1b:9e:68:10:72:9a:d1:f3:1f:6c:40:6d:42:9b:08:
                    0f:6d:c8:45:34:29:66:d7:79:55:f7:13:31:77:d7:
                    a3:56:3d:c7:bc:ee:eb:72:02:95:b4:79:9c:94:9d:
                    a7:c6:31:f7:d9:88:57:ce:a2:59:68:a2:cf:91:ec:
                    09:ed:4c:00:ac:cd:b4:f8:d7:a3:f6:e5:ed:09:e9:
                    e3:c2:e8:f6:98:17:8f:ec:19:43:55:31:f6:0d:84:
                    02:49:bc:a2:c7:a4:02:44:2c:1f:88:d3:59:5f:63:
                    5e:45:53:a2:8a:84:9c:2b:0e:1e:1c:2b:3e:42:14:
                    12:78:1c:8d:97:6f:65:c2:21:e5:5d:9b:c0:bf:11:
                    2e:2a:6c:c1:cd:37:f5:8a:19:8d:23:bf:1e:23:48:
                    3a:ec:78:f9:94:69:70:7e:4a:5d:bc:a4:9a:f2:6e:
                    3b:b7:07:e9:16:48:ec:41:0e:af:76:85:d2:b8:10:
                    45:ad:a6:22:4b:31:b9:03:e8:f0:e6:61:a6:a9:cc:
                    1a:1b:bc:ea:a9:39:61:8d:8d:ee:1d:26:5e:be:e8:
                    03:cb:ed:63:f3:94:40:eb:7e:4b:50:3b:ad:e0:0f:
                    90:56:10:35:4d:d1:d2:74:28:50:8b:98:10:e8:b0:
                    41:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8F:7C:F4:26:5E:C7:0E:38:12:D0:D6:48:1B:F1:98:42:50:C3:D6
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133372e302f32342d3234203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:5f:bf:24:f2:5e:83:e6:41:77:75:fa:8a:8f:db:19:ff:90:
         60:b4:45:36:70:07:66:d8:45:29:7c:17:63:0d:75:54:a1:11:
         0b:9f:66:5f:c5:f5:e7:f7:dc:4e:13:e1:f0:d8:62:5d:56:7d:
         00:3a:ba:53:87:34:33:df:34:da:ff:2e:b8:ac:60:5f:b1:3a:
         01:b4:76:37:09:4a:b9:30:c7:c3:1b:be:d8:e8:a6:c8:0a:ea:
         cb:c5:61:e4:1e:3e:68:7e:4f:c1:5a:72:0c:ed:88:48:f5:94:
         56:cf:f7:b1:51:42:41:c1:e3:94:52:82:14:fc:c1:48:48:4c:
         d8:58:d9:10:2b:8e:b7:f6:49:4f:1d:35:ef:3b:5a:d2:67:0b:
         82:86:8a:b5:3e:c3:c0:f7:41:f6:da:2f:7e:cd:11:0b:37:4e:
         4f:1f:36:32:13:5d:a7:3b:2c:fe:a7:d6:80:b3:22:8e:29:b6:
         c0:ab:92:b8:33:09:d7:05:5b:10:7f:7e:ad:35:b1:55:83:b0:
         03:35:b3:51:eb:0c:78:9f:47:e1:82:0b:e8:25:fb:dc:f2:b1:
         2b:46:df:41:d6:96:80:ce:9c:5e:42:74:fb:ad:3d:02:d6:76:
         07:7b:06:c9:0b:ac:15:27:92:c8:ff:b2:ab:84:8c:b3:8f:25:
         a1:11:70:aa
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUb/3vZmGKPmLI4wQjgqd1CU/EeDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU5RUM1MzA5N0U3MjQ4QzQwOEMzRDFBNjQyMkRCODVC
QjQ0NzBBMzAeFw0yNTA0MTYxNDIwNDNaFw0yNjA0MTUxNDI1NDNaMDMxMTAvBgNV
BAMTKEE0OEY3Q0Y0MjY1RUM3MEUzODEyRDBENjQ4MUJGMTk4NDI1MEMzRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Cc40SlcK8+sIUloXrhueaBBy
mtHzH2xAbUKbCA9tyEU0KWbXeVX3EzF316NWPce87utyApW0eZyUnafGMffZiFfO
olloos+R7AntTACszbT416P25e0J6ePC6PaYF4/sGUNVMfYNhAJJvKLHpAJELB+I
01lfY15FU6KKhJwrDh4cKz5CFBJ4HI2Xb2XCIeVdm8C/ES4qbMHNN/WKGY0jvx4j
SDrsePmUaXB+Sl28pJrybju3B+kWSOxBDq92hdK4EEWtpiJLMbkD6PDmYaapzBob
vOqpOWGNje4dJl6+6APL7WPzlEDrfktQO63gD5BWEDVN0dJ0KFCLmBDosEHBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpI989CZexw44EtDWSBvxmEJQw9YwHwYDVR0j
BBgwFoAUdZ7FMJfnJIxAjD0aZCLbhbtEcKMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXV1RGtxS3hlUzR2YXlyUnhwVlBpZm9jbVpWVnhuVnlSVWpGYXVOVlJU
QkIvMC83NTlFQzUzMDk3RTcyNDhDNDA4QzNEMUE2NDIyREI4NUJCNDQ3MEEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1OUVDNTMwOTdFNzI0OEM0
MDhDM0QxQTY0MjJEQjg1QkI0NDcwQTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1dURrcUt4ZVM0dmF5clJ4cFZQaWZvY21aVlZ4blZ5UlVqRmF1TlZSVEJCLzAv
MzEzNzM3MmUzNDM0MmUzMTMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxLIkwDQYJKoZIhvcNAQELBQADggEBADdfvyTy
XoPmQXd1+oqP2xn/kGC0RTZwB2bYRSl8F2MNdVShEQufZl/F9ef33E4T4fDYYl1W
fQA6ulOHNDPfNNr/LrisYF+xOgG0djcJSrkwx8MbvtjopsgK6svFYeQePmh+T8Fa
cgztiEj1lFbP97FRQkHB45RSghT8wUhITNhY2RArjrf2SU8dNe87WtJnC4KGirU+
w8D3QfbaL37NEQs3Tk8fNjITXac7LP6n1oCzIo4ptsCrkrgzCdcFWxB/fq01sVWD
sAM1s1HrDHifR+GCC+gl+9zysStG30HWloDOnF5CdPutPQLWdgd7BskLrBUnksj/
squEjLOPJaERcKo=
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:29:56 2025 by rpki-client