Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131372e302f32342d3234203d3e20323730373630.roa
File:                     3137392e3130392e3131372e302f32342d3234203d3e20323730373630.roa (raw, json)
Hash identifier:          scK90hIc8Gb9JvFxrVRluj9UtPatenk5OlCd+RTgzIM=
Subject key identifier:   6E:A4:3C:48:A0:A1:04:56:1E:99:DC:DB:FC:8C:CF:B2:A2:80:E7:14
Certificate issuer:       /CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
Certificate serial:       7CB466A4528B223C425C83E954072858E1158ECE
Authority key identifier: BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131372e302f32342d3234203d3e20323730373630.roa
Signing time:             Fri 16 May 2025 13:17:49 +0000
ROA not before:           Fri 16 May 2025 13:12:49 +0000
ROA not after:            Fri 15 May 2026 13:17:49 +0000
asID:                     270760
IP address blocks:        179.109.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 03:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b4:66:a4:52:8b:22:3c:42:5c:83:e9:54:07:28:58:e1:15:8e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
        Validity
            Not Before: May 16 13:12:49 2025 GMT
            Not After : May 15 13:17:49 2026 GMT
        Subject: CN=6EA43C48A0A104561E99DCDBFC8CCFB2A280E714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b3:b1:32:94:44:11:7d:af:bd:f8:84:28:8a:
                    c6:51:76:6d:03:0e:44:9a:18:1e:bc:db:6d:05:63:
                    0e:82:b2:c0:a0:3d:3c:12:3f:09:14:85:91:cc:e7:
                    d0:dd:fc:5c:ea:c4:62:33:18:57:50:f9:c4:e5:42:
                    88:9c:7d:6c:e2:82:e6:f4:60:e1:59:51:88:8e:1c:
                    2d:55:a2:1a:c1:48:b7:06:26:de:64:9e:2a:7d:35:
                    70:ac:64:b8:da:84:8d:97:07:99:d4:64:94:de:3a:
                    ed:ba:07:e4:9e:5d:df:d7:fd:05:45:a7:42:3a:46:
                    67:c5:6b:1c:09:8f:0d:f1:3d:47:5f:68:6f:03:9c:
                    5d:9a:c7:9b:b5:f8:59:23:71:85:d6:1d:3e:8c:9f:
                    82:b4:45:04:45:47:bb:11:93:1f:23:3f:c7:d9:54:
                    86:30:3c:2e:bf:67:9d:01:ac:cc:20:4b:7c:21:2d:
                    3c:7b:84:e9:dd:c4:dc:62:70:7d:7e:1f:ae:1f:9b:
                    55:07:69:d9:7b:f1:ec:52:9d:73:14:8c:8d:65:41:
                    a6:a3:65:a7:ec:04:a1:3e:e1:d2:21:bc:48:7b:dc:
                    36:d4:b1:76:7a:04:2e:d4:a7:48:1f:54:5f:bc:03:
                    12:1b:ba:90:0d:0c:ac:84:27:85:e7:4d:df:b6:26:
                    47:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A4:3C:48:A0:A1:04:56:1E:99:DC:DB:FC:8C:CF:B2:A2:80:E7:14
            X509v3 Authority Key Identifier:
                keyid:BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131372e302f32342d3234203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:38:e9:36:d0:c9:d4:72:11:51:3f:e1:50:c4:8c:66:e3:72:
         10:86:80:58:a3:05:0b:ae:67:31:e4:df:fa:6a:23:ad:c6:7a:
         00:df:fb:1b:a3:47:8a:63:40:55:95:73:98:60:c2:d1:d9:c4:
         c6:8f:9b:b4:4b:b4:40:e9:b2:a0:bf:dd:11:57:32:0d:4b:12:
         49:45:33:cb:5e:0e:58:2e:36:5e:9b:e5:db:20:07:e6:21:16:
         d7:a1:06:b8:f8:64:f8:18:9b:69:fd:1d:e3:8f:48:1b:49:c2:
         d5:02:b5:6f:8d:b1:7c:14:06:52:22:da:6d:25:98:98:dc:ee:
         5e:6b:5a:e3:1a:9b:76:4f:14:4b:18:43:a2:b3:35:2d:29:33:
         e5:16:bc:ac:fc:de:23:d2:a2:1b:4a:00:1e:b2:d9:c1:8a:34:
         c2:a9:00:fb:00:c9:46:5d:ab:76:57:a4:ef:be:08:81:a5:1d:
         97:ed:27:a9:7b:a4:8c:18:ff:25:e6:32:75:8f:02:97:3b:a1:
         3b:26:17:a8:00:19:2c:4c:30:c4:cb:6a:da:f0:72:d2:c8:46:
         be:cf:cd:c3:dc:51:67:bf:98:0f:51:88:71:76:11:82:61:34:
         94:ef:3c:f1:b9:fd:e4:74:9a:18:34:60:62:b9:c9:7e:4e:3b:
         9c:87:87:0c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfLRmpFKLIjxCXIPpVAcoWOEVjs4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRGOTg0QUE3QjVGMzFFQ0IyRUNFMkI1Njg4ODNDMDk4
NjU0NDNDQjAeFw0yNTA1MTYxMzEyNDlaFw0yNjA1MTUxMzE3NDlaMDMxMTAvBgNV
BAMTKDZFQTQzQzQ4QTBBMTA0NTYxRTk5RENEQkZDOENDRkIyQTI4MEU3MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCs7EylEQRfa+9+IQoisZRdm0D
DkSaGB68220FYw6CssCgPTwSPwkUhZHM59Dd/FzqxGIzGFdQ+cTlQoicfWzigub0
YOFZUYiOHC1VohrBSLcGJt5knip9NXCsZLjahI2XB5nUZJTeOu26B+SeXd/X/QVF
p0I6RmfFaxwJjw3xPUdfaG8DnF2ax5u1+FkjcYXWHT6Mn4K0RQRFR7sRkx8jP8fZ
VIYwPC6/Z50BrMwgS3whLTx7hOndxNxicH1+H64fm1UHadl78exSnXMUjI1lQaaj
ZafsBKE+4dIhvEh73DbUsXZ6BC7Up0gfVF+8AxIbupANDKyEJ4XnTd+2JkdRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUbqQ8SKChBFYemdzb/IzPsqKA5xQwHwYDVR0j
BBgwFoAUvfmEqntfMeyy7OK1aIg8CYZUQ8swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXgxREJyNXVpajlyVXVjMzlwSlRpMlBCWXpFaXlCalhtWlBpY0t5NUFl
VU0vMC9CREY5ODRBQTdCNUYzMUVDQjJFQ0UyQjU2ODg4M0MwOTg2NTQ0M0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERjk4NEFBN0I1RjMxRUNC
MkVDRTJCNTY4ODgzQzA5ODY1NDQzQ0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV4MURCcjV1aWo5clV1YzM5cEpUaTJQQll6RWl5QmpYbVpQaWNLeTVBZVVNLzAv
MzEzNzM5MmUzMTMwMzkyZTMxMzEzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM3MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALNtdTANBgkqhkiG9w0BAQsFAAOCAQEArzjp
NtDJ1HIRUT/hUMSMZuNyEIaAWKMFC65nMeTf+mojrcZ6AN/7G6NHimNAVZVzmGDC
0dnExo+btEu0QOmyoL/dEVcyDUsSSUUzy14OWC42Xpvl2yAH5iEW16EGuPhk+Bib
af0d449IG0nC1QK1b42xfBQGUiLabSWYmNzuXmta4xqbdk8USxhDorM1LSkz5Ra8
rPzeI9KiG0oAHrLZwYo0wqkA+wDJRl2rdlek774IgaUdl+0nqXukjBj/JeYydY8C
lzuhOyYXqAAZLEwwxMtq2vBy0shGvs/Nw9xRZ7+YD1GIcXYRgmE0lO888bn95HSa
GDRgYrnJfk47nIeHDA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 05:54:24 2025 by rpki-client