Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e302e302f32342d3234203d3e20323632363432.roa
File:                     3137372e38372e302e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          kjqAHE04Y1q5GH0AglrpgrMhJPLS3c8D69AShOJjHMM=
Subject key identifier:   9D:84:8B:AC:D0:59:40:6D:E5:CD:64:07:A1:80:94:F3:F3:91:8E:A5
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       038069A6B35A7E91F61050E8AB90ACC7E0AD9A1A
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e302e302f32342d3234203d3e20323632363432.roa
Signing time:             Thu 06 Mar 2025 03:49:56 +0000
ROA not before:           Thu 06 Mar 2025 03:44:56 +0000
ROA not after:            Thu 05 Mar 2026 03:49:56 +0000
asID:                     262642
IP address blocks:        177.87.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:80:69:a6:b3:5a:7e:91:f6:10:50:e8:ab:90:ac:c7:e0:ad:9a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Mar  6 03:44:56 2025 GMT
            Not After : Mar  5 03:49:56 2026 GMT
        Subject: CN=9D848BACD059406DE5CD6407A18094F3F3918EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:73:a3:24:c8:74:69:17:e0:b4:45:52:a1:53:
                    fe:b8:d8:ee:7d:b2:6c:ec:07:27:55:0f:04:3d:55:
                    ce:e1:75:da:3f:c0:c4:14:75:9c:21:8e:50:86:0e:
                    a2:d1:24:0f:34:68:a9:09:8f:db:d3:86:53:70:38:
                    1c:0a:75:e3:b0:a6:74:91:40:f2:0f:01:ad:de:f4:
                    30:53:6c:06:b9:7f:42:29:40:70:07:6f:a3:59:eb:
                    ee:56:4b:0e:79:b9:67:d3:61:14:2f:70:b2:e0:bb:
                    60:8a:5d:37:b0:0a:2b:6a:bc:9f:ca:34:08:33:17:
                    72:80:f7:80:ad:fb:30:ea:23:aa:a8:6d:fe:9d:f2:
                    6f:7c:97:73:41:8a:c1:8c:fa:2f:ab:34:0a:c0:26:
                    bc:da:3d:f7:ea:53:5e:23:a0:56:27:a7:b7:78:d2:
                    b0:9d:c3:d6:48:48:96:40:08:81:cd:5c:26:03:e4:
                    74:67:86:d0:3b:8a:2f:44:ca:ed:cc:66:5f:1f:72:
                    87:8f:81:50:71:aa:47:15:ba:78:0b:c3:6a:2a:ad:
                    92:ef:1b:67:90:ab:e4:ad:56:c5:fd:02:95:78:5b:
                    65:ae:11:24:7a:39:f2:78:46:80:96:ec:86:94:3f:
                    28:bf:58:ae:6d:c1:63:19:d6:49:b3:e0:1d:cc:83:
                    7d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:84:8B:AC:D0:59:40:6D:E5:CD:64:07:A1:80:94:F3:F3:91:8E:A5
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e302e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:11:84:49:be:2a:f6:f2:94:6c:8b:a6:7b:3d:a6:81:5e:45:
         79:0b:b7:9f:53:b2:f2:11:e3:dc:98:b7:21:63:4b:35:66:ff:
         67:72:ea:1e:02:8b:df:28:d4:e5:25:82:85:3b:71:bf:10:20:
         5a:52:7a:9e:eb:97:ac:81:a9:d5:aa:98:83:c1:12:79:fa:4f:
         86:2f:bb:ad:75:56:93:c1:2b:77:2b:4f:21:01:f1:88:83:83:
         57:26:b9:95:cf:1c:40:ae:7f:8f:5b:9a:68:18:26:05:c2:c5:
         78:de:fc:0b:d0:59:d4:fa:c1:7e:7e:86:7c:5f:2f:15:bc:c5:
         89:52:8c:16:58:db:0f:62:18:7a:ea:df:81:4b:df:1b:4b:e6:
         26:c9:3e:8b:b2:41:53:88:b0:44:b3:86:d6:1a:d7:82:88:36:
         aa:56:3e:17:a7:bb:44:a8:18:12:69:9e:11:83:ed:50:c2:68:
         29:59:fd:8d:25:5b:fb:f2:18:2e:f2:ff:88:9b:15:e9:91:9f:
         a7:14:6d:fc:8c:27:3b:8e:fa:91:ff:58:37:8b:fe:cf:18:57:
         bd:da:8b:e2:54:7f:bb:ae:a4:4d:25:eb:3c:ed:0f:fa:30:79:
         67:92:25:ee:0e:b2:af:b1:36:67:44:bc:d3:8d:37:43:3b:2c:
         64:ff:4d:bb
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUA4BpprNafpH2EFDoq5Csx+CtmhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ4RDhEOTZGMUZGRUM1RjIwQzZGMUY3MzNFRTY5NTAz
RTcxNjc0NTAeFw0yNTAzMDYwMzQ0NTZaFw0yNjAzMDUwMzQ5NTZaMDMxMTAvBgNV
BAMTKDlEODQ4QkFDRDA1OTQwNkRFNUNENjQwN0ExODA5NEYzRjM5MThFQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdc6MkyHRpF+C0RVKhU/642O59
smzsBydVDwQ9Vc7hddo/wMQUdZwhjlCGDqLRJA80aKkJj9vThlNwOBwKdeOwpnSR
QPIPAa3e9DBTbAa5f0IpQHAHb6NZ6+5WSw55uWfTYRQvcLLgu2CKXTewCitqvJ/K
NAgzF3KA94Ct+zDqI6qobf6d8m98l3NBisGM+i+rNArAJrzaPffqU14joFYnp7d4
0rCdw9ZISJZACIHNXCYD5HRnhtA7ii9Eyu3MZl8fcoePgVBxqkcVungLw2oqrZLv
G2eQq+StVsX9ApV4W2WuESR6OfJ4RoCW7IaUPyi/WK5twWMZ1kmz4B3Mg31hAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUnYSLrNBZQG3lzWQHoYCU8/ORjqUwHwYDVR0j
BBgwFoAUxI2NlvH/7F8gxvH3M+5pUD5xZ0UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjlHd2FpakNzZGExTm1EWG5jWGlkeDJyTGZiTWFtd3VKVXlUNFNvczUy
YWYvMS9DNDhEOEQ5NkYxRkZFQzVGMjBDNkYxRjczM0VFNjk1MDNFNzE2NzQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0OEQ4RDk2RjFGRkVDNUYy
MEM2RjFGNzMzRUU2OTUwM0U3MTY3NDUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5R3dhaWpDc2RhMU5tRFhuY1hpZHgyckxmYk1hbXd1SlV5VDRTb3M1MmFmLzEv
MzEzNzM3MmUzODM3MmUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM2
MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFXADANBgkqhkiG9w0BAQsFAAOCAQEAlxGESb4q9vKU
bIumez2mgV5FeQu3n1Oy8hHj3Ji3IWNLNWb/Z3LqHgKL3yjU5SWChTtxvxAgWlJ6
nuuXrIGp1aqYg8ESefpPhi+7rXVWk8ErdytPIQHxiIODVya5lc8cQK5/j1uaaBgm
BcLFeN78C9BZ1PrBfn6GfF8vFbzFiVKMFljbD2IYeurfgUvfG0vmJsk+i7JBU4iw
RLOG1hrXgog2qlY+F6e7RKgYEmmeEYPtUMJoKVn9jSVb+/IYLvL/iJsV6ZGfpxRt
/IwnO476kf9YN4v+zxhXvdqL4lR/u66kTSXrPO0P+jB5Z5Il7g6yr7E2Z0S80403
QzssZP9Nuw==
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:28:51 2025 by rpki-client