Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38342e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38342e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          TqzBUX8QwYiH2p73wi0XvUB+AjAIxhjbVj6D9HrUFDA=
Subject key identifier:   5A:CA:C8:F1:F2:69:E2:AD:3B:B8:83:85:2A:D0:31:42:E6:F9:E2:70
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       43A1A1E69AD926C02388ABD4410AF42CA574711A
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38342e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 05 Dec 2024 13:01:45 +0000
ROA not before:           Thu 05 Dec 2024 12:56:45 +0000
ROA not after:            Thu 04 Dec 2025 13:01:45 +0000
asID:                     53047
IP address blocks:        177.101.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a1:a1:e6:9a:d9:26:c0:23:88:ab:d4:41:0a:f4:2c:a5:74:71:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Dec  5 12:56:45 2024 GMT
            Not After : Dec  4 13:01:45 2025 GMT
        Subject: CN=5ACAC8F1F269E2AD3BB883852AD03142E6F9E270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:c1:4e:35:19:1f:84:f4:2b:6f:41:60:4e:
                    4b:b1:7e:a8:7c:1f:ef:58:5e:03:72:d5:86:04:d1:
                    4a:c6:59:ff:c9:75:41:5d:f5:f5:fe:fa:df:9a:18:
                    1c:77:f1:d3:17:d2:d6:66:50:92:5e:05:e6:f9:17:
                    da:fd:5a:78:74:fb:1a:ba:08:5b:61:29:30:78:47:
                    bb:91:d6:6e:04:a3:1d:82:c3:9e:73:ba:03:43:04:
                    85:82:f2:84:6c:c4:54:18:a2:df:8c:0a:62:85:fc:
                    7d:61:3b:9f:ea:b5:59:59:67:2c:4d:0a:1e:0d:a4:
                    f3:dc:13:61:5d:70:5c:92:b8:5b:5b:c8:0f:a2:19:
                    b1:10:90:bc:d3:36:75:dd:99:75:e0:3c:66:56:86:
                    b8:56:c1:24:cd:2d:65:48:01:e7:84:39:2e:05:c4:
                    91:1c:2f:27:63:23:14:cc:c7:c9:6e:24:31:01:f3:
                    8e:75:9b:13:9e:02:6e:22:45:bc:05:01:99:dc:55:
                    05:3d:ab:4d:53:11:69:7f:31:a0:95:dd:57:58:2a:
                    fa:36:bf:79:75:01:a2:72:05:68:b3:bd:ee:1a:bc:
                    37:a9:27:4a:a6:6c:f3:ca:a9:18:fa:9d:e5:0b:6f:
                    7c:e1:ee:0d:a4:2b:e2:b9:bb:72:57:fc:27:63:82:
                    a4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CA:C8:F1:F2:69:E2:AD:3B:B8:83:85:2A:D0:31:42:E6:F9:E2:70
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38342e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:81:1a:af:59:a1:58:1d:c1:94:1e:06:cf:c2:b1:36:56:09:
         91:ba:5a:72:fe:91:fe:ed:58:af:06:15:59:f3:44:17:0c:eb:
         a2:e1:ec:1d:f1:db:d7:8d:1f:6f:4c:5a:c5:6a:11:92:00:e7:
         27:4b:f0:bf:cb:55:ed:69:f1:b1:1e:0e:f7:cc:96:2c:b5:77:
         0f:cb:6e:3f:d8:6f:80:93:9e:f1:62:0f:50:2f:26:9d:84:a1:
         1e:a3:c6:da:ab:0b:f2:4f:8a:68:82:d1:08:31:1b:e7:0d:e8:
         45:76:34:9e:bc:86:e4:b0:52:41:ba:80:b4:3f:fc:d2:a4:5f:
         9f:a0:2f:17:01:98:b6:9d:ec:78:7f:e4:c5:5d:89:a2:8f:82:
         4e:11:af:3a:5e:0e:f5:9f:db:15:31:05:fc:31:29:11:e6:21:
         7f:3f:33:a9:4f:57:5c:db:15:c1:9f:14:f2:fc:12:9a:1f:0f:
         f0:33:62:e3:23:10:84:97:93:7f:de:04:06:e7:40:73:c5:e3:
         95:9c:48:2f:ab:7b:15:05:63:09:3f:92:04:b9:43:93:4f:c1:
         4a:a7:39:81:21:89:e7:b1:ee:6f:be:67:44:32:f8:7a:c8:81:
         b8:fb:63:3a:0b:dc:14:b3:1f:37:65:b9:11:37:78:8e:0d:1a:
         a2:b1:c1:6c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQ6Gh5prZJsAjiKvUQQr0LKV0cRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1MDMzOEE0QzQ3QkQ5NUE3RUVCNDhCRERBNUMxQjk3
NjUyMjZGMTAeFw0yNDEyMDUxMjU2NDVaFw0yNTEyMDQxMzAxNDVaMDMxMTAvBgNV
BAMTKDVBQ0FDOEYxRjI2OUUyQUQzQkI4ODM4NTJBRDAzMTQyRTZGOUUyNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwE8FONRkfhPQrb0FgTkuxfqh8
H+9YXgNy1YYE0UrGWf/JdUFd9fX++t+aGBx38dMX0tZmUJJeBeb5F9r9Wnh0+xq6
CFthKTB4R7uR1m4Eox2Cw55zugNDBIWC8oRsxFQYot+MCmKF/H1hO5/qtVlZZyxN
Ch4NpPPcE2FdcFySuFtbyA+iGbEQkLzTNnXdmXXgPGZWhrhWwSTNLWVIAeeEOS4F
xJEcLydjIxTMx8luJDEB8451mxOeAm4iRbwFAZncVQU9q01TEWl/MaCV3VdYKvo2
v3l1AaJyBWizve4avDepJ0qmbPPKqRj6neULb3zh7g2kK+K5u3JX/CdjgqRFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWsrI8fJp4q07uIOFKtAxQub54nAwHwYDVR0j
BBgwFoAU1FAzikxHvZWn7rSL3aXBuXZSJvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9ENDUwMzM4QTRDNDdCRDk1QTdFRUI0OEJEREE1QzFCOTc2NTIyNkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NTAzMzhBNEM0N0JEOTVB
N0VFQjQ4QkREQTVDMUI5NzY1MjI2RjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzEzNzM3MmUzMTMwMzEyZTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsWVUMA0GCSqGSIb3DQEBCwUAA4IBAQC3gRqvWaFY
HcGUHgbPwrE2VgmRulpy/pH+7VivBhVZ80QXDOui4ewd8dvXjR9vTFrFahGSAOcn
S/C/y1XtafGxHg73zJYstXcPy24/2G+Ak57xYg9QLyadhKEeo8baqwvyT4pogtEI
MRvnDehFdjSevIbksFJBuoC0P/zSpF+foC8XAZi2nex4f+TFXYmij4JOEa86Xg71
n9sVMQX8MSkR5iF/PzOpT1dc2xXBnxTy/BKaHw/wM2LjIxCEl5N/3gQG50BzxeOV
nEgvq3sVBWMJP5IEuUOTT8FKpzmBIYnnse5vvmdEMvh6yIG4+2M6C9wUsx83ZbkR
N3iODRqiscFs
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:34 2025 by rpki-client