Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39302e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e39302e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          xuRQErE8UbYm1gtKnUQ9elA12bk+BU8tghNmRni/9zA=
Subject key identifier:   96:AF:DD:E4:1F:F7:39:ED:33:7A:F3:A4:92:5B:65:48:AB:3E:33:D7
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       1C824F9AEAE9241D44ED3149CA70DBDCFC4A44EA
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39302e302f32332d3233203d3e203533303437.roa
Signing time:             Thu 05 Dec 2024 13:04:02 +0000
ROA not before:           Thu 05 Dec 2024 12:59:02 +0000
ROA not after:            Thu 04 Dec 2025 13:04:02 +0000
asID:                     53047
IP address blocks:        177.101.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 23:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:82:4f:9a:ea:e9:24:1d:44:ed:31:49:ca:70:db:dc:fc:4a:44:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Dec  5 12:59:02 2024 GMT
            Not After : Dec  4 13:04:02 2025 GMT
        Subject: CN=96AFDDE41FF739ED337AF3A4925B6548AB3E33D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:80:92:e3:db:76:6d:3e:c4:f9:73:86:37:af:
                    8d:61:f3:a7:fb:97:a8:41:fc:b7:73:d1:f0:0d:cf:
                    b4:2c:01:4b:2f:99:f2:05:07:5a:15:4e:72:b2:bc:
                    6b:4d:8a:16:e8:18:8c:23:f0:3c:1a:b9:d6:da:2c:
                    ff:b9:ff:ba:de:65:5b:61:74:4e:24:be:df:7d:5c:
                    e3:98:a8:50:75:b5:e9:4b:77:fe:1f:f9:37:f4:66:
                    46:d1:62:de:58:da:89:e3:28:a3:ea:a7:55:12:7b:
                    08:00:4c:18:56:34:60:05:96:e4:fb:6e:8a:05:84:
                    bb:b6:94:02:d2:99:1a:d5:60:ba:88:c0:48:6f:d7:
                    a2:cc:e9:6e:40:d4:d8:f0:63:1c:ce:94:6a:ca:75:
                    92:71:36:2a:a8:dc:1c:04:f1:e3:56:eb:d8:57:31:
                    ba:6a:83:9c:5e:39:c0:34:43:d0:4e:84:df:93:d0:
                    67:9c:ea:b8:2c:27:3b:75:06:67:24:01:ca:5d:ef:
                    10:ce:07:a4:77:77:f5:b7:4d:ea:ee:8d:02:f5:07:
                    c4:22:db:91:cc:f3:e2:5f:40:f4:91:d8:f2:e8:7e:
                    80:25:6c:ef:38:d6:9c:78:d2:4b:30:a3:48:82:07:
                    d5:b7:d9:28:9d:80:ae:6f:03:f8:05:52:a6:f9:10:
                    b8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AF:DD:E4:1F:F7:39:ED:33:7A:F3:A4:92:5B:65:48:AB:3E:33:D7
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39302e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:c9:64:9a:3c:af:43:82:ab:59:26:25:c5:90:7c:fa:df:27:
         7c:84:80:6c:70:70:66:66:55:8a:e6:af:7e:fa:ec:8d:27:ee:
         06:61:5d:1a:35:ba:a9:61:d8:8b:c3:bd:b4:73:6e:40:b7:4f:
         df:8b:23:13:03:a6:7c:e2:e4:0d:58:65:c9:9b:8e:01:9d:3a:
         54:d9:4f:ca:c6:fe:01:99:ad:10:46:de:81:69:13:fd:8b:dc:
         f6:91:3a:ab:34:04:29:c8:1a:3e:02:2f:d7:3b:1a:3d:9c:07:
         20:43:d1:2a:3c:0c:74:a1:e8:90:06:4b:a4:b2:15:93:f1:49:
         1a:fc:2e:55:92:db:1b:37:50:1b:bd:c4:b0:68:76:b9:e8:c9:
         ca:59:92:bf:47:0d:c5:de:d7:a2:bd:9a:67:33:b1:a1:ac:f0:
         32:60:f2:cc:ac:e8:77:33:75:1a:e7:ef:99:8b:bb:e1:81:7f:
         e5:1b:80:1d:f2:8a:72:2b:4d:4c:df:af:4f:87:3a:97:b1:bc:
         65:1b:45:cc:ff:f5:2a:84:18:4c:6e:a0:2e:82:13:7f:b6:5f:
         43:27:32:ca:28:06:d7:df:b4:52:50:4a:09:18:ff:dd:c4:a3:
         39:95:e7:b9:72:c0:6a:15:74:07:f8:ea:72:f3:a8:ec:08:1b:
         a7:c3:4a:1a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHIJPmurpJB1E7TFJynDb3PxKROowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1MDMzOEE0QzQ3QkQ5NUE3RUVCNDhCRERBNUMxQjk3
NjUyMjZGMTAeFw0yNDEyMDUxMjU5MDJaFw0yNTEyMDQxMzA0MDJaMDMxMTAvBgNV
BAMTKDk2QUZEREU0MUZGNzM5RUQzMzdBRjNBNDkyNUI2NTQ4QUIzRTMzRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgJLj23ZtPsT5c4Y3r41h86f7
l6hB/Ldz0fANz7QsAUsvmfIFB1oVTnKyvGtNihboGIwj8DwaudbaLP+5/7reZVth
dE4kvt99XOOYqFB1telLd/4f+Tf0ZkbRYt5Y2onjKKPqp1USewgATBhWNGAFluT7
booFhLu2lALSmRrVYLqIwEhv16LM6W5A1NjwYxzOlGrKdZJxNiqo3BwE8eNW69hX
Mbpqg5xeOcA0Q9BOhN+T0Gec6rgsJzt1BmckAcpd7xDOB6R3d/W3TerujQL1B8Qi
25HM8+JfQPSR2PLofoAlbO841px40kswo0iCB9W32SidgK5vA/gFUqb5ELidAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUlq/d5B/3Oe0zevOkkltlSKs+M9cwHwYDVR0j
BBgwFoAU1FAzikxHvZWn7rSL3aXBuXZSJvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9ENDUwMzM4QTRDNDdCRDk1QTdFRUI0OEJEREE1QzFCOTc2NTIyNkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NTAzMzhBNEM0N0JEOTVB
N0VFQjQ4QkREQTVDMUI5NzY1MjI2RjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzEzNzM3MmUzMTMwMzEyZTM5MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsWVaMA0GCSqGSIb3DQEBCwUAA4IBAQCRyWSaPK9D
gqtZJiXFkHz63yd8hIBscHBmZlWK5q9++uyNJ+4GYV0aNbqpYdiLw720c25At0/f
iyMTA6Z84uQNWGXJm44BnTpU2U/Kxv4Bma0QRt6BaRP9i9z2kTqrNAQpyBo+Ai/X
Oxo9nAcgQ9EqPAx0oeiQBkukshWT8Uka/C5VktsbN1AbvcSwaHa56MnKWZK/Rw3F
3teivZpnM7GhrPAyYPLMrOh3M3Ua5++Zi7vhgX/lG4Ad8opyK01M369PhzqXsbxl
G0XM//UqhBhMbqAughN/tl9DJzLKKAbX37RSUEoJGP/dxKM5lee5csBqFXQH+Opy
86jsCBunw0oa
-----END CERTIFICATE-----
Generated at Wed Apr 16 00:31:51 2025 by rpki-client