Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232362e302f32342d3234203d3e20323632333133.roa
File:                     3137372e3130352e3232362e302f32342d3234203d3e20323632333133.roa (raw, json)
Hash identifier:          VZr2TUKGDgC+5PhaiVuJUS7svGl3Ht3RDJ9NI12DjFE=
Subject key identifier:   40:B4:25:22:F6:11:78:63:25:2D:E0:04:89:A7:13:B0:03:DD:09:51
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       2763BADD9DCA35B19BB512B29D5C9E09A9126315
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232362e302f32342d3234203d3e20323632333133.roa
Signing time:             Wed 05 Mar 2025 22:00:29 +0000
ROA not before:           Wed 05 Mar 2025 21:55:29 +0000
ROA not after:            Wed 04 Mar 2026 22:00:29 +0000
asID:                     262313
IP address blocks:        177.105.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 00:33:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:63:ba:dd:9d:ca:35:b1:9b:b5:12:b2:9d:5c:9e:09:a9:12:63:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Mar  5 21:55:29 2025 GMT
            Not After : Mar  4 22:00:29 2026 GMT
        Subject: CN=40B42522F6117863252DE00489A713B003DD0951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1d:02:12:05:1d:3c:f1:fd:a7:97:88:d8:11:
                    ae:6f:da:ae:d9:5b:8e:a5:09:d2:7b:86:27:58:be:
                    57:0b:ff:d9:7f:d6:1d:89:40:61:95:2b:f3:ed:20:
                    24:89:ae:f1:18:ff:05:98:62:df:11:7d:08:ec:5a:
                    cf:fb:8a:65:1a:20:ac:be:21:c3:c1:9d:51:bf:f0:
                    79:02:1f:2a:4f:77:39:18:02:1b:78:2a:cc:cd:c9:
                    85:3d:dc:73:1d:18:5c:3a:d3:30:40:67:d7:74:91:
                    5b:9b:61:87:21:af:23:81:c3:2a:a7:8f:0b:39:ab:
                    89:6c:0b:13:ff:d3:30:99:22:fb:c4:a8:46:1b:f6:
                    7d:dd:3c:54:be:88:b0:de:c5:cc:46:04:80:37:71:
                    99:01:72:d6:83:bb:5d:4b:a1:ea:de:e8:82:c3:89:
                    4c:d6:e6:c0:63:33:d3:44:57:58:03:fb:01:f3:dc:
                    b8:48:20:7d:85:c6:b7:f7:8c:b1:47:c5:33:14:69:
                    a1:d3:c1:7b:26:1c:af:cf:6b:2f:66:75:77:0f:fd:
                    de:dc:1b:a4:4a:80:ea:28:00:fc:bf:e0:a8:43:50:
                    49:a0:00:1f:b7:14:92:9d:58:53:2a:40:1c:bf:bc:
                    e9:44:07:94:1c:aa:fa:0e:10:57:28:64:54:b6:7f:
                    03:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B4:25:22:F6:11:78:63:25:2D:E0:04:89:A7:13:B0:03:DD:09:51
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232362e302f32342d3234203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:e2:49:1d:53:19:ab:72:4c:2a:53:fe:30:f3:78:61:ac:86:
         9f:e3:a7:6c:bf:8b:95:4b:5c:6d:39:ae:df:2d:8b:5d:55:9f:
         d6:1d:28:bf:eb:81:32:9e:45:b6:ba:5b:45:16:ac:62:d0:94:
         24:0c:d2:8f:97:ac:17:a9:9f:84:e3:be:7d:a1:ab:0c:78:4f:
         95:82:c3:ff:1b:7b:a8:60:02:c6:a8:15:c0:4f:23:e2:14:64:
         e6:bb:f7:fe:4b:6a:1a:d0:00:25:52:dc:e1:8b:9f:7e:55:68:
         dd:7c:5c:94:f2:cb:1d:09:9d:78:08:04:ca:b0:fa:05:84:19:
         a6:bd:c4:dc:90:20:5f:8c:0b:77:12:7b:b6:45:82:49:9d:7e:
         57:6d:c8:2a:e5:c1:15:48:17:ff:e2:f5:3b:4b:b2:8a:4e:4a:
         34:6e:b5:71:58:30:1e:7b:15:52:1e:67:fb:ea:ee:28:df:ae:
         dc:e6:0f:ee:c3:b9:78:cf:76:21:af:18:fa:bf:ca:31:80:40:
         62:21:91:fb:ff:f4:8c:ca:83:bd:b1:05:e7:55:c6:c9:4d:27:
         0e:4e:92:1f:58:46:b4:d0:00:ba:bc:1b:7a:a0:b2:dd:db:df:
         e1:d0:02:d8:b8:09:a8:65:0b:b3:8f:86:4d:8f:1c:e4:21:2a:
         9a:81:bb:e7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJ2O63Z3KNbGbtRKynVyeCakSYxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA0NzU2Q0IwMEY5ODIyQThBNTBDNDdGRDk0Q0VDNURG
MzFEQTk0QjAeFw0yNTAzMDUyMTU1MjlaFw0yNjAzMDQyMjAwMjlaMDMxMTAvBgNV
BAMTKDQwQjQyNTIyRjYxMTc4NjMyNTJERTAwNDg5QTcxM0IwMDNERDA5NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHQISBR088f2nl4jYEa5v2q7Z
W46lCdJ7hidYvlcL/9l/1h2JQGGVK/PtICSJrvEY/wWYYt8RfQjsWs/7imUaIKy+
IcPBnVG/8HkCHypPdzkYAht4KszNyYU93HMdGFw60zBAZ9d0kVubYYchryOBwyqn
jws5q4lsCxP/0zCZIvvEqEYb9n3dPFS+iLDexcxGBIA3cZkBctaDu11Loere6ILD
iUzW5sBjM9NEV1gD+wHz3LhIIH2Fxrf3jLFHxTMUaaHTwXsmHK/Pay9mdXcP/d7c
G6RKgOooAPy/4KhDUEmgAB+3FJKdWFMqQBy/vOlEB5QcqvoOEFcoZFS2fwO7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQLQlIvYReGMlLeAEiacTsAPdCVEwHwYDVR0j
BBgwFoAU0EdWywD5giqKUMR/2UzsXfMdqUswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0ozTFVzRHhWS1RFZmd5OG1jQ0hlc3FyTnhMc2trS3pxaEVwZ1FDVjZw
WnMvMS9EMDQ3NTZDQjAwRjk4MjJBOEE1MEM0N0ZEOTRDRUM1REYzMURBOTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNDc1NkNCMDBGOTgyMkE4
QTUwQzQ3RkQ5NENFQzVERjMxREE5NEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdKM0xVc0R4VktURWZneThtY0NIZXNxck54THNra0t6cWhFcGdRQ1Y2cFpzLzEv
MzEzNzM3MmUzMTMwMzUyZTMyMzIzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALFp4jANBgkqhkiG9w0BAQsFAAOCAQEAneJJ
HVMZq3JMKlP+MPN4YayGn+OnbL+LlUtcbTmu3y2LXVWf1h0ov+uBMp5FtrpbRRas
YtCUJAzSj5esF6mfhOO+faGrDHhPlYLD/xt7qGACxqgVwE8j4hRk5rv3/ktqGtAA
JVLc4YufflVo3XxclPLLHQmdeAgEyrD6BYQZpr3E3JAgX4wLdxJ7tkWCSZ1+V23I
KuXBFUgX/+L1O0uyik5KNG61cVgwHnsVUh5n++ruKN+u3OYP7sO5eM92Ia8Y+r/K
MYBAYiGR+//0jMqDvbEF51XGyU0nDk6SH1hGtNAAurwbeqCy3dvf4dAC2LgJqGUL
s4+GTY8c5CEqmoG75w==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:18:09 2025 by rpki-client