Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/3137372e3132392e3232302e302f32322d3332203d3e20323731363434.roa
File:                     3137372e3132392e3232302e302f32322d3332203d3e20323731363434.roa (raw, json)
Hash identifier:          ptIAEI9JmYgLEgDsDekVmfQdWjUKmrVkfNlDDTwbKz4=
Subject key identifier:   62:B4:40:ED:5E:5D:2E:0F:FA:89:AF:46:D2:68:A8:49:D5:EC:67:C5
Certificate issuer:       /CN=2BD48FEDF99502AA90CEB1258214DB7F00A373AB
Certificate serial:       4CB5AFF8898BC2040EE0AABDE88BA37ABAFE384A
Authority key identifier: 2B:D4:8F:ED:F9:95:02:AA:90:CE:B1:25:82:14:DB:7F:00:A3:73:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/3137372e3132392e3232302e302f32322d3332203d3e20323731363434.roa
Signing time:             Tue 27 May 2025 20:56:29 +0000
ROA not before:           Tue 27 May 2025 20:51:29 +0000
ROA not after:            Tue 26 May 2026 20:56:29 +0000
asID:                     271644
IP address blocks:        177.129.220.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.crl
                          rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 17:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b5:af:f8:89:8b:c2:04:0e:e0:aa:bd:e8:8b:a3:7a:ba:fe:38:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD48FEDF99502AA90CEB1258214DB7F00A373AB
        Validity
            Not Before: May 27 20:51:29 2025 GMT
            Not After : May 26 20:56:29 2026 GMT
        Subject: CN=62B440ED5E5D2E0FFA89AF46D268A849D5EC67C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:ba:7b:41:ef:13:9b:46:b0:69:59:9d:27:
                    02:9e:0f:48:89:b8:9a:c6:19:26:11:74:f3:07:72:
                    82:7d:ec:ad:0f:92:f8:e3:4e:9b:ee:5d:78:e0:d7:
                    16:46:b4:a7:1a:f8:9b:9f:6f:8a:ef:f2:b6:83:d7:
                    98:7e:76:b5:ce:a8:98:ce:c2:3e:9c:27:37:1b:46:
                    0e:ea:39:73:b2:5e:09:db:cf:fe:35:dd:c7:1b:a3:
                    da:4d:4c:91:41:cc:47:62:ef:e3:db:b8:2b:5a:45:
                    6c:fc:fc:02:cd:8a:19:87:e1:87:20:2f:f9:61:f6:
                    6a:d6:52:ef:41:cb:9f:12:13:1c:7c:90:01:79:32:
                    d4:eb:30:01:77:dd:20:5a:13:83:17:5b:be:09:aa:
                    f6:d4:ed:d9:1c:2b:42:8d:2e:08:50:9d:ce:18:1a:
                    69:d1:9b:24:7f:e7:9e:7d:3b:22:dc:d7:f7:e6:6f:
                    ea:df:4b:0e:fc:96:fe:71:d1:e0:4c:bb:1d:ce:6e:
                    28:20:56:2d:96:44:97:71:e4:6d:82:2f:7c:3f:65:
                    e1:57:b3:4a:7f:7c:77:11:2b:f2:09:a7:cc:cb:5b:
                    6a:46:0e:9b:28:3f:c6:b8:61:20:7a:47:b5:c6:ef:
                    12:f4:1a:19:16:27:67:f5:58:a4:05:2d:a1:7a:2f:
                    41:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B4:40:ED:5E:5D:2E:0F:FA:89:AF:46:D2:68:A8:49:D5:EC:67:C5
            X509v3 Authority Key Identifier:
                keyid:2B:D4:8F:ED:F9:95:02:AA:90:CE:B1:25:82:14:DB:7F:00:A3:73:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/3137372e3132392e3232302e302f32322d3332203d3e20323731363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:95:78:90:e8:a2:74:b9:e1:85:09:ab:36:f0:03:d0:73:9b:
         54:b5:6c:6e:52:25:ea:e2:1d:d1:01:59:ca:01:70:1b:c8:e4:
         cd:bf:3b:06:db:fd:a4:22:72:d9:23:c4:ca:18:f7:fd:c9:83:
         8c:23:26:ad:d7:32:66:6c:f3:b3:0a:f0:fe:30:3c:fb:bb:4e:
         39:8b:18:73:7a:8f:c8:02:b8:a2:af:04:46:b1:47:5f:6b:38:
         7f:6e:e3:cd:a5:b7:cf:70:6c:cf:e2:cd:ef:c1:83:32:76:c5:
         de:da:c4:69:ba:a1:5b:af:39:00:2b:04:20:ea:ae:2c:24:3e:
         99:d2:f2:51:04:2b:67:d1:e0:87:70:ae:58:88:f4:5d:ee:32:
         82:01:64:8a:b8:94:3d:47:cb:6d:cf:99:f0:f9:b8:8e:49:8c:
         93:e6:8a:12:b8:ae:72:ba:93:ec:11:5d:6f:81:18:23:58:79:
         a0:4e:20:aa:b5:8d:43:1f:d3:d0:df:17:d4:e8:98:df:aa:30:
         ce:78:5a:f1:68:dd:39:01:99:f5:38:85:37:d9:0b:ef:b2:9a:
         06:f5:90:47:cd:a4:79:f8:9b:d8:0a:b9:8a:f1:94:f7:e7:8b:
         61:e3:c6:7d:29:61:80:12:a1:09:32:28:94:12:dc:a3:25:bd:
         05:e1:c3:78
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTLWv+ImLwgQO4Kq96Iujerr+OEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJENDhGRURGOTk1MDJBQTkwQ0VCMTI1ODIxNERCN0Yw
MEEzNzNBQjAeFw0yNTA1MjcyMDUxMjlaFw0yNjA1MjYyMDU2MjlaMDMxMTAvBgNV
BAMTKDYyQjQ0MEVENUU1RDJFMEZGQTg5QUY0NkQyNjhBODQ5RDVFQzY3QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHtLp7Qe8Tm0awaVmdJwKeD0iJ
uJrGGSYRdPMHcoJ97K0PkvjjTpvuXXjg1xZGtKca+Jufb4rv8raD15h+drXOqJjO
wj6cJzcbRg7qOXOyXgnbz/413ccbo9pNTJFBzEdi7+PbuCtaRWz8/ALNihmH4Ycg
L/lh9mrWUu9By58SExx8kAF5MtTrMAF33SBaE4MXW74JqvbU7dkcK0KNLghQnc4Y
GmnRmyR/5559OyLc1/fmb+rfSw78lv5x0eBMux3ObiggVi2WRJdx5G2CL3w/ZeFX
s0p/fHcRK/IJp8zLW2pGDpsoP8a4YSB6R7XG7xL0GhkWJ2f1WKQFLaF6L0FTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUYrRA7V5dLg/6ia9G0mioSdXsZ8UwHwYDVR0j
BBgwFoAUK9SP7fmVAqqQzrElghTbfwCjc6swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1Q1MW1yVzNmb1FpNXZKaWJyMXpoaXNlaXpCVUxqTjhZS1hvbUhjenZi
ZEwvMC8yQkQ0OEZFREY5OTUwMkFBOTBDRUIxMjU4MjE0REI3RjAwQTM3M0FCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCRDQ4RkVERjk5NTAyQUE5
MENFQjEyNTgyMTREQjdGMDBBMzczQUIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdUNTFtclczZm9RaTV2SmlicjF6aGlzZWl6QlVMak44WUtYb21IY3p2YmRMLzAv
MzEzNzM3MmUzMTMyMzkyZTMyMzIzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzczMTM2MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArGB3DANBgkqhkiG9w0BAQsFAAOCAQEAbJV4
kOiidLnhhQmrNvAD0HObVLVsblIl6uId0QFZygFwG8jkzb87Btv9pCJy2SPEyhj3
/cmDjCMmrdcyZmzzswrw/jA8+7tOOYsYc3qPyAK4oq8ERrFHX2s4f27jzaW3z3Bs
z+LN78GDMnbF3trEabqhW685ACsEIOquLCQ+mdLyUQQrZ9Hgh3CuWIj0Xe4yggFk
iriUPUfLbc+Z8Pm4jkmMk+aKEriucrqT7BFdb4EYI1h5oE4gqrWNQx/T0N8X1OiY
36owznha8WjdOQGZ9TiFN9kL77KaBvWQR82kefib2Aq5ivGU9+eLYePGfSlhgBKh
CTIolBLcoyW9BeHDeA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 21:14:09 2025 by rpki-client