Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/3137372e3132342e3131322e302f32312d3234203d3e20313938393439.roa
File:                     3137372e3132342e3131322e302f32312d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          C91+mf1p8hxh/d285BQtBAiWKg3jMftQf0sBi2hDcEc=
Subject key identifier:   06:AF:F4:D2:48:7D:22:6A:07:4C:DB:3D:41:A8:20:0E:D7:1C:54:16
Certificate issuer:       /CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
Certificate serial:       0B854BAC8DDF5A25282CB8F02565D4EE5093A1D7
Authority key identifier: 2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/3137372e3132342e3131322e302f32312d3234203d3e20313938393439.roa
Signing time:             Mon 14 Jul 2025 19:34:35 +0000
ROA not before:           Mon 14 Jul 2025 19:29:35 +0000
ROA not after:            Mon 13 Jul 2026 19:34:35 +0000
asID:                     198949
IP address blocks:        177.124.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl
                          rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 14:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:85:4b:ac:8d:df:5a:25:28:2c:b8:f0:25:65:d4:ee:50:93:a1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
        Validity
            Not Before: Jul 14 19:29:35 2025 GMT
            Not After : Jul 13 19:34:35 2026 GMT
        Subject: CN=06AFF4D2487D226A074CDB3D41A8200ED71C5416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:38:37:5a:80:db:c2:64:4c:ab:07:2f:b2:db:
                    9b:ab:40:6b:db:69:82:b6:84:c8:a3:dd:63:66:bd:
                    f4:6f:9a:78:ba:90:29:86:fc:ce:b1:a7:5f:a1:08:
                    13:03:10:f9:97:af:fd:14:7a:75:6f:fa:23:17:2b:
                    eb:ff:ec:57:4a:61:fc:3d:45:eb:c0:58:c1:75:00:
                    bf:b2:6d:93:3b:6d:bf:37:43:75:41:ec:85:3c:97:
                    b4:85:c3:aa:f9:bf:20:fd:59:cb:bf:5b:7b:76:cd:
                    67:29:c6:6e:c5:9f:0f:9e:d0:2a:eb:d5:5c:03:fb:
                    ec:8a:77:2d:ca:62:0b:af:c4:78:5c:36:79:5a:03:
                    16:24:40:9d:fd:73:2c:17:c1:46:b9:8e:d1:d7:0a:
                    8b:5a:80:6e:23:4c:1e:1b:78:c8:59:0c:42:08:07:
                    50:2f:85:db:f4:69:6d:ac:32:4d:05:0f:6d:54:5a:
                    f8:84:0d:20:dc:d3:3d:ee:69:b4:cd:9e:63:92:3d:
                    5e:37:f8:2e:41:4b:4c:51:5f:51:67:be:02:0c:d2:
                    88:cf:65:94:f9:8e:f8:d4:6c:aa:f9:a6:47:09:a2:
                    f2:79:1e:3d:68:67:5d:f9:09:91:74:a5:4d:08:57:
                    54:f0:3e:01:28:f0:a5:58:92:4e:d6:d5:16:42:60:
                    6f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AF:F4:D2:48:7D:22:6A:07:4C:DB:3D:41:A8:20:0E:D7:1C:54:16
            X509v3 Authority Key Identifier:
                keyid:2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/3137372e3132342e3131322e302f32312d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:98:9b:b6:24:bf:a8:9f:c2:d4:3b:30:08:6f:8e:28:a0:40:
         75:8f:4c:bf:9e:f4:7d:2f:00:53:a9:8f:f2:62:32:57:82:80:
         c1:71:7f:70:5d:e7:34:1f:d1:e6:44:ce:43:eb:3e:55:c1:d2:
         5b:a8:8c:47:8c:6d:32:29:fc:85:6e:94:14:8f:52:29:df:0f:
         5c:ee:ad:16:97:61:ea:ea:eb:52:91:d2:21:0d:11:40:19:71:
         66:34:47:9c:ef:e0:0c:2c:da:45:5c:3b:6f:5c:d5:ec:a0:9b:
         b2:6a:8a:96:17:e8:41:04:0f:61:e5:ac:ef:17:f5:3d:d4:17:
         39:84:f3:48:5f:06:7f:b2:15:0e:89:20:61:42:f6:02:51:84:
         2b:9e:20:2c:48:eb:2b:4e:dd:7a:99:88:19:29:ff:1d:0b:f9:
         33:5c:50:d4:49:22:f1:22:a0:f0:80:76:44:3a:b0:be:ba:67:
         82:49:1f:57:82:1b:93:a3:3b:1a:bf:b1:63:e1:0a:b0:fb:52:
         de:6d:10:ce:19:7b:f3:cc:b6:a6:bf:77:4d:ee:e3:9c:c7:8c:
         b6:08:a4:0f:9a:83:89:d3:2e:52:38:b5:bf:97:97:95:97:fb:
         6f:21:47:20:39:15:cb:f5:da:87:43:ed:1e:5a:a1:1e:9a:59:
         e0:80:e4:21
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUC4VLrI3fWiUoLLjwJWXU7lCTodcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNBRjVBRDFEREQxRUFDNjExOEM5Rjg0NzU1MDZBRkIy
Q0JDMkQyNTAeFw0yNTA3MTQxOTI5MzVaFw0yNjA3MTMxOTM0MzVaMDMxMTAvBgNV
BAMTKDA2QUZGNEQyNDg3RDIyNkEwNzRDREIzRDQxQTgyMDBFRDcxQzU0MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMODdagNvCZEyrBy+y25urQGvb
aYK2hMij3WNmvfRvmni6kCmG/M6xp1+hCBMDEPmXr/0UenVv+iMXK+v/7FdKYfw9
RevAWMF1AL+ybZM7bb83Q3VB7IU8l7SFw6r5vyD9Wcu/W3t2zWcpxm7Fnw+e0Crr
1VwD++yKdy3KYguvxHhcNnlaAxYkQJ39cywXwUa5jtHXCotagG4jTB4beMhZDEII
B1Avhdv0aW2sMk0FD21UWviEDSDc0z3uabTNnmOSPV43+C5BS0xRX1FnvgIM0ojP
ZZT5jvjUbKr5pkcJovJ5Hj1oZ135CZF0pU0IV1TwPgEo8KVYkk7W1RZCYG+9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUBq/00kh9ImoHTNs9QaggDtccVBYwHwYDVR0j
BBgwFoAULK9a0d3R6sYRjJ+EdVBq+yy8LSUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN29DY1ZieUhLa0xDZjk1emtSdDNmeWlzYkhZY24zbzlvWllaNTZaVmJq
SmsvMS8yQ0FGNUFEMURERDFFQUM2MTE4QzlGODQ3NTUwNkFGQjJDQkMyRDI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDQUY1QUQxREREMUVBQzYx
MThDOUY4NDc1NTA2QUZCMkNCQzJEMjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdvQ2NWYnlIS2tMQ2Y5NXprUnQzZnlpc2JIWWNuM285b1pZWjU2WlZiakprLzEv
MzEzNzM3MmUzMTMyMzQyZTMxMzEzMjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMx
MzkzODM5MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7F8cDANBgkqhkiG9w0BAQsFAAOCAQEAnZib
tiS/qJ/C1DswCG+OKKBAdY9Mv570fS8AU6mP8mIyV4KAwXF/cF3nNB/R5kTOQ+s+
VcHSW6iMR4xtMin8hW6UFI9SKd8PXO6tFpdh6urrUpHSIQ0RQBlxZjRHnO/gDCza
RVw7b1zV7KCbsmqKlhfoQQQPYeWs7xf1PdQXOYTzSF8Gf7IVDokgYUL2AlGEK54g
LEjrK07depmIGSn/HQv5M1xQ1Eki8SKg8IB2RDqwvrpngkkfV4Ibk6M7Gr+xY+EK
sPtS3m0Qzhl788y2pr93Te7jnMeMtgikD5qDidMuUji1v5eXlZf7byFHIDkVy/Xa
h0PtHlqhHppZ4IDkIQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 17:19:39 2025 by rpki-client