Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137392e3132372e3232342e302f32302d3234203d3e20323632363838.roa
File:                     3137392e3132372e3232342e302f32302d3234203d3e20323632363838.roa (raw, json)
Hash identifier:          CMxsrjM1Zr89isVYHMh0XGE9qG5IDzF4B41o0GjUwm8=
Subject key identifier:   D2:F3:46:04:BF:6E:8E:20:AE:F2:54:D0:C9:4B:02:EC:58:A6:3A:12
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       4E1CE6CE612EA148263E886EF1D9BB9B28346E1D
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137392e3132372e3232342e302f32302d3234203d3e20323632363838.roa
Signing time:             Mon 12 May 2025 13:02:04 +0000
ROA not before:           Mon 12 May 2025 12:57:04 +0000
ROA not after:            Mon 11 May 2026 13:02:04 +0000
asID:                     262688
IP address blocks:        179.127.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 03:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1c:e6:ce:61:2e:a1:48:26:3e:88:6e:f1:d9:bb:9b:28:34:6e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:57:04 2025 GMT
            Not After : May 11 13:02:04 2026 GMT
        Subject: CN=D2F34604BF6E8E20AEF254D0C94B02EC58A63A12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:47:aa:06:63:b4:6b:c1:01:6c:ce:52:fe:
                    c9:3a:b9:b5:d5:66:42:7e:ad:92:e3:4c:55:ec:05:
                    16:dd:c1:60:e7:23:4d:58:02:19:79:90:9a:eb:25:
                    08:ca:6d:d4:df:a3:ba:7d:7f:07:76:06:58:8e:f8:
                    c7:4b:12:7a:af:57:7e:5b:ce:8e:76:ca:d7:d9:03:
                    7e:a1:c0:27:24:88:3d:99:3d:c2:07:64:ea:d3:dd:
                    b3:2d:6c:f0:2a:93:13:e1:30:90:1f:3e:75:7e:3a:
                    a9:89:23:ec:05:3c:fb:94:44:df:b1:16:99:47:6d:
                    25:08:fa:7e:91:19:48:0a:2c:83:7b:0e:24:f3:75:
                    0f:8f:cc:b5:67:47:27:79:1c:72:01:c2:42:f1:12:
                    2a:eb:95:21:f7:e4:c0:d2:d4:d2:3b:23:bf:5d:cc:
                    63:5f:04:e7:64:49:4e:37:e5:10:23:6c:1f:15:1f:
                    59:60:73:66:c5:ef:ba:d3:0e:d3:48:ec:a7:0d:64:
                    0d:0a:5d:d6:47:26:1c:6c:ba:02:45:1c:a8:20:37:
                    ce:20:23:77:2a:fa:eb:a3:2e:2d:e6:5e:85:d3:75:
                    11:a9:ce:5c:26:cb:4e:97:c3:db:35:87:03:4c:33:
                    b5:22:bd:29:1d:a5:fb:db:67:04:30:dc:a2:9e:f5:
                    a9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F3:46:04:BF:6E:8E:20:AE:F2:54:D0:C9:4B:02:EC:58:A6:3A:12
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137392e3132372e3232342e302f32302d3234203d3e20323632363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:11:08:81:f5:59:ba:e8:91:0c:f8:63:13:68:39:d6:c4:ba:
         7d:72:d2:6c:30:a4:3f:ea:08:f7:e4:7e:b1:d7:6d:d2:83:40:
         2c:ae:a1:d1:90:c7:95:ab:23:db:18:03:3a:9d:79:56:94:ac:
         c7:9e:f3:71:56:76:2b:28:01:0c:f6:77:6e:8e:0d:12:89:7a:
         34:ae:9b:dd:2c:01:ef:af:56:6b:06:ea:59:18:7e:26:7a:27:
         46:1c:f3:54:10:ac:45:83:19:0b:9b:40:e9:51:41:d6:ae:8e:
         c4:56:b2:bb:8d:c0:4c:7a:74:94:7d:e5:2c:40:08:f6:50:7e:
         0d:e3:e1:ae:e9:ec:b0:fd:b6:64:c0:09:00:c8:74:ff:d6:7f:
         ea:c6:aa:a1:a6:68:2c:0e:be:5d:c8:e3:41:be:6d:9d:7b:d4:
         d8:5f:ce:2d:92:d6:c0:1f:56:84:43:92:8e:ee:39:a0:c5:93:
         af:c1:f1:a7:7c:ca:49:89:ac:f9:b3:9c:50:81:61:fa:7d:35:
         f8:d9:49:be:c6:ad:48:4d:4f:13:29:51:6c:ac:68:8f:6c:d9:
         a5:3c:f0:bd:4e:d2:c8:49:78:0d:eb:fb:f6:d6:9f:1e:d6:16:
         07:4b:a5:89:d1:e4:c4:b0:ca:fb:b9:1c:3e:28:da:1a:4f:ef:
         92:18:76:db
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUThzmzmEuoUgmPohu8dm7myg0bh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FCN0M5QUFFQTFEMjkyMDEwMkQwNTJFMUFDNDVFQ0Ez
NDM5QjJGMDAeFw0yNTA1MTIxMjU3MDRaFw0yNjA1MTExMzAyMDRaMDMxMTAvBgNV
BAMTKEQyRjM0NjA0QkY2RThFMjBBRUYyNTREMEM5NEIwMkVDNThBNjNBMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2akeqBmO0a8EBbM5S/sk6ubXV
ZkJ+rZLjTFXsBRbdwWDnI01YAhl5kJrrJQjKbdTfo7p9fwd2BliO+MdLEnqvV35b
zo52ytfZA36hwCckiD2ZPcIHZOrT3bMtbPAqkxPhMJAfPnV+OqmJI+wFPPuURN+x
FplHbSUI+n6RGUgKLIN7DiTzdQ+PzLVnRyd5HHIBwkLxEirrlSH35MDS1NI7I79d
zGNfBOdkSU435RAjbB8VH1lgc2bF77rTDtNI7KcNZA0KXdZHJhxsugJFHKggN84g
I3cq+uujLi3mXoXTdRGpzlwmy06Xw9s1hwNMM7UivSkdpfvbZwQw3KKe9alnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0vNGBL9ujiCu8lTQyUsC7FimOhIwHwYDVR0j
BBgwFoAUerfJquodKSAQLQUuGsReyjQ5svAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZEQ2g2WDV5cktkN0NZWXZacERMOVNxU3pNQUJqUGFhNmRzMUtSSzZx
SzYvMC83QUI3QzlBQUVBMUQyOTIwMTAyRDA1MkUxQUM0NUVDQTM0MzlCMkYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBQjdDOUFBRUExRDI5MjAx
MDJEMDUyRTFBQzQ1RUNBMzQzOUIyRjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGRENoNlg1eXJLZDdDWVl2WnBETDlTcVN6TUFCalBhYTZkczFLUks2cUs2LzAv
MzEzNzM5MmUzMTMyMzcyZTMyMzIzNDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzYzMjM2MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLN/4DANBgkqhkiG9w0BAQsFAAOCAQEAhREI
gfVZuuiRDPhjE2g51sS6fXLSbDCkP+oI9+R+sddt0oNALK6h0ZDHlasj2xgDOp15
VpSsx57zcVZ2KygBDPZ3bo4NEol6NK6b3SwB769WawbqWRh+JnonRhzzVBCsRYMZ
C5tA6VFB1q6OxFayu43ATHp0lH3lLEAI9lB+DePhrunssP22ZMAJAMh0/9Z/6saq
oaZoLA6+XcjjQb5tnXvU2F/OLZLWwB9WhEOSju45oMWTr8Hxp3zKSYms+bOcUIFh
+n01+NlJvsatSE1PEylRbKxoj2zZpTzwvU7SyEl4Dev79tafHtYWB0ulidHkxLDK
+7kcPijaGk/vkhh22w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:28:46 2025 by rpki-client