Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/3137372e32312e302e302f31392d3234203d3e203238313836.roa
File:                     3137372e32312e302e302f31392d3234203d3e203238313836.roa (raw, json)
Hash identifier:          sz6mUiCsQIiA4x4we1Zq1Z5E/MdJQw/5tM/7rpfGwGg=
Subject key identifier:   0E:FC:B7:A4:67:8C:AA:FF:00:8D:30:3D:95:99:3C:62:01:CF:85:24
Certificate issuer:       /CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21
Certificate serial:       1574C0FED521D520C07D1F413A3084957F3C9824
Authority key identifier: 2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/3137372e32312e302e302f31392d3234203d3e203238313836.roa
Signing time:             Wed 05 Mar 2025 23:13:26 +0000
ROA not before:           Wed 05 Mar 2025 23:08:26 +0000
ROA not after:            Wed 04 Mar 2026 23:13:26 +0000
asID:                     28186
IP address blocks:        177.21.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.crl
                          rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:74:c0:fe:d5:21:d5:20:c0:7d:1f:41:3a:30:84:95:7f:3c:98:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21
        Validity
            Not Before: Mar  5 23:08:26 2025 GMT
            Not After : Mar  4 23:13:26 2026 GMT
        Subject: CN=0EFCB7A4678CAAFF008D303D95993C6201CF8524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:a5:30:f3:53:5c:20:b8:61:03:84:27:93:
                    9b:9f:1f:e8:b3:0d:27:fb:2c:8a:9d:d6:e3:84:9a:
                    65:93:d6:d5:1e:d2:2c:30:01:eb:77:e8:55:81:4b:
                    cb:4d:b9:bc:9d:21:23:98:1d:da:57:57:7e:61:dd:
                    2b:17:8c:68:cb:e4:8b:d2:f9:78:25:cf:86:4f:6d:
                    22:3a:5f:5b:53:04:87:cd:35:89:28:37:87:0a:33:
                    94:1c:82:0f:20:72:ef:61:1a:68:14:5b:90:44:1e:
                    c9:bc:65:7c:c9:37:ff:03:be:e7:d8:85:29:e7:5f:
                    77:91:b4:7b:14:86:f6:fd:f6:d9:a5:3f:d7:18:c3:
                    43:93:c2:31:94:7c:75:f8:75:8d:9f:30:58:73:87:
                    09:af:d2:53:71:57:43:67:1f:56:73:6b:82:52:03:
                    12:46:dc:dc:89:f9:fe:c9:92:70:b6:9c:0b:24:f8:
                    34:71:f5:e3:ff:46:a4:4a:81:e6:e7:f9:f6:e8:fc:
                    47:8e:eb:77:7f:34:77:a4:42:fc:32:64:dc:1d:b2:
                    70:80:48:92:63:b7:2c:7e:51:7f:0d:a3:af:70:f1:
                    d2:94:aa:d2:bc:d8:4c:14:6c:5b:b0:f2:c3:f6:81:
                    a1:22:8e:9d:fa:83:1f:28:2b:72:f6:50:59:0f:9f:
                    c9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FC:B7:A4:67:8C:AA:FF:00:8D:30:3D:95:99:3C:62:01:CF:85:24
            X509v3 Authority Key Identifier:
                keyid:2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/3137372e32312e302e302f31392d3234203d3e203238313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         57:32:6c:ff:c1:76:84:20:6e:a2:79:d4:c1:89:d9:00:b9:87:
         e6:98:37:c7:d7:b6:f5:09:06:d1:b6:61:ef:e0:c3:f5:d9:b3:
         de:14:8d:19:43:69:89:fc:f4:dd:fa:ef:e7:e9:04:07:90:7b:
         1f:49:a9:8b:81:7f:38:f1:35:ae:af:b3:67:28:27:ed:4a:2f:
         42:5a:f2:36:83:46:cc:9b:d1:69:0e:66:a7:99:a7:c4:26:87:
         f6:48:e3:59:3c:19:5d:80:38:87:1d:0e:05:a0:83:45:2e:cc:
         eb:2e:7e:9c:ce:84:2e:13:de:ac:b4:fa:ef:f7:2c:3b:d2:e8:
         2a:ca:7b:f3:97:36:49:04:af:78:71:c4:f9:3b:e3:bf:8d:8f:
         51:f1:bf:2b:83:a9:e2:e0:17:1e:d5:26:fa:e9:3e:eb:33:0b:
         07:58:48:a3:68:62:32:cc:bc:e1:7f:21:ed:49:99:76:89:3d:
         c5:37:f4:ce:60:92:a6:53:d3:56:97:7f:65:b4:40:67:8b:ee:
         ab:9a:08:39:28:18:69:23:89:c5:2a:43:ab:66:b6:c9:36:26:
         1e:43:7e:b0:fc:f6:74:05:15:60:06:4b:14:0f:2e:ef:6e:27:
         22:3d:66:e5:9b:c0:3f:77:cf:d1:fe:39:a4:c3:15:b1:73:34:
         6e:ae:65:d2
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUFXTA/tUh1SDAfR9BOjCElX88mCQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU4MUYyOTU2RTVDMTk1OEMxRjUzOEExQUFBOTk5NERD
QjgzREEyMTAeFw0yNTAzMDUyMzA4MjZaFw0yNjAzMDQyMzEzMjZaMDMxMTAvBgNV
BAMTKDBFRkNCN0E0Njc4Q0FBRkYwMDhEMzAzRDk1OTkzQzYyMDFDRjg1MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrQ6Uw81NcILhhA4Qnk5ufH+iz
DSf7LIqd1uOEmmWT1tUe0iwwAet36FWBS8tNubydISOYHdpXV35h3SsXjGjL5IvS
+Xglz4ZPbSI6X1tTBIfNNYkoN4cKM5Qcgg8gcu9hGmgUW5BEHsm8ZXzJN/8DvufY
hSnnX3eRtHsUhvb99tmlP9cYw0OTwjGUfHX4dY2fMFhzhwmv0lNxV0NnH1Zza4JS
AxJG3NyJ+f7JknC2nAsk+DRx9eP/RqRKgebn+fbo/EeO63d/NHekQvwyZNwdsnCA
SJJjtyx+UX8No69w8dKUqtK82EwUbFuw8sP2gaEijp36gx8oK3L2UFkPn8kXAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUDvy3pGeMqv8AjTA9lZk8YgHPhSQwHwYDVR0j
BBgwFoAULoHylW5cGVjB9TihqqmZTcuD2iEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE5UZUFyWW5aNHBWY2lXYjRKbnJoczZWTDRpTFlkeEg0eUZRR1ZoZTlF
dnkvMS8yRTgxRjI5NTZFNUMxOTU4QzFGNTM4QTFBQUE5OTk0RENCODNEQTIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFODFGMjk1NkU1QzE5NThD
MUY1MzhBMUFBQTk5OTREQ0I4M0RBMjEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhOVGVBclluWjRwVmNpV2I0Sm5yaHM2Vkw0aUxZZHhINHlGUUdWaGU5RXZ5LzEv
MzEzNzM3MmUzMjMxMmUzMDJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMyMzgzMTM4
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAWxFQAwDQYJKoZIhvcNAQELBQADggEBAFcybP/BdoQgbqJ5
1MGJ2QC5h+aYN8fXtvUJBtG2Ye/gw/XZs94UjRlDaYn89N367+fpBAeQex9JqYuB
fzjxNa6vs2coJ+1KL0Ja8jaDRsyb0WkOZqeZp8Qmh/ZI41k8GV2AOIcdDgWgg0Uu
zOsufpzOhC4T3qy0+u/3LDvS6CrKe/OXNkkEr3hxxPk747+Nj1HxvyuDqeLgFx7V
JvrpPuszCwdYSKNoYjLMvOF/Ie1JmXaJPcU39M5gkqZT01aXf2W0QGeL7quaCDko
GGkjicUqQ6tmtsk2Jh5DfrD89nQFFWAGSxQPLu9uJyI9ZuWbwD93z9H+OaTDFbFz
NG6uZdI=
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:54:10 2025 by rpki-client