Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136342e302f32332d3233203d3e20323632373938.roa
File:                     3137372e3132392e3136342e302f32332d3233203d3e20323632373938.roa (raw, json)
Hash identifier:          s9ytKAP30FHqgJpJFqWBUqL1L0ClXlg2XvyWg2b8CvE=
Subject key identifier:   D8:81:35:70:C4:4B:49:79:97:11:5B:16:A4:47:C2:0B:56:17:F3:06
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       190F745309221477761D0F875359476D83302084
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136342e302f32332d3233203d3e20323632373938.roa
Signing time:             Wed 05 Mar 2025 23:59:57 +0000
ROA not before:           Wed 05 Mar 2025 23:54:57 +0000
ROA not after:            Wed 04 Mar 2026 23:59:57 +0000
asID:                     262798
IP address blocks:        177.129.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 07:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0f:74:53:09:22:14:77:76:1d:0f:87:53:59:47:6d:83:30:20:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Mar  5 23:54:57 2025 GMT
            Not After : Mar  4 23:59:57 2026 GMT
        Subject: CN=D8813570C44B497997115B16A447C20B5617F306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e4:10:31:cb:4a:64:f8:8c:77:56:80:06:61:
                    d6:9b:13:b9:49:29:ef:1c:0b:d0:91:98:0e:e5:83:
                    61:7e:2c:08:82:43:df:9b:4a:58:91:52:e6:7d:c5:
                    80:00:60:91:b3:ab:75:e3:68:aa:02:8f:fd:cd:8d:
                    5e:cc:1b:e4:ad:41:dd:5a:e1:02:73:5c:88:be:b7:
                    75:d8:4b:ec:2c:b5:0a:e1:8f:f2:82:40:f0:5e:16:
                    3c:b8:2e:a5:5c:62:6c:69:cb:4d:2e:9c:ae:26:bd:
                    1e:8f:96:44:cd:2f:77:a7:e2:cd:94:73:17:bc:b9:
                    e0:b8:ca:8a:a1:86:fa:b8:40:94:5d:b6:c1:97:ac:
                    65:7e:0c:55:4a:00:94:e7:0f:cb:e5:6e:43:e2:95:
                    d8:b1:09:a8:10:51:6f:31:7c:0c:48:9e:f1:12:63:
                    84:9a:ce:f9:34:b9:d2:bb:7d:b6:8c:1d:4d:a5:07:
                    73:e6:80:36:f1:a1:4e:62:5e:d4:ed:7c:3e:67:75:
                    58:d9:ad:2c:77:74:73:3b:0f:a0:a6:ce:86:c2:91:
                    57:b4:f4:e9:52:30:29:13:cd:b5:01:24:b5:43:1f:
                    55:aa:47:5a:be:b6:92:8e:0a:5d:b8:4f:3b:5c:11:
                    18:0e:03:0c:19:f1:6d:f1:dd:ab:12:15:9e:d0:70:
                    e9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:81:35:70:C4:4B:49:79:97:11:5B:16:A4:47:C2:0B:56:17:F3:06
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136342e302f32332d3233203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:fe:31:45:e9:8a:c1:e9:82:28:78:0f:ea:dc:c5:28:da:5c:
         37:a6:88:fa:9b:9e:e9:bf:94:e7:b2:eb:db:a4:89:27:d6:c9:
         b0:f5:b2:9a:56:10:f4:41:58:8e:57:de:02:2d:b8:8f:f0:bb:
         34:61:0b:fd:b6:01:35:7b:78:a3:4e:23:6a:89:08:83:8c:0b:
         7a:db:bf:8e:44:29:67:fe:4f:c0:47:ef:e6:f1:88:e4:05:f9:
         2f:fd:74:f4:fe:7a:6b:78:b6:7e:0a:c1:df:ec:b9:11:c4:0e:
         4e:ab:18:6a:5a:e1:0b:cd:73:8f:18:29:f7:17:76:db:c8:a8:
         d9:bc:24:82:dc:b3:15:ca:84:bc:74:ab:9b:64:14:54:7a:a0:
         f7:bb:7d:08:44:aa:42:67:6d:d0:f0:2a:8c:a5:aa:92:17:25:
         99:fd:dd:18:48:af:09:31:a7:41:47:76:aa:0e:25:1e:d3:af:
         dd:2c:71:96:de:cb:8e:ba:0d:a3:4e:e4:6f:2f:67:f9:4a:2d:
         30:f6:a4:ed:a4:a5:39:ec:e1:42:59:e8:6d:1e:36:35:39:9e:
         6b:e2:33:c4:c1:7c:62:64:85:5a:f8:1e:66:a9:ad:98:3d:99:
         e3:37:6b:5b:5c:2f:0d:e7:c8:47:5d:55:6b:8c:14:0f:61:c6:
         cb:b8:51:e0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGQ90UwkiFHd2HQ+HU1lHbYMwIIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY4NEE1NUFERDJBMzRCQjIyOTIxNjA2NkUxNUFCQUJC
MEQ3RkY4QTAeFw0yNTAzMDUyMzU0NTdaFw0yNjAzMDQyMzU5NTdaMDMxMTAvBgNV
BAMTKEQ4ODEzNTcwQzQ0QjQ5Nzk5NzExNUIxNkE0NDdDMjBCNTYxN0YzMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP5BAxy0pk+Ix3VoAGYdabE7lJ
Ke8cC9CRmA7lg2F+LAiCQ9+bSliRUuZ9xYAAYJGzq3XjaKoCj/3NjV7MG+StQd1a
4QJzXIi+t3XYS+wstQrhj/KCQPBeFjy4LqVcYmxpy00unK4mvR6PlkTNL3en4s2U
cxe8ueC4yoqhhvq4QJRdtsGXrGV+DFVKAJTnD8vlbkPildixCagQUW8xfAxInvES
Y4Sazvk0udK7fbaMHU2lB3PmgDbxoU5iXtTtfD5ndVjZrSx3dHM7D6CmzobCkVe0
9OlSMCkTzbUBJLVDH1WqR1q+tpKOCl24TztcERgOAwwZ8W3x3asSFZ7QcOkVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU2IE1cMRLSXmXEVsWpEfCC1YX8wYwHwYDVR0j
BBgwFoAU34SlWt0qNLsikhYGbhWrq7DX/4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2Vv
OG0vMS9ERjg0QTU1QUREMkEzNEJCMjI5MjE2MDY2RTE1QUJBQkIwRDdGRjhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGODRBNTVBREQyQTM0QkIy
MjkyMTYwNjZFMTVBQkFCQjBEN0ZGOEEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlSRVRzdW1pdFR6Sm5URndjTUR2QmFHTVl0Ykw0VDJIWFQyZ2ptbVdlbzhtLzEv
MzEzNzM3MmUzMTMyMzkyZTMxMzYzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbGBpDANBgkqhkiG9w0BAQsFAAOCAQEAeP4x
RemKwemCKHgP6tzFKNpcN6aI+pue6b+U57Lr26SJJ9bJsPWymlYQ9EFYjlfeAi24
j/C7NGEL/bYBNXt4o04jaokIg4wLetu/jkQpZ/5PwEfv5vGI5AX5L/109P56a3i2
fgrB3+y5EcQOTqsYalrhC81zjxgp9xd228io2bwkgtyzFcqEvHSrm2QUVHqg97t9
CESqQmdt0PAqjKWqkhclmf3dGEivCTGnQUd2qg4lHtOv3Sxxlt7LjroNo07kby9n
+UotMPak7aSlOezhQlnobR42NTmea+IzxMF8YmSFWvgeZqmtmD2Z4zdrW1wvDefI
R11Va4wUD2HGy7hR4A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:21:18 2025 by rpki-client