Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/3137372e39312e3133322e302f32322d3234203d3e20323633343433.roa
File:                     3137372e39312e3133322e302f32322d3234203d3e20323633343433.roa (raw, json)
Hash identifier:          gYzvr5YFI+HNqr2VzVsFIIyT5cOKj6GHJk9U2jKE010=
Subject key identifier:   2D:2E:39:3C:36:EF:49:11:D1:43:16:C5:98:CC:2C:6F:43:14:6E:64
Certificate issuer:       /CN=E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE
Certificate serial:       0DB6DF8EBEE655E3290B8CC77A4DE967E67DDB96
Authority key identifier: E3:23:E2:3C:16:E9:98:B1:FB:AB:1F:A1:C8:5D:27:3E:8D:4F:FE:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/3137372e39312e3133322e302f32322d3234203d3e20323633343433.roa
Signing time:             Thu 06 Mar 2025 04:55:22 +0000
ROA not before:           Thu 06 Mar 2025 04:50:22 +0000
ROA not after:            Thu 05 Mar 2026 04:55:22 +0000
asID:                     263443
IP address blocks:        177.91.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.crl
                          rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 01:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b6:df:8e:be:e6:55:e3:29:0b:8c:c7:7a:4d:e9:67:e6:7d:db:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE
        Validity
            Not Before: Mar  6 04:50:22 2025 GMT
            Not After : Mar  5 04:55:22 2026 GMT
        Subject: CN=2D2E393C36EF4911D14316C598CC2C6F43146E64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e7:66:6c:47:b0:51:63:a3:ec:f9:97:12:e8:
                    ae:5b:b4:0a:d0:89:69:9a:59:86:a0:c8:c2:60:c8:
                    09:22:38:ec:5e:37:4f:97:e1:6e:41:9b:9c:45:28:
                    a9:19:01:cf:d5:6f:e2:22:0d:53:ce:6b:b9:c8:f4:
                    1c:93:d5:e3:e1:b5:8b:10:7e:1f:9f:2d:f0:d5:2c:
                    d7:31:b4:aa:45:e0:ea:7a:db:12:26:73:29:67:27:
                    2c:0d:30:46:d0:87:57:9e:e0:95:57:79:aa:f7:bd:
                    a3:9e:2d:63:4b:74:f8:16:ca:f5:50:be:9e:8f:85:
                    78:f1:1d:cd:a0:79:c0:e1:e3:fe:93:6d:af:90:d8:
                    84:ef:b4:fa:4d:f6:90:75:4c:10:8e:30:c3:9d:bc:
                    97:47:68:49:f4:bf:52:0e:93:bf:63:76:0f:4e:cf:
                    05:6c:0b:c7:da:93:7b:c3:10:05:7e:58:95:93:09:
                    0f:9e:7c:1e:d1:e0:37:d2:a6:d8:93:2a:c5:52:b0:
                    35:6b:05:b3:ae:b7:8e:3c:c0:e9:54:94:0e:f2:2f:
                    da:87:1d:2b:53:58:43:4d:87:e2:d0:fe:00:59:d0:
                    78:5c:69:45:7e:d6:ad:0b:15:d7:73:45:12:cb:6a:
                    7c:bc:cb:38:25:d5:35:52:0a:31:ed:18:95:02:eb:
                    af:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2E:39:3C:36:EF:49:11:D1:43:16:C5:98:CC:2C:6F:43:14:6E:64
            X509v3 Authority Key Identifier:
                keyid:E3:23:E2:3C:16:E9:98:B1:FB:AB:1F:A1:C8:5D:27:3E:8D:4F:FE:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/3137372e39312e3133322e302f32322d3234203d3e20323633343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:92:68:54:d2:d2:d8:b9:cd:f5:7a:ca:3f:79:43:3d:7b:95:
         9c:fb:99:26:1c:92:d9:26:e5:75:5a:ad:56:a8:92:49:45:fb:
         87:70:03:8c:58:1c:4a:a5:68:8d:70:6e:df:09:b9:20:bf:14:
         be:a2:1e:64:e6:06:ac:ef:a5:3a:3b:7e:65:7a:3d:eb:8b:d8:
         d2:6a:eb:2d:c9:13:7e:0a:dc:b0:14:9f:2a:55:07:6c:a9:24:
         96:7c:f6:ef:a2:e9:b1:3e:d2:bc:c5:8b:e0:96:79:c5:2a:05:
         ba:00:90:dd:1f:51:45:4b:42:41:2d:c0:9a:74:74:77:8c:98:
         a5:07:57:3c:08:d6:d7:c1:3e:ff:6b:5f:86:1f:bc:dd:94:38:
         9d:f3:48:6a:31:df:44:9f:3d:41:dd:85:b9:ef:f4:e5:60:fb:
         07:73:e2:c0:fb:5a:fa:46:05:28:de:6f:5f:60:6c:ea:93:fc:
         b9:b6:94:d7:a4:41:ee:d9:b8:a2:83:ea:6a:2c:e4:bc:d7:cf:
         72:15:9d:f0:e8:91:01:ae:3c:37:e1:9d:ec:33:8e:b7:f5:d5:
         ae:95:fe:81:a3:52:ea:bf:d7:9d:97:8d:62:97:4f:3a:f9:57:
         55:6d:b6:79:fa:e4:d2:e7:33:7f:94:03:35:49:7b:fb:08:ec:
         a0:34:3d:94
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDbbfjr7mVeMpC4zHek3pZ+Z925YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTMyM0UyM0MxNkU5OThCMUZCQUIxRkExQzg1RDI3M0U4
RDRGRkVFRTAeFw0yNTAzMDYwNDUwMjJaFw0yNjAzMDUwNDU1MjJaMDMxMTAvBgNV
BAMTKDJEMkUzOTNDMzZFRjQ5MTFEMTQzMTZDNTk4Q0MyQzZGNDMxNDZFNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC52ZsR7BRY6Ps+ZcS6K5btArQ
iWmaWYagyMJgyAkiOOxeN0+X4W5Bm5xFKKkZAc/Vb+IiDVPOa7nI9ByT1ePhtYsQ
fh+fLfDVLNcxtKpF4Op62xImcylnJywNMEbQh1ee4JVXear3vaOeLWNLdPgWyvVQ
vp6PhXjxHc2gecDh4/6Tba+Q2ITvtPpN9pB1TBCOMMOdvJdHaEn0v1IOk79jdg9O
zwVsC8fak3vDEAV+WJWTCQ+efB7R4DfSptiTKsVSsDVrBbOut448wOlUlA7yL9qH
HStTWENNh+LQ/gBZ0HhcaUV+1q0LFddzRRLLany8yzgl1TVSCjHtGJUC66+bAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULS45PDbvSRHRQxbFmMwsb0MUbmQwHwYDVR0j
BBgwFoAU4yPiPBbpmLH7qx+hyF0nPo1P/u4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJ0aFRodFp2N3JyUkVWRjVibkJhSzVZenpNUGEyNVdMMXp4eTVxOE5T
Y3UvMS9FMzIzRTIzQzE2RTk5OEIxRkJBQjFGQTFDODVEMjczRThENEZGRUVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzMjNFMjNDMTZFOTk4QjFG
QkFCMUZBMUM4NUQyNzNFOEQ0RkZFRUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlSdGhUaHRadjdyclJFVkY1Ym5CYUs1WXp6TVBhMjVXTDF6eHk1cThOU2N1LzEv
MzEzNzM3MmUzOTMxMmUzMTMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzNDM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxW4QwDQYJKoZIhvcNAQELBQADggEBABKSaFTS
0ti5zfV6yj95Qz17lZz7mSYcktkm5XVarVaokklF+4dwA4xYHEqlaI1wbt8JuSC/
FL6iHmTmBqzvpTo7fmV6PeuL2NJq6y3JE34K3LAUnypVB2ypJJZ89u+i6bE+0rzF
i+CWecUqBboAkN0fUUVLQkEtwJp0dHeMmKUHVzwI1tfBPv9rX4YfvN2UOJ3zSGox
30SfPUHdhbnv9OVg+wdz4sD7WvpGBSjeb19gbOqT/Lm2lNekQe7ZuKKD6mos5LzX
z3IVnfDokQGuPDfhnewzjrf11a6V/oGjUuq/152XjWKXTzr5V1Vttnn65NLnM3+U
AzVJe/sI7KA0PZQ=
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:32:30 2025 by rpki-client