Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138312e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3138312e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          ccFwyDPAWlxxw8xyGNIlXK8INCovQgiR/o6kMn7lrzI=
Subject key identifier:   10:75:25:C3:A0:06:0F:30:0D:07:5A:EB:0D:27:76:A2:B1:C2:40:55
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       4B866C85AC97CFF5E49A45FF6A616B53223F32D3
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138312e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 02 Dec 2024 04:42:33 +0000
ROA not before:           Mon 02 Dec 2024 04:37:33 +0000
ROA not after:            Mon 01 Dec 2025 04:42:33 +0000
asID:                     53038
IP address blocks:        177.154.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl
                          rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:86:6c:85:ac:97:cf:f5:e4:9a:45:ff:6a:61:6b:53:22:3f:32:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Dec  2 04:37:33 2024 GMT
            Not After : Dec  1 04:42:33 2025 GMT
        Subject: CN=107525C3A0060F300D075AEB0D2776A2B1C24055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0f:54:9c:2f:13:c5:92:b2:f7:1d:b6:04:e5:
                    b9:66:67:a9:0f:83:ee:a9:21:35:5d:4a:20:79:a0:
                    f8:fd:ed:ee:00:b1:c6:3b:04:dd:cb:2c:c5:8f:1b:
                    28:9d:01:66:dd:32:89:00:73:4b:3e:76:c2:e4:b1:
                    dd:5a:5a:3b:c8:c6:5f:a4:2c:d9:9a:3c:ac:4e:cd:
                    e4:30:58:f2:8a:87:9f:4b:06:fd:9b:d9:61:41:a8:
                    04:65:8a:e3:a2:69:28:e4:90:9e:08:00:17:e4:a7:
                    b8:9b:37:80:12:db:73:83:4d:c5:d7:ac:12:a9:a2:
                    93:97:5e:11:cf:1d:0e:66:6e:e7:2f:e0:f2:b3:b8:
                    f2:23:cb:55:73:65:a4:87:04:ec:e1:b4:96:9c:72:
                    eb:25:78:02:f2:a8:c4:28:84:35:68:c4:d1:ca:42:
                    59:d5:bc:6b:8e:1e:1e:74:c0:34:2c:be:25:33:22:
                    db:78:ec:9d:12:ee:f6:ed:ad:8c:16:49:7a:f4:15:
                    47:5e:1d:b4:a8:52:a5:ce:de:55:a9:0e:c6:f8:2f:
                    47:48:43:30:36:14:8a:27:89:a1:91:ad:44:35:fb:
                    bc:ea:11:ad:93:d3:d6:c1:dd:8f:88:13:e6:49:cb:
                    54:f3:2c:f9:71:b1:0d:4a:6f:a1:45:75:79:cc:13:
                    10:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:75:25:C3:A0:06:0F:30:0D:07:5A:EB:0D:27:76:A2:B1:C2:40:55
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138312e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:43:53:43:66:79:99:67:a0:cb:b7:c3:4c:d2:1c:91:e8:0b:
         17:82:2e:70:44:1d:aa:8c:7f:22:09:29:c0:44:d1:a4:fa:a0:
         39:2f:15:6e:41:e4:d5:44:9b:75:5a:67:54:ae:ff:c1:9c:4a:
         a2:69:05:ac:5f:e7:fc:d3:5d:d5:36:32:ca:d5:97:9f:4d:b8:
         9d:06:e6:fe:1a:ba:8b:87:ac:36:b0:b3:43:2d:02:08:8c:8d:
         c5:be:16:ad:91:90:e2:72:a9:c9:6c:c5:a9:de:e6:30:2d:1d:
         fa:cd:b5:90:b8:1a:d6:f3:aa:b9:e9:73:78:a1:7c:95:70:79:
         7b:43:0f:cc:37:84:57:19:8a:db:3a:c7:68:c1:a7:b0:96:cd:
         e2:fc:89:1d:c5:e0:6a:cc:50:9d:aa:9d:e6:38:68:5d:e1:6c:
         e0:f2:6d:1b:d7:d3:2c:9f:50:40:fe:3e:9e:b3:c1:4b:d3:6d:
         ff:59:e5:a8:fd:4d:b7:67:fb:34:ba:6e:aa:8e:45:a2:2f:de:
         ab:14:41:b8:fb:70:e3:b4:2d:f3:78:e3:d3:e5:9c:9f:36:fd:
         67:b0:65:aa:b7:86:e8:b3:18:55:36:cd:52:0a:f2:0b:37:75:
         a0:56:fd:d2:78:60:52:3a:54:f1:2c:ab:f0:2e:d7:fd:e4:c5:
         a3:8b:87:da
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUS4ZshayXz/XkmkX/amFrUyI/MtMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdGNUQ0RkY1OUZGMzg5MkYzRDIzQzQ5RkYwNjI4QkFG
NkFDMTgzMjAeFw0yNDEyMDIwNDM3MzNaFw0yNTEyMDEwNDQyMzNaMDMxMTAvBgNV
BAMTKDEwNzUyNUMzQTAwNjBGMzAwRDA3NUFFQjBEMjc3NkEyQjFDMjQwNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjD1ScLxPFkrL3HbYE5blmZ6kP
g+6pITVdSiB5oPj97e4AscY7BN3LLMWPGyidAWbdMokAc0s+dsLksd1aWjvIxl+k
LNmaPKxOzeQwWPKKh59LBv2b2WFBqARliuOiaSjkkJ4IABfkp7ibN4AS23ODTcXX
rBKpopOXXhHPHQ5mbucv4PKzuPIjy1VzZaSHBOzhtJaccusleALyqMQohDVoxNHK
QlnVvGuOHh50wDQsviUzItt47J0S7vbtrYwWSXr0FUdeHbSoUqXO3lWpDsb4L0dI
QzA2FIoniaGRrUQ1+7zqEa2T09bB3Y+IE+ZJy1TzLPlxsQ1Kb6FFdXnMExC5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEHUlw6AGDzANB1rrDSd2orHCQFUwHwYDVR0j
BBgwFoAUR/XU/1n/OJLz0jxJ/wYouvasGDIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZYSFljcW1yVDVhMWhlbkpBdERpR0JDbkFhNGpYVHZqRGlLekIxY3E3
alUvMC80N0Y1RDRGRjU5RkYzODkyRjNEMjNDNDlGRjA2MjhCQUY2QUMxODMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3RjVENEZGNTlGRjM4OTJG
M0QyM0M0OUZGMDYyOEJBRjZBQzE4MzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmWEhZY3FtclQ1YTFoZW5KQXREaUdCQ25BYTRqWFR2akRpS3pCMWNxN2pVLzAv
MzEzNzM3MmUzMTM1MzQyZTMxMzgzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzMzMDMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxmrUwDQYJKoZIhvcNAQELBQADggEBAExDU0Nm
eZlnoMu3w0zSHJHoCxeCLnBEHaqMfyIJKcBE0aT6oDkvFW5B5NVEm3VaZ1Su/8Gc
SqJpBaxf5/zTXdU2MsrVl59NuJ0G5v4auouHrDaws0MtAgiMjcW+Fq2RkOJyqcls
xane5jAtHfrNtZC4Gtbzqrnpc3ihfJVweXtDD8w3hFcZits6x2jBp7CWzeL8iR3F
4GrMUJ2qneY4aF3hbODybRvX0yyfUED+Pp6zwUvTbf9Z5aj9Tbdn+zS6bqqORaIv
3qsUQbj7cOO0LfN449PlnJ82/WewZaq3huizGFU2zVIK8gs3daBW/dJ4YFI6VPEs
q/Au1/3kxaOLh9o=
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:09:52 2025 by rpki-client