Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/3138372e3130392e3131322e302f32322d3234203d3e20323732373533.roa
File:                     3138372e3130392e3131322e302f32322d3234203d3e20323732373533.roa (raw, json)
Hash identifier:          w0qqFPXS1q1NP5A7+SdrqOfHPoWk++ZYHhgDw9+ls14=
Subject key identifier:   C3:55:95:C3:2F:67:21:C4:E4:46:79:22:B8:88:9E:67:0C:05:7F:1C
Certificate issuer:       /CN=120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E
Certificate serial:       13F47C904F9F69F93134ECBF3759B24AAAF7F811
Authority key identifier: 12:0F:03:9C:87:2F:A2:AE:7F:DC:D1:D4:49:9C:40:11:CE:1A:5B:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/3138372e3130392e3131322e302f32322d3234203d3e20323732373533.roa
Signing time:             Thu 12 Dec 2024 12:49:17 +0000
ROA not before:           Thu 12 Dec 2024 12:44:17 +0000
ROA not after:            Thu 11 Dec 2025 12:49:17 +0000
asID:                     272753
IP address blocks:        187.109.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.crl
                          rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 07:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f4:7c:90:4f:9f:69:f9:31:34:ec:bf:37:59:b2:4a:aa:f7:f8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E
        Validity
            Not Before: Dec 12 12:44:17 2024 GMT
            Not After : Dec 11 12:49:17 2025 GMT
        Subject: CN=C35595C32F6721C4E4467922B8889E670C057F1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:37:b2:84:c8:66:92:bc:28:40:9a:10:cd:8e:
                    2b:64:05:cb:05:19:a8:c0:46:5a:38:ae:d1:07:82:
                    e8:6f:32:eb:b5:3d:14:76:6b:43:46:4a:61:e1:a0:
                    3b:b2:27:9d:ee:55:63:3b:f6:6f:97:57:98:9c:5c:
                    94:36:00:5c:b0:1d:9a:73:11:f5:04:9b:a2:f9:a8:
                    a5:bf:47:f3:94:73:ce:59:56:5d:0e:e5:a8:5e:9c:
                    f2:46:03:ba:e0:90:0c:29:66:c5:01:b5:14:1e:7e:
                    bd:78:54:5d:88:89:ef:43:83:c7:75:47:35:4a:1b:
                    de:70:13:de:d5:e7:50:f9:64:43:95:0e:1f:31:05:
                    06:4a:e6:91:7c:84:6b:79:3b:d6:40:70:23:2d:71:
                    9f:f1:7f:49:ca:11:3b:0b:bb:70:3d:fc:5d:d8:38:
                    e0:ce:c1:80:cf:ef:64:8d:cc:5a:be:9b:af:64:c8:
                    f5:fe:57:7e:61:e5:c0:16:3c:44:f6:d7:ce:eb:16:
                    09:25:53:96:06:64:d9:c6:ff:73:43:87:bc:e1:7e:
                    1c:7e:11:e4:f3:e2:50:c6:a5:14:a4:ec:99:1f:0a:
                    16:92:16:6f:1f:68:de:56:86:36:4b:df:4b:93:98:
                    d1:e0:6c:b5:94:13:63:b7:4c:3d:d3:82:81:2b:85:
                    0d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:55:95:C3:2F:67:21:C4:E4:46:79:22:B8:88:9E:67:0C:05:7F:1C
            X509v3 Authority Key Identifier:
                keyid:12:0F:03:9C:87:2F:A2:AE:7F:DC:D1:D4:49:9C:40:11:CE:1A:5B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/3138372e3130392e3131322e302f32322d3234203d3e20323732373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:2f:2f:cb:70:16:d6:46:ee:02:64:0b:d9:fe:33:5d:b0:7a:
         6c:65:1d:a8:fa:24:be:5f:31:38:8e:d5:b1:30:97:c9:c7:ab:
         2e:4e:7a:89:72:3a:21:d4:7d:30:ca:aa:49:d9:b2:e2:69:b7:
         9c:fb:e9:09:d2:6d:2f:c7:22:28:4e:8d:d8:3d:ab:ec:a1:fd:
         69:7b:59:a4:cc:80:de:c8:a3:a2:a7:c3:cc:7d:b6:6a:74:f7:
         40:ad:c0:a6:03:3b:f2:d0:6a:ea:80:5d:7e:c6:8a:50:21:87:
         7b:87:ff:24:ca:ed:e2:1c:ab:55:be:98:01:ed:77:75:6c:b7:
         87:c8:3d:14:7a:fe:e7:cd:4b:9f:36:82:60:ec:74:00:0c:d2:
         38:6b:db:54:fa:8f:fc:0b:32:84:14:6b:3d:b6:30:4f:07:83:
         d5:fc:22:54:61:42:5c:c0:a0:17:0f:ed:cf:f7:68:86:6d:cf:
         b9:dc:9a:ef:a6:c9:bf:e7:5e:bd:93:3f:26:bb:40:33:25:24:
         78:71:61:19:ec:da:c7:a0:b9:cc:70:b2:13:fa:21:24:13:b6:
         c6:f2:07:e5:ef:a4:09:a7:ab:85:92:83:b1:eb:9d:16:9b:aa:
         66:74:62:55:89:01:01:dc:49:7b:37:d6:e4:14:40:1c:fa:d0:
         5a:b4:01:37
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUE/R8kE+fafkxNOy/N1mySqr3+BEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIwRjAzOUM4NzJGQTJBRTdGRENEMUQ0NDk5QzQwMTFD
RTFBNUI5RTAeFw0yNDEyMTIxMjQ0MTdaFw0yNTEyMTExMjQ5MTdaMDMxMTAvBgNV
BAMTKEMzNTU5NUMzMkY2NzIxQzRFNDQ2NzkyMkI4ODg5RTY3MEMwNTdGMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGN7KEyGaSvChAmhDNjitkBcsF
GajARlo4rtEHguhvMuu1PRR2a0NGSmHhoDuyJ53uVWM79m+XV5icXJQ2AFywHZpz
EfUEm6L5qKW/R/OUc85ZVl0O5ahenPJGA7rgkAwpZsUBtRQefr14VF2Iie9Dg8d1
RzVKG95wE97V51D5ZEOVDh8xBQZK5pF8hGt5O9ZAcCMtcZ/xf0nKETsLu3A9/F3Y
OODOwYDP72SNzFq+m69kyPX+V35h5cAWPET2187rFgklU5YGZNnG/3NDh7zhfhx+
EeTz4lDGpRSk7JkfChaSFm8faN5WhjZL30uTmNHgbLWUE2O3TD3TgoErhQ1VAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUw1WVwy9nIcTkRnkiuIieZwwFfxwwHwYDVR0j
BBgwFoAUEg8DnIcvoq5/3NHUSZxAEc4aW54wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTNHR2dLVzFMck5QZ3NNeEtEcEdTV3hpNnNMb3ZHaDZia2RvbzdVOVlq
RmIvMC8xMjBGMDM5Qzg3MkZBMkFFN0ZEQ0QxRDQ0OTlDNDAxMUNFMUE1QjlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyMEYwMzlDODcyRkEyQUU3
RkRDRDFENDQ5OUM0MDExQ0UxQTVCOUUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0EzR0dnS1cxTHJOUGdzTXhLRHBHU1d4aTZzTG92R2g2Ymtkb283VTlZakZiLzAv
MzEzODM3MmUzMTMwMzkyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMjM3MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArttcDANBgkqhkiG9w0BAQsFAAOCAQEAFi8v
y3AW1kbuAmQL2f4zXbB6bGUdqPokvl8xOI7VsTCXycerLk56iXI6IdR9MMqqSdmy
4mm3nPvpCdJtL8ciKE6N2D2r7KH9aXtZpMyA3sijoqfDzH22anT3QK3ApgM78tBq
6oBdfsaKUCGHe4f/JMrt4hyrVb6YAe13dWy3h8g9FHr+581LnzaCYOx0AAzSOGvb
VPqP/AsyhBRrPbYwTweD1fwiVGFCXMCgFw/tz/dohm3Pudya76bJv+devZM/JrtA
MyUkeHFhGezax6C5zHCyE/ohJBO2xvIH5e+kCaerhZKDseudFpuqZnRiVYkBAdxJ
ezfW5BRAHPrQWrQBNw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 12:35:39 2025 by rpki-client