Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37352e302f32342d3234203d3e203532393737.roa
File:                     3137372e33392e37352e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          kloOgqRrrB7+HaTzj2oZhSoAN3Hc2qnoniVWd2pFxyc=
Subject key identifier:   91:B4:C4:E1:3F:F2:47:A0:23:9B:F8:3C:DA:1F:6A:E0:9E:40:E3:66
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       110492CD0B8664AF5AFE650ACB3931B90C2E53D7
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37352e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     52977
IP address blocks:        177.39.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 04:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:04:92:cd:0b:86:64:af:5a:fe:65:0a:cb:39:31:b9:0c:2e:53:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=91B4C4E13FF247A0239BF83CDA1F6AE09E40E366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9f:6b:c5:3f:57:83:da:c5:6d:db:bd:52:39:
                    36:c2:b5:e0:65:61:6d:ae:8f:69:9e:a2:0a:87:f6:
                    28:be:e7:3c:51:b3:e1:97:01:88:b6:ab:44:00:de:
                    65:4b:7b:46:7c:2e:91:c0:e8:d4:f6:02:7d:0a:b7:
                    6b:ca:16:1e:54:6e:d6:f6:cb:5c:40:5d:20:a5:84:
                    aa:5d:a0:7d:9f:0c:3c:3d:69:65:3d:4f:17:24:05:
                    07:51:ce:39:20:96:a7:d2:fa:8c:6c:70:a4:3f:c5:
                    44:e2:18:2c:43:d8:20:dd:aa:83:4f:52:98:73:21:
                    a3:aa:b3:9a:c2:ba:6a:26:3a:d9:ef:a9:b9:33:69:
                    d7:00:c7:fc:80:cb:70:e3:99:02:e5:a1:d8:ba:bd:
                    9c:7c:35:f1:2a:d7:7d:86:5f:83:2a:ca:d4:a2:83:
                    bb:a7:e2:fc:80:18:aa:34:d1:79:ff:0f:64:43:06:
                    ba:ec:b8:16:ec:76:b5:df:00:a6:97:62:79:06:1c:
                    77:34:85:b5:a5:ab:e6:ee:7b:3b:98:d9:b7:57:b9:
                    ed:b4:66:56:f8:8f:54:ac:ff:b3:52:8f:b0:11:a1:
                    13:1c:f4:f2:de:76:9d:36:43:b4:5a:f0:a8:0f:9e:
                    81:57:ca:b4:a8:84:0e:7c:91:e3:c5:ea:1a:7c:7e:
                    05:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B4:C4:E1:3F:F2:47:A0:23:9B:F8:3C:DA:1F:6A:E0:9E:40:E3:66
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37352e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:16:8f:bf:34:e9:9c:20:4d:ba:3f:0d:32:b0:f6:96:73:b4:
         ab:8b:a3:2a:bf:fc:71:06:ad:d5:ef:d9:4e:f5:20:f7:2f:24:
         49:01:10:ac:e2:66:b5:03:ee:a6:85:35:d1:ab:f7:78:cd:45:
         4d:59:a3:47:20:70:c8:79:23:94:6c:6e:5e:e8:8b:6c:52:a9:
         36:f8:84:a3:93:e2:bd:07:c8:a3:2c:18:4c:5d:38:12:e9:bf:
         b6:77:c8:f3:88:8b:fb:9b:c1:16:85:55:f1:d4:9f:1b:14:c7:
         e2:bb:7f:16:11:77:3c:97:8b:5a:a6:57:8d:fc:6f:e6:76:78:
         bd:60:7a:fc:a8:73:e5:56:2e:63:d9:91:7e:0a:9d:86:f8:ca:
         c4:59:30:3b:de:ec:97:dc:86:03:cf:8a:4d:53:ad:4e:f2:0a:
         bc:44:f7:b2:87:f0:0d:86:ae:0d:6c:f9:d4:8f:ba:b1:e0:a8:
         2c:34:cd:8f:5a:ed:90:d6:7a:ff:da:b3:9b:df:e3:ab:13:ae:
         fb:df:fb:62:7b:f3:7e:3a:22:e6:73:44:ff:0f:dc:7d:12:6f:
         40:47:c1:5e:96:16:75:0a:d0:28:76:2a:c4:27:35:01:22:61:
         76:de:0c:71:9a:7b:c5:44:c8:0c:f2:60:b5:85:98:56:02:68:
         81:e0:44:92
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUEQSSzQuGZK9a/mUKyzkxuQwuU9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCQzREQzc1MDBDMjRFQjdCRTVEMUIzMjM1QTdDRjBF
RTdDQzUwRTAeFw0yNTAzMDUxODU1MDJaFw0yNjAzMDQxOTAwMDJaMDMxMTAvBgNV
BAMTKDkxQjRDNEUxM0ZGMjQ3QTAyMzlCRjgzQ0RBMUY2QUUwOUU0MEUzNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUn2vFP1eD2sVt271SOTbCteBl
YW2uj2meogqH9ii+5zxRs+GXAYi2q0QA3mVLe0Z8LpHA6NT2An0Kt2vKFh5Ubtb2
y1xAXSClhKpdoH2fDDw9aWU9TxckBQdRzjkglqfS+oxscKQ/xUTiGCxD2CDdqoNP
UphzIaOqs5rCumomOtnvqbkzadcAx/yAy3DjmQLlodi6vZx8NfEq132GX4MqytSi
g7un4vyAGKo00Xn/D2RDBrrsuBbsdrXfAKaXYnkGHHc0hbWlq+buezuY2bdXue20
Zlb4j1Ss/7NSj7ARoRMc9PLedp02Q7Ra8KgPnoFXyrSohA58kePF6hp8fgWZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUkbTE4T/yR6Ajm/g82h9q4J5A42YwHwYDVR0j
BBgwFoAUnLxNx1AMJOt75dGzI1p88O58xQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMS85Q0JDNERDNzUwMEMyNEVCN0JFNUQxQjMyMzVBN0NGMEVFN0NDNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQkM0REM3NTAwQzI0RUI3
QkU1RDFCMzIzNUE3Q0YwRUU3Q0M1MEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzEv
MzEzNzM3MmUzMzM5MmUzNzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM5
MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALEnSzANBgkqhkiG9w0BAQsFAAOCAQEAYBaPvzTpnCBN
uj8NMrD2lnO0q4ujKr/8cQat1e/ZTvUg9y8kSQEQrOJmtQPupoU10av3eM1FTVmj
RyBwyHkjlGxuXuiLbFKpNviEo5PivQfIoywYTF04Eum/tnfI84iL+5vBFoVV8dSf
GxTH4rt/FhF3PJeLWqZXjfxv5nZ4vWB6/Khz5VYuY9mRfgqdhvjKxFkwO97sl9yG
A8+KTVOtTvIKvET3sofwDYauDWz51I+6seCoLDTNj1rtkNZ6/9qzm9/jqxOu+9/7
Ynvzfjoi5nNE/w/cfRJvQEfBXpYWdQrQKHYqxCc1ASJhdt4McZp7xUTIDPJgtYWY
VgJogeBEkg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 20:20:35 2025 by rpki-client