Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37362e302f32342d3234203d3e203532393737.roa
File:                     3137372e33392e37362e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          oXVwS2vc77WiZNUIqYewnQ9T0zulZlFP0slD0nnP4Wk=
Subject key identifier:   5A:3A:0A:D3:A7:1B:2A:45:28:86:66:DA:FD:4E:18:01:6D:57:D9:52
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       744CAECAC18765735C7D38E42AE873B5127BCE9B
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37362e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     52977
IP address blocks:        177.39.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 06:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4c:ae:ca:c1:87:65:73:5c:7d:38:e4:2a:e8:73:b5:12:7b:ce:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=5A3A0AD3A71B2A45288666DAFD4E18016D57D952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:e4:6b:ac:4e:60:0b:ac:93:eb:77:89:7d:
                    4d:c1:a8:d3:a3:63:62:6d:84:72:16:df:1b:70:71:
                    0b:88:fc:6a:04:21:35:be:fc:49:5e:ce:28:21:d3:
                    e3:20:68:21:4a:0b:b0:75:81:38:1b:2d:7b:51:c1:
                    e3:73:56:68:6d:93:a6:9c:f6:69:9c:2c:ec:2e:21:
                    c0:80:a2:59:0c:77:f2:9e:2d:d2:a2:94:74:ca:25:
                    a1:06:db:6a:47:a6:b2:e3:b6:0c:86:a2:f3:b5:70:
                    f4:a0:8f:0f:3e:9f:57:c5:0d:25:cf:c7:10:d9:04:
                    80:3e:a0:2a:8f:11:8f:f3:16:5e:a8:35:d5:53:90:
                    db:65:08:95:9b:13:60:9d:f9:03:94:b2:b2:cf:6a:
                    41:14:c2:38:56:0d:c7:38:1f:a4:7c:3d:98:fc:cc:
                    a2:19:1c:67:ed:93:d0:c4:7d:23:64:5a:1d:82:58:
                    83:6a:4f:ae:44:ee:bf:ef:a8:81:6f:48:aa:62:e8:
                    e0:62:ae:ad:b5:49:1e:21:c3:26:fb:76:aa:80:9d:
                    8c:85:1e:83:42:d3:39:a9:9b:96:40:93:e4:c3:6e:
                    15:d5:9e:4b:3d:09:84:f3:a3:79:e6:1e:d6:a0:d6:
                    35:be:35:bb:1b:a2:10:83:9a:86:b3:98:09:6d:ea:
                    be:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3A:0A:D3:A7:1B:2A:45:28:86:66:DA:FD:4E:18:01:6D:57:D9:52
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37362e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:e8:b2:9f:8a:14:53:42:fb:1d:4e:b0:dc:fb:d9:c4:ac:dd:
         4b:c9:29:d1:7b:9c:a1:48:5b:7d:bb:82:51:d9:95:86:ef:86:
         b5:98:26:3d:d8:da:40:ff:41:25:ff:1d:54:9f:9c:2c:c3:c0:
         b3:bd:87:d3:7a:10:51:5e:ce:ce:03:6c:94:b8:1a:b3:86:a6:
         7b:8e:79:ea:60:23:f0:97:a9:0a:2f:01:d7:8b:3f:27:bc:69:
         e4:77:38:bf:ef:0a:0c:36:30:2d:70:9b:2f:05:7b:98:6f:87:
         a8:04:d2:ec:58:e7:59:b7:53:2c:a2:be:17:de:f1:bb:24:c1:
         83:75:0b:08:ab:a6:02:7d:b5:51:29:c9:16:0d:d9:8b:83:3e:
         04:73:4e:65:81:e1:43:e7:c1:19:da:ee:16:e2:86:f7:ab:88:
         2f:3d:f0:a4:50:21:5f:79:47:0b:fd:4e:a7:1f:3b:86:52:f1:
         e8:9f:b4:42:b0:bd:1d:b3:77:1f:88:2f:47:9b:cb:04:54:23:
         3e:04:85:36:b9:ec:37:7d:3c:d6:0a:8f:6f:f9:0c:63:6c:d4:
         6f:00:1d:1e:7b:81:81:f4:8b:56:66:63:04:55:da:b6:17:2b:
         67:59:44:39:8b:bc:69:60:84:87:29:56:71:ee:01:ec:ae:4b:
         a9:c9:ba:a5
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUdEyuysGHZXNcfTjkKuhztRJ7zpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCQzREQzc1MDBDMjRFQjdCRTVEMUIzMjM1QTdDRjBF
RTdDQzUwRTAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV
BAMTKDVBM0EwQUQzQTcxQjJBNDUyODg2NjZEQUZENEUxODAxNkQ1N0Q5NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnTuRrrE5gC6yT63eJfU3BqNOj
Y2JthHIW3xtwcQuI/GoEITW+/Elezigh0+MgaCFKC7B1gTgbLXtRweNzVmhtk6ac
9mmcLOwuIcCAolkMd/KeLdKilHTKJaEG22pHprLjtgyGovO1cPSgjw8+n1fFDSXP
xxDZBIA+oCqPEY/zFl6oNdVTkNtlCJWbE2Cd+QOUsrLPakEUwjhWDcc4H6R8PZj8
zKIZHGftk9DEfSNkWh2CWINqT65E7r/vqIFvSKpi6OBirq21SR4hwyb7dqqAnYyF
HoNC0zmpm5ZAk+TDbhXVnks9CYTzo3nmHtag1jW+NbsbohCDmoazmAlt6r7RAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUWjoK06cbKkUohmba/U4YAW1X2VIwHwYDVR0j
BBgwFoAUnLxNx1AMJOt75dGzI1p88O58xQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMS85Q0JDNERDNzUwMEMyNEVCN0JFNUQxQjMyMzVBN0NGMEVFN0NDNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQkM0REM3NTAwQzI0RUI3
QkU1RDFCMzIzNUE3Q0YwRUU3Q0M1MEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzEv
MzEzNzM3MmUzMzM5MmUzNzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM5
MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALEnTDANBgkqhkiG9w0BAQsFAAOCAQEAYeiyn4oUU0L7
HU6w3PvZxKzdS8kp0XucoUhbfbuCUdmVhu+GtZgmPdjaQP9BJf8dVJ+cLMPAs72H
03oQUV7OzgNslLgas4ame4556mAj8JepCi8B14s/J7xp5Hc4v+8KDDYwLXCbLwV7
mG+HqATS7FjnWbdTLKK+F97xuyTBg3ULCKumAn21USnJFg3Zi4M+BHNOZYHhQ+fB
GdruFuKG96uILz3wpFAhX3lHC/1Opx87hlLx6J+0QrC9HbN3H4gvR5vLBFQjPgSF
NrnsN3081gqPb/kMY2zUbwAdHnuBgfSLVmZjBFXathcrZ1lEOYu8aWCEhylWce4B
7K5Lqcm6pQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:02:37 2025 by rpki-client