Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3138322e302f32342d3234203d3e20323633303335.roa
File:                     3137372e32302e3138322e302f32342d3234203d3e20323633303335.roa (raw, json)
Hash identifier:          XLJO3Y5oOY5PTnPJ+zi3IILoKdSyGvfSmWod7OmvUao=
Subject key identifier:   10:5C:9C:43:03:FE:5B:D3:C9:C6:D9:68:A9:5C:39:EB:88:74:6A:A3
Certificate issuer:       /CN=3811D3CF68BD6E1D457066AF72C5B80697140952
Certificate serial:       72691A6D4BDBCF6D194F1B3E8AC9ADABB3861853
Authority key identifier: 38:11:D3:CF:68:BD:6E:1D:45:70:66:AF:72:C5:B8:06:97:14:09:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3138322e302f32342d3234203d3e20323633303335.roa
Signing time:             Thu 05 Jun 2025 13:44:07 +0000
ROA not before:           Thu 05 Jun 2025 13:39:07 +0000
ROA not after:            Thu 04 Jun 2026 13:44:07 +0000
asID:                     263035
IP address blocks:        177.20.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.crl
                          rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:69:1a:6d:4b:db:cf:6d:19:4f:1b:3e:8a:c9:ad:ab:b3:86:18:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3811D3CF68BD6E1D457066AF72C5B80697140952
        Validity
            Not Before: Jun  5 13:39:07 2025 GMT
            Not After : Jun  4 13:44:07 2026 GMT
        Subject: CN=105C9C4303FE5BD3C9C6D968A95C39EB88746AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:36:28:d5:c3:42:51:6f:b3:0e:02:ad:1a:d3:
                    43:57:d8:74:05:b9:36:22:16:50:30:08:fa:15:dd:
                    6d:a4:a7:de:73:23:3f:f7:a2:1e:bb:78:20:30:71:
                    91:64:61:9f:25:26:50:46:3c:db:0a:a4:6e:a9:6f:
                    f7:a6:8a:11:c6:70:a0:5d:5a:4a:f4:83:f1:11:e4:
                    3b:64:1d:f7:88:ad:60:d2:32:af:ca:5d:e7:c4:58:
                    42:fd:46:9f:f0:27:f4:73:56:ad:4b:10:1e:bc:8f:
                    fa:f7:c0:10:70:c7:10:c0:f5:fd:a1:94:02:c1:a8:
                    ba:48:c1:2e:83:be:0e:32:51:77:d9:01:fe:81:20:
                    35:05:85:ef:ed:28:e6:9a:37:c9:e8:cf:9c:e0:21:
                    4e:ed:4a:59:0e:cf:42:b8:05:1e:5e:61:92:04:10:
                    53:1c:b3:61:4e:fc:b5:58:e8:6f:75:06:59:da:34:
                    a5:06:9b:4f:cc:08:7e:ad:0e:13:42:f8:e0:84:17:
                    e7:25:c5:5b:42:4f:de:54:62:05:ac:da:16:fb:1c:
                    da:e1:0e:30:0e:93:d8:30:ba:67:cb:dd:21:ba:71:
                    05:b8:87:ce:0a:50:97:da:1c:73:f8:e1:46:e3:90:
                    14:8c:f9:18:39:8e:9a:27:cf:2a:3a:44:40:ae:9b:
                    61:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5C:9C:43:03:FE:5B:D3:C9:C6:D9:68:A9:5C:39:EB:88:74:6A:A3
            X509v3 Authority Key Identifier:
                keyid:38:11:D3:CF:68:BD:6E:1D:45:70:66:AF:72:C5:B8:06:97:14:09:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3138322e302f32342d3234203d3e20323633303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:af:5d:b0:68:c3:bd:38:24:b8:65:eb:98:6f:a1:fd:74:f9:
         f7:28:65:f8:0f:43:0a:2a:e8:c9:3b:f4:56:55:ea:1f:4d:c6:
         89:e5:c6:c6:b2:24:3d:be:a2:7f:3d:66:7f:77:42:e5:93:48:
         c9:f2:bd:48:d7:3c:a0:35:d2:46:c7:73:1c:fa:5b:b9:11:83:
         d9:ad:71:34:3d:6c:1f:75:6f:eb:5a:5c:c2:0f:7e:4a:e8:45:
         ec:75:10:30:ea:f2:fc:75:94:41:2c:a4:82:5a:0c:69:0c:67:
         53:f8:e8:66:39:fe:9d:22:57:d9:45:6a:77:11:a6:b1:18:04:
         1c:b3:0c:63:b5:c4:12:d1:bc:e4:5a:3a:aa:fe:8a:21:9e:2d:
         51:ad:9a:0c:e4:43:36:0e:58:3a:06:40:a2:11:de:a9:ec:f5:
         79:15:99:8b:cf:e9:13:99:e9:fd:b1:97:87:c6:2f:f0:4a:5a:
         a1:b2:92:35:1d:46:f9:4c:b2:84:90:5a:05:e5:9e:9a:13:5f:
         e6:7a:e5:4b:07:31:7e:a6:c6:ba:a3:87:43:2a:79:63:70:76:
         bf:90:4a:0d:82:b3:43:d0:1b:06:da:07:81:52:65:e8:83:7b:
         2a:86:06:71:dd:05:91:0c:88:bb:be:aa:c4:d3:0d:c4:94:71:
         4d:86:81:39
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcmkabUvbz20ZTxs+ismtq7OGGFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzgxMUQzQ0Y2OEJENkUxRDQ1NzA2NkFGNzJDNUI4MDY5
NzE0MDk1MjAeFw0yNTA2MDUxMzM5MDdaFw0yNjA2MDQxMzQ0MDdaMDMxMTAvBgNV
BAMTKDEwNUM5QzQzMDNGRTVCRDNDOUM2RDk2OEE5NUMzOUVCODg3NDZBQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeNijVw0JRb7MOAq0a00NX2HQF
uTYiFlAwCPoV3W2kp95zIz/3oh67eCAwcZFkYZ8lJlBGPNsKpG6pb/emihHGcKBd
Wkr0g/ER5DtkHfeIrWDSMq/KXefEWEL9Rp/wJ/RzVq1LEB68j/r3wBBwxxDA9f2h
lALBqLpIwS6Dvg4yUXfZAf6BIDUFhe/tKOaaN8noz5zgIU7tSlkOz0K4BR5eYZIE
EFMcs2FO/LVY6G91BlnaNKUGm0/MCH6tDhNC+OCEF+clxVtCT95UYgWs2hb7HNrh
DjAOk9gwumfL3SG6cQW4h84KUJfaHHP44UbjkBSM+Rg5jponzyo6RECum2GRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEFycQwP+W9PJxtloqVw564h0aqMwHwYDVR0j
BBgwFoAUOBHTz2i9bh1FcGavcsW4BpcUCVIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUpNcmRVZ2p6cnlHeXlxd2FpMTRlZXo5elZqWnRieTZ6R3IxcUJ0QW9K
RDIvMC8zODExRDNDRjY4QkQ2RTFENDU3MDY2QUY3MkM1QjgwNjk3MTQwOTUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4MTFEM0NGNjhCRDZFMUQ0
NTcwNjZBRjcyQzVCODA2OTcxNDA5NTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKTXJkVWdqenJ5R3l5cXdhaTE0ZWV6OXpWalp0Ynk2ekdyMXFCdEFvSkQyLzAv
MzEzNzM3MmUzMjMwMmUzMTM4MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMDMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxFLYwDQYJKoZIhvcNAQELBQADggEBAK6vXbBo
w704JLhl65hvof10+fcoZfgPQwoq6Mk79FZV6h9NxonlxsayJD2+on89Zn93QuWT
SMnyvUjXPKA10kbHcxz6W7kRg9mtcTQ9bB91b+taXMIPfkroRex1EDDq8vx1lEEs
pIJaDGkMZ1P46GY5/p0iV9lFancRprEYBByzDGO1xBLRvORaOqr+iiGeLVGtmgzk
QzYOWDoGQKIR3qns9XkVmYvP6ROZ6f2xl4fGL/BKWqGykjUdRvlMsoSQWgXlnpoT
X+Z65UsHMX6mxrqjh0MqeWNwdr+QSg2Cs0PQGwbaB4FSZeiDeyqGBnHdBZEMiLu+
qsTTDcSUcU2GgTk=
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:07:31 2025 by rpki-client