Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3137372e38372e38382e302f32322d3234203d3e203238333334.roa
File:                     3137372e38372e38382e302f32322d3234203d3e203238333334.roa (raw, json)
Hash identifier:          e64n4sLZBtLeJPeUzLEY+EYUZXoppfs/ossgmDdTEPQ=
Subject key identifier:   09:62:86:9E:45:55:8E:D9:D6:FF:4B:E5:B0:02:38:F1:E4:B1:AA:28
Certificate issuer:       /CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
Certificate serial:       686C4036BC3C3BE5A5D1FBB2D115A8066FFC0391
Authority key identifier: FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3137372e38372e38382e302f32322d3234203d3e203238333334.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     28334
IP address blocks:        177.87.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl
                          rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 19:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6c:40:36:bc:3c:3b:e5:a5:d1:fb:b2:d1:15:a8:06:6f:fc:03:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=0962869E45558ED9D6FF4BE5B00238F1E4B1AA28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2f:40:e2:a7:f9:7c:85:f8:35:1b:20:56:1a:
                    fb:03:62:4f:72:58:cc:9f:29:21:ee:71:a5:8f:d1:
                    9d:12:f3:de:b9:6d:00:9d:c5:6b:16:a1:a5:b9:15:
                    de:25:cf:95:fb:19:26:c3:3e:5d:53:4a:6c:09:87:
                    4f:c0:5f:77:f0:b0:ad:4d:b3:da:42:87:20:cd:5b:
                    5a:e5:0d:4e:05:9f:3f:a8:80:3d:86:cc:21:ce:37:
                    97:a2:90:00:4f:d2:dc:a3:15:df:f6:8f:c9:71:6e:
                    eb:09:c3:8f:3d:14:e2:4f:ed:a3:a2:d6:2a:2c:1f:
                    42:a1:58:75:a5:d8:7d:8a:07:43:5b:e8:a8:bd:91:
                    d1:a2:1e:85:3b:12:04:65:06:d8:aa:92:55:7b:3e:
                    7d:24:34:46:0b:90:0f:06:a6:6e:9c:ef:55:d3:93:
                    f9:f8:41:68:a1:25:09:37:18:14:ac:fc:47:96:8c:
                    af:95:01:0e:39:0c:17:d8:fc:b0:ae:71:a3:82:df:
                    70:de:c2:43:02:8e:b6:8c:43:15:96:e2:95:4c:31:
                    31:ee:6a:db:61:0b:39:49:89:51:2c:57:3b:4e:ab:
                    ef:0a:83:6f:32:f4:88:b3:66:e5:b3:c6:c2:9e:d5:
                    1a:54:dd:10:99:d4:8a:73:9f:16:57:38:d0:6d:25:
                    d1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:62:86:9E:45:55:8E:D9:D6:FF:4B:E5:B0:02:38:F1:E4:B1:AA:28
            X509v3 Authority Key Identifier:
                keyid:FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3137372e38372e38382e302f32322d3234203d3e203238333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:d1:6c:f0:f3:1d:0c:cb:26:de:8c:b4:cc:42:bb:eb:c3:63:
         2f:14:fc:5b:d9:4d:b4:81:c4:68:10:60:fa:14:fd:31:5b:e4:
         84:d4:01:61:b2:ca:0f:0b:4a:5b:0d:f6:27:87:38:88:70:f9:
         38:0c:b0:47:2c:be:f8:31:97:51:01:47:35:e6:b9:c3:d0:e2:
         92:46:19:75:a8:62:cd:9a:3c:56:c9:df:7c:8a:85:e5:51:95:
         0e:f7:5c:d1:02:2c:b0:a4:62:e7:9f:1a:51:0a:17:fb:f1:7a:
         ef:8f:6b:d6:50:e8:cc:2b:bf:b3:40:12:64:4a:73:b6:c9:34:
         05:e0:cd:ea:de:7b:ea:9f:88:e0:1a:ad:89:ba:1a:b5:ee:f8:
         68:71:d4:d7:73:3b:6c:d0:93:2a:3c:5d:36:78:76:ab:11:56:
         80:83:4c:ab:ef:74:5f:ec:e8:8e:ff:a2:6c:2e:dc:9b:db:44:
         47:44:3d:64:5d:14:82:c8:5f:66:2e:85:fd:a9:52:fa:de:a5:
         91:fc:23:17:02:2d:eb:58:bd:f2:c7:20:3f:f7:0b:60:6b:c6:
         a1:8b:20:cf:69:d5:34:06:00:40:48:a1:07:a1:a7:8b:b7:69:
         07:b2:67:20:aa:51:8f:83:94:5b:9c:aa:3a:d8:63:02:75:ea:
         55:d6:52:12
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUaGxANrw8O+Wl0fuy0RWoBm/8A5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI0NDUxRUZGOUQxQTc0RjJCQTZDMzdDRTYwOUU3MTYy
Q0M0NzZFMTAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV
BAMTKDA5NjI4NjlFNDU1NThFRDlENkZGNEJFNUIwMDIzOEYxRTRCMUFBMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoL0Dip/l8hfg1GyBWGvsDYk9y
WMyfKSHucaWP0Z0S8965bQCdxWsWoaW5Fd4lz5X7GSbDPl1TSmwJh0/AX3fwsK1N
s9pChyDNW1rlDU4Fnz+ogD2GzCHON5eikABP0tyjFd/2j8lxbusJw489FOJP7aOi
1iosH0KhWHWl2H2KB0Nb6Ki9kdGiHoU7EgRlBtiqklV7Pn0kNEYLkA8Gpm6c71XT
k/n4QWihJQk3GBSs/EeWjK+VAQ45DBfY/LCucaOC33DewkMCjraMQxWW4pVMMTHu
atthCzlJiVEsVztOq+8Kg28y9IizZuWzxsKe1RpU3RCZ1IpznxZXONBtJdEzAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUCWKGnkVVjtnW/0vlsAI48eSxqigwHwYDVR0j
BBgwFoAU+0RR7/nRp08rpsN85gnnFizEduEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtvYjNaWG9tMlVWMlFDVEpGQ1VhdkxQTkdKcUhuaEJlb0VvQTk1ajVo
UjUvMS9GQjQ0NTFFRkY5RDFBNzRGMkJBNkMzN0NFNjA5RTcxNjJDQzQ3NkUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCNDQ1MUVGRjlEMUE3NEYy
QkE2QzM3Q0U2MDlFNzE2MkNDNDc2RTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLb2IzWlhvbTJVVjJRQ1RKRkNVYXZMUE5HSnFIbmhCZW9Fb0E5NWo1aFI1LzEv
MzEzNzM3MmUzODM3MmUzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMz
MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArFXWDANBgkqhkiG9w0BAQsFAAOCAQEAyNFs8PMdDMsm
3oy0zEK768NjLxT8W9lNtIHEaBBg+hT9MVvkhNQBYbLKDwtKWw32J4c4iHD5OAyw
Ryy++DGXUQFHNea5w9DikkYZdahizZo8VsnffIqF5VGVDvdc0QIssKRi558aUQoX
+/F6749r1lDozCu/s0ASZEpztsk0BeDN6t576p+I4Bqtiboate74aHHU13M7bNCT
KjxdNnh2qxFWgINMq+90X+zojv+ibC7cm9tER0Q9ZF0UgshfZi6F/alS+t6lkfwj
FwIt61i98scgP/cLYGvGoYsgz2nVNAYAQEihB6Gni7dpB7JnIKpRj4OUW5yqOthj
AnXqVdZSEg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:51:19 2025 by rpki-client