Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233342e302f32342d3234203d3e20323633343834.roa
File:                     3139312e3234322e3233342e302f32342d3234203d3e20323633343834.roa (raw, json)
Hash identifier:          PPp0mavhtWfV2w1zZTaXnC9vtFegZnwg6H1XpvOcN1I=
Subject key identifier:   EE:04:A9:92:73:6C:AD:DE:57:E8:A0:3E:4A:70:4C:BC:02:77:EB:F4
Certificate issuer:       /CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
Certificate serial:       05B63EB8F989BD60328A089685DC06501A07B151
Authority key identifier: 77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233342e302f32342d3234203d3e20323633343834.roa
Signing time:             Thu 03 Apr 2025 13:48:32 +0000
ROA not before:           Thu 03 Apr 2025 13:43:32 +0000
ROA not after:            Thu 02 Apr 2026 13:48:32 +0000
asID:                     263484
IP address blocks:        191.242.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 11:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b6:3e:b8:f9:89:bd:60:32:8a:08:96:85:dc:06:50:1a:07:b1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
        Validity
            Not Before: Apr  3 13:43:32 2025 GMT
            Not After : Apr  2 13:48:32 2026 GMT
        Subject: CN=EE04A992736CADDE57E8A03E4A704CBC0277EBF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:88:1c:cd:c9:96:12:98:a5:36:6f:93:41:
                    dd:19:6c:34:54:dc:96:76:fc:ed:bd:78:44:e0:8b:
                    54:e0:91:b4:dd:66:fa:48:d0:c0:3f:1e:27:58:95:
                    24:2a:c9:ce:42:2c:f5:88:0f:03:8b:a7:10:62:ef:
                    b3:80:b9:28:1d:3c:f4:b7:dc:62:2c:15:52:e2:1d:
                    5c:10:d8:74:7e:8e:6a:e4:28:76:88:c8:16:92:83:
                    92:09:3f:a8:ec:74:57:ad:cd:fd:3b:66:a0:a5:0a:
                    a1:48:48:9d:74:c6:84:e1:ca:87:6c:84:77:c0:5b:
                    f0:dd:23:7a:4d:91:af:dc:a7:fa:03:d5:96:ba:8a:
                    03:e8:49:d1:8f:1a:82:36:c0:2e:51:6d:f3:63:4a:
                    45:d1:d2:5a:cc:da:e4:96:67:98:db:db:fa:56:ef:
                    34:80:86:92:67:b0:46:b4:35:34:70:3f:d4:7f:61:
                    11:6f:e8:64:b2:76:8b:2c:9e:3b:74:53:a4:49:22:
                    25:66:f3:f9:35:22:e2:9a:0a:2a:3f:3a:cf:e8:bd:
                    45:9d:9d:1b:04:88:c6:21:b0:33:60:a3:be:d6:0d:
                    93:ae:61:cd:49:91:cd:2d:52:8d:b1:31:f2:1f:76:
                    a7:75:4b:f9:8f:ec:84:ab:27:e3:c1:f2:b8:dd:f3:
                    a1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:04:A9:92:73:6C:AD:DE:57:E8:A0:3E:4A:70:4C:BC:02:77:EB:F4
            X509v3 Authority Key Identifier:
                keyid:77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233342e302f32342d3234203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:e4:07:71:30:a4:2f:d0:d1:27:0c:24:ab:2c:a3:34:71:97:
         92:85:f6:13:45:08:92:41:bb:e4:43:ce:9d:19:1a:93:17:6f:
         a3:b1:84:87:20:bd:25:56:0a:53:b5:c3:aa:20:87:ca:5e:54:
         ff:62:52:aa:34:46:a7:60:98:fa:c8:4f:6b:fa:64:f1:dd:de:
         fb:7c:0a:88:4d:f8:13:90:8f:0f:2a:97:ee:1a:7f:a3:e4:82:
         60:95:f7:86:c2:00:e0:20:3e:9b:1d:ff:57:22:c7:68:49:1e:
         00:4b:7d:cf:1a:e5:c9:44:a4:dc:c8:0d:64:78:b7:57:c9:82:
         a0:f3:8d:bb:bd:70:9b:22:5c:86:2b:5a:60:6f:cb:cf:06:25:
         b6:f4:e0:38:bc:99:99:02:9c:5a:7e:ef:98:d2:f2:f4:33:22:
         19:44:e3:64:67:3f:86:ee:5c:67:90:d7:03:cc:8a:fd:e6:81:
         63:42:f3:a4:38:d6:aa:95:05:91:c7:58:0e:4d:2a:bb:7c:67:
         43:2a:65:1e:b8:99:a2:75:a2:4d:20:82:ee:8c:32:0a:09:06:
         bd:c3:e7:8c:29:f2:b9:0b:7d:27:3c:01:27:32:5b:eb:eb:5a:
         d8:0d:ef:cb:9d:49:48:50:cd:46:05:c6:08:e6:59:12:db:ea:
         9f:37:68:03
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBbY+uPmJvWAyigiWhdwGUBoHsVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc3QkQ1RDVCRTRDOTkxM0MzQ0I4MUU2N0ZFNzdDMzE0
M0MxQzFERDAeFw0yNTA0MDMxMzQzMzJaFw0yNjA0MDIxMzQ4MzJaMDMxMTAvBgNV
BAMTKEVFMDRBOTkyNzM2Q0FEREU1N0U4QTAzRTRBNzA0Q0JDMDI3N0VCRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/B4gczcmWEpilNm+TQd0ZbDRU
3JZ2/O29eETgi1TgkbTdZvpI0MA/HidYlSQqyc5CLPWIDwOLpxBi77OAuSgdPPS3
3GIsFVLiHVwQ2HR+jmrkKHaIyBaSg5IJP6jsdFetzf07ZqClCqFISJ10xoThyods
hHfAW/DdI3pNka/cp/oD1Za6igPoSdGPGoI2wC5RbfNjSkXR0lrM2uSWZ5jb2/pW
7zSAhpJnsEa0NTRwP9R/YRFv6GSydossnjt0U6RJIiVm8/k1IuKaCio/Os/ovUWd
nRsEiMYhsDNgo77WDZOuYc1Jkc0tUo2xMfIfdqd1S/mP7ISrJ+PB8rjd86EzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7gSpknNsrd5X6KA+SnBMvAJ36/QwHwYDVR0j
BBgwFoAUd3vV1b5MmRPDy4Hmf+d8MUPBwd0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXNGaXJNc0tZa05oRkRiblZydTF6aGhyUnZHRWdxOTV4WmNOa0hwNEN2
WVIvMC83NzdCRDVENUJFNEM5OTEzQzNDQjgxRTY3RkU3N0MzMTQzQzFDMURELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3N0JENUQ1QkU0Qzk5MTND
M0NCODFFNjdGRTc3QzMxNDNDMUMxREQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzRmlyTXNLWWtOaEZEYm5WcnUxemhoclJ2R0VncTk1eFpjTmtIcDRDdllSLzAv
MzEzOTMxMmUzMjM0MzIyZTMyMzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/y6jANBgkqhkiG9w0BAQsFAAOCAQEAFuQH
cTCkL9DRJwwkqyyjNHGXkoX2E0UIkkG75EPOnRkakxdvo7GEhyC9JVYKU7XDqiCH
yl5U/2JSqjRGp2CY+shPa/pk8d3e+3wKiE34E5CPDyqX7hp/o+SCYJX3hsIA4CA+
mx3/VyLHaEkeAEt9zxrlyUSk3MgNZHi3V8mCoPONu71wmyJchitaYG/LzwYltvTg
OLyZmQKcWn7vmNLy9DMiGUTjZGc/hu5cZ5DXA8yK/eaBY0LzpDjWqpUFkcdYDk0q
u3xnQyplHriZonWiTSCC7owyCgkGvcPnjCnyuQt9JzwBJzJb6+ta2A3vy51JSFDN
RgXGCOZZEtvqnzdoAw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:30:32 2025 by rpki-client