Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33362e302f32332d3233203d3e203532383631.roa
File:                     3137372e3132342e33362e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          0Z030D+zcxrZK88XpM5fqiirbTBV8ewNKeYzErn3ZCk=
Subject key identifier:   95:9E:74:5F:4F:87:15:97:7F:3B:45:82:95:FC:27:32:73:EA:97:E5
Certificate issuer:       /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial:       DCEF5AFF9C020BACE0ACEE848C1FB37D5312A3
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33362e302f32332d3233203d3e203532383631.roa
Signing time:             Tue 24 Dec 2024 13:51:07 +0000
ROA not before:           Tue 24 Dec 2024 13:46:07 +0000
ROA not after:            Tue 23 Dec 2025 13:51:07 +0000
asID:                     52861
IP address blocks:        177.124.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            dc:ef:5a:ff:9c:02:0b:ac:e0:ac:ee:84:8c:1f:b3:7d:53:12:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
        Validity
            Not Before: Dec 24 13:46:07 2024 GMT
            Not After : Dec 23 13:51:07 2025 GMT
        Subject: CN=959E745F4F8715977F3B458295FC273273EA97E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bf:5c:17:38:91:35:d0:54:b9:7e:c8:33:0e:
                    8e:32:d9:44:83:e6:f0:17:61:4c:b1:4e:86:47:8d:
                    ec:89:af:dd:3c:2b:91:72:3a:91:52:4b:b8:dd:7e:
                    df:44:b7:c3:07:2b:ce:33:20:32:c0:e0:e5:db:48:
                    a1:d2:4f:04:95:cf:18:dc:78:6f:db:e0:1d:40:7f:
                    a0:79:a5:15:10:29:0a:3a:f3:45:a4:30:cc:6c:7e:
                    e6:03:07:57:aa:c0:98:17:48:fe:b5:75:1a:f8:c2:
                    c7:b9:ca:28:e7:49:e0:91:7e:a7:f9:84:16:d2:88:
                    a2:43:ab:44:93:f5:c0:14:54:0f:2f:4e:af:98:6a:
                    82:f9:47:cd:d9:57:89:2e:ea:76:93:b7:a1:a3:63:
                    13:ab:8d:29:61:bf:6c:d5:9c:07:a6:77:56:03:15:
                    17:30:31:7c:fb:d4:fb:f8:a7:04:92:34:db:89:2c:
                    b6:fc:38:fd:0e:df:10:e2:28:0b:62:98:fd:da:a7:
                    3b:6f:41:9e:ea:95:c7:e0:52:4b:90:cf:c7:74:9a:
                    0f:8b:63:14:cc:e4:f3:20:bb:83:78:87:f3:f5:80:
                    81:86:87:cf:bc:47:5c:85:02:1f:ef:7c:ad:bc:45:
                    44:dd:30:1f:54:46:f6:b6:de:17:ec:d3:56:69:e8:
                    4a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9E:74:5F:4F:87:15:97:7F:3B:45:82:95:FC:27:32:73:EA:97:E5
            X509v3 Authority Key Identifier:
                keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33362e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:4c:a7:56:3a:d2:8d:e7:d8:51:95:6f:5d:59:44:d3:f5:0c:
         e1:9b:09:c8:c4:5f:90:42:72:e2:b7:bd:31:64:68:ce:ca:ca:
         7b:9c:ba:71:ea:d4:27:c1:29:91:c5:d0:5d:c5:8e:56:3e:9d:
         62:97:0e:93:b9:e9:e3:c1:5c:e6:6f:80:ed:10:44:03:f3:5b:
         bb:de:23:77:dd:8e:7e:80:d1:81:d9:73:a7:9e:99:87:b2:90:
         96:17:7a:63:84:67:34:eb:86:6c:b8:49:a0:cc:3f:43:64:db:
         b1:10:ea:82:2b:04:68:f0:d7:7d:c2:ef:4d:04:27:1e:32:19:
         fc:28:a8:81:33:47:b5:df:61:af:21:ad:f2:f7:db:14:b1:03:
         97:2a:5c:dd:b4:b3:68:a0:aa:07:6b:05:89:59:ad:2c:05:5b:
         15:de:77:2f:87:1e:45:33:df:1f:4a:61:0b:9b:25:51:f2:a7:
         9e:e9:f3:55:f0:6b:da:22:64:cb:8b:f4:13:99:42:c6:d9:0c:
         33:08:11:2e:c9:44:e6:8e:95:d1:66:f1:89:9d:8e:48:7b:1d:
         bc:b3:15:e4:06:3b:f4:64:5c:e6:d3:67:2f:94:b7:6f:32:be:
         da:9e:cf:d0:63:7f:2b:f8:b3:82:0d:3b:69:df:17:bf:b7:dd:
         f1:e3:c9:81
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUANzvWv+cAgus4KzuhIwfs31TEqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4RkJFQ0MzRDczNDg3NUNEQzIzQjU1QjlFNTA5MkVB
MjdERjI3MDAeFw0yNDEyMjQxMzQ2MDdaFw0yNTEyMjMxMzUxMDdaMDMxMTAvBgNV
BAMTKDk1OUU3NDVGNEY4NzE1OTc3RjNCNDU4Mjk1RkMyNzMyNzNFQTk3RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+v1wXOJE10FS5fsgzDo4y2USD
5vAXYUyxToZHjeyJr908K5FyOpFSS7jdft9Et8MHK84zIDLA4OXbSKHSTwSVzxjc
eG/b4B1Af6B5pRUQKQo680WkMMxsfuYDB1eqwJgXSP61dRr4wse5yijnSeCRfqf5
hBbSiKJDq0ST9cAUVA8vTq+YaoL5R83ZV4ku6naTt6GjYxOrjSlhv2zVnAemd1YD
FRcwMXz71Pv4pwSSNNuJLLb8OP0O3xDiKAtimP3apztvQZ7qlcfgUkuQz8d0mg+L
YxTM5PMgu4N4h/P1gIGGh8+8R1yFAh/vfK28RUTdMB9URva23hfs01Zp6EqHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUlZ50X0+HFZd/O0WClfwnMnPql+UwHwYDVR0j
BBgwFoAUCI++zD1zSHXNwjtVueUJLqJ98nAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjF1VVdpVWtuUkRTV1AzM2ZTSDVuSzdMZndNOU1QMWNnZXZLVjU5eGhB
S1gvMC8wODhGQkVDQzNENzM0ODc1Q0RDMjNCNTVCOUU1MDkyRUEyN0RGMjcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4OEZCRUNDM0Q3MzQ4NzVD
REMyM0I1NUI5RTUwOTJFQTI3REYyNzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0IxdVVXaVVrblJEU1dQMzNmU0g1bks3TGZ3TTlNUDFjZ2V2S1Y1OXhoQUtYLzAv
MzEzNzM3MmUzMTMyMzQyZTMzMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzgzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsXwkMA0GCSqGSIb3DQEBCwUAA4IBAQCVTKdWOtKN
59hRlW9dWUTT9QzhmwnIxF+QQnLit70xZGjOysp7nLpx6tQnwSmRxdBdxY5WPp1i
lw6TuenjwVzmb4DtEEQD81u73iN33Y5+gNGB2XOnnpmHspCWF3pjhGc064ZsuEmg
zD9DZNuxEOqCKwRo8Nd9wu9NBCceMhn8KKiBM0e132GvIa3y99sUsQOXKlzdtLNo
oKoHawWJWa0sBVsV3ncvhx5FM98fSmELmyVR8qee6fNV8GvaImTLi/QTmULG2Qwz
CBEuyUTmjpXRZvGJnY5Iex28sxXkBjv0ZFzm02cvlLdvMr7ans/QY38r+LOCDTtp
3xe/t93x48mB
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:05 2025 by rpki-client