Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/3137372e35332e3132382e302f32312d3234203d3e20323638333233.roa
File:                     3137372e35332e3132382e302f32312d3234203d3e20323638333233.roa (raw, json)
Hash identifier:          sdu5+bfodftuulEa9fVD7+XKZZ87v1ITtxwVWjLNRxo=
Subject key identifier:   86:D7:40:A9:65:E3:32:15:EC:5F:B9:DD:84:26:13:89:38:42:BC:DD
Certificate issuer:       /CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
Certificate serial:       43575374B908033386D7A65AE709C7F04AA6F496
Authority key identifier: CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/3137372e35332e3132382e302f32312d3234203d3e20323638333233.roa
Signing time:             Thu 06 Mar 2025 04:01:08 +0000
ROA not before:           Thu 06 Mar 2025 03:56:08 +0000
ROA not after:            Thu 05 Mar 2026 04:01:08 +0000
asID:                     268323
IP address blocks:        177.53.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl
                          rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 15:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:57:53:74:b9:08:03:33:86:d7:a6:5a:e7:09:c7:f0:4a:a6:f4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
        Validity
            Not Before: Mar  6 03:56:08 2025 GMT
            Not After : Mar  5 04:01:08 2026 GMT
        Subject: CN=86D740A965E33215EC5FB9DD842613893842BCDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:4b:60:94:55:ad:02:c5:c3:3e:5b:42:23:
                    d5:04:fe:b1:b8:1a:28:8d:d7:5b:b6:b7:a1:9c:6e:
                    dc:7d:c6:fd:84:a2:7b:52:28:e5:dd:fd:ff:4d:ba:
                    fd:89:0d:79:49:0d:2a:8d:27:15:a8:d7:b7:9e:bb:
                    49:e8:fd:15:0e:a8:44:cf:9c:f1:06:f6:77:7f:75:
                    da:ef:51:2d:eb:92:3f:6a:3c:4b:20:00:67:68:6e:
                    ea:31:7f:b4:30:32:c3:b5:91:b0:48:a4:8d:ce:4d:
                    a0:af:f7:98:49:de:81:0b:ba:71:12:95:e8:1e:f4:
                    a6:f6:28:7b:e1:2c:8c:44:4a:3e:04:7e:3f:d2:b3:
                    37:54:88:b7:ea:aa:4a:14:e4:41:bf:7d:5c:5f:66:
                    c7:d0:40:9e:e5:53:7b:56:4f:a0:53:8b:ef:16:e4:
                    27:11:af:77:12:eb:5b:5c:ce:fa:7b:a3:5a:6e:5e:
                    f5:e9:75:78:ac:8c:12:73:3b:7d:56:44:0b:07:b3:
                    23:df:71:91:6e:10:2f:a4:8f:64:af:60:d7:49:4a:
                    e3:21:be:3b:db:59:d6:5e:3d:f5:26:47:4b:7b:45:
                    fc:7f:c3:cf:1f:9e:b9:ac:11:8e:d0:45:38:74:8a:
                    09:52:15:59:cf:70:eb:3c:72:b4:5e:21:7d:06:6c:
                    4d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D7:40:A9:65:E3:32:15:EC:5F:B9:DD:84:26:13:89:38:42:BC:DD
            X509v3 Authority Key Identifier:
                keyid:CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/3137372e35332e3132382e302f32312d3234203d3e20323638333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:c4:03:c6:8e:09:1f:34:d9:fc:6d:81:3e:72:14:95:3f:76:
         7a:39:c4:13:ab:cb:b2:c6:69:7b:29:cf:2d:4b:df:ac:3c:9f:
         dd:91:bf:0d:4a:65:f3:5f:5b:df:e8:32:9d:0a:6f:81:fc:bf:
         d4:80:f3:ba:f0:9a:e6:48:0b:52:12:58:0b:82:f2:2c:94:de:
         fb:7f:28:61:ba:e3:fb:c7:d9:07:7b:47:c2:9c:7a:9b:ea:73:
         89:e7:37:56:e3:c0:30:bb:ac:56:6f:27:14:ca:2e:b3:48:4f:
         d8:55:a9:22:c4:d5:4e:3d:ac:6d:fa:61:2e:e8:ac:c1:cc:eb:
         1e:65:69:63:c9:95:16:7c:f3:da:3f:a1:f0:e9:b6:6b:fc:dd:
         1d:4e:e1:9a:a0:e4:8b:00:d2:37:b9:f4:7c:31:79:51:7f:6f:
         0d:bf:eb:b9:18:77:ac:83:39:47:09:4a:5d:d5:0a:c3:78:5a:
         43:19:4d:16:e3:29:2b:b1:57:e1:5c:3a:7c:73:80:3e:84:fe:
         da:06:46:bf:78:ae:35:1b:4b:01:ef:e5:9c:ef:f0:f4:0f:69:
         13:3b:7a:b5:59:ff:7a:38:4a:79:61:ee:11:c5:54:33:57:32:
         2e:b3:10:ec:b1:57:1a:c3:6b:f0:3a:70:40:66:6f:67:80:8f:
         fe:a2:66:99
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQ1dTdLkIAzOG16Za5wnH8Eqm9JYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MxRUNDRkFDN0E2QkJBNkI5M0E2MzJERDFDNjEwMDY4
NjM0NEJEODAeFw0yNTAzMDYwMzU2MDhaFw0yNjAzMDUwNDAxMDhaMDMxMTAvBgNV
BAMTKDg2RDc0MEE5NjVFMzMyMTVFQzVGQjlERDg0MjYxMzg5Mzg0MkJDREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1cUtglFWtAsXDPltCI9UE/rG4
GiiN11u2t6Gcbtx9xv2EontSKOXd/f9Nuv2JDXlJDSqNJxWo17eeu0no/RUOqETP
nPEG9nd/ddrvUS3rkj9qPEsgAGdobuoxf7QwMsO1kbBIpI3OTaCv95hJ3oELunES
lege9Kb2KHvhLIxESj4Efj/SszdUiLfqqkoU5EG/fVxfZsfQQJ7lU3tWT6BTi+8W
5CcRr3cS61tczvp7o1puXvXpdXisjBJzO31WRAsHsyPfcZFuEC+kj2SvYNdJSuMh
vjvbWdZePfUmR0t7Rfx/w88fnrmsEY7QRTh0iglSFVnPcOs8crReIX0GbE3ZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhtdAqWXjMhXsX7ndhCYTiThCvN0wHwYDVR0j
BBgwFoAUzB7M+semu6a5OmMt0cYQBoY0S9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQndBWlZGcHVuOERSY2Y3MjdNb3JLYnRXdnZ0em5BU2V6Mkh1WHBIODFo
bmYvMS9DQzFFQ0NGQUM3QTZCQkE2QjkzQTYzMkREMUM2MTAwNjg2MzQ0QkQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDMUVDQ0ZBQzdBNkJCQTZC
OTNBNjMyREQxQzYxMDA2ODYzNDRCRDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J3QVpWRnB1bjhEUmNmNzI3TW9yS2J0V3Z2dHpuQVNlejJIdVhwSDgxaG5mLzEv
MzEzNzM3MmUzNTMzMmUzMTMyMzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMzMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxNYAwDQYJKoZIhvcNAQELBQADggEBAD3EA8aO
CR802fxtgT5yFJU/dno5xBOry7LGaXspzy1L36w8n92Rvw1KZfNfW9/oMp0Kb4H8
v9SA87rwmuZIC1ISWAuC8iyU3vt/KGG64/vH2Qd7R8Kcepvqc4nnN1bjwDC7rFZv
JxTKLrNIT9hVqSLE1U49rG36YS7orMHM6x5laWPJlRZ889o/ofDptmv83R1O4Zqg
5IsA0je59HwxeVF/bw2/67kYd6yDOUcJSl3VCsN4WkMZTRbjKSuxV+FcOnxzgD6E
/toGRr94rjUbSwHv5Zzv8PQPaRM7erVZ/3o4Snlh7hHFVDNXMi6zEOyxVxrDa/A6
cEBmb2eAj/6iZpk=
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:29:25 2025 by rpki-client