Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/3137372e3132342e3130302e302f32322d3332203d3e203532363137.roa
File:                     3137372e3132342e3130302e302f32322d3332203d3e203532363137.roa (raw, json)
Hash identifier:          flhERbsSYU/2VLCGJe9uPi6lzDg524ydmv+5Akv11pU=
Subject key identifier:   C3:C8:D5:88:F1:06:19:6D:AB:47:BA:37:FF:6E:D4:4E:BE:0C:93:AA
Certificate issuer:       /CN=D52EA87CB6ED7499343693851F4F93C4D28AAD65
Certificate serial:       33539DD6AAE30BF5DDABD21AAD2B65599D65EB07
Authority key identifier: D5:2E:A8:7C:B6:ED:74:99:34:36:93:85:1F:4F:93:C4:D2:8A:AD:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/3137372e3132342e3130302e302f32322d3332203d3e203532363137.roa
Signing time:             Thu 06 Mar 2025 12:59:16 +0000
ROA not before:           Thu 06 Mar 2025 12:54:16 +0000
ROA not after:            Thu 05 Mar 2026 12:59:16 +0000
asID:                     52617
IP address blocks:        177.124.100.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.crl
                          rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 18:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:53:9d:d6:aa:e3:0b:f5:dd:ab:d2:1a:ad:2b:65:59:9d:65:eb:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D52EA87CB6ED7499343693851F4F93C4D28AAD65
        Validity
            Not Before: Mar  6 12:54:16 2025 GMT
            Not After : Mar  5 12:59:16 2026 GMT
        Subject: CN=C3C8D588F106196DAB47BA37FF6ED44EBE0C93AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:67:62:4f:73:6d:2a:0b:20:8e:63:a0:ba:48:
                    2f:a7:1b:d1:0b:ee:72:8d:1c:e8:c6:78:18:be:65:
                    4c:30:1b:0a:72:7d:9d:79:58:03:6a:01:b3:21:b0:
                    cf:37:92:1f:d1:1d:4e:86:32:55:58:32:3c:af:8b:
                    23:8c:db:29:10:ee:72:6b:b1:a9:05:7d:c1:4b:3b:
                    ba:13:fa:cc:78:b0:98:23:f7:59:c1:70:85:27:e7:
                    9b:fe:88:e4:0e:11:7c:45:fd:ec:4b:c9:ab:a9:81:
                    f0:03:88:7b:1d:95:bc:f8:d4:b0:95:65:62:3d:27:
                    1f:6a:07:2c:b0:44:b1:ab:44:e3:17:96:ab:a2:d2:
                    20:d9:8b:a2:06:05:23:f0:df:08:1b:07:e1:bf:d7:
                    af:09:49:44:39:1a:59:94:16:99:c8:5f:f9:03:ab:
                    d9:98:bd:24:2f:15:72:ff:5a:61:3c:71:f3:52:9c:
                    66:1b:36:29:c3:62:9e:fa:bf:24:5a:6b:78:8e:05:
                    b9:69:ed:33:8f:bb:24:06:ba:da:f5:c5:e4:b8:cd:
                    42:af:45:fb:e0:a0:70:9f:81:06:af:ce:bf:ac:34:
                    32:ef:d5:3c:16:a1:11:89:db:c0:8d:de:8c:70:48:
                    97:66:0c:0c:d4:7f:2e:61:fe:71:4d:ba:c2:32:76:
                    0f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C8:D5:88:F1:06:19:6D:AB:47:BA:37:FF:6E:D4:4E:BE:0C:93:AA
            X509v3 Authority Key Identifier:
                keyid:D5:2E:A8:7C:B6:ED:74:99:34:36:93:85:1F:4F:93:C4:D2:8A:AD:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/3137372e3132342e3130302e302f32322d3332203d3e203532363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:66:98:c1:9a:9c:45:88:1b:1d:10:b5:92:e9:65:19:aa:35:
         c3:21:92:28:ed:29:c8:08:cb:45:91:3e:8e:0d:91:43:39:3b:
         da:95:ff:53:65:ae:2b:15:5c:b0:f7:22:8f:39:b4:06:90:f4:
         d2:04:98:0b:ea:37:34:75:b2:68:16:ca:7e:6c:83:8c:2a:f0:
         71:77:d7:06:bb:b4:4d:d7:a7:50:e3:46:4e:a8:9c:65:9c:85:
         93:d7:be:79:27:87:a7:9b:1e:d9:52:37:44:c3:b4:3c:bb:f7:
         f2:2e:d5:0f:e0:93:2a:d0:62:e1:4f:42:2d:46:c0:04:ff:7e:
         e2:5c:d8:9e:05:56:21:53:16:fd:f4:9c:44:2c:27:86:75:7a:
         f6:44:d4:77:35:15:4b:ae:bf:f4:f0:38:f6:32:90:ab:92:3b:
         ef:9b:47:d0:d1:3d:6c:e1:56:4a:9b:ac:76:ce:93:79:7a:81:
         be:fb:d2:4e:df:f8:a0:eb:26:dd:80:2a:a4:a0:03:68:c8:ec:
         6b:a1:fa:f8:2a:57:d4:72:ee:05:7c:84:1d:66:f9:65:6d:8e:
         f7:21:99:21:a9:73:e7:8c:3a:5d:e5:96:8e:43:3a:22:d7:2f:
         a1:26:6b:2d:b0:8a:e0:52:ed:3c:dc:f0:8c:db:99:de:e0:82:
         d6:0c:af:ab
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUM1Od1qrjC/Xdq9IarStlWZ1l6wcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUyRUE4N0NCNkVENzQ5OTM0MzY5Mzg1MUY0RjkzQzRE
MjhBQUQ2NTAeFw0yNTAzMDYxMjU0MTZaFw0yNjAzMDUxMjU5MTZaMDMxMTAvBgNV
BAMTKEMzQzhENTg4RjEwNjE5NkRBQjQ3QkEzN0ZGNkVENDRFQkUwQzkzQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqZ2JPc20qCyCOY6C6SC+nG9EL
7nKNHOjGeBi+ZUwwGwpyfZ15WANqAbMhsM83kh/RHU6GMlVYMjyviyOM2ykQ7nJr
sakFfcFLO7oT+sx4sJgj91nBcIUn55v+iOQOEXxF/exLyaupgfADiHsdlbz41LCV
ZWI9Jx9qByywRLGrROMXlqui0iDZi6IGBSPw3wgbB+G/168JSUQ5GlmUFpnIX/kD
q9mYvSQvFXL/WmE8cfNSnGYbNinDYp76vyRaa3iOBblp7TOPuyQGutr1xeS4zUKv
RfvgoHCfgQavzr+sNDLv1TwWoRGJ28CN3oxwSJdmDAzUfy5h/nFNusIydg/dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUw8jViPEGGW2rR7o3/27UTr4Mk6owHwYDVR0j
BBgwFoAU1S6ofLbtdJk0NpOFH0+TxNKKrWUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzVZTER3R21nWGNoOXQ3YnM3NzlCU05hdFFBOWdMTHlnYTVnNWt0OVhj
Nk0vMS9ENTJFQTg3Q0I2RUQ3NDk5MzQzNjkzODUxRjRGOTNDNEQyOEFBRDY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MkVBODdDQjZFRDc0OTkz
NDM2OTM4NTFGNEY5M0M0RDI4QUFENjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M1WUxEd0dtZ1hjaDl0N2JzNzc5QlNOYXRRQTlnTEx5Z2E1ZzVrdDlYYzZNLzEv
MzEzNzM3MmUzMTMyMzQyZTMxMzAzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM1
MzIzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxfGQwDQYJKoZIhvcNAQELBQADggEBAA5mmMGa
nEWIGx0QtZLpZRmqNcMhkijtKcgIy0WRPo4NkUM5O9qV/1NlrisVXLD3Io85tAaQ
9NIEmAvqNzR1smgWyn5sg4wq8HF31wa7tE3Xp1DjRk6onGWchZPXvnknh6ebHtlS
N0TDtDy79/Iu1Q/gkyrQYuFPQi1GwAT/fuJc2J4FViFTFv30nEQsJ4Z1evZE1Hc1
FUuuv/TwOPYykKuSO++bR9DRPWzhVkqbrHbOk3l6gb770k7f+KDrJt2AKqSgA2jI
7Guh+vgqV9Ry7gV8hB1m+WVtjvchmSGpc+eMOl3llo5DOiLXL6Emay2wiuBS7Tzc
8Izbmd7ggtYMr6s=
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:30:53 2025 by rpki-client