Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137352e302f32342d3234203d3e203532363133.roa
File:                     3137372e3132352e3137352e302f32342d3234203d3e203532363133.roa (raw, json)
Hash identifier:          ryfdLEfLpus0OFdiG2qGieiFqD4UAR+CSoujdVGZpRw=
Subject key identifier:   5F:F3:44:14:3F:09:39:43:2F:E7:DD:E0:E7:E4:88:52:94:5C:18:FE
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       712485BA8A396D427241DAA59433BDC1B30DB1D0
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137352e302f32342d3234203d3e203532363133.roa
Signing time:             Thu 06 Mar 2025 09:42:18 +0000
ROA not before:           Thu 06 Mar 2025 09:37:18 +0000
ROA not after:            Thu 05 Mar 2026 09:42:18 +0000
asID:                     52613
IP address blocks:        177.125.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:24:85:ba:8a:39:6d:42:72:41:da:a5:94:33:bd:c1:b3:0d:b1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Mar  6 09:37:18 2025 GMT
            Not After : Mar  5 09:42:18 2026 GMT
        Subject: CN=5FF344143F0939432FE7DDE0E7E48852945C18FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:e7:f9:0f:24:a7:e3:16:7e:62:55:3a:9c:
                    79:cd:22:cb:7f:05:83:5d:05:76:7a:5f:9a:80:bd:
                    08:13:61:00:0e:77:77:cd:50:2f:aa:92:13:fc:f8:
                    c9:7e:58:91:ca:2e:e0:95:16:c0:48:cd:68:b7:ba:
                    b1:26:c2:dd:5f:42:93:95:93:47:78:c9:06:6c:8f:
                    31:3f:28:95:09:30:d4:ff:dc:8d:c1:51:20:72:dd:
                    39:e8:92:b3:54:2d:60:11:ed:86:8c:99:24:0a:e9:
                    e3:9d:e8:87:9b:aa:16:a7:f3:c8:41:f5:53:3b:35:
                    d4:01:4d:f6:79:b5:7e:ae:ef:63:ce:00:80:75:8b:
                    5e:86:b4:0b:50:e6:a9:c1:67:4f:37:1c:64:76:c7:
                    47:67:37:f0:28:3f:96:42:38:0d:6d:33:3e:53:1d:
                    49:a2:91:88:bd:c6:48:c5:b4:19:05:7c:67:f2:ba:
                    45:14:c7:76:b1:ef:c1:8a:14:d2:98:03:1e:ab:23:
                    a5:b2:9c:6e:e9:55:54:14:b8:9f:52:18:ee:55:5e:
                    b3:6d:89:7f:c0:39:9a:c5:f5:ad:18:20:71:18:53:
                    b1:28:75:37:a8:58:27:86:a6:79:47:b0:ec:aa:f9:
                    fd:70:d8:87:99:83:4e:d2:a7:b7:eb:e1:2d:b0:ea:
                    34:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F3:44:14:3F:09:39:43:2F:E7:DD:E0:E7:E4:88:52:94:5C:18:FE
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137352e302f32342d3234203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:0f:67:39:da:0b:07:19:49:c4:39:6c:5a:14:d3:5a:49:fb:
         f1:a9:b1:35:85:f7:ad:00:63:7e:1f:23:ab:f8:e2:01:65:8d:
         51:f2:27:28:57:1a:b5:e9:f5:00:75:83:43:f7:d1:dd:35:74:
         b0:e6:e8:62:d7:99:32:ca:12:e5:3b:fc:9c:2e:f0:b0:fc:1b:
         79:4c:8e:e4:3b:33:0a:f8:3d:37:8b:8f:f9:29:9f:b6:4c:e5:
         76:8b:b9:56:bd:73:86:90:9c:7e:ec:e4:b0:3b:a2:21:4c:76:
         c3:f7:28:c0:2a:c2:d0:8c:d5:96:0a:61:11:34:4b:07:f7:40:
         c2:b8:a6:94:81:80:14:22:f4:63:15:f8:c8:10:be:ee:2d:6e:
         f8:68:83:e0:fa:69:42:18:62:4c:8f:30:8c:ee:70:dc:96:0f:
         b7:82:d6:a8:9f:cb:b2:c9:a4:c1:30:ae:00:96:c2:1e:73:f7:
         1d:c3:29:2a:22:b2:27:bc:d1:3c:e1:15:54:89:34:97:6c:9d:
         31:8b:0e:54:ca:85:fa:c0:79:09:79:ff:0d:77:82:52:72:63:
         a8:4a:57:db:be:b9:bb:7a:dd:18:c4:33:e6:31:e7:49:71:75:
         c0:dd:58:e9:6b:6f:60:28:e4:f7:75:1c:43:a7:0b:01:08:a5:
         52:bb:b1:a9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcSSFuoo5bUJyQdqllDO9wbMNsdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBEQzVBMzVCOTQ3MDdENEVCNzEwNkY2QkE5RTlDRjg3
NkJBRTQ1NjAeFw0yNTAzMDYwOTM3MThaFw0yNjAzMDUwOTQyMThaMDMxMTAvBgNV
BAMTKDVGRjM0NDE0M0YwOTM5NDMyRkU3RERFMEU3RTQ4ODUyOTQ1QzE4RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFKOf5DySn4xZ+YlU6nHnNIst/
BYNdBXZ6X5qAvQgTYQAOd3fNUC+qkhP8+Ml+WJHKLuCVFsBIzWi3urEmwt1fQpOV
k0d4yQZsjzE/KJUJMNT/3I3BUSBy3TnokrNULWAR7YaMmSQK6eOd6Iebqhan88hB
9VM7NdQBTfZ5tX6u72POAIB1i16GtAtQ5qnBZ083HGR2x0dnN/AoP5ZCOA1tMz5T
HUmikYi9xkjFtBkFfGfyukUUx3ax78GKFNKYAx6rI6WynG7pVVQUuJ9SGO5VXrNt
iX/AOZrF9a0YIHEYU7EodTeoWCeGpnlHsOyq+f1w2IeZg07Sp7fr4S2w6jTNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUX/NEFD8JOUMv593g5+SIUpRcGP4wHwYDVR0j
BBgwFoAUkNxaNblHB9TrcQb2up6c+Ha65FYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VTNlF5M2lqejdMSktjblRHZzZOVEc0WXBFY0RDTGZ6aFAyYm5FemtQ
TWkvMS85MERDNUEzNUI5NDcwN0Q0RUI3MTA2RjZCQTlFOUNGODc2QkFFNDU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwREM1QTM1Qjk0NzA3RDRF
QjcxMDZGNkJBOUU5Q0Y4NzZCQUU0NTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1UzZReTNpano3TEpLY25UR2c2TlRHNFlwRWNEQ0xmemhQMmJuRXprUE1pLzEv
MzEzNzM3MmUzMTMyMzUyZTMxMzczNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzNjMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxfa8wDQYJKoZIhvcNAQELBQADggEBAIkPZzna
CwcZScQ5bFoU01pJ+/GpsTWF960AY34fI6v44gFljVHyJyhXGrXp9QB1g0P30d01
dLDm6GLXmTLKEuU7/Jwu8LD8G3lMjuQ7Mwr4PTeLj/kpn7ZM5XaLuVa9c4aQnH7s
5LA7oiFMdsP3KMAqwtCM1ZYKYRE0Swf3QMK4ppSBgBQi9GMV+MgQvu4tbvhog+D6
aUIYYkyPMIzucNyWD7eC1qify7LJpMEwrgCWwh5z9x3DKSoisie80TzhFVSJNJds
nTGLDlTKhfrAeQl5/w13glJyY6hKV9u+ubt63RjEM+Yx50lxdcDdWOlrb2Ao5Pd1
HEOnCwEIpVK7sak=
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:55:32 2025 by rpki-client