Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32322d3232203d3e203532373732.roa
File:                     3137372e33392e3135362e302f32322d3232203d3e203532373732.roa (raw, json)
Hash identifier:          RnGq8dvmABTuywsBbyJCr8vEhtwtgrvMMe/se+ySnYU=
Subject key identifier:   1B:72:8E:39:B9:8E:6A:27:9C:E3:D0:79:67:6D:DE:82:43:37:1D:78
Certificate issuer:       /CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
Certificate serial:       09B57EDF1FB01951163E99C2C9D4498F569EC2
Authority key identifier: 32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32322d3232203d3e203532373732.roa
Signing time:             Fri 14 Feb 2025 17:47:38 +0000
ROA not before:           Fri 14 Feb 2025 17:42:38 +0000
ROA not after:            Fri 13 Feb 2026 17:47:38 +0000
asID:                     52772
IP address blocks:        177.39.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 02:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b5:7e:df:1f:b0:19:51:16:3e:99:c2:c9:d4:49:8f:56:9e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
        Validity
            Not Before: Feb 14 17:42:38 2025 GMT
            Not After : Feb 13 17:47:38 2026 GMT
        Subject: CN=1B728E39B98E6A279CE3D079676DDE8243371D78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:38:ec:67:61:a0:c3:3c:26:73:4b:2c:d0:
                    47:5d:e0:52:92:f6:f9:14:ec:d4:97:70:3d:50:bb:
                    9d:97:c0:7c:bf:91:a7:3e:52:8b:29:b5:6a:5a:75:
                    bf:c1:f3:d0:19:01:9e:3c:f2:a3:3e:f1:26:1d:fd:
                    d0:5c:9e:c6:2e:a3:54:4c:d9:3f:33:a1:67:38:ca:
                    6c:55:75:d8:7f:35:33:bf:eb:87:b4:53:12:1b:68:
                    bf:bd:93:8d:a2:8a:04:9a:46:b4:04:64:c6:d6:d3:
                    a3:4b:7d:1f:7e:d7:60:fc:f3:b6:4b:50:96:54:49:
                    c8:1b:06:f6:9f:59:3c:f6:c7:9c:ee:e1:1d:be:72:
                    ca:52:5d:c0:90:9e:6d:6a:e8:d5:ff:d6:44:43:01:
                    aa:a8:bc:d8:94:6e:be:38:8c:5f:01:47:ca:8b:b7:
                    39:2d:f6:37:03:00:5d:b2:f9:27:3f:a3:e0:c1:d4:
                    0b:7d:7b:9b:ac:61:84:a3:6d:69:9d:d7:ff:5b:27:
                    46:a1:2d:37:8a:53:c6:48:cf:0d:98:82:d7:72:d2:
                    ce:fc:08:62:4d:e3:7a:96:6f:bf:75:06:8c:68:d0:
                    e4:04:80:77:61:2e:45:c3:1f:b8:e1:75:d3:bb:e7:
                    2c:fb:36:59:82:ce:8f:07:10:b0:7e:25:f2:0c:c7:
                    8a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:72:8E:39:B9:8E:6A:27:9C:E3:D0:79:67:6D:DE:82:43:37:1D:78
            X509v3 Authority Key Identifier:
                keyid:32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32322d3232203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:3a:a7:90:21:c9:f4:af:68:43:b4:03:ba:e9:47:14:60:23:
         6b:f9:ea:0e:cd:e3:17:28:50:b0:48:de:5b:95:85:44:80:94:
         e2:25:6f:2b:a8:a1:29:33:ea:0f:7e:46:f8:b9:8a:9c:82:92:
         d2:2a:a6:89:91:dc:60:28:1c:51:b5:60:30:86:ee:bc:c0:f1:
         1b:61:9c:5e:5e:b7:bc:62:a8:38:20:23:ee:31:01:02:c2:5f:
         1b:f7:1a:a3:91:ad:e8:cd:48:30:ec:cd:46:9f:0b:50:91:15:
         b2:bf:41:36:19:03:bd:ab:ac:cf:f6:d9:81:5e:8e:1c:bf:42:
         0c:5c:9f:46:9e:ff:00:06:b9:aa:97:68:dc:19:0b:48:e3:01:
         59:d7:a1:d3:4a:b1:89:4e:3f:6a:e8:f4:46:1b:7a:03:14:df:
         fe:05:02:c6:8f:8e:71:ed:6e:de:2b:2f:09:9b:04:92:66:bb:
         ec:e1:27:00:fc:c3:3d:e2:19:8c:e8:5b:cc:a5:b2:ab:0d:f4:
         9a:55:d3:38:e2:a4:61:32:26:da:5d:de:5b:e0:76:fe:f2:c4:
         a4:dc:9c:b0:e3:0f:d2:04:88:f5:4d:27:40:03:02:b1:42:4f:
         a3:72:f0:82:54:08:7d:ce:3d:b7:26:2e:f6:5e:56:3b:a7:f3:
         42:18:52:86
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgITCbV+3x+wGVEWPpnCydRJj1aewjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygzMkY2QUMzRDhGNTA2QkRDRUM4MTJCREZEMkNGQjMzMUEy
NTFFQUM5MB4XDTI1MDIxNDE3NDIzOFoXDTI2MDIxMzE3NDczOFowMzExMC8GA1UE
AxMoMUI3MjhFMzlCOThFNkEyNzlDRTNEMDc5Njc2RERFODI0MzM3MUQ3ODCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMkoOOxnYaDDPCZzSyzQR13gUpL2
+RTs1JdwPVC7nZfAfL+Rpz5Siym1alp1v8Hz0BkBnjzyoz7xJh390Fyexi6jVEzZ
PzOhZzjKbFV12H81M7/rh7RTEhtov72TjaKKBJpGtARkxtbTo0t9H37XYPzztktQ
llRJyBsG9p9ZPPbHnO7hHb5yylJdwJCebWro1f/WREMBqqi82JRuvjiMXwFHyou3
OS32NwMAXbL5Jz+j4MHUC317m6xhhKNtaZ3X/1snRqEtN4pTxkjPDZiC13LSzvwI
Yk3jepZvv3UGjGjQ5ASAd2EuRcMfuOF107vnLPs2WYLOjwcQsH4l8gzHimECAwEA
AaOCAk8wggJLMB0GA1UdDgQWBBQbco45uY5qJ5zj0Hlnbd6CQzcdeDAfBgNVHSME
GDAWgBQy9qw9j1Br3OyBK9/Sz7MxolHqyTAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9EM3g0cHdyamtIdjgybTFneFRLbnB2OEo1eDRTQ0pmTWJVS3lOV2lQZHhU
Zi8wLzMyRjZBQzNEOEY1MDZCRENFQzgxMkJERkQyQ0ZCMzMxQTI1MUVBQzkuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvMzJGNkFDM0Q4RjUwNkJEQ0VD
ODEyQkRGRDJDRkIzMzFBMjUxRUFDOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZ
BggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1iVUt5TldpUGR4VGYvMC8z
MTM3MzcyZTMzMzkyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1MzIz
NzM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKxJ5wwDQYJKoZIhvcNAQELBQADggEBAI06p5AhyfSv
aEO0A7rpRxRgI2v56g7N4xcoULBI3luVhUSAlOIlbyuooSkz6g9+Rvi5ipyCktIq
pomR3GAoHFG1YDCG7rzA8RthnF5et7xiqDggI+4xAQLCXxv3GqORrejNSDDszUaf
C1CRFbK/QTYZA72rrM/22YFejhy/Qgxcn0ae/wAGuaqXaNwZC0jjAVnXodNKsYlO
P2ro9EYbegMU3/4FAsaPjnHtbt4rLwmbBJJmu+zhJwD8wz3iGYzoW8ylsqsN9JpV
0zjipGEyJtpd3lvgdv7yxKTcnLDjD9IEiPVNJ0ADArFCT6Ny8IJUCH3OPbcmLvZe
Vjun80IYUoY=
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:00:17 2025 by rpki-client