Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3134332e302f32342d3330203d3e203238313838.roa
File:                     3137372e31322e3134332e302f32342d3330203d3e203238313838.roa (raw, json)
Hash identifier:          bKEvrwBXDRRnUz08tnKaSNgxy4L8li6ISCm9XcOl0rk=
Subject key identifier:   87:26:A4:7C:56:29:11:CD:15:7D:AA:0A:9F:32:C9:C1:85:3D:22:24
Certificate issuer:       /CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Certificate serial:       68E4414BA7F00D7F29626EC2DAAD478C48735E44
Authority key identifier: E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3134332e302f32342d3330203d3e203238313838.roa
Signing time:             Wed 05 Feb 2025 22:58:29 +0000
ROA not before:           Wed 05 Feb 2025 22:53:29 +0000
ROA not after:            Wed 04 Feb 2026 22:58:29 +0000
asID:                     28188
IP address blocks:        177.12.143.0/24 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl
                          rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 21:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e4:41:4b:a7:f0:0d:7f:29:62:6e:c2:da:ad:47:8c:48:73:5e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
        Validity
            Not Before: Feb  5 22:53:29 2025 GMT
            Not After : Feb  4 22:58:29 2026 GMT
        Subject: CN=8726A47C562911CD157DAA0A9F32C9C1853D2224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5d:0d:57:eb:f7:fa:ca:6a:79:24:bf:93:63:
                    cc:06:f1:19:f4:ee:fc:32:db:b1:6e:41:26:27:95:
                    82:d7:d9:a5:0b:d2:79:26:c5:a9:60:c8:1e:6c:e6:
                    e7:a8:a2:be:3b:49:2a:cf:f7:26:ef:86:c3:57:33:
                    bc:c8:f3:30:1a:e7:aa:a2:e7:c8:8c:36:56:16:4a:
                    8d:20:06:41:c9:d5:c7:cc:41:13:5d:fa:83:e3:ab:
                    59:90:96:11:64:0d:38:90:16:cd:94:2b:fa:57:84:
                    25:38:5d:db:1b:10:bb:e2:54:7e:4d:8f:c1:e6:64:
                    63:85:f3:84:2b:55:69:f5:cd:33:a4:3b:0e:b9:75:
                    3c:59:b4:96:c9:24:5e:c6:3a:2e:de:f8:d4:c0:de:
                    06:fa:22:b8:a4:34:3a:f6:d3:27:cf:e7:8e:47:b1:
                    d2:74:c4:49:0d:c5:68:ec:9a:3d:d2:af:39:0c:51:
                    8f:92:b3:26:2d:0d:03:22:2c:f3:3b:fd:d9:ef:49:
                    82:15:cd:ec:c2:e5:fb:1e:ce:50:2e:e7:84:1a:4d:
                    64:31:69:31:a6:eb:c9:33:e5:8a:9b:2c:a4:24:54:
                    40:0a:85:d5:ac:21:2a:f9:19:5d:fc:28:9a:b3:5f:
                    0f:b5:7a:fb:3b:61:38:f4:44:90:cb:de:99:9e:42:
                    70:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:26:A4:7C:56:29:11:CD:15:7D:AA:0A:9F:32:C9:C1:85:3D:22:24
            X509v3 Authority Key Identifier:
                keyid:E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3134332e302f32342d3330203d3e203238313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:c8:27:29:91:68:f9:24:eb:8c:cc:52:80:6a:b5:22:03:d7:
         35:ed:d7:fc:4b:4f:70:85:dd:99:11:35:6a:8f:b3:a5:6c:94:
         8b:0f:85:9e:58:13:e3:fc:42:bc:dd:4b:38:45:ae:96:90:bc:
         05:94:16:b6:fc:9f:bf:28:b6:9f:d9:a6:c1:e1:0c:93:81:82:
         40:d4:cb:2c:2f:d3:8e:1c:28:84:50:8d:02:4b:55:36:8f:bb:
         d7:68:c8:f6:6f:31:21:fa:78:10:09:e4:bf:46:1f:6f:7d:cf:
         a4:de:90:a2:95:b8:1d:a2:10:4c:be:8e:df:f9:2d:9f:d7:e7:
         3b:ed:5b:35:8b:50:4c:3d:f2:fb:14:df:b4:38:e8:82:32:19:
         5c:6a:86:0b:f6:ca:69:ad:28:34:ca:93:1e:88:39:b2:bf:8b:
         5b:52:29:04:78:db:18:bb:01:be:82:25:4e:8d:6e:bc:be:b2:
         6a:ab:ae:21:fc:df:c9:a0:80:ec:b2:14:17:e8:d4:5d:ae:64:
         d6:0c:f0:08:c8:7d:27:d0:28:a3:bd:8d:1b:2a:88:f6:95:e5:
         bb:ac:bc:ef:93:61:37:1c:12:64:32:0d:3b:0d:db:2d:87:52:
         7c:90:cf:ff:b1:b1:6e:1c:2e:ca:54:f3:c5:99:27:e5:b8:63:
         e1:e2:26:2f
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUaORBS6fwDX8pYm7C2q1HjEhzXkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM4QUMyQ0ZCMjk5NzE1QjNCNkQ1ODY2QzE1Q0YzNTNC
RTQ4QTc3MDAeFw0yNTAyMDUyMjUzMjlaFw0yNjAyMDQyMjU4MjlaMDMxMTAvBgNV
BAMTKDg3MjZBNDdDNTYyOTExQ0QxNTdEQUEwQTlGMzJDOUMxODUzRDIyMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXQ1X6/f6ymp5JL+TY8wG8Rn0
7vwy27FuQSYnlYLX2aUL0nkmxalgyB5s5ueoor47SSrP9ybvhsNXM7zI8zAa56qi
58iMNlYWSo0gBkHJ1cfMQRNd+oPjq1mQlhFkDTiQFs2UK/pXhCU4XdsbELviVH5N
j8HmZGOF84QrVWn1zTOkOw65dTxZtJbJJF7GOi7e+NTA3gb6IrikNDr20yfP545H
sdJ0xEkNxWjsmj3SrzkMUY+SsyYtDQMiLPM7/dnvSYIVzezC5fsezlAu54QaTWQx
aTGm68kz5YqbLKQkVEAKhdWsISr5GV38KJqzXw+1evs7YTj0RJDL3pmeQnB7AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUhyakfFYpEc0VfaoKnzLJwYU9IiQwHwYDVR0j
BBgwFoAU44rCz7KZcVs7bVhmwVzzU75Ip3AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ES050R0E3c3BkNGY1UjNRQUNhNTZyY3pZRFF5QWM4MXdxbzVjakJEVTNk
LzAvRTM4QUMyQ0ZCMjk5NzE1QjNCNkQ1ODY2QzE1Q0YzNTNCRTQ4QTc3MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FMzhBQzJDRkIyOTk3MTVCM0I2
RDU4NjZDMTVDRjM1M0JFNDhBNzcwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9E
S050R0E3c3BkNGY1UjNRQUNhNTZyY3pZRFF5QWM4MXdxbzVjakJEVTNkLzAvMzEz
NzM3MmUzMTMyMmUzMTM0MzMyZTMwMmYzMjM0MmQzMzMwMjAzZDNlMjAzMjM4MzEz
ODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAsQyPMA0GCSqGSIb3DQEBCwUAA4IBAQBWyCcpkWj5JOuM
zFKAarUiA9c17df8S09whd2ZETVqj7OlbJSLD4WeWBPj/EK83Us4Ra6WkLwFlBa2
/J+/KLaf2abB4QyTgYJA1MssL9OOHCiEUI0CS1U2j7vXaMj2bzEh+ngQCeS/Rh9v
fc+k3pCilbgdohBMvo7f+S2f1+c77Vs1i1BMPfL7FN+0OOiCMhlcaoYL9spprSg0
ypMeiDmyv4tbUikEeNsYuwG+giVOjW68vrJqq64h/N/JoIDsshQX6NRdrmTWDPAI
yH0n0CijvY0bKoj2leW7rLzvk2E3HBJkMg07Ddsth1J8kM//sbFuHC7KVPPFmSfl
uGPh4iYv
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:33:02 2025 by rpki-client