Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSjbUJ993mF9F9RMtakQvpfJBVcGsg2E8seFu6Ge2c6m/0/3137372e37332e3130342e302f32322d3332203d3e203532363838.roa
File:                     3137372e37332e3130342e302f32322d3332203d3e203532363838.roa (raw, json)
Hash identifier:          vigMHFOWFpSIwBomeQuYzW+s7AhDoCQXMHdR0JoHlWE=
Subject key identifier:   E8:67:B3:BD:AA:71:56:B8:2E:09:9A:E2:2F:15:09:D6:66:F9:FB:9D
Certificate issuer:       /CN=7FF11BEAA676E4E4FB32D0F051B0193E28DF57EE
Certificate serial:       449417E6D8F7B79EBE9815DAD959B06D00EB1D1E
Authority key identifier: 7F:F1:1B:EA:A6:76:E4:E4:FB:32:D0:F0:51:B0:19:3E:28:DF:57:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FF11BEAA676E4E4FB32D0F051B0193E28DF57EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSjbUJ993mF9F9RMtakQvpfJBVcGsg2E8seFu6Ge2c6m/0/3137372e37332e3130342e302f32322d3332203d3e203532363838.roa
Signing time:             Tue 11 Feb 2025 16:28:59 +0000
ROA not before:           Tue 11 Feb 2025 16:23:59 +0000
ROA not after:            Tue 10 Feb 2026 16:28:59 +0000
asID:                     52688
IP address blocks:        177.73.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSjbUJ993mF9F9RMtakQvpfJBVcGsg2E8seFu6Ge2c6m/0/7FF11BEAA676E4E4FB32D0F051B0193E28DF57EE.crl
                          rsync://rpki-repo.registro.br/repo/DSjbUJ993mF9F9RMtakQvpfJBVcGsg2E8seFu6Ge2c6m/0/7FF11BEAA676E4E4FB32D0F051B0193E28DF57EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FF11BEAA676E4E4FB32D0F051B0193E28DF57EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:94:17:e6:d8:f7:b7:9e:be:98:15:da:d9:59:b0:6d:00:eb:1d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FF11BEAA676E4E4FB32D0F051B0193E28DF57EE
        Validity
            Not Before: Feb 11 16:23:59 2025 GMT
            Not After : Feb 10 16:28:59 2026 GMT
        Subject: CN=E867B3BDAA7156B82E099AE22F1509D666F9FB9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:24:43:ba:d4:95:bb:8a:09:fe:ef:ac:5d:
                    1b:76:17:45:96:7d:53:31:1d:f5:d9:62:99:cf:46:
                    28:49:75:3f:d3:c3:59:63:cb:b6:15:fc:b2:c2:c8:
                    6a:69:10:b0:da:73:f0:37:66:37:69:6c:b1:60:77:
                    22:2c:2e:aa:ba:3c:94:4f:3f:57:6e:56:aa:91:8c:
                    66:aa:b1:ec:b5:02:63:d7:64:07:9d:27:60:19:89:
                    6b:18:18:c2:58:cd:e1:a4:89:29:f6:29:b2:02:35:
                    77:e3:9e:a5:e0:85:c0:ff:b5:06:47:66:a7:bb:28:
                    f6:b0:28:45:49:a0:16:1c:15:a1:2c:d5:a8:fd:3d:
                    87:ae:b4:3e:9a:bf:48:0e:b2:c6:80:40:c3:1f:52:
                    53:79:1e:5f:50:da:ec:e4:91:31:ce:a7:e4:2a:50:
                    1a:6c:4d:62:c6:f5:ee:cc:6d:c1:cc:cd:4b:f2:8f:
                    87:63:96:81:a6:32:be:1a:1e:3a:4c:7b:55:4f:5c:
                    8c:bf:ea:b8:b2:e3:1a:ef:eb:55:f1:3f:9e:ec:57:
                    69:df:10:19:a5:95:7f:16:47:57:79:ca:52:53:f8:
                    1e:61:2d:b1:19:2d:06:a6:23:9f:ab:35:5d:c4:08:
                    e8:a1:7e:47:23:16:21:7b:ba:03:5a:f2:27:ad:d1:
                    53:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:67:B3:BD:AA:71:56:B8:2E:09:9A:E2:2F:15:09:D6:66:F9:FB:9D
            X509v3 Authority Key Identifier:
                keyid:7F:F1:1B:EA:A6:76:E4:E4:FB:32:D0:F0:51:B0:19:3E:28:DF:57:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSjbUJ993mF9F9RMtakQvpfJBVcGsg2E8seFu6Ge2c6m/0/7FF11BEAA676E4E4FB32D0F051B0193E28DF57EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FF11BEAA676E4E4FB32D0F051B0193E28DF57EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSjbUJ993mF9F9RMtakQvpfJBVcGsg2E8seFu6Ge2c6m/0/3137372e37332e3130342e302f32322d3332203d3e203532363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:ca:80:b7:4d:f4:d3:29:a4:ca:db:58:b8:e2:31:bb:ee:e7:
         8b:63:dc:7b:31:1e:1e:9f:33:da:46:8d:ac:38:d5:70:a7:2a:
         43:44:9f:b7:46:dd:e0:b4:98:36:04:c9:25:5f:2b:f9:f2:99:
         29:f3:10:e1:11:f2:3a:81:25:c2:77:59:db:68:9b:5d:aa:8b:
         b1:df:ae:e7:a4:88:a8:2c:d2:a8:28:f0:ba:38:77:08:52:fc:
         c7:39:4f:2d:04:5e:9f:b6:6a:ab:39:8d:90:67:81:71:24:29:
         7e:96:4b:4a:cb:7a:a3:b4:6a:96:84:e4:95:44:b3:b2:d3:58:
         e2:08:6d:67:a0:57:c0:06:d0:c5:80:02:c1:c5:fc:da:5a:ed:
         76:64:22:b1:c2:5d:b2:73:06:f1:ad:54:bf:9c:be:d4:09:10:
         55:01:c2:33:c5:2f:58:43:fe:be:15:40:63:82:0d:07:0c:a9:
         62:e0:a9:bc:bc:31:03:c8:23:61:b3:90:41:8c:d6:d0:78:93:
         dc:b7:76:3b:9f:61:af:bd:de:56:fa:f9:29:8f:f7:a6:13:d9:
         08:9a:62:76:23:4b:0e:15:23:4c:89:db:ff:7c:2b:2c:0f:37:
         7d:57:d4:53:43:55:5a:31:0d:45:0b:81:8e:7f:1c:f4:48:23:
         fd:43:e9:35
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURJQX5tj3t56+mBXa2VmwbQDrHR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZGMTFCRUFBNjc2RTRFNEZCMzJEMEYwNTFCMDE5M0Uy
OERGNTdFRTAeFw0yNTAyMTExNjIzNTlaFw0yNjAyMTAxNjI4NTlaMDMxMTAvBgNV
BAMTKEU4NjdCM0JEQUE3MTU2QjgyRTA5OUFFMjJGMTUwOUQ2NjZGOUZCOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCghyRDutSVu4oJ/u+sXRt2F0WW
fVMxHfXZYpnPRihJdT/Tw1ljy7YV/LLCyGppELDac/A3ZjdpbLFgdyIsLqq6PJRP
P1duVqqRjGaqsey1AmPXZAedJ2AZiWsYGMJYzeGkiSn2KbICNXfjnqXghcD/tQZH
Zqe7KPawKEVJoBYcFaEs1aj9PYeutD6av0gOssaAQMMfUlN5Hl9Q2uzkkTHOp+Qq
UBpsTWLG9e7MbcHMzUvyj4djloGmMr4aHjpMe1VPXIy/6riy4xrv61XxP57sV2nf
EBmllX8WR1d5ylJT+B5hLbEZLQamI5+rNV3ECOihfkcjFiF7ugNa8iet0VOBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6GezvapxVrguCZriLxUJ1mb5+50wHwYDVR0j
BBgwFoAUf/Eb6qZ25OT7MtDwUbAZPijfV+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNqYlVKOTkzbUY5RjlSTXRha1F2cGZKQlZjR3NnMkU4c2VGdTZHZTJj
Nm0vMC83RkYxMUJFQUE2NzZFNEU0RkIzMkQwRjA1MUIwMTkzRTI4REY1N0VFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGRjExQkVBQTY3NkU0RTRG
QjMyRDBGMDUxQjAxOTNFMjhERjU3RUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTamJVSjk5M21GOUY5Uk10YWtRdnBmSkJWY0dzZzJFOHNlRnU2R2UyYzZtLzAv
MzEzNzM3MmUzNzMzMmUzMTMwMzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMy
MzYzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsUloMA0GCSqGSIb3DQEBCwUAA4IBAQBoyoC3TfTT
KaTK21i44jG77ueLY9x7MR4enzPaRo2sONVwpypDRJ+3Rt3gtJg2BMklXyv58pkp
8xDhEfI6gSXCd1nbaJtdqoux367npIioLNKoKPC6OHcIUvzHOU8tBF6ftmqrOY2Q
Z4FxJCl+lktKy3qjtGqWhOSVRLOy01jiCG1noFfABtDFgALBxfzaWu12ZCKxwl2y
cwbxrVS/nL7UCRBVAcIzxS9YQ/6+FUBjgg0HDKli4Km8vDEDyCNhs5BBjNbQeJPc
t3Y7n2Gvvd5W+vkpj/emE9kImmJ2I0sOFSNMidv/fCssDzd9V9RTQ1VaMQ1FC4GO
fxz0SCP9Q+k1
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:57:45 2025 by rpki-client