Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/3137392e302e3132332e302f32342d3234203d3e20323731343738.roa
File:                     3137392e302e3132332e302f32342d3234203d3e20323731343738.roa (raw, json)
Hash identifier:          hO8+tpvrdftLDBWFZVAQaWqmWhDnRrFmDEO8If/XbNU=
Subject key identifier:   8C:AC:49:93:34:49:34:6D:42:C5:38:EC:41:F9:0A:F4:E7:EC:30:2B
Certificate issuer:       /CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
Certificate serial:       23645273370732B8801F40309132AE68A375FD45
Authority key identifier: E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/3137392e302e3132332e302f32342d3234203d3e20323731343738.roa
Signing time:             Fri 13 Dec 2024 15:45:20 +0000
ROA not before:           Fri 13 Dec 2024 15:40:20 +0000
ROA not after:            Fri 12 Dec 2025 15:45:20 +0000
asID:                     271478
IP address blocks:        179.0.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:64:52:73:37:07:32:b8:80:1f:40:30:91:32:ae:68:a3:75:fd:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
        Validity
            Not Before: Dec 13 15:40:20 2024 GMT
            Not After : Dec 12 15:45:20 2025 GMT
        Subject: CN=8CAC49933449346D42C538EC41F90AF4E7EC302B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:ab:2c:7a:cf:1c:79:e2:7c:28:c1:67:7d:
                    9a:d7:cc:9b:21:51:e9:58:ed:74:87:11:cf:5c:36:
                    e7:ca:ee:8d:43:af:45:18:ea:ae:1a:ba:84:ed:91:
                    d7:be:56:d2:a4:55:37:97:3b:0c:e8:2c:8c:5a:4f:
                    6f:81:ce:f2:07:fa:2f:9f:8f:2c:58:0f:0a:e9:34:
                    bd:65:b4:f2:ef:6d:bc:fc:92:5a:d5:be:e6:50:f3:
                    d5:d3:5b:57:e8:7f:20:50:1a:20:0a:5a:b4:b6:bb:
                    ff:39:af:f8:d0:e8:b6:84:b2:55:b1:be:ba:92:ed:
                    cd:19:28:37:c9:73:3a:80:98:2e:6e:ac:0b:d4:7a:
                    b1:68:5d:a9:f2:d0:66:4c:c4:c0:e8:07:34:8c:2c:
                    22:eb:0e:15:a0:b4:86:16:7e:ed:24:d9:5b:d4:db:
                    23:c7:fb:55:7c:51:ed:45:7f:29:41:68:1a:c9:84:
                    21:94:bc:35:f3:bd:00:12:62:cf:f7:a5:e9:55:b7:
                    76:db:8c:6b:94:32:bd:37:d5:69:e0:3a:f4:cb:4c:
                    e5:a4:68:cf:2d:f8:d7:90:03:2d:e1:ad:a8:3b:e4:
                    ad:e7:af:60:41:97:86:66:c2:86:9a:19:6d:e4:46:
                    c9:01:82:8e:e8:25:7f:41:85:bc:1a:bb:07:52:d7:
                    6d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AC:49:93:34:49:34:6D:42:C5:38:EC:41:F9:0A:F4:E7:EC:30:2B
            X509v3 Authority Key Identifier:
                keyid:E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/3137392e302e3132332e302f32342d3234203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:b0:aa:30:cd:e3:05:af:01:b7:6f:2c:be:25:6d:aa:64:77:
         02:bf:cf:0f:93:fb:91:65:cc:d1:1f:1d:10:07:c7:49:c2:87:
         1d:09:d4:8b:c3:32:e7:53:53:c4:96:2a:6f:51:f6:59:c0:32:
         fc:aa:7a:9f:b8:c9:77:64:59:75:53:28:87:46:9c:36:f6:87:
         61:67:28:19:62:d1:c9:ed:f6:ab:69:b9:16:fb:2d:dc:cf:98:
         e2:0e:8a:68:97:e8:ac:e1:e3:42:6a:4d:5b:b1:1f:44:33:6e:
         9f:1c:05:ad:45:fb:10:7e:7d:db:53:41:73:49:34:31:17:3f:
         72:8e:85:c2:64:2f:cc:f6:7d:90:ce:69:f4:e1:a5:14:8a:f4:
         e5:ed:4a:ab:37:08:95:62:e6:4d:18:89:dc:99:4a:33:10:a9:
         5d:62:b6:79:fc:43:9b:3b:ad:38:89:f6:b9:5b:f1:30:d7:68:
         f8:1c:71:73:ac:bb:8a:28:95:be:0a:de:26:e1:c6:a7:bb:93:
         3c:89:eb:7e:b8:48:67:1b:4e:97:3c:25:c3:89:68:0e:e2:7e:
         97:ff:e1:14:3b:cc:fc:20:80:f4:29:58:a1:96:7f:75:78:0d:
         a2:56:e0:d4:12:1c:90:81:77:32:bc:88:3f:8a:ab:2a:68:06:
         f7:2f:20:ba
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUI2RSczcHMriAH0AwkTKuaKN1/UUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRDMkM2QjNEQzhBREFFMTk2RkY3MEEwQzc3Mzk5MDAx
RjVBNzQwMDAeFw0yNDEyMTMxNTQwMjBaFw0yNTEyMTIxNTQ1MjBaMDMxMTAvBgNV
BAMTKDhDQUM0OTkzMzQ0OTM0NkQ0MkM1MzhFQzQxRjkwQUY0RTdFQzMwMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgasses8ceeJ8KMFnfZrXzJsh
UelY7XSHEc9cNufK7o1Dr0UY6q4auoTtkde+VtKkVTeXOwzoLIxaT2+BzvIH+i+f
jyxYDwrpNL1ltPLvbbz8klrVvuZQ89XTW1fofyBQGiAKWrS2u/85r/jQ6LaEslWx
vrqS7c0ZKDfJczqAmC5urAvUerFoXany0GZMxMDoBzSMLCLrDhWgtIYWfu0k2VvU
2yPH+1V8Ue1FfylBaBrJhCGUvDXzvQASYs/3pelVt3bbjGuUMr031WngOvTLTOWk
aM8t+NeQAy3hrag75K3nr2BBl4ZmwoaaGW3kRskBgo7oJX9BhbwauwdS120dAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjKxJkzRJNG1CxTjsQfkK9OfsMCswHwYDVR0j
BBgwFoAU5MLGs9yK2uGW/3Cgx3OZAB9adAAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG9ENHoxa1FLRnJDOW1kaWtYVm5TTGttdmNCWjN1bW45TDNmZ1FDcGZS
UHcvMC9FNEMyQzZCM0RDOEFEQUUxOTZGRjcwQTBDNzczOTkwMDFGNUE3NDAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0QzJDNkIzREM4QURBRTE5
NkZGNzBBMEM3NzM5OTAwMUY1QTc0MDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RvRDR6MWtRS0ZyQzltZGlrWFZuU0xrbXZjQlozdW1uOUwzZmdRQ3BmUlB3LzAv
MzEzNzM5MmUzMDJlMzEzMjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAswB7MA0GCSqGSIb3DQEBCwUAA4IBAQAmsKowzeMF
rwG3byy+JW2qZHcCv88Pk/uRZczRHx0QB8dJwocdCdSLwzLnU1PElipvUfZZwDL8
qnqfuMl3ZFl1UyiHRpw29odhZygZYtHJ7farabkW+y3cz5jiDopol+is4eNCak1b
sR9EM26fHAWtRfsQfn3bU0FzSTQxFz9yjoXCZC/M9n2Qzmn04aUUivTl7UqrNwiV
YuZNGIncmUozEKldYrZ5/EObO604ifa5W/Ew12j4HHFzrLuKKJW+Ct4m4canu5M8
iet+uEhnG06XPCXDiWgO4n6X/+EUO8z8IID0KVihln91eA2iVuDUEhyQgXcyvIg/
iqsqaAb3LyC6
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:03:46 2025 by rpki-client