Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135382e302f32342d3234203d3e20323633343537.roa
File:                     3137372e3139302e3135382e302f32342d3234203d3e20323633343537.roa (raw, json)
Hash identifier:          aC9IyQxKFU4QYPKAq2h5B23E6GuNVvmx74VpFfmivrc=
Subject key identifier:   78:98:67:C4:D4:91:91:6E:6C:5F:62:02:DE:72:2E:64:8A:1E:E5:B5
Certificate issuer:       /CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
Certificate serial:       5D59D2FEEC1C8EAB0892C89A32CE2A356748E104
Authority key identifier: D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135382e302f32342d3234203d3e20323633343537.roa
Signing time:             Thu 06 Mar 2025 08:46:48 +0000
ROA not before:           Thu 06 Mar 2025 08:41:48 +0000
ROA not after:            Thu 05 Mar 2026 08:46:48 +0000
asID:                     263457
IP address blocks:        177.190.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl
                          rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 23:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:59:d2:fe:ec:1c:8e:ab:08:92:c8:9a:32:ce:2a:35:67:48:e1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
        Validity
            Not Before: Mar  6 08:41:48 2025 GMT
            Not After : Mar  5 08:46:48 2026 GMT
        Subject: CN=789867C4D491916E6C5F6202DE722E648A1EE5B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:94:56:8d:4f:49:02:b4:fd:26:b2:13:1c:b6:
                    71:34:1c:0b:34:b2:23:30:36:98:52:83:a2:28:51:
                    ee:2a:ad:fb:9a:5c:1a:28:a8:bf:55:b7:69:86:05:
                    47:56:e2:bb:44:11:dc:29:4b:17:5b:e4:2c:f5:07:
                    25:65:a4:8f:a1:bc:d1:2e:20:7d:09:1f:1c:38:2c:
                    2f:ec:95:1d:1e:3b:b9:95:02:10:cf:39:b8:5c:7f:
                    d2:75:bf:d9:4e:cc:78:66:e7:2f:ed:77:d3:89:fe:
                    fb:3d:67:cd:3b:92:51:ed:2d:f4:4a:1b:87:0c:56:
                    c6:2e:80:c7:3d:a4:a8:2e:8e:92:87:6f:9c:36:37:
                    5c:5a:7a:6e:5a:b7:ff:6b:21:e5:10:85:f1:80:8b:
                    d2:57:75:8b:b0:12:cb:5f:08:f8:56:2a:1c:1f:a0:
                    5c:4c:a6:58:31:da:a0:aa:b0:bf:b5:f1:e7:03:72:
                    d9:3a:07:92:93:e1:0e:88:c7:c8:1e:40:e3:15:9d:
                    fc:cc:78:ae:55:b5:d7:13:33:f3:2a:0f:7c:97:74:
                    e0:73:a9:a7:0f:26:a3:1b:3e:9f:9c:7a:c7:58:da:
                    a2:33:7c:9e:d2:51:8c:8d:a6:c2:eb:ab:1e:41:f4:
                    e2:80:29:91:0b:74:42:40:ea:66:33:0c:d7:ef:66:
                    13:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:98:67:C4:D4:91:91:6E:6C:5F:62:02:DE:72:2E:64:8A:1E:E5:B5
            X509v3 Authority Key Identifier:
                keyid:D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135382e302f32342d3234203d3e20323633343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:9c:49:2f:00:bf:89:b3:dd:c4:a5:ae:bc:df:24:41:0e:95:
         c1:ea:6c:2c:23:e4:bf:9c:c1:fb:4e:7a:59:0b:a2:d0:b0:28:
         8a:89:5e:bd:39:3d:3c:95:e9:db:b8:90:3b:d9:64:6c:9c:ac:
         09:cb:cc:f7:7d:53:a6:4e:21:e8:af:7c:33:22:9a:a4:41:16:
         82:dc:cc:10:88:65:d5:ae:4b:19:84:b2:a3:61:0f:67:a8:92:
         de:97:18:40:06:f3:3e:6d:26:cb:ad:aa:6e:55:1e:af:f9:a4:
         3a:15:27:9c:f4:de:68:f9:6b:42:56:5b:cc:e1:62:38:0c:cc:
         a3:73:c5:9c:0f:23:d0:52:50:fa:1d:18:8e:1c:f5:86:ab:6a:
         08:5a:5c:8b:4c:c9:d8:b3:4d:2f:ec:36:f6:79:0b:ed:4c:c4:
         6f:42:93:d8:c2:1f:87:a6:03:5e:90:a1:11:c4:47:ee:1f:76:
         63:96:78:7f:50:40:8d:46:7a:cc:27:8a:22:38:7e:10:92:d7:
         10:17:a2:6e:a7:53:00:f9:3b:be:4a:5f:bc:15:8c:2b:85:b2:
         81:a0:33:05:e5:0b:dd:30:61:61:67:59:4c:72:03:4c:1e:ec:
         34:0c:82:e2:5c:c0:30:aa:73:47:70:ba:cf:87:bf:ab:03:4f:
         54:3a:0e:39
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXVnS/uwcjqsIksiaMs4qNWdI4QQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlCOEM4MDM1RjQ2OUVFRkNENDJBNTJENDg5NjYwNTcy
NjRCOTVDNDAeFw0yNTAzMDYwODQxNDhaFw0yNjAzMDUwODQ2NDhaMDMxMTAvBgNV
BAMTKDc4OTg2N0M0RDQ5MTkxNkU2QzVGNjIwMkRFNzIyRTY0OEExRUU1QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlFaNT0kCtP0mshMctnE0HAs0
siMwNphSg6IoUe4qrfuaXBooqL9Vt2mGBUdW4rtEEdwpSxdb5Cz1ByVlpI+hvNEu
IH0JHxw4LC/slR0eO7mVAhDPObhcf9J1v9lOzHhm5y/td9OJ/vs9Z807klHtLfRK
G4cMVsYugMc9pKgujpKHb5w2N1xaem5at/9rIeUQhfGAi9JXdYuwEstfCPhWKhwf
oFxMplgx2qCqsL+18ecDctk6B5KT4Q6Ix8geQOMVnfzMeK5VtdcTM/MqD3yXdOBz
qacPJqMbPp+cesdY2qIzfJ7SUYyNpsLrqx5B9OKAKZELdEJA6mYzDNfvZhMJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUeJhnxNSRkW5sX2IC3nIuZIoe5bUwHwYDVR0j
BBgwFoAU2bjIA19Gnu/NQqUtSJZgVyZLlcQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTVBU0dzZ3ZHbVdMOGFyYndZZm9wRVUySnlOYWVOU2I5OU1kbjRhOGVx
bVgvMS9EOUI4QzgwMzVGNDY5RUVGQ0Q0MkE1MkQ0ODk2NjA1NzI2NEI5NUM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5QjhDODAzNUY0NjlFRUZD
RDQyQTUyRDQ4OTY2MDU3MjY0Qjk1QzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U1QVNHc2d2R21XTDhhcmJ3WWZvcEVVMkp5TmFlTlNiOTlNZG40YThlcW1YLzEv
MzEzNzM3MmUzMTM5MzAyZTMxMzUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALG+njANBgkqhkiG9w0BAQsFAAOCAQEAeZxJ
LwC/ibPdxKWuvN8kQQ6VwepsLCPkv5zB+056WQui0LAoiolevTk9PJXp27iQO9lk
bJysCcvM931Tpk4h6K98MyKapEEWgtzMEIhl1a5LGYSyo2EPZ6iS3pcYQAbzPm0m
y62qblUer/mkOhUnnPTeaPlrQlZbzOFiOAzMo3PFnA8j0FJQ+h0Yjhz1hqtqCFpc
i0zJ2LNNL+w29nkL7UzEb0KT2MIfh6YDXpChEcRH7h92Y5Z4f1BAjUZ6zCeKIjh+
EJLXEBeibqdTAPk7vkpfvBWMK4WygaAzBeUL3TBhYWdZTHIDTB7sNAyC4lzAMKpz
R3C6z4e/qwNPVDoOOQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:27:19 2025 by rpki-client