Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234342e302f32322d3232203d3e20323632343738.roa
File:                     3137372e34372e3234342e302f32322d3232203d3e20323632343738.roa (raw, json)
Hash identifier:          86WJvK3iQhrFB38IpsubitUv+W3Grmroc68d6oBU5yc=
Subject key identifier:   D3:B6:71:5B:40:F5:F8:14:E7:AE:B7:C5:14:57:7B:CF:4E:92:07:F5
Certificate issuer:       /CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
Certificate serial:       723B07B21588CB24A27A178F2A823F3DA316FFD5
Authority key identifier: 2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234342e302f32322d3232203d3e20323632343738.roa
Signing time:             Sat 15 Feb 2025 15:43:18 +0000
ROA not before:           Sat 15 Feb 2025 15:38:18 +0000
ROA not after:            Sat 14 Feb 2026 15:43:18 +0000
asID:                     262478
IP address blocks:        177.47.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl
                          rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 16:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:3b:07:b2:15:88:cb:24:a2:7a:17:8f:2a:82:3f:3d:a3:16:ff:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
        Validity
            Not Before: Feb 15 15:38:18 2025 GMT
            Not After : Feb 14 15:43:18 2026 GMT
        Subject: CN=D3B6715B40F5F814E7AEB7C514577BCF4E9207F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:2c:84:45:73:ad:f3:4d:92:25:01:7b:62:
                    3e:2f:53:e7:95:eb:39:6f:38:0f:8c:09:dc:0e:5c:
                    62:d0:0c:46:11:2f:f0:92:a6:e2:33:da:7d:20:41:
                    07:bd:54:b8:3d:03:45:83:31:32:c3:91:c8:72:80:
                    64:50:06:01:94:d5:92:cd:a7:3d:f7:8c:f4:31:8b:
                    73:e5:5d:75:09:40:ab:d2:8c:e2:ac:59:bf:1e:b5:
                    0b:d4:bf:15:9e:c7:58:8f:de:26:ee:83:2b:f5:ca:
                    ee:07:04:c8:e0:f0:f6:4e:e5:87:ea:c0:7d:99:d5:
                    60:47:80:67:96:5b:ce:c3:85:b0:ae:b9:3c:ed:4c:
                    f6:d8:75:be:97:8b:ae:c7:97:88:21:f4:4d:3a:c4:
                    16:18:dd:ce:ff:7d:a5:4e:6a:9f:68:d7:f1:76:d6:
                    9c:13:e6:58:5b:fb:b0:6e:d6:3b:1a:99:20:79:84:
                    c7:9a:c7:dd:10:b7:aa:81:3e:98:d4:c0:52:fe:ce:
                    c3:39:c5:2e:f6:84:97:ce:60:1c:89:9a:64:58:c1:
                    96:29:31:17:a2:35:89:b5:74:d7:c7:a1:dc:17:ec:
                    f6:5c:ff:2a:e6:ae:89:cb:4b:09:2f:1b:d0:2e:8d:
                    00:9c:d1:78:6e:1a:43:bc:57:08:6a:32:2c:d1:bf:
                    14:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B6:71:5B:40:F5:F8:14:E7:AE:B7:C5:14:57:7B:CF:4E:92:07:F5
            X509v3 Authority Key Identifier:
                keyid:2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234342e302f32322d3232203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:d9:fa:ad:5b:64:2f:ea:7e:76:07:27:64:5b:1e:28:89:c6:
         8e:e7:d0:03:0b:b4:3f:e1:f9:5f:6a:b5:28:e7:9a:76:a8:e9:
         95:2a:c0:84:a5:4a:67:3b:48:24:c0:1c:f1:82:58:04:e8:22:
         1f:62:3e:61:88:43:1d:7e:47:82:84:18:03:86:13:39:1a:ff:
         4b:f7:db:6a:e0:22:89:34:5e:61:64:46:b6:8c:c3:d1:e5:90:
         28:f5:ff:08:84:65:28:6e:11:d4:3f:31:02:61:ad:01:fa:de:
         d4:d1:42:5d:35:47:d0:4b:f2:ba:80:69:6d:6f:08:f0:7e:97:
         f3:6a:36:85:b6:dc:10:22:3d:d2:48:e6:b1:d8:92:f0:19:0c:
         5b:33:77:f4:04:72:7c:f2:71:b2:ac:c1:48:5f:d3:96:ca:87:
         ca:14:c6:50:b4:05:23:6e:12:ce:2e:ec:b0:14:a3:d8:66:af:
         cf:02:ec:43:e6:1b:2a:16:f2:85:48:c9:8b:3e:f1:09:79:17:
         69:16:05:1f:96:b0:3c:86:20:39:94:19:6e:c8:fc:44:2d:da:
         de:93:0d:b5:e8:95:ad:5e:64:0c:3b:3b:e0:83:d0:2b:bb:f5:
         ff:26:18:70:fb:9d:33:45:16:a9:ec:1b:7c:c7:3e:4f:72:b4:
         16:8f:49:c8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcjsHshWIyySiehePKoI/PaMW/9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFEQkU5QUQ4NEFFRkZENDM5NEY2QjhFMjBDQjA3RTlD
MDMwQzUzQTAeFw0yNTAyMTUxNTM4MThaFw0yNjAyMTQxNTQzMThaMDMxMTAvBgNV
BAMTKEQzQjY3MTVCNDBGNUY4MTRFN0FFQjdDNTE0NTc3QkNGNEU5MjA3RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsgSyERXOt802SJQF7Yj4vU+eV
6zlvOA+MCdwOXGLQDEYRL/CSpuIz2n0gQQe9VLg9A0WDMTLDkchygGRQBgGU1ZLN
pz33jPQxi3PlXXUJQKvSjOKsWb8etQvUvxWex1iP3ibugyv1yu4HBMjg8PZO5Yfq
wH2Z1WBHgGeWW87DhbCuuTztTPbYdb6Xi67Hl4gh9E06xBYY3c7/faVOap9o1/F2
1pwT5lhb+7Bu1jsamSB5hMeax90Qt6qBPpjUwFL+zsM5xS72hJfOYByJmmRYwZYp
MReiNYm1dNfHodwX7PZc/yrmronLSwkvG9AujQCc0XhuGkO8VwhqMizRvxT7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU07ZxW0D1+BTnrrfFFFd7z06SB/UwHwYDVR0j
BBgwFoAUKtvprYSu/9Q5T2uOIMsH6cAwxTowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVdXeE5UWmR1NGpQOTRTZDY3cGRTa2ZMQ2R3TndVd3k1MXozQXhza2lL
OEEvMi8yQURCRTlBRDg0QUVGRkQ0Mzk0RjZCOEUyMENCMDdFOUMwMzBDNTNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBREJFOUFEODRBRUZGRDQz
OTRGNkI4RTIwQ0IwN0U5QzAzMEM1M0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VXV3hOVFpkdTRqUDk0U2Q2N3BkU2tmTENkd053VXd5NTF6M0F4c2tpSzhBLzIv
MzEzNzM3MmUzNDM3MmUzMjM0MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNDM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxL/QwDQYJKoZIhvcNAQELBQADggEBAFbZ+q1b
ZC/qfnYHJ2RbHiiJxo7n0AMLtD/h+V9qtSjnmnao6ZUqwISlSmc7SCTAHPGCWATo
Ih9iPmGIQx1+R4KEGAOGEzka/0v322rgIok0XmFkRraMw9HlkCj1/wiEZShuEdQ/
MQJhrQH63tTRQl01R9BL8rqAaW1vCPB+l/NqNoW23BAiPdJI5rHYkvAZDFszd/QE
cnzycbKswUhf05bKh8oUxlC0BSNuEs4u7LAUo9hmr88C7EPmGyoW8oVIyYs+8Ql5
F2kWBR+WsDyGIDmUGW7I/EQt2t6TDbXola1eZAw7O+CD0Cu79f8mGHD7nTNFFqns
G3zHPk9ytBaPScg=
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:27:16 2025 by rpki-client