Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230352e302f32342d3234203d3e203532373830.roa
File:                     3137372e33392e3230352e302f32342d3234203d3e203532373830.roa (raw, json)
Hash identifier:          N5s52IXgXTdC9iPSfj1uBj5lSAOkIqGtJQM7l5IaPYU=
Subject key identifier:   C5:18:F1:87:24:3A:70:00:6B:6E:5F:20:1C:CA:4F:53:7B:DC:39:99
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       2B6B4746876B7B601018B39CDC7DD4EF7001B40E
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230352e302f32342d3234203d3e203532373830.roa
Signing time:             Thu 06 Mar 2025 15:33:23 +0000
ROA not before:           Thu 06 Mar 2025 15:28:23 +0000
ROA not after:            Thu 05 Mar 2026 15:33:23 +0000
asID:                     52780
IP address blocks:        177.39.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 22:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6b:47:46:87:6b:7b:60:10:18:b3:9c:dc:7d:d4:ef:70:01:b4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Mar  6 15:28:23 2025 GMT
            Not After : Mar  5 15:33:23 2026 GMT
        Subject: CN=C518F187243A70006B6E5F201CCA4F537BDC3999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:31:62:d8:7f:59:76:34:64:a6:52:30:a7:
                    d2:eb:53:03:b9:51:ef:e5:f2:63:95:4e:2b:a5:65:
                    c1:10:44:93:06:3f:fa:dd:df:6e:42:03:06:dd:ca:
                    95:37:6e:09:b1:7f:95:53:90:4b:e8:d9:72:15:dd:
                    25:1e:94:27:73:e5:fa:70:09:e7:4e:41:ef:aa:90:
                    98:fd:78:7c:e7:53:38:d1:cc:55:b3:87:01:8a:20:
                    b4:3e:46:2a:ce:56:41:36:e5:08:c9:bb:d0:b6:1b:
                    0a:df:7f:60:cd:13:a8:c6:68:0b:ef:4c:4a:c2:e0:
                    0e:a5:c0:c8:93:bd:1a:20:14:1a:2e:45:e4:ca:31:
                    39:ff:77:cb:df:ba:7a:66:a9:60:cc:5e:85:f6:8b:
                    f1:b4:3a:c3:53:b2:2e:a3:3d:3d:5a:60:e8:28:f1:
                    5e:09:57:7d:df:8c:7f:09:dd:ca:29:13:fd:1b:74:
                    dd:02:38:2b:c7:ad:6f:1d:1a:8a:e0:a0:81:ae:d5:
                    d0:56:75:53:25:78:17:ed:a8:19:67:21:90:62:bc:
                    bb:70:17:40:1b:d2:c5:6d:36:1f:07:a4:4b:48:43:
                    75:e3:00:8d:70:cd:7e:88:b2:41:bf:f1:90:95:2a:
                    5f:73:f7:6d:17:fd:8c:01:1a:82:bd:69:c4:09:39:
                    37:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:18:F1:87:24:3A:70:00:6B:6E:5F:20:1C:CA:4F:53:7B:DC:39:99
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230352e302f32342d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:eb:0d:31:fa:3e:75:13:f4:89:05:78:94:a0:3d:b6:b4:4a:
         11:43:7b:95:56:37:5d:dc:71:7e:8d:83:8d:ee:97:e7:07:61:
         46:52:8f:a8:4b:65:c2:8e:2a:b7:7c:af:6a:c9:1f:0f:c6:0e:
         d8:d0:70:3a:3e:9a:c7:e6:a6:98:09:cc:67:6a:72:ca:fc:2e:
         f9:c2:73:f6:92:37:c2:e3:dc:a8:b7:e2:65:ba:83:cc:a3:85:
         fe:f8:f5:f3:d7:44:cc:0a:b4:c9:3e:ed:72:8f:a2:be:d8:0c:
         0f:ce:46:48:05:07:85:37:b8:8a:f4:47:ca:5f:ff:c0:48:3c:
         73:2f:5d:b0:ca:ba:24:96:61:0c:82:33:a1:4c:a7:04:3a:1c:
         3b:41:e4:2a:d1:dd:bb:31:b2:59:35:ad:28:e2:f4:5b:ba:f5:
         66:d1:ea:95:ee:21:40:79:63:10:8b:3f:db:c7:42:04:a7:60:
         ed:bc:9a:ee:5f:0c:41:2a:42:55:f8:7b:88:29:14:ca:90:f0:
         f1:4c:c5:c9:a2:43:ad:f8:54:1b:96:c2:60:bd:73:60:d9:90:
         8b:64:26:83:62:32:1f:d0:c1:56:16:88:c1:ac:96:b5:99:9a:
         8d:b2:c9:8b:1a:a1:2f:1b:59:5e:10:44:5f:d2:b5:bf:f7:7e:
         9f:32:ac:02
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUK2tHRodre2AQGLOc3H3U73ABtA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVDRTgwQjA0ODdBOTcwNjYzRUExRTA0QzJDREJFRkY3
MkIxMDRFQTAeFw0yNTAzMDYxNTI4MjNaFw0yNjAzMDUxNTMzMjNaMDMxMTAvBgNV
BAMTKEM1MThGMTg3MjQzQTcwMDA2QjZFNUYyMDFDQ0E0RjUzN0JEQzM5OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3uTFi2H9ZdjRkplIwp9LrUwO5
Ue/l8mOVTiulZcEQRJMGP/rd325CAwbdypU3bgmxf5VTkEvo2XIV3SUelCdz5fpw
CedOQe+qkJj9eHznUzjRzFWzhwGKILQ+RirOVkE25QjJu9C2Gwrff2DNE6jGaAvv
TErC4A6lwMiTvRogFBouReTKMTn/d8vfunpmqWDMXoX2i/G0OsNTsi6jPT1aYOgo
8V4JV33fjH8J3copE/0bdN0COCvHrW8dGorgoIGu1dBWdVMleBftqBlnIZBivLtw
F0Ab0sVtNh8HpEtIQ3XjAI1wzX6IskG/8ZCVKl9z920X/YwBGoK9acQJOTfHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUxRjxhyQ6cABrbl8gHMpPU3vcOZkwHwYDVR0j
BBgwFoAUdc6AsEh6lwZj6h4Ews2+/3KxBOowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkJuUWFIeU5SNWtVU3Z2anc2QkttVW40cFU4SnNrNW1HeU5WYmFSWGhr
dkMvMS83NUNFODBCMDQ4N0E5NzA2NjNFQTFFMDRDMkNEQkVGRjcyQjEwNEVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1Q0U4MEIwNDg3QTk3MDY2
M0VBMUUwNEMyQ0RCRUZGNzJCMTA0RUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCblFhSHlOUjVrVVN2dmp3NkJLbVVuNHBVOEpzazVtR3lOVmJhUlhoa3ZDLzEv
MzEzNzM3MmUzMzM5MmUzMjMwMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsSfNMA0GCSqGSIb3DQEBCwUAA4IBAQBv6w0x+j51
E/SJBXiUoD22tEoRQ3uVVjdd3HF+jYON7pfnB2FGUo+oS2XCjiq3fK9qyR8Pxg7Y
0HA6PprH5qaYCcxnanLK/C75wnP2kjfC49yot+JluoPMo4X++PXz10TMCrTJPu1y
j6K+2AwPzkZIBQeFN7iK9EfKX//ASDxzL12wyroklmEMgjOhTKcEOhw7QeQq0d27
MbJZNa0o4vRbuvVm0eqV7iFAeWMQiz/bx0IEp2DtvJruXwxBKkJV+HuIKRTKkPDx
TMXJokOt+FQblsJgvXNg2ZCLZCaDYjIf0MFWFojBrJa1mZqNssmLGqEvG1leEERf
0rW/936fMqwC
-----END CERTIFICATE-----
Generated at Fri Apr 18 14:23:53 2025 by rpki-client