Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230362e302f32342d3234203d3e203532373830.roa
File:                     3137372e33392e3230362e302f32342d3234203d3e203532373830.roa (raw, json)
Hash identifier:          Q84u7Y5TZWKnj2NKJyp/vs/Uv1wwotlbJt7Qb+snY6Y=
Subject key identifier:   86:00:86:FA:B6:16:62:03:C9:83:A4:1B:89:B3:2F:36:08:42:3C:9F
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       313C6C7B4ACCB18932A2FCBB548E56EF8A5E85A5
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230362e302f32342d3234203d3e203532373830.roa
Signing time:             Thu 06 Mar 2025 15:33:23 +0000
ROA not before:           Thu 06 Mar 2025 15:28:23 +0000
ROA not after:            Thu 05 Mar 2026 15:33:23 +0000
asID:                     52780
IP address blocks:        177.39.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 22:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3c:6c:7b:4a:cc:b1:89:32:a2:fc:bb:54:8e:56:ef:8a:5e:85:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Mar  6 15:28:23 2025 GMT
            Not After : Mar  5 15:33:23 2026 GMT
        Subject: CN=860086FAB6166203C983A41B89B32F3608423C9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:3b:ee:ac:45:51:63:00:ff:ad:66:d2:19:
                    46:d5:5c:2b:ff:fe:9e:91:e0:d6:6d:b5:f4:36:c3:
                    be:36:17:bb:6b:ad:d8:d3:95:15:cd:12:81:0f:10:
                    de:cc:fe:2b:c0:7c:dd:fb:f4:e4:84:4b:cd:f3:d6:
                    bd:92:30:e8:f6:19:f2:20:43:b8:2f:a8:a6:22:fc:
                    4a:15:56:be:75:a7:aa:24:1f:42:48:ae:f4:23:ad:
                    1a:67:4f:e0:ca:8e:2a:35:e3:65:ab:3f:fd:29:9d:
                    13:08:f5:09:ae:10:df:2c:cb:fd:a2:28:a1:4d:d1:
                    c7:37:cd:05:fd:73:52:5b:a4:c1:c2:59:9b:58:fa:
                    45:78:36:d2:a2:eb:4f:d4:43:f8:5a:6d:ee:78:bf:
                    b8:08:95:41:f4:0b:f6:d0:92:38:26:8a:fd:a4:14:
                    1b:33:66:ad:f0:62:28:8a:97:b3:37:cc:f9:20:e5:
                    2a:93:bf:23:d4:bd:22:3d:b6:3c:be:ef:86:bc:b0:
                    8a:06:b8:da:e2:9a:f2:25:6d:12:a6:5a:7c:64:e0:
                    39:04:ec:96:c6:f3:3a:ad:fb:6e:61:38:78:04:86:
                    5d:c1:33:66:43:9a:7d:9c:bf:c3:c8:d4:ed:34:6b:
                    69:d3:43:e6:9d:69:e4:8c:24:8d:0d:bf:7e:18:8a:
                    66:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:00:86:FA:B6:16:62:03:C9:83:A4:1B:89:B3:2F:36:08:42:3C:9F
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230362e302f32342d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:94:66:63:b4:43:6e:95:cb:d4:b4:a8:a2:b0:f5:fb:5e:88:
         d7:a4:d7:dc:be:47:31:44:00:08:6e:2b:ad:2f:0b:98:0f:a8:
         31:25:bf:08:7a:04:74:1b:e8:29:a0:93:68:88:bf:6a:e0:7f:
         50:ea:0d:f7:ea:08:9b:40:6b:53:5e:3b:4f:0a:23:ec:ff:3d:
         80:67:03:57:b3:78:7b:c1:8a:e0:33:a4:43:4c:34:60:ee:f9:
         69:8b:74:96:34:c8:8e:52:65:c2:7e:8d:cc:09:a8:e2:bb:b2:
         d3:9a:80:2c:da:a0:57:b7:95:43:eb:31:64:38:53:f7:10:9e:
         3d:17:9f:57:94:66:57:4f:2e:0f:6d:47:bd:22:fa:02:b4:f1:
         cc:c5:4d:df:29:a8:f7:e3:d2:34:d0:e7:f3:d9:e3:16:75:80:
         0c:db:2f:bc:ae:5a:3f:4c:ac:c0:71:c4:6a:e3:2d:03:7d:37:
         59:35:1b:50:94:e3:e2:ec:11:8b:29:f4:1d:2f:01:b8:81:b9:
         6a:49:80:e8:d1:f8:7b:bc:d1:98:f5:7d:50:50:df:11:a1:ce:
         8c:e2:06:80:b0:81:47:6e:a7:e6:86:ce:c2:84:e1:ef:64:d7:
         6a:b4:3e:2b:e8:02:ac:8f:ef:f4:40:61:19:d0:43:5a:88:0c:
         46:af:1f:2f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMTxse0rMsYkyovy7VI5W74pehaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVDRTgwQjA0ODdBOTcwNjYzRUExRTA0QzJDREJFRkY3
MkIxMDRFQTAeFw0yNTAzMDYxNTI4MjNaFw0yNjAzMDUxNTMzMjNaMDMxMTAvBgNV
BAMTKDg2MDA4NkZBQjYxNjYyMDNDOTgzQTQxQjg5QjMyRjM2MDg0MjNDOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCewjvurEVRYwD/rWbSGUbVXCv/
/p6R4NZttfQ2w742F7trrdjTlRXNEoEPEN7M/ivAfN379OSES83z1r2SMOj2GfIg
Q7gvqKYi/EoVVr51p6okH0JIrvQjrRpnT+DKjio142WrP/0pnRMI9QmuEN8sy/2i
KKFN0cc3zQX9c1JbpMHCWZtY+kV4NtKi60/UQ/habe54v7gIlUH0C/bQkjgmiv2k
FBszZq3wYiiKl7M3zPkg5SqTvyPUvSI9tjy+74a8sIoGuNrimvIlbRKmWnxk4DkE
7JbG8zqt+25hOHgEhl3BM2ZDmn2cv8PI1O00a2nTQ+adaeSMJI0Nv34YimZpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhgCG+rYWYgPJg6QbibMvNghCPJ8wHwYDVR0j
BBgwFoAUdc6AsEh6lwZj6h4Ews2+/3KxBOowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkJuUWFIeU5SNWtVU3Z2anc2QkttVW40cFU4SnNrNW1HeU5WYmFSWGhr
dkMvMS83NUNFODBCMDQ4N0E5NzA2NjNFQTFFMDRDMkNEQkVGRjcyQjEwNEVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1Q0U4MEIwNDg3QTk3MDY2
M0VBMUUwNEMyQ0RCRUZGNzJCMTA0RUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCblFhSHlOUjVrVVN2dmp3NkJLbVVuNHBVOEpzazVtR3lOVmJhUlhoa3ZDLzEv
MzEzNzM3MmUzMzM5MmUzMjMwMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsSfOMA0GCSqGSIb3DQEBCwUAA4IBAQCAlGZjtENu
lcvUtKiisPX7XojXpNfcvkcxRAAIbiutLwuYD6gxJb8IegR0G+gpoJNoiL9q4H9Q
6g336gibQGtTXjtPCiPs/z2AZwNXs3h7wYrgM6RDTDRg7vlpi3SWNMiOUmXCfo3M
Cajiu7LTmoAs2qBXt5VD6zFkOFP3EJ49F59XlGZXTy4PbUe9IvoCtPHMxU3fKaj3
49I00Ofz2eMWdYAM2y+8rlo/TKzAccRq4y0DfTdZNRtQlOPi7BGLKfQdLwG4gblq
SYDo0fh7vNGY9X1QUN8Roc6M4gaAsIFHbqfmhs7ChOHvZNdqtD4r6AKsj+/0QGEZ
0ENaiAxGrx8v
-----END CERTIFICATE-----
Generated at Fri Apr 18 14:25:22 2025 by rpki-client