Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/3137372e35342e3234382e302f32312d3234203d3e20323632323939.roa
File:                     3137372e35342e3234382e302f32312d3234203d3e20323632323939.roa (raw, json)
Hash identifier:          J9JKS/uOVSTf4lxE2/X712ak1j9CChp3U8mi1+Az2NM=
Subject key identifier:   B0:F2:25:D5:7B:50:C3:AF:C4:F7:89:66:9B:C4:AB:01:E9:62:A2:E6
Certificate issuer:       /CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
Certificate serial:       6EB39539E605A1E20654594654D9390E55781E38
Authority key identifier: 20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/3137372e35342e3234382e302f32312d3234203d3e20323632323939.roa
Signing time:             Thu 06 Mar 2025 20:55:47 +0000
ROA not before:           Thu 06 Mar 2025 20:50:47 +0000
ROA not after:            Thu 05 Mar 2026 20:55:47 +0000
asID:                     262299
IP address blocks:        177.54.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl
                          rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 17:36:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b3:95:39:e6:05:a1:e2:06:54:59:46:54:d9:39:0e:55:78:1e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
        Validity
            Not Before: Mar  6 20:50:47 2025 GMT
            Not After : Mar  5 20:55:47 2026 GMT
        Subject: CN=B0F225D57B50C3AFC4F789669BC4AB01E962A2E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:23:4d:ea:02:5b:b1:81:d4:26:c8:6d:da:a7:
                    39:7c:83:bc:2d:4d:05:7e:d0:3d:0c:ac:41:9d:dc:
                    b8:de:86:0a:a3:54:4d:44:e6:ef:ac:33:60:af:c7:
                    f5:3f:38:3c:00:55:dc:7d:b4:e9:0d:4a:52:8b:6a:
                    34:8e:21:bb:1c:a3:e4:b7:a5:3c:5d:f2:e1:4b:00:
                    2e:b1:93:c1:dc:7a:6f:2f:aa:90:05:e8:b8:69:dc:
                    9e:49:0e:08:d7:16:5d:42:4e:1c:d5:f9:b6:0e:43:
                    b1:14:e0:79:b9:52:c5:87:d1:51:fd:17:7c:57:54:
                    01:cf:5e:f9:0a:a9:e2:49:96:e2:9d:21:3c:70:4c:
                    4d:4d:90:93:92:cc:69:f3:9b:a5:56:93:34:01:9b:
                    8a:27:31:4c:a8:ac:89:12:09:3f:82:de:2d:60:ba:
                    c8:a1:10:ac:88:4a:da:4b:7d:3e:11:5e:d7:ca:0b:
                    ad:f6:71:6b:4a:89:e9:7a:ff:f7:e3:00:a7:e7:9e:
                    00:10:4c:5f:1c:6b:fb:b4:fa:74:30:20:e9:ba:c3:
                    c3:a9:b1:2b:1a:d6:cd:46:cf:f1:c4:6d:25:5a:cc:
                    07:03:aa:89:a9:27:c9:40:36:ec:2b:74:4c:86:2f:
                    ba:d0:38:d0:03:66:83:1c:71:fe:ae:fd:cd:8b:24:
                    7a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F2:25:D5:7B:50:C3:AF:C4:F7:89:66:9B:C4:AB:01:E9:62:A2:E6
            X509v3 Authority Key Identifier:
                keyid:20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/3137372e35342e3234382e302f32312d3234203d3e20323632323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:09:1b:57:41:ec:a9:e5:20:18:7d:4c:d1:55:2b:c7:b8:80:
         fb:7d:3e:35:19:9f:e7:c6:db:1a:a0:c7:ef:8d:36:6c:f7:ab:
         fe:8b:91:90:36:50:ec:49:fc:72:d8:27:39:48:a7:bb:0d:0e:
         fa:08:22:5f:9e:a1:ec:31:a4:99:e5:8a:5a:62:2d:d5:2c:7d:
         cb:98:0c:3c:c1:48:91:d7:c2:9e:47:f9:4b:b4:87:c4:8b:ce:
         2c:22:06:6b:f8:ca:40:4a:24:b2:83:70:00:1a:5e:5d:f1:00:
         73:a6:27:79:0e:6d:b2:f8:e2:ee:0d:9e:02:3e:69:82:c4:3f:
         22:46:18:81:e7:30:00:31:75:73:dc:3a:a0:f8:e0:1c:d2:80:
         4c:85:fd:bc:6f:0e:a5:b5:22:36:7d:66:3f:74:34:7e:24:a3:
         d5:7b:16:21:7f:95:8a:62:fb:18:e4:ea:e1:08:86:d3:68:cc:
         63:e0:3a:af:b9:85:14:10:a0:d6:b8:2c:77:ca:a0:b4:b9:fb:
         42:61:15:15:4f:de:24:2a:82:25:aa:20:c1:b9:99:bc:3a:8e:
         55:7d:9e:dc:f9:df:51:55:ed:69:e6:ff:d9:fc:fa:ea:77:9e:
         c1:03:fa:82:9b:c1:fa:97:cd:15:79:4a:fc:14:2c:ff:49:71:
         18:e1:e1:15
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbrOVOeYFoeIGVFlGVNk5DlV4HjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjAzRENDQTdERTc5QzhDNERBQkFBMTBBNkNBOUU5M0VB
N0QzOURGNzAeFw0yNTAzMDYyMDUwNDdaFw0yNjAzMDUyMDU1NDdaMDMxMTAvBgNV
BAMTKEIwRjIyNUQ1N0I1MEMzQUZDNEY3ODk2NjlCQzRBQjAxRTk2MkEyRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNI03qAluxgdQmyG3apzl8g7wt
TQV+0D0MrEGd3LjehgqjVE1E5u+sM2Cvx/U/ODwAVdx9tOkNSlKLajSOIbsco+S3
pTxd8uFLAC6xk8Hcem8vqpAF6Lhp3J5JDgjXFl1CThzV+bYOQ7EU4Hm5UsWH0VH9
F3xXVAHPXvkKqeJJluKdITxwTE1NkJOSzGnzm6VWkzQBm4onMUyorIkSCT+C3i1g
usihEKyIStpLfT4RXtfKC632cWtKiel6//fjAKfnngAQTF8ca/u0+nQwIOm6w8Op
sSsa1s1Gz/HEbSVazAcDqompJ8lANuwrdEyGL7rQONADZoMccf6u/c2LJHqlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsPIl1XtQw6/E94lmm8SrAeliouYwHwYDVR0j
BBgwFoAUID3Mp955yMTauqEKbKnpPqfTnfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BH
U0UvMS8yMDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwM0RDQ0E3REU3OUM4QzRE
QUJBQTEwQTZDQTlFOTNFQTdEMzlERjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCeHVMcENmM3lhZTlNR2VCMmM2VEM5YXhCWkdaRFY1d2NRNXZmRm9wR1NFLzEv
MzEzNzM3MmUzNTM0MmUzMjM0MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMjM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxNvgwDQYJKoZIhvcNAQELBQADggEBABkJG1dB
7KnlIBh9TNFVK8e4gPt9PjUZn+fG2xqgx++NNmz3q/6LkZA2UOxJ/HLYJzlIp7sN
DvoIIl+eoewxpJnlilpiLdUsfcuYDDzBSJHXwp5H+Uu0h8SLziwiBmv4ykBKJLKD
cAAaXl3xAHOmJ3kObbL44u4NngI+aYLEPyJGGIHnMAAxdXPcOqD44BzSgEyF/bxv
DqW1IjZ9Zj90NH4ko9V7FiF/lYpi+xjk6uEIhtNozGPgOq+5hRQQoNa4LHfKoLS5
+0JhFRVP3iQqgiWqIMG5mbw6jlV9ntz531FV7Wnm/9n8+up3nsED+oKbwfqXzRV5
SvwULP9JcRjh4RU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:01:23 2025 by rpki-client