Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/3137392e3130392e3131322e302f32332d3233203d3e20323730373431.roa
File:                     3137392e3130392e3131322e302f32332d3233203d3e20323730373431.roa (raw, json)
Hash identifier:          JfHZm5PCo76sKw5OOUbf/kOOFPQPaUOaA930uImzE1Y=
Subject key identifier:   ED:E8:FD:11:9C:EB:93:D0:F1:F5:5C:48:F8:67:2D:FB:F0:4F:77:42
Certificate issuer:       /CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
Certificate serial:       7C4C29E46AB23F70001EFD1A39A5D2AFB0282897
Authority key identifier: 60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/3137392e3130392e3131322e302f32332d3233203d3e20323730373431.roa
Signing time:             Tue 04 Feb 2025 15:39:29 +0000
ROA not before:           Tue 04 Feb 2025 15:34:29 +0000
ROA not after:            Tue 03 Feb 2026 15:39:29 +0000
asID:                     270741
IP address blocks:        179.109.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl
                          rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 12:41:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:4c:29:e4:6a:b2:3f:70:00:1e:fd:1a:39:a5:d2:af:b0:28:28:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
        Validity
            Not Before: Feb  4 15:34:29 2025 GMT
            Not After : Feb  3 15:39:29 2026 GMT
        Subject: CN=EDE8FD119CEB93D0F1F55C48F8672DFBF04F7742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:93:03:6a:c5:ca:6f:49:ac:b8:d5:94:97:
                    c3:bc:f1:4e:e1:c8:75:44:e9:0a:b4:a8:53:ba:82:
                    92:9a:2e:a0:64:3a:aa:bc:26:78:46:99:8d:dd:6f:
                    ac:fd:bc:7f:df:8e:f5:a3:3f:5b:93:78:b4:b3:b7:
                    13:6f:91:9b:ae:1f:d0:18:f0:78:e0:a3:5c:0b:6e:
                    b1:49:e0:5c:16:1f:91:52:66:28:d3:b1:71:ba:91:
                    72:af:07:2e:2f:18:76:17:57:a1:6e:6f:21:0d:37:
                    80:84:d5:92:a9:c4:db:ad:f0:87:5a:11:4f:74:31:
                    e3:e6:2a:40:c0:62:04:0a:9e:0a:1a:a0:e7:b8:79:
                    07:4d:e6:66:a4:36:db:10:64:b5:f0:e0:29:a6:45:
                    b7:ae:30:59:01:65:86:1b:27:e0:29:89:21:7a:8e:
                    90:37:bd:6c:52:c9:65:5e:9f:c0:50:97:04:1f:26:
                    e8:50:1f:b1:16:00:80:cb:83:0f:7d:b4:aa:16:0c:
                    b6:fe:30:ef:88:ba:5e:01:2c:bf:ca:c6:21:75:ea:
                    b5:58:97:91:06:18:0e:63:0d:e7:c3:46:2f:4d:9f:
                    3c:ff:91:0e:2d:27:25:5b:58:15:c7:eb:0c:d7:ff:
                    7b:33:eb:21:39:77:56:8a:60:df:b6:06:4e:1f:ea:
                    18:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E8:FD:11:9C:EB:93:D0:F1:F5:5C:48:F8:67:2D:FB:F0:4F:77:42
            X509v3 Authority Key Identifier:
                keyid:60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/3137392e3130392e3131322e302f32332d3233203d3e20323730373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:64:55:b9:39:9e:93:5e:6c:e3:dc:5e:c6:ff:b4:be:fc:70:
         5d:ef:19:5d:49:5e:91:f8:c9:f4:1f:20:95:c4:87:8e:54:18:
         0c:08:4e:b9:80:46:2e:47:58:79:46:b5:47:a7:ca:4b:42:04:
         ac:ac:ac:89:24:81:d0:23:ae:ce:c7:a9:80:3c:44:60:a1:0f:
         11:27:ff:37:45:e7:46:2f:01:8d:d1:2c:cc:8e:7e:75:8c:30:
         f2:99:46:d6:ef:36:26:51:01:22:52:30:86:09:f0:23:08:5a:
         9d:e6:96:7b:fd:30:c0:80:28:36:9c:50:dd:c6:aa:31:07:65:
         27:49:a8:28:6d:d2:74:8a:03:ce:f6:d9:5d:10:39:8a:64:2d:
         15:a9:de:23:70:c2:38:3a:af:98:74:46:58:6e:54:d5:e0:f8:
         8d:92:56:df:f9:5b:50:1d:17:1c:b5:94:4e:50:85:03:46:4f:
         cd:a0:58:38:c4:e2:d2:09:68:41:69:52:9e:7f:74:01:45:d7:
         36:43:6e:67:f8:5d:56:4e:ae:3b:05:15:27:79:37:09:af:fb:
         8c:06:87:65:2d:39:ff:74:ff:31:9f:12:df:a8:90:ae:18:98:
         72:20:8f:31:a3:08:31:dc:2e:73:ff:58:d9:cc:04:06:13:ea:
         49:49:42:53
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfEwp5GqyP3AAHv0aOaXSr7AoKJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1RkVGOTA1NzQ2MEZFQzE1RTlERjA2QjM3QkYyMDU0
MUJDNDc3RTAeFw0yNTAyMDQxNTM0MjlaFw0yNjAyMDMxNTM5MjlaMDMxMTAvBgNV
BAMTKEVERThGRDExOUNFQjkzRDBGMUY1NUM0OEY4NjcyREZCRjA0Rjc3NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJ5MDasXKb0msuNWUl8O88U7h
yHVE6Qq0qFO6gpKaLqBkOqq8JnhGmY3db6z9vH/fjvWjP1uTeLSztxNvkZuuH9AY
8Hjgo1wLbrFJ4FwWH5FSZijTsXG6kXKvBy4vGHYXV6FubyENN4CE1ZKpxNut8Ida
EU90MePmKkDAYgQKngoaoOe4eQdN5makNtsQZLXw4CmmRbeuMFkBZYYbJ+ApiSF6
jpA3vWxSyWVen8BQlwQfJuhQH7EWAIDLgw99tKoWDLb+MO+Iul4BLL/KxiF16rVY
l5EGGA5jDefDRi9Nnzz/kQ4tJyVbWBXH6wzX/3sz6yE5d1aKYN+2Bk4f6hi/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7ej9EZzrk9Dx9VxI+Gct+/BPd0IwHwYDVR0j
BBgwFoAUYF/vkFdGD+wV6d8Gs3vyBUG8R34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkZUQjh5VmI2aGh5b2ZSN3BUY1lXUVM3VkRDakw0cEhpZTdWdThOb3Iy
QmcvMC82MDVGRUY5MDU3NDYwRkVDMTVFOURGMDZCMzdCRjIwNTQxQkM0NzdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwNUZFRjkwNTc0NjBGRUMx
NUU5REYwNkIzN0JGMjA1NDFCQzQ3N0UuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZGVEI4eVZiNmhoeW9mUjdwVGNZV1FTN1ZEQ2pMNHBIaWU3VnU4Tm9yMkJnLzAv
MzEzNzM5MmUzMTMwMzkyZTMxMzEzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMDM3MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbNtcDANBgkqhkiG9w0BAQsFAAOCAQEAGmRV
uTmek15s49xexv+0vvxwXe8ZXUlekfjJ9B8glcSHjlQYDAhOuYBGLkdYeUa1R6fK
S0IErKysiSSB0COuzsepgDxEYKEPESf/N0XnRi8BjdEszI5+dYww8plG1u82JlEB
IlIwhgnwIwhaneaWe/0wwIAoNpxQ3caqMQdlJ0moKG3SdIoDzvbZXRA5imQtFane
I3DCODqvmHRGWG5U1eD4jZJW3/lbUB0XHLWUTlCFA0ZPzaBYOMTi0gloQWlSnn90
AUXXNkNuZ/hdVk6uOwUVJ3k3Ca/7jAaHZS05/3T/MZ8S36iQrhiYciCPMaMIMdwu
c/9Y2cwEBhPqSUlCUw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:31:21 2025 by rpki-client