Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3132382e302f32302d3332203d3e20323633303533.roa
File:                     3137372e3133372e3132382e302f32302d3332203d3e20323633303533.roa (raw, json)
Hash identifier:          Iyu0seITGSGXtitRRlXFpHbuxmH8ViBivPgswmr/6AM=
Subject key identifier:   31:1E:53:6C:EB:3A:C2:31:E2:99:34:6A:CC:11:3D:B2:CE:9D:1C:23
Certificate issuer:       /CN=7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6
Certificate serial:       0589AD2FE388BA134CC647F213E1136B497B42EF
Authority key identifier: 77:12:A7:E1:3E:9B:64:DD:9C:FF:F2:77:9A:9A:BC:E9:98:49:0D:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3132382e302f32302d3332203d3e20323633303533.roa
Signing time:             Wed 19 Mar 2025 21:03:46 +0000
ROA not before:           Wed 19 Mar 2025 20:58:46 +0000
ROA not after:            Wed 18 Mar 2026 21:03:46 +0000
asID:                     263053
IP address blocks:        177.137.128.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6.crl
                          rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:89:ad:2f:e3:88:ba:13:4c:c6:47:f2:13:e1:13:6b:49:7b:42:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6
        Validity
            Not Before: Mar 19 20:58:46 2025 GMT
            Not After : Mar 18 21:03:46 2026 GMT
        Subject: CN=311E536CEB3AC231E299346ACC113DB2CE9D1C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6f:aa:77:fe:37:ad:30:ad:98:41:f8:5d:4a:
                    99:f6:b3:46:6c:c1:b2:40:b3:14:60:2c:2f:24:9f:
                    f4:6a:66:2b:06:61:84:ca:fb:bb:d2:66:9d:fd:d4:
                    c6:db:2c:73:d4:80:4d:08:01:25:5a:05:8b:2e:0f:
                    32:e8:51:ef:13:95:dd:96:0d:62:51:8a:80:ed:78:
                    26:92:88:a7:89:a9:14:78:12:a3:38:ba:98:41:a4:
                    b6:4d:e3:bc:ea:0a:f6:c4:c5:8a:11:4e:af:5f:45:
                    4e:65:c0:67:89:b8:27:97:cc:ee:dd:0f:96:a7:bc:
                    4f:ef:a4:c7:b2:c5:ce:c1:67:c2:ba:eb:6b:b7:8f:
                    69:52:29:be:fc:97:a1:33:23:64:5b:60:5d:bc:f4:
                    ab:7a:54:83:a2:a8:4b:2f:a8:8b:64:5e:46:ca:c0:
                    3b:b5:6d:f4:6f:60:36:78:37:8a:dd:f1:f6:31:07:
                    9f:c4:27:17:b0:27:86:86:dc:04:80:7d:55:96:fd:
                    fb:79:e7:e7:10:05:52:81:dd:fe:45:27:ca:4c:30:
                    cd:ec:6b:23:a5:33:a1:a4:9c:ee:01:95:1f:73:fc:
                    36:69:85:9e:c9:ed:c3:32:17:0c:98:ba:16:36:cd:
                    0d:43:fe:27:ff:21:83:6a:2e:2a:25:dd:6c:00:bc:
                    b6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1E:53:6C:EB:3A:C2:31:E2:99:34:6A:CC:11:3D:B2:CE:9D:1C:23
            X509v3 Authority Key Identifier:
                keyid:77:12:A7:E1:3E:9B:64:DD:9C:FF:F2:77:9A:9A:BC:E9:98:49:0D:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3132382e302f32302d3332203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:42:e8:36:cb:1b:71:30:cc:c9:84:7a:c1:78:ae:7b:92:42:
         1e:11:7e:d0:9a:6e:73:20:06:d5:19:27:9a:b6:db:5f:84:1d:
         65:a4:e1:bf:97:af:f3:67:9d:b8:ae:6c:85:46:3d:f6:0f:66:
         af:06:0c:4c:70:be:6b:f6:7d:5f:c9:68:ec:26:58:c3:59:10:
         0a:7b:79:87:4f:c5:d7:53:58:03:d0:c1:a3:77:3a:a8:ca:06:
         3c:38:6b:ff:ca:85:d3:29:f7:db:43:d0:90:a0:0a:c9:54:64:
         b9:32:25:2a:aa:06:80:9c:52:e7:c4:d4:e6:0b:a8:51:9d:e8:
         21:5e:40:b3:c3:ed:68:92:ba:e0:fc:04:97:fb:71:9e:c1:90:
         8e:45:94:07:8d:92:b2:ef:37:84:18:44:31:c6:6f:ba:58:f5:
         d2:6b:fb:7f:88:65:48:dd:fc:6b:7a:d8:f9:99:f7:cd:42:6c:
         6d:be:2c:46:d0:79:8e:9e:df:77:1b:78:cf:e8:b7:de:6d:78:
         01:6a:97:87:99:76:b2:37:11:e7:5d:0c:df:4c:ae:93:0a:d7:
         11:ef:6d:ad:23:58:de:27:54:86:5a:fe:34:bf:78:15:78:b2:
         5b:d2:cf:d6:88:e0:6f:c9:13:0f:88:35:8d:1d:88:9d:28:ba:
         bd:d3:be:4b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBYmtL+OIuhNMxkfyE+ETa0l7Qu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcxMkE3RTEzRTlCNjRERDlDRkZGMjc3OUE5QUJDRTk5
ODQ5MERFNjAeFw0yNTAzMTkyMDU4NDZaFw0yNjAzMTgyMTAzNDZaMDMxMTAvBgNV
BAMTKDMxMUU1MzZDRUIzQUMyMzFFMjk5MzQ2QUNDMTEzREIyQ0U5RDFDMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkb6p3/jetMK2YQfhdSpn2s0Zs
wbJAsxRgLC8kn/RqZisGYYTK+7vSZp391MbbLHPUgE0IASVaBYsuDzLoUe8Tld2W
DWJRioDteCaSiKeJqRR4EqM4uphBpLZN47zqCvbExYoRTq9fRU5lwGeJuCeXzO7d
D5anvE/vpMeyxc7BZ8K662u3j2lSKb78l6EzI2RbYF289Kt6VIOiqEsvqItkXkbK
wDu1bfRvYDZ4N4rd8fYxB5/EJxewJ4aG3ASAfVWW/ft55+cQBVKB3f5FJ8pMMM3s
ayOlM6GknO4BlR9z/DZphZ7J7cMyFwyYuhY2zQ1D/if/IYNqLiol3WwAvLYtAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUMR5TbOs6wjHimTRqzBE9ss6dHCMwHwYDVR0j
BBgwFoAUdxKn4T6bZN2c//J3mpq86ZhJDeYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0hRZGVlVm1leFJFTGJnc1BxWldDRTd2UEg5ZW9LMzNyV0t3RWMzRHRV
NmgvMC83NzEyQTdFMTNFOUI2NEREOUNGRkYyNzc5QTlBQkNFOTk4NDkwREU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3MTJBN0UxM0U5QjY0REQ5
Q0ZGRjI3NzlBOUFCQ0U5OTg0OTBERTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIUWRlZVZtZXhSRUxiZ3NQcVpXQ0U3dlBIOWVvSzMzcldLd0VjM0R0VTZoLzAv
MzEzNzM3MmUzMTMzMzcyZTMxMzIzODJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMy
MzYzMzMwMzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLGJgDANBgkqhkiG9w0BAQsFAAOCAQEAW0Lo
NssbcTDMyYR6wXiue5JCHhF+0JpucyAG1RknmrbbX4QdZaThv5ev82eduK5shUY9
9g9mrwYMTHC+a/Z9X8lo7CZYw1kQCnt5h0/F11NYA9DBo3c6qMoGPDhr/8qF0yn3
20PQkKAKyVRkuTIlKqoGgJxS58TU5guoUZ3oIV5As8PtaJK64PwEl/txnsGQjkWU
B42Ssu83hBhEMcZvulj10mv7f4hlSN38a3rY+Zn3zUJsbb4sRtB5jp7fdxt4z+i3
3m14AWqXh5l2sjcR510M30yukwrXEe9trSNY3idUhlr+NL94FXiyW9LP1ojgb8kT
D4g1jR2InSi6vdO+Sw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:50:04 2025 by rpki-client