Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/3137392e3132372e37322e302f32342d3234203d3e20323633323833.roa
File:                     3137392e3132372e37322e302f32342d3234203d3e20323633323833.roa (raw, json)
Hash identifier:          3kyLnfo1foUev2e76rZ4ZIsJ6WJImHxh+mVOKvVD/AI=
Subject key identifier:   D5:AA:7C:52:23:B3:12:C9:97:FF:9A:AB:9D:26:CC:FA:3D:86:70:1B
Certificate issuer:       /CN=41B0D3EA994B3A684602641351C292C7808B50FC
Certificate serial:       0D9980B62FF1A2BF3EC9682B14A7848B49839BE1
Authority key identifier: 41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/3137392e3132372e37322e302f32342d3234203d3e20323633323833.roa
Signing time:             Mon 10 Feb 2025 18:30:47 +0000
ROA not before:           Mon 10 Feb 2025 18:25:47 +0000
ROA not after:            Mon 09 Feb 2026 18:30:47 +0000
asID:                     263283
IP address blocks:        179.127.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl
                          rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 05:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:99:80:b6:2f:f1:a2:bf:3e:c9:68:2b:14:a7:84:8b:49:83:9b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B0D3EA994B3A684602641351C292C7808B50FC
        Validity
            Not Before: Feb 10 18:25:47 2025 GMT
            Not After : Feb  9 18:30:47 2026 GMT
        Subject: CN=D5AA7C5223B312C997FF9AAB9D26CCFA3D86701B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cf:d9:b6:5f:7e:98:8f:74:3c:fe:7d:ef:ef:
                    bf:5b:60:f2:c6:22:ba:1d:a3:90:64:c9:d9:78:b7:
                    b6:bb:cf:02:b4:75:6d:a8:81:1d:6d:44:38:1d:a2:
                    cc:8f:68:df:5d:ed:01:08:60:a8:76:f0:1f:6f:35:
                    30:90:3c:a8:b9:9d:00:52:29:2b:c1:03:38:7b:4d:
                    a7:79:12:2b:02:59:88:4e:c4:0a:db:ac:96:22:da:
                    ba:79:94:69:61:f8:8d:ec:e3:c5:81:b3:80:10:ea:
                    a2:43:ed:9a:fd:1b:db:18:20:dd:74:e6:23:67:79:
                    9e:2a:a5:31:60:7a:34:6f:6d:96:82:01:47:15:d0:
                    a8:bb:68:17:d2:e7:e8:c4:46:bb:34:7a:a6:d4:85:
                    c3:a2:e2:2b:cf:5b:84:62:28:4a:b5:97:16:66:75:
                    60:c3:01:16:8c:42:9b:e2:67:24:74:d1:f5:1d:7b:
                    54:85:2b:47:39:b5:7a:e9:36:93:be:4d:a0:a7:dd:
                    a6:76:01:2c:38:2f:62:77:01:16:9a:a2:ef:21:d9:
                    a5:03:2c:42:66:2d:8d:a1:6b:81:3a:c8:4d:7c:e2:
                    18:ea:e0:43:09:38:6a:e5:f2:76:06:39:98:22:90:
                    98:0e:8c:21:13:ae:71:c4:cd:6a:f3:3d:21:99:14:
                    10:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AA:7C:52:23:B3:12:C9:97:FF:9A:AB:9D:26:CC:FA:3D:86:70:1B
            X509v3 Authority Key Identifier:
                keyid:41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/3137392e3132372e37322e302f32342d3234203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:fa:78:bb:5d:98:6a:13:72:8b:c2:ea:1c:fe:00:ee:e8:3c:
         06:69:f5:a9:f3:49:aa:30:cf:1b:6c:63:7e:9c:d6:45:a6:89:
         35:5e:67:d3:78:0c:26:70:a2:ff:cc:92:c8:21:c3:e4:91:ef:
         41:1c:a6:ef:e0:d7:ea:92:c1:bc:02:bc:d2:be:b3:53:bb:f0:
         f4:40:f4:d7:10:8e:ff:7d:1e:73:37:13:23:4e:07:d0:36:9b:
         9c:73:c6:cb:e0:c7:6f:4c:24:8d:43:89:56:a7:07:68:fc:26:
         69:78:60:ed:5a:9f:54:31:67:36:76:85:a8:e4:2a:aa:c6:8f:
         8c:71:39:ef:54:0c:01:c0:76:39:67:a3:29:89:c7:68:f3:63:
         d6:bc:39:0b:bc:41:0a:71:9f:b8:2f:15:01:d4:81:55:4f:f9:
         af:27:93:b7:62:2d:20:28:b6:36:7c:56:e0:08:c4:5b:52:86:
         2d:65:ee:f8:0b:ba:a0:17:2f:ab:01:0b:5f:22:f4:b5:ef:20:
         36:8c:e0:10:a3:d3:66:be:5d:40:69:9b:3f:a2:65:38:96:2a:
         05:09:31:15:b0:e2:99:c4:76:e0:57:42:aa:81:6e:d9:6f:2b:
         9e:4a:53:8c:f1:56:37:52:e1:1b:11:c9:e1:4f:8c:ab:97:4c:
         a2:14:a8:0c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDZmAti/xor8+yWgrFKeEi0mDm+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFCMEQzRUE5OTRCM0E2ODQ2MDI2NDEzNTFDMjkyQzc4
MDhCNTBGQzAeFw0yNTAyMTAxODI1NDdaFw0yNjAyMDkxODMwNDdaMDMxMTAvBgNV
BAMTKEQ1QUE3QzUyMjNCMzEyQzk5N0ZGOUFBQjlEMjZDQ0ZBM0Q4NjcwMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAz9m2X36Yj3Q8/n3v779bYPLG
Irodo5Bkydl4t7a7zwK0dW2ogR1tRDgdosyPaN9d7QEIYKh28B9vNTCQPKi5nQBS
KSvBAzh7Tad5EisCWYhOxArbrJYi2rp5lGlh+I3s48WBs4AQ6qJD7Zr9G9sYIN10
5iNneZ4qpTFgejRvbZaCAUcV0Ki7aBfS5+jERrs0eqbUhcOi4ivPW4RiKEq1lxZm
dWDDARaMQpviZyR00fUde1SFK0c5tXrpNpO+TaCn3aZ2ASw4L2J3ARaaou8h2aUD
LEJmLY2ha4E6yE184hjq4EMJOGrl8nYGOZgikJgOjCETrnHEzWrzPSGZFBCrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1ap8UiOzEsmX/5qrnSbM+j2GcBswHwYDVR0j
BBgwFoAUQbDT6plLOmhGAmQTUcKSx4CLUPwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR29MQXVDZUI4cVBBUHpUMkNIZ3VXeWJVNFRaQXhqZGdRQWlYNXJVajRI
aGEvMy80MUIwRDNFQTk5NEIzQTY4NDYwMjY0MTM1MUMyOTJDNzgwOEI1MEZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxQjBEM0VBOTk0QjNBNjg0
NjAyNjQxMzUxQzI5MkM3ODA4QjUwRkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dvTEF1Q2VCOHFQQVB6VDJDSGd1V3liVTRUWkF4amRnUUFpWDVyVWo0SGhhLzMv
MzEzNzM5MmUzMTMyMzcyZTM3MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMjM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzf0gwDQYJKoZIhvcNAQELBQADggEBAD76eLtd
mGoTcovC6hz+AO7oPAZp9anzSaowzxtsY36c1kWmiTVeZ9N4DCZwov/Mksghw+SR
70Ecpu/g1+qSwbwCvNK+s1O78PRA9NcQjv99HnM3EyNOB9A2m5xzxsvgx29MJI1D
iVanB2j8Jml4YO1an1QxZzZ2hajkKqrGj4xxOe9UDAHAdjlnoymJx2jzY9a8OQu8
QQpxn7gvFQHUgVVP+a8nk7diLSAotjZ8VuAIxFtShi1l7vgLuqAXL6sBC18i9LXv
IDaM4BCj02a+XUBpmz+iZTiWKgUJMRWw4pnEduBXQqqBbtlvK55KU4zxVjdS4RsR
yeFPjKuXTKIUqAw=
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:33:19 2025 by rpki-client