Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/3137392e3132372e37372e302f32342d3234203d3e20323633323833.roa
File:                     3137392e3132372e37372e302f32342d3234203d3e20323633323833.roa (raw, json)
Hash identifier:          wOJNxFgIiaZgLhUXHxfsW1jkwe4SIpxOTNfW1ONOGIQ=
Subject key identifier:   66:69:F3:8C:74:A8:AC:54:52:03:A2:EA:56:32:7F:70:05:68:C0:87
Certificate issuer:       /CN=41B0D3EA994B3A684602641351C292C7808B50FC
Certificate serial:       7D1B7E75A17D69CC8A2E0C5088F5DDCA4AC5C14D
Authority key identifier: 41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/3137392e3132372e37372e302f32342d3234203d3e20323633323833.roa
Signing time:             Wed 01 Jan 2025 02:10:31 +0000
ROA not before:           Wed 01 Jan 2025 02:05:31 +0000
ROA not after:            Wed 31 Dec 2025 02:10:31 +0000
asID:                     263283
IP address blocks:        179.127.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl
                          rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 20:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1b:7e:75:a1:7d:69:cc:8a:2e:0c:50:88:f5:dd:ca:4a:c5:c1:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B0D3EA994B3A684602641351C292C7808B50FC
        Validity
            Not Before: Jan  1 02:05:31 2025 GMT
            Not After : Dec 31 02:10:31 2025 GMT
        Subject: CN=6669F38C74A8AC545203A2EA56327F700568C087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b9:1e:7c:23:ce:cd:18:cb:69:90:5f:b2:6d:
                    fd:ee:52:6c:79:2c:93:0e:51:45:f0:22:a4:15:5f:
                    3f:43:b5:4a:d1:84:57:1a:47:45:03:fc:12:73:e2:
                    f3:4f:ad:aa:b5:53:20:e6:1a:6e:8e:17:15:ed:11:
                    f5:56:63:ea:6e:58:fb:13:66:64:96:fd:35:89:12:
                    4d:77:bd:e5:9a:df:20:72:c6:c9:e5:98:c8:bc:16:
                    42:32:66:e0:41:41:0f:da:bb:30:ea:ad:de:ca:84:
                    c3:57:7c:98:98:c3:cc:45:de:cb:bb:0f:c0:96:fe:
                    15:81:f2:8c:58:aa:11:29:5d:4d:50:1a:29:79:75:
                    3d:f5:4b:bd:41:8c:60:ae:2d:a7:2c:f1:60:77:b1:
                    b8:44:57:0b:70:d2:a8:80:f1:95:e6:1c:ec:52:02:
                    80:71:eb:b7:5a:0c:81:40:d5:d5:3f:a8:0a:1d:5d:
                    19:d3:07:e4:49:f4:c6:3f:14:43:8d:45:4f:42:71:
                    94:b8:ed:a1:3f:c0:33:20:48:da:31:e5:15:76:8c:
                    95:c0:ce:f3:47:3c:b4:da:e1:de:3b:d4:1b:9f:8e:
                    d5:2f:6c:e9:5d:4e:7c:9f:e5:03:b3:81:c7:32:45:
                    58:4f:b5:5a:b2:32:65:6c:da:94:d5:48:c8:6e:1b:
                    1f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:69:F3:8C:74:A8:AC:54:52:03:A2:EA:56:32:7F:70:05:68:C0:87
            X509v3 Authority Key Identifier:
                keyid:41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/3137392e3132372e37372e302f32342d3234203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:21:c2:a8:e5:db:37:e5:d2:56:22:c8:ae:a0:60:8a:bc:e4:
         82:70:f9:9c:c7:67:fd:45:ae:40:57:58:73:5f:d2:a0:af:7b:
         cf:09:a3:ac:2b:9a:38:15:5b:50:80:f2:8f:08:8c:09:ad:47:
         7d:65:27:ea:51:d0:ef:bc:b3:1f:bb:ff:fc:d8:51:f7:96:9b:
         49:35:86:6a:ae:d3:26:48:59:0d:76:6c:23:20:08:22:ef:49:
         c9:82:e0:28:96:19:52:52:c5:6c:a4:22:e6:6e:c7:88:94:b5:
         b7:c3:c6:41:b4:8d:ec:4f:a2:26:e6:bf:69:6e:93:8e:57:0c:
         e4:2d:9f:97:e8:4f:34:ec:b9:b4:54:c8:04:07:02:86:42:cf:
         6e:43:81:31:32:95:eb:ae:8a:58:8e:ad:75:fe:ce:89:f9:ee:
         e5:5d:8a:73:93:1b:46:10:27:c8:ff:f2:a9:99:b8:c6:60:95:
         20:66:ca:7c:85:09:8e:ac:2d:94:c6:a4:07:e4:de:0e:0b:77:
         20:4f:e5:62:ea:35:ca:fe:62:b0:f7:b3:d1:2b:b3:57:d2:8b:
         d1:04:d9:d8:55:d0:58:7a:bc:91:24:d2:99:f5:f4:35:0a:d0:
         ab:91:4f:45:18:56:c7:8a:cc:68:70:cb:3a:19:21:f7:9f:ae:
         8d:da:04:82
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfRt+daF9acyKLgxQiPXdykrFwU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFCMEQzRUE5OTRCM0E2ODQ2MDI2NDEzNTFDMjkyQzc4
MDhCNTBGQzAeFw0yNTAxMDEwMjA1MzFaFw0yNTEyMzEwMjEwMzFaMDMxMTAvBgNV
BAMTKDY2NjlGMzhDNzRBOEFDNTQ1MjAzQTJFQTU2MzI3RjcwMDU2OEMwODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXuR58I87NGMtpkF+ybf3uUmx5
LJMOUUXwIqQVXz9DtUrRhFcaR0UD/BJz4vNPraq1UyDmGm6OFxXtEfVWY+puWPsT
ZmSW/TWJEk13veWa3yByxsnlmMi8FkIyZuBBQQ/auzDqrd7KhMNXfJiYw8xF3su7
D8CW/hWB8oxYqhEpXU1QGil5dT31S71BjGCuLacs8WB3sbhEVwtw0qiA8ZXmHOxS
AoBx67daDIFA1dU/qAodXRnTB+RJ9MY/FEONRU9CcZS47aE/wDMgSNox5RV2jJXA
zvNHPLTa4d471BufjtUvbOldTnyf5QOzgccyRVhPtVqyMmVs2pTVSMhuGx9NAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZmnzjHSorFRSA6LqVjJ/cAVowIcwHwYDVR0j
BBgwFoAUQbDT6plLOmhGAmQTUcKSx4CLUPwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR29MQXVDZUI4cVBBUHpUMkNIZ3VXeWJVNFRaQXhqZGdRQWlYNXJVajRI
aGEvMy80MUIwRDNFQTk5NEIzQTY4NDYwMjY0MTM1MUMyOTJDNzgwOEI1MEZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxQjBEM0VBOTk0QjNBNjg0
NjAyNjQxMzUxQzI5MkM3ODA4QjUwRkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dvTEF1Q2VCOHFQQVB6VDJDSGd1V3liVTRUWkF4amRnUUFpWDVyVWo0SGhhLzMv
MzEzNzM5MmUzMTMyMzcyZTM3MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMjM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzf00wDQYJKoZIhvcNAQELBQADggEBAE8hwqjl
2zfl0lYiyK6gYIq85IJw+ZzHZ/1FrkBXWHNf0qCve88Jo6wrmjgVW1CA8o8IjAmt
R31lJ+pR0O+8sx+7//zYUfeWm0k1hmqu0yZIWQ12bCMgCCLvScmC4CiWGVJSxWyk
IuZux4iUtbfDxkG0jexPoibmv2luk45XDOQtn5foTzTsubRUyAQHAoZCz25DgTEy
leuuiliOrXX+zon57uVdinOTG0YQJ8j/8qmZuMZglSBmynyFCY6sLZTGpAfk3g4L
dyBP5WLqNcr+YrD3s9Ers1fSi9EE2dhV0Fh6vJEk0pn19DUK0KuRT0UYVseKzGhw
yzoZIfefro3aBII=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:38 2025 by rpki-client