Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e37332e37322e302f32322d3232203d3e20323632353636.roa
File:                     3137372e37332e37322e302f32322d3232203d3e20323632353636.roa (raw, json)
Hash identifier:          oUZTfm9JTnYG9XGm3pVzGIF1rEQHWx8vFyUsxtHX+Lo=
Subject key identifier:   3E:94:A4:A1:37:4F:36:AF:77:60:9C:AC:F1:7A:43:D5:A5:6F:49:F4
Certificate issuer:       /CN=C8232E7ADA2149C400868144F5DA83930BC26309
Certificate serial:       59C7456ECE1A646E3BA1A1800CE1C6684F5B1520
Authority key identifier: C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e37332e37322e302f32322d3232203d3e20323632353636.roa
Signing time:             Thu 27 Mar 2025 18:15:54 +0000
ROA not before:           Thu 27 Mar 2025 18:10:54 +0000
ROA not after:            Thu 26 Mar 2026 18:15:54 +0000
asID:                     262566
IP address blocks:        177.73.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl
                          rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 02:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c7:45:6e:ce:1a:64:6e:3b:a1:a1:80:0c:e1:c6:68:4f:5b:15:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8232E7ADA2149C400868144F5DA83930BC26309
        Validity
            Not Before: Mar 27 18:10:54 2025 GMT
            Not After : Mar 26 18:15:54 2026 GMT
        Subject: CN=3E94A4A1374F36AF77609CACF17A43D5A56F49F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a4:08:62:27:23:97:78:a1:59:20:16:0b:c8:
                    0f:2d:46:1c:06:24:ef:22:16:7f:c8:67:eb:25:61:
                    95:74:a4:6f:22:c9:d7:14:86:92:19:7d:9f:27:7a:
                    9c:59:f0:06:79:48:be:85:fc:9c:21:8e:22:f6:31:
                    67:26:95:db:72:0d:14:dc:72:4b:4b:18:87:2a:7d:
                    9f:26:d6:75:f6:9e:d5:d4:53:d4:2e:84:4d:f3:2b:
                    96:a4:6f:28:17:13:d6:e4:ef:66:23:ef:b9:a5:1c:
                    2b:19:52:25:b1:43:54:b4:7f:9b:4d:d3:0e:b1:6a:
                    99:48:a4:80:04:3d:42:c9:14:b0:e6:c0:ae:f7:3d:
                    c1:0b:7c:bb:ca:b8:d9:9a:8b:d0:49:e8:aa:ab:e9:
                    89:0a:1d:54:6a:94:88:cc:36:69:a6:f8:44:3c:05:
                    f0:e5:f2:9d:dd:4d:ff:92:1a:42:da:df:fb:67:7b:
                    96:cb:72:7e:3f:31:57:20:e3:b9:f7:15:79:25:f3:
                    3d:1f:27:e9:d5:8f:c3:5b:76:35:db:9f:9f:64:24:
                    a0:c6:50:13:24:a4:eb:3a:ac:a8:91:2d:a4:f7:1c:
                    38:a8:51:75:5b:79:a0:cb:f7:12:0f:d0:8b:c2:25:
                    4f:d6:ea:1e:f8:e5:9a:c3:dc:92:c6:fc:03:eb:d9:
                    94:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:94:A4:A1:37:4F:36:AF:77:60:9C:AC:F1:7A:43:D5:A5:6F:49:F4
            X509v3 Authority Key Identifier:
                keyid:C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e37332e37322e302f32322d3232203d3e20323632353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:7b:4a:ce:d9:8f:78:f6:f5:ec:d6:ab:da:d3:3e:ae:c9:32:
         ea:d9:f0:78:69:cb:02:63:6c:85:cd:d6:cf:35:85:0e:b8:18:
         56:55:45:6b:55:7d:81:8f:4e:e6:0b:a7:9a:ad:d8:06:2f:05:
         7b:07:33:00:e8:53:f1:ed:34:84:45:28:cd:12:0a:21:93:bc:
         b3:4e:a9:30:71:93:f6:df:a2:10:5b:8f:8c:5f:ae:61:dc:d6:
         8b:62:b2:fe:a6:22:91:a1:c9:e4:45:a0:3c:84:d4:d1:a1:7f:
         85:6a:78:0a:cd:a7:f0:b9:47:1b:c9:ad:9c:57:c9:09:07:dc:
         d6:e8:4f:bd:31:db:05:4c:2a:10:a1:3c:fd:f6:0e:fa:52:f7:
         a4:66:26:e1:20:74:a6:7b:0d:fd:4b:f6:78:7c:fe:92:7e:2f:
         0b:47:2e:f1:9f:1f:46:b2:e8:84:ac:60:c6:8b:fc:38:b3:ef:
         db:ea:19:b1:16:54:d4:d4:55:5f:6f:b4:48:6c:a0:f6:b0:11:
         5c:3a:31:2a:84:af:fa:20:2c:1f:a0:fc:63:e0:60:5e:1d:f4:
         91:07:43:fb:56:97:a7:9c:0d:46:d0:88:7b:b7:fc:5e:1f:8e:
         e9:97:c4:7c:66:1f:8a:2d:58:99:1a:43:6e:66:32:2c:4a:64:
         39:e3:1b:50
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWcdFbs4aZG47oaGADOHGaE9bFSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzgyMzJFN0FEQTIxNDlDNDAwODY4MTQ0RjVEQTgzOTMw
QkMyNjMwOTAeFw0yNTAzMjcxODEwNTRaFw0yNjAzMjYxODE1NTRaMDMxMTAvBgNV
BAMTKDNFOTRBNEExMzc0RjM2QUY3NzYwOUNBQ0YxN0E0M0Q1QTU2RjQ5RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdpAhiJyOXeKFZIBYLyA8tRhwG
JO8iFn/IZ+slYZV0pG8iydcUhpIZfZ8nepxZ8AZ5SL6F/JwhjiL2MWcmldtyDRTc
cktLGIcqfZ8m1nX2ntXUU9QuhE3zK5akbygXE9bk72Yj77mlHCsZUiWxQ1S0f5tN
0w6xaplIpIAEPULJFLDmwK73PcELfLvKuNmai9BJ6Kqr6YkKHVRqlIjMNmmm+EQ8
BfDl8p3dTf+SGkLa3/tne5bLcn4/MVcg47n3FXkl8z0fJ+nVj8NbdjXbn59kJKDG
UBMkpOs6rKiRLaT3HDioUXVbeaDL9xIP0IvCJU/W6h745ZrD3JLG/APr2ZSTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPpSkoTdPNq93YJys8XpD1aVvSfQwHwYDVR0j
BBgwFoAUyCMuetohScQAhoFE9dqDkwvCYwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHVtaFpGZ0RTb3pLUHZTQmYxanVENWY4TmdLQVZDS0pzWU1oY1RQc29G
VHcvMS9DODIzMkU3QURBMjE0OUM0MDA4NjgxNDRGNURBODM5MzBCQzI2MzA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4MjMyRTdBREEyMTQ5QzQw
MDg2ODE0NEY1REE4MzkzMEJDMjYzMDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1bWhaRmdEU296S1B2U0JmMWp1RDVmOE5nS0FWQ0tKc1lNaGNUUHNvRlR3LzEv
MzEzNzM3MmUzNzMzMmUzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMy
MzUzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsUlIMA0GCSqGSIb3DQEBCwUAA4IBAQBQe0rO2Y94
9vXs1qva0z6uyTLq2fB4acsCY2yFzdbPNYUOuBhWVUVrVX2Bj07mC6eardgGLwV7
BzMA6FPx7TSERSjNEgohk7yzTqkwcZP236IQW4+MX65h3NaLYrL+piKRocnkRaA8
hNTRoX+FangKzafwuUcbya2cV8kJB9zW6E+9MdsFTCoQoTz99g76UvekZibhIHSm
ew39S/Z4fP6Sfi8LRy7xnx9GsuiErGDGi/w4s+/b6hmxFlTU1FVfb7RIbKD2sBFc
OjEqhK/6ICwfoPxj4GBeHfSRB0P7VpennA1G0Ih7t/xeH47pl8R8Zh+KLViZGkNu
ZjIsSmQ54xtQ
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:14:58 2025 by rpki-client