Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134342e302f32322d3232203d3e20323731303930.roa
File:                     3137392e34382e3134342e302f32322d3232203d3e20323731303930.roa (raw, json)
Hash identifier:          J+sEjSxJGnp4zYhDqGBs9CxAwAgq++meaT9ocbClk/s=
Subject key identifier:   81:02:E7:5C:4E:07:EE:E4:35:26:AF:65:D7:9F:3A:9E:82:D8:52:D3
Certificate issuer:       /CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
Certificate serial:       598F20BC289C2BDFDF5254A245D0DFBE8949BA9F
Authority key identifier: 54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134342e302f32322d3232203d3e20323731303930.roa
Signing time:             Thu 06 Mar 2025 21:00:25 +0000
ROA not before:           Thu 06 Mar 2025 20:55:25 +0000
ROA not after:            Thu 05 Mar 2026 21:00:25 +0000
asID:                     271090
IP address blocks:        179.48.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl
                          rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 23:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8f:20:bc:28:9c:2b:df:df:52:54:a2:45:d0:df:be:89:49:ba:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
        Validity
            Not Before: Mar  6 20:55:25 2025 GMT
            Not After : Mar  5 21:00:25 2026 GMT
        Subject: CN=8102E75C4E07EEE43526AF65D79F3A9E82D852D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7c:e4:73:fb:86:f6:3a:cb:72:ad:04:1e:e2:
                    e8:f3:08:7a:ea:c5:ac:63:d1:80:9b:68:52:0b:9c:
                    a9:98:a2:b8:ff:72:47:92:da:21:d9:5a:ec:90:16:
                    c9:95:81:9b:e6:50:2d:dd:fe:fb:e4:b2:8b:55:79:
                    b7:13:b8:f6:68:8c:cc:e7:f8:82:c1:4a:ec:4a:a4:
                    e7:29:5e:76:58:47:35:34:29:b5:14:e0:02:44:01:
                    b5:38:35:b0:1f:7d:7c:f1:a9:1d:54:99:45:4e:ec:
                    8c:e2:c1:bd:52:d0:0d:d9:a5:61:f8:6d:fe:f9:56:
                    4f:f3:15:ac:60:fd:eb:e0:fb:4d:93:61:af:e1:cd:
                    ea:4c:d1:4a:1d:c5:2a:17:44:de:e2:61:98:fd:51:
                    fc:49:92:51:09:7b:ae:17:03:61:2a:4f:b5:5d:24:
                    4b:f4:dd:04:2a:d6:bf:38:6e:12:e3:50:b9:68:99:
                    b4:10:46:52:58:cf:ab:35:ec:32:2f:d1:5e:32:bb:
                    e5:04:79:59:66:d5:cc:c5:37:2a:92:6f:13:64:2b:
                    83:0b:cf:26:e8:a5:b8:d8:79:0d:fb:e8:6c:37:e3:
                    4e:f1:f2:dd:3b:0b:0a:1e:1d:a5:2c:a3:88:19:89:
                    04:ac:0d:79:c7:95:b6:a8:3d:14:75:a1:f9:22:23:
                    3a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:02:E7:5C:4E:07:EE:E4:35:26:AF:65:D7:9F:3A:9E:82:D8:52:D3
            X509v3 Authority Key Identifier:
                keyid:54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134342e302f32322d3232203d3e20323731303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:39:26:7a:10:54:fa:dd:1a:45:67:d0:ff:2b:05:64:4b:c1:
         36:e8:58:39:21:a1:5b:a9:b6:42:6c:ef:f2:e1:cb:83:32:1e:
         09:b4:64:01:59:d3:0d:b4:d6:08:0d:17:06:93:e3:06:f2:90:
         5b:ad:46:15:00:ae:cf:bf:2b:ff:8d:c3:6d:da:a2:a3:24:4f:
         a8:f0:8a:2a:4a:1b:c5:20:8e:c8:b2:c6:f8:5c:8e:bb:05:08:
         2a:b0:08:d7:50:de:66:80:4a:39:9d:c6:6e:8f:c6:31:63:9f:
         29:21:ab:87:18:0a:ca:0d:b8:65:c6:33:5c:f8:3b:32:9d:13:
         a0:14:6f:6a:e1:6d:c8:ed:5f:18:a6:ee:1c:4d:cf:fe:58:f6:
         39:92:07:1d:0d:72:6e:7f:fc:49:87:6b:c2:85:a4:0f:d1:83:
         87:dc:a5:55:03:00:32:a6:75:f8:38:36:89:15:2d:48:32:79:
         0d:3c:18:46:f6:27:a7:41:8c:d5:2a:b2:20:98:81:ff:7a:4c:
         c8:e4:06:60:fc:b8:c8:cb:11:f6:d9:2d:0c:e0:3d:f6:32:d9:
         f4:c1:3b:2c:0f:b0:f6:8c:e4:3e:cc:de:ac:6f:5b:8b:97:b1:
         b7:dd:03:f9:5f:a0:80:d4:06:9f:25:ca:1a:ff:ac:84:47:03:
         5d:89:ab:2d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWY8gvCicK9/fUlSiRdDfvolJup8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRDRUREMkUyNDk2MERFNTg5RDRCMTZFQjRENjYyMzg0
Q0NDMEZBRjAeFw0yNTAzMDYyMDU1MjVaFw0yNjAzMDUyMTAwMjVaMDMxMTAvBgNV
BAMTKDgxMDJFNzVDNEUwN0VFRTQzNTI2QUY2NUQ3OUYzQTlFODJEODUyRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCafORz+4b2OstyrQQe4ujzCHrq
xaxj0YCbaFILnKmYorj/ckeS2iHZWuyQFsmVgZvmUC3d/vvksotVebcTuPZojMzn
+ILBSuxKpOcpXnZYRzU0KbUU4AJEAbU4NbAffXzxqR1UmUVO7Iziwb1S0A3ZpWH4
bf75Vk/zFaxg/evg+02TYa/hzepM0UodxSoXRN7iYZj9UfxJklEJe64XA2EqT7Vd
JEv03QQq1r84bhLjULlombQQRlJYz6s17DIv0V4yu+UEeVlm1czFNyqSbxNkK4ML
zybopbjYeQ376Gw3407x8t07CwoeHaUso4gZiQSsDXnHlbaoPRR1ofkiIzqRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgQLnXE4H7uQ1Jq9l1586noLYUtMwHwYDVR0j
BBgwFoAUVM7dLiSWDeWJ1LFutNZiOEzMD68wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHo1WnZkYlRNdzF4aGtENUZEdzlaYmsxMlBKQVcyWlk1VWNVR0dUNVU4
RjcvMS81NENFREQyRTI0OTYwREU1ODlENEIxNkVCNEQ2NjIzODRDQ0MwRkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0Q0VERDJFMjQ5NjBERTU4
OUQ0QjE2RUI0RDY2MjM4NENDQzBGQUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h6NVp2ZGJUTXcxeGhrRDVGRHc5WmJrMTJQSkFXMlpZNVVjVUdHVDVVOEY3LzEv
MzEzNzM5MmUzNDM4MmUzMTM0MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzEzMDM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzMJAwDQYJKoZIhvcNAQELBQADggEBAE85JnoQ
VPrdGkVn0P8rBWRLwTboWDkhoVuptkJs7/Lhy4MyHgm0ZAFZ0w201ggNFwaT4wby
kFutRhUArs+/K/+Nw23aoqMkT6jwiipKG8UgjsiyxvhcjrsFCCqwCNdQ3maASjmd
xm6PxjFjnykhq4cYCsoNuGXGM1z4OzKdE6AUb2rhbcjtXxim7hxNz/5Y9jmSBx0N
cm5//EmHa8KFpA/Rg4fcpVUDADKmdfg4NokVLUgyeQ08GEb2J6dBjNUqsiCYgf96
TMjkBmD8uMjLEfbZLQzgPfYy2fTBOywPsPaM5D7M3qxvW4uXsbfdA/lfoIDUBp8l
yhr/rIRHA12Jqy0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:13 2025 by rpki-client