Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35342e302f32342d3234203d3e203532393330.roa
File:                     3137372e3138352e35342e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          CbeFCixjEPszfomzkLyifrSaTxERsQ3MVCG7hWj0JZ0=
Subject key identifier:   7B:99:EE:6E:6C:BE:8B:C5:00:EB:56:15:1F:A6:EF:09:7B:F1:B5:65
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       4F17C842A0AB5D20BA3B1F7C92BD10BEBC04E041
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35342e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 17 Jan 2025 16:16:47 +0000
ROA not before:           Fri 17 Jan 2025 16:11:47 +0000
ROA not after:            Fri 16 Jan 2026 16:16:47 +0000
asID:                     52930
IP address blocks:        177.185.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl
                          rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 11:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:17:c8:42:a0:ab:5d:20:ba:3b:1f:7c:92:bd:10:be:bc:04:e0:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Jan 17 16:11:47 2025 GMT
            Not After : Jan 16 16:16:47 2026 GMT
        Subject: CN=7B99EE6E6CBE8BC500EB56151FA6EF097BF1B565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:16:84:e6:1e:b5:b5:28:4f:92:69:ca:1b:7d:
                    70:8e:ae:17:08:08:e7:35:b1:d5:a5:4d:84:5d:f0:
                    0d:72:a1:09:d1:df:5e:a8:54:86:2c:9a:15:31:30:
                    b2:9a:f9:67:4a:3e:51:1c:93:72:24:7e:de:fe:c3:
                    2d:38:66:1d:47:a1:ef:70:27:20:cb:24:45:c6:b8:
                    c5:e4:75:fb:93:db:1b:47:85:76:7c:1a:db:78:a6:
                    ae:87:15:14:dc:f5:e6:64:a7:62:8d:91:88:fc:d5:
                    aa:95:dd:8e:07:d9:db:ee:4b:07:c1:07:df:d8:f4:
                    dc:56:84:74:f0:30:d8:17:ce:a6:4c:b3:c3:04:f4:
                    e5:98:2f:b0:3c:ee:00:50:77:e0:0f:5b:5d:c2:72:
                    75:f5:39:b6:f2:44:43:72:fd:99:94:b1:4b:73:34:
                    a5:41:b0:f1:a7:68:6e:40:b3:a2:05:17:5b:5e:aa:
                    1f:3e:d8:1a:bf:4b:3a:8b:df:3c:b2:71:10:62:d7:
                    a5:d0:78:cd:36:d8:0f:4c:b5:80:37:73:33:7d:f8:
                    1e:97:70:67:42:55:81:3d:e7:3f:30:e4:21:ab:54:
                    54:1b:3d:f9:b4:d1:a0:6a:87:ee:57:32:6c:20:54:
                    54:79:88:ad:91:08:13:7a:7a:ae:0c:c1:7f:bb:d2:
                    ad:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:99:EE:6E:6C:BE:8B:C5:00:EB:56:15:1F:A6:EF:09:7B:F1:B5:65
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35342e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:b3:cd:51:94:fc:dd:3c:39:45:f3:7d:74:5f:32:2e:f9:9c:
         a1:d7:70:38:44:0f:cf:00:d6:72:a6:53:b7:c7:29:f7:7e:f6:
         c9:1e:8c:09:3a:74:09:8e:de:b6:4b:fd:26:df:ca:61:71:7e:
         5b:19:1f:df:a9:e3:c9:55:57:35:a3:41:e8:e2:d2:87:23:4d:
         e6:ae:fe:8c:1e:84:13:5c:09:b6:1a:67:23:00:4b:83:03:69:
         9a:0b:fc:19:7c:d3:60:25:4a:7f:a9:5d:85:68:42:0b:b4:90:
         a2:40:02:7d:6a:95:1c:ae:f0:ad:f1:f2:e7:ab:14:4b:d4:6e:
         9b:eb:f5:89:4c:d1:9c:26:51:06:96:0c:c6:d3:d5:58:f6:ab:
         ba:4d:0c:6c:ab:67:a2:b2:49:d7:c6:55:48:c0:17:bb:e9:74:
         60:4b:27:e6:24:d3:44:c8:7e:db:89:0a:03:dc:44:6d:80:fc:
         d5:fe:dc:b9:c6:54:65:5a:6e:fa:b5:64:ec:ea:7f:97:5b:7b:
         ae:53:9a:92:c2:26:a9:ce:aa:77:8c:43:ce:d9:c0:18:08:13:
         40:89:7c:18:36:80:e5:ae:da:15:89:e3:3b:f5:80:ab:f7:b3:
         5e:73:5e:6b:ab:2a:c8:ac:26:25:28:fd:99:c6:70:34:da:25:
         8b:46:9d:52
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTxfIQqCrXSC6Ox98kr0QvrwE4EEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBGOUY3NUUyRkYyMTlCMkJERDYyNUVCQkMyOTRBOTg5
QkFCMEVCRDAeFw0yNTAxMTcxNjExNDdaFw0yNjAxMTYxNjE2NDdaMDMxMTAvBgNV
BAMTKDdCOTlFRTZFNkNCRThCQzUwMEVCNTYxNTFGQTZFRjA5N0JGMUI1NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYFoTmHrW1KE+SacobfXCOrhcI
COc1sdWlTYRd8A1yoQnR316oVIYsmhUxMLKa+WdKPlEck3Ikft7+wy04Zh1Hoe9w
JyDLJEXGuMXkdfuT2xtHhXZ8Gtt4pq6HFRTc9eZkp2KNkYj81aqV3Y4H2dvuSwfB
B9/Y9NxWhHTwMNgXzqZMs8ME9OWYL7A87gBQd+APW13CcnX1ObbyRENy/ZmUsUtz
NKVBsPGnaG5As6IFF1teqh8+2Bq/SzqL3zyycRBi16XQeM022A9MtYA3czN9+B6X
cGdCVYE95z8w5CGrVFQbPfm00aBqh+5XMmwgVFR5iK2RCBN6eq4MwX+70q2jAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUe5nubmy+i8UA61YVH6bvCXvxtWUwHwYDVR0j
BBgwFoAUsPn3Xi/yGbK91iXrvClKmJurDr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjdEYkU5OGRQWjlDVmkyVEhDMW9FVUVzck11NWpGNU1lZm5HMTluV1R6
anIvMC9CMEY5Rjc1RTJGRjIxOUIyQkRENjI1RUJCQzI5NEE5ODlCQUIwRUJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwRjlGNzVFMkZGMjE5QjJC
REQ2MjVFQkJDMjk0QTk4OUJBQjBFQkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o3RGJFOThkUFo5Q1ZpMlRIQzFvRVVFc3JNdTVqRjVNZWZuRzE5bldUempyLzAv
MzEzNzM3MmUzMTM4MzUyZTM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzkzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsbk2MA0GCSqGSIb3DQEBCwUAA4IBAQBbs81RlPzd
PDlF8310XzIu+Zyh13A4RA/PANZyplO3xyn3fvbJHowJOnQJjt62S/0m38phcX5b
GR/fqePJVVc1o0Ho4tKHI03mrv6MHoQTXAm2GmcjAEuDA2maC/wZfNNgJUp/qV2F
aEILtJCiQAJ9apUcrvCt8fLnqxRL1G6b6/WJTNGcJlEGlgzG09VY9qu6TQxsq2ei
sknXxlVIwBe76XRgSyfmJNNEyH7biQoD3ERtgPzV/ty5xlRlWm76tWTs6n+XW3uu
U5qSwiapzqp3jEPO2cAYCBNAiXwYNoDlrtoVieM79YCr97Nec15rqyrIrCYlKP2Z
xnA02iWLRp1S
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:41:30 2025 by rpki-client