Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/3137392e3130362e38302e302f32312d3234203d3e203532353238.roa
File:                     3137392e3130362e38302e302f32312d3234203d3e203532353238.roa (raw, json)
Hash identifier:          6W3UjsNSRmK07D2uqoFlwmbouuul0Atvaxd06m5QLn4=
Subject key identifier:   26:01:8B:A5:9C:AD:6C:42:31:6C:45:F0:9F:DA:42:9D:23:48:72:9B
Certificate issuer:       /CN=F2D029F4191C8EF817C89954B6B967C60EAE2451
Certificate serial:       7A65DD3C269A278C42D34D25D1F891F98B49C469
Authority key identifier: F2:D0:29:F4:19:1C:8E:F8:17:C8:99:54:B6:B9:67:C6:0E:AE:24:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2D029F4191C8EF817C89954B6B967C60EAE2451.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/3137392e3130362e38302e302f32312d3234203d3e203532353238.roa
Signing time:             Wed 19 Feb 2025 11:34:32 +0000
ROA not before:           Wed 19 Feb 2025 11:29:32 +0000
ROA not after:            Wed 18 Feb 2026 11:34:32 +0000
asID:                     52528
IP address blocks:        179.106.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/F2D029F4191C8EF817C89954B6B967C60EAE2451.crl
                          rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/F2D029F4191C8EF817C89954B6B967C60EAE2451.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2D029F4191C8EF817C89954B6B967C60EAE2451.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 00:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:65:dd:3c:26:9a:27:8c:42:d3:4d:25:d1:f8:91:f9:8b:49:c4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2D029F4191C8EF817C89954B6B967C60EAE2451
        Validity
            Not Before: Feb 19 11:29:32 2025 GMT
            Not After : Feb 18 11:34:32 2026 GMT
        Subject: CN=26018BA59CAD6C42316C45F09FDA429D2348729B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:12:08:94:55:6a:de:bf:3b:00:a1:1d:af:
                    0e:a5:c0:81:eb:03:0f:f7:48:a9:e7:28:a7:74:10:
                    f9:1f:01:55:6d:c5:ac:cb:86:55:d1:28:a2:45:b4:
                    4a:e9:34:06:fa:48:22:7d:e5:91:dc:da:44:34:7d:
                    30:7c:8a:5f:14:f9:b1:2e:78:53:fd:de:1a:26:4b:
                    78:48:09:8b:76:39:87:cd:0b:09:ef:e8:e9:da:9c:
                    a3:57:b6:46:5e:a6:c5:6e:96:08:55:7a:1a:63:29:
                    43:e7:92:5b:de:e0:59:9f:3f:e1:c5:41:09:90:d6:
                    10:99:53:dc:a6:28:fd:8e:35:e8:b3:0b:88:c7:e4:
                    02:aa:d1:0d:d8:d4:82:5a:14:5d:4d:8f:36:48:00:
                    db:98:1e:1c:fc:b5:d9:bf:3e:5e:60:5b:67:78:7c:
                    42:59:2e:58:dc:2d:2f:17:c2:b7:12:9e:66:77:54:
                    57:f5:1f:cc:44:e5:38:f8:9e:db:cc:47:96:ce:a2:
                    08:b0:dd:f2:89:ff:81:d0:75:fd:17:9f:5a:e6:13:
                    e5:03:60:fa:ab:0e:27:5e:95:69:03:ca:3a:c3:3a:
                    94:7b:74:e2:9a:8a:99:3f:95:70:0b:e0:ca:3d:1c:
                    de:cc:b0:8d:fb:f1:20:b9:c0:1c:bc:1b:e5:3a:2f:
                    c3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:01:8B:A5:9C:AD:6C:42:31:6C:45:F0:9F:DA:42:9D:23:48:72:9B
            X509v3 Authority Key Identifier:
                keyid:F2:D0:29:F4:19:1C:8E:F8:17:C8:99:54:B6:B9:67:C6:0E:AE:24:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/F2D029F4191C8EF817C89954B6B967C60EAE2451.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2D029F4191C8EF817C89954B6B967C60EAE2451.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/3137392e3130362e38302e302f32312d3234203d3e203532353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:f4:fb:ec:e0:d0:2e:95:07:33:7e:32:f1:8b:cf:cb:7f:f6:
         ab:e9:e7:79:85:f4:9b:ea:41:53:e9:d0:83:a9:cb:65:06:4e:
         78:3e:cc:a8:f1:33:4d:e9:b6:50:c3:d8:71:59:ae:ab:67:68:
         82:32:40:36:eb:3d:0a:b2:ec:44:54:0c:c3:0e:56:ae:f0:76:
         e2:c1:0c:f8:ac:c4:e3:8c:2a:5f:d5:a5:06:a3:ff:be:b6:b0:
         0e:c5:16:1d:89:16:12:d3:57:61:2a:b2:52:4e:8a:4b:b4:92:
         19:31:24:73:1a:8b:af:81:b9:b2:fa:2a:0b:49:c6:76:c5:f1:
         1c:3a:34:57:ff:fe:f4:05:e9:10:48:17:d5:69:a1:ce:5e:bb:
         51:df:92:4a:26:17:50:6b:aa:0f:df:76:63:4f:df:c1:15:ec:
         f1:a9:9b:af:8f:09:12:c6:e2:98:d0:78:76:f7:ae:dd:95:1b:
         54:47:b3:bc:8a:8b:54:a6:f6:45:ae:08:71:94:fd:b2:3b:b1:
         f8:a5:0e:91:0f:27:a8:fd:e1:9c:49:d5:82:1f:fe:4e:09:42:
         42:22:8a:85:70:1d:bf:81:9e:89:6b:db:ea:ed:46:bb:a7:c4:
         15:0a:3c:37:6f:1b:33:8c:6f:f3:84:8c:cb:8a:c1:17:7e:eb:
         79:3d:21:a4
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUemXdPCaaJ4xC000l0fiR+YtJxGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJEMDI5RjQxOTFDOEVGODE3Qzg5OTU0QjZCOTY3QzYw
RUFFMjQ1MTAeFw0yNTAyMTkxMTI5MzJaFw0yNjAyMTgxMTM0MzJaMDMxMTAvBgNV
BAMTKDI2MDE4QkE1OUNBRDZDNDIzMTZDNDVGMDlGREE0MjlEMjM0ODcyOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaoRIIlFVq3r87AKEdrw6lwIHr
Aw/3SKnnKKd0EPkfAVVtxazLhlXRKKJFtErpNAb6SCJ95ZHc2kQ0fTB8il8U+bEu
eFP93homS3hICYt2OYfNCwnv6OnanKNXtkZepsVulghVehpjKUPnklve4FmfP+HF
QQmQ1hCZU9ymKP2ONeizC4jH5AKq0Q3Y1IJaFF1NjzZIANuYHhz8tdm/Pl5gW2d4
fEJZLljcLS8XwrcSnmZ3VFf1H8xE5Tj4ntvMR5bOogiw3fKJ/4HQdf0Xn1rmE+UD
YPqrDidelWkDyjrDOpR7dOKaipk/lXAL4Mo9HN7MsI378SC5wBy8G+U6L8PVAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUJgGLpZytbEIxbEXwn9pCnSNIcpswHwYDVR0j
BBgwFoAU8tAp9BkcjvgXyJlUtrlnxg6uJFEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9RanNqUGdFZjNDQ1NScXR5UlNZYUF3aEduSmQydWpjMmpjVUFoWVZpYXVn
LzAvRjJEMDI5RjQxOTFDOEVGODE3Qzg5OTU0QjZCOTY3QzYwRUFFMjQ1MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GMkQwMjlGNDE5MUM4RUY4MTdD
ODk5NTRCNkI5NjdDNjBFQUUyNDUxLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9R
anNqUGdFZjNDQ1NScXR5UlNZYUF3aEduSmQydWpjMmpjVUFoWVZpYXVnLzAvMzEz
NzM5MmUzMTMwMzYyZTM4MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMyMzUz
MjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQDs2pQMA0GCSqGSIb3DQEBCwUAA4IBAQAb9Pvs4NAulQcz
fjLxi8/Lf/ar6ed5hfSb6kFT6dCDqctlBk54Psyo8TNN6bZQw9hxWa6rZ2iCMkA2
6z0KsuxEVAzDDlau8HbiwQz4rMTjjCpf1aUGo/++trAOxRYdiRYS01dhKrJSTopL
tJIZMSRzGouvgbmy+ioLScZ2xfEcOjRX//70BekQSBfVaaHOXrtR35JKJhdQa6oP
33ZjT9/BFezxqZuvjwkSxuKY0Hh2967dlRtUR7O8iotUpvZFrghxlP2yO7H4pQ6R
Dyeo/eGcSdWCH/5OCUJCIoqFcB2/gZ6Ja9vq7Ua7p8QVCjw3bxszjG/zhIzLisEX
fut5PSGk
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:52:27 2025 by rpki-client