Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/1/3137372e33392e3137362e302f32312d3234203d3e20323632343331.roa
File:                     3137372e33392e3137362e302f32312d3234203d3e20323632343331.roa (raw, json)
Hash identifier:          E8rES3JjkknBQivp7HUVBgXgIoZZ8cuNn2ep4UP64M8=
Subject key identifier:   AB:17:C4:3B:BF:F6:0F:13:3A:0B:CD:BD:D1:C0:6E:DA:DF:56:C7:C3
Certificate issuer:       /CN=52F741D1133813F8D309C90CA4A9389C1BF1D693
Certificate serial:       345AB5DCB9A820021F283695B74D316E4E55FE22
Authority key identifier: 52:F7:41:D1:13:38:13:F8:D3:09:C9:0C:A4:A9:38:9C:1B:F1:D6:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52F741D1133813F8D309C90CA4A9389C1BF1D693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/1/3137372e33392e3137362e302f32312d3234203d3e20323632343331.roa
Signing time:             Thu 06 Mar 2025 18:10:52 +0000
ROA not before:           Thu 06 Mar 2025 18:05:52 +0000
ROA not after:            Thu 05 Mar 2026 18:10:52 +0000
asID:                     262431
IP address blocks:        177.39.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/1/52F741D1133813F8D309C90CA4A9389C1BF1D693.crl
                          rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/1/52F741D1133813F8D309C90CA4A9389C1BF1D693.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52F741D1133813F8D309C90CA4A9389C1BF1D693.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 03:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5a:b5:dc:b9:a8:20:02:1f:28:36:95:b7:4d:31:6e:4e:55:fe:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52F741D1133813F8D309C90CA4A9389C1BF1D693
        Validity
            Not Before: Mar  6 18:05:52 2025 GMT
            Not After : Mar  5 18:10:52 2026 GMT
        Subject: CN=AB17C43BBFF60F133A0BCDBDD1C06EDADF56C7C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:bd:71:b2:92:1c:f2:cb:9a:29:48:f1:e5:
                    d5:ea:78:3b:2d:45:e6:cd:5d:31:1b:0a:1b:4d:00:
                    f8:21:0a:0f:0d:d5:bb:f9:53:18:7e:5d:0f:d4:08:
                    f8:d5:ca:77:8b:ec:43:a0:be:cd:94:43:7f:ce:57:
                    ad:d4:1b:57:0c:41:c9:1d:7c:de:67:ed:9d:2b:ec:
                    b9:d3:58:98:6f:79:b7:d7:43:b0:33:89:c7:c9:02:
                    83:01:72:69:cb:31:d2:01:7a:37:67:19:cf:9c:44:
                    8d:07:eb:12:cc:ef:ee:4e:0d:df:62:b0:d1:dc:3b:
                    1b:2e:54:0b:d9:33:01:93:65:26:3b:89:c1:c6:a0:
                    34:0d:b2:18:ca:07:bc:14:6b:17:94:49:a6:46:ff:
                    5f:7f:e7:9a:21:a7:99:31:a9:5c:8d:4e:86:83:8c:
                    bd:27:ed:e5:6e:04:43:2c:bd:1e:87:97:12:6b:7a:
                    ce:7a:ef:c7:f9:7c:cf:43:87:b0:4d:f4:c3:2a:ab:
                    ba:ab:77:5e:9f:8f:6c:a5:39:96:c6:12:06:61:1b:
                    2c:74:d3:0f:1e:cc:31:82:46:f9:be:df:52:bd:98:
                    e4:5e:ed:8d:8c:70:54:c7:a7:d0:98:3f:d2:3e:17:
                    48:9d:94:92:53:50:a1:87:1a:5e:e5:16:ee:50:5d:
                    b2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:17:C4:3B:BF:F6:0F:13:3A:0B:CD:BD:D1:C0:6E:DA:DF:56:C7:C3
            X509v3 Authority Key Identifier:
                keyid:52:F7:41:D1:13:38:13:F8:D3:09:C9:0C:A4:A9:38:9C:1B:F1:D6:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/1/52F741D1133813F8D309C90CA4A9389C1BF1D693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52F741D1133813F8D309C90CA4A9389C1BF1D693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/1/3137372e33392e3137362e302f32312d3234203d3e20323632343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:77:40:cf:47:5d:f4:5a:d2:0d:53:b1:1e:01:4a:4a:70:6c:
         92:7b:9d:7d:89:73:88:c7:81:18:08:67:af:dc:c2:44:f4:1f:
         5f:ef:1d:89:11:c0:83:d8:57:e6:50:7e:57:0c:0e:e2:26:c4:
         fd:d4:74:57:f8:58:4f:ec:d6:aa:fc:e4:90:1f:32:0e:3e:37:
         a4:18:6c:2f:e4:b9:4b:fe:30:85:0a:06:18:5e:09:14:3d:e1:
         89:03:21:0f:73:48:9f:c1:da:1d:fc:83:50:7c:43:47:52:94:
         a7:b3:2a:89:36:50:28:28:b8:68:5b:86:56:37:a5:bd:e4:05:
         c3:84:7b:c6:87:ef:46:49:3e:ea:09:6b:b8:25:aa:7e:a8:6b:
         bd:ec:5d:40:56:73:0f:c6:57:60:a6:f6:d1:c9:41:30:19:f2:
         25:37:63:43:d5:6c:1c:37:0c:75:47:9d:1a:73:9b:6c:04:61:
         12:f7:20:6b:cf:a0:d7:24:95:0b:db:31:bc:c4:30:68:7c:a1:
         0a:89:0e:f8:99:bd:ad:c6:80:95:03:c2:a8:8b:cc:94:48:e5:
         6c:75:fc:df:5a:0e:ef:24:6d:94:4c:a6:9b:6b:1f:05:a0:bd:
         55:b8:e2:74:f3:96:55:d2:c3:79:19:9b:5e:0f:98:56:a7:89:
         ac:03:ec:5c
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUNFq13LmoIAIfKDaVt00xbk5V/iIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJGNzQxRDExMzM4MTNGOEQzMDlDOTBDQTRBOTM4OUMx
QkYxRDY5MzAeFw0yNTAzMDYxODA1NTJaFw0yNjAzMDUxODEwNTJaMDMxMTAvBgNV
BAMTKEFCMTdDNDNCQkZGNjBGMTMzQTBCQ0RCREQxQzA2RURBREY1NkM3QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn1r1xspIc8suaKUjx5dXqeDst
RebNXTEbChtNAPghCg8N1bv5Uxh+XQ/UCPjVyneL7EOgvs2UQ3/OV63UG1cMQckd
fN5n7Z0r7LnTWJhvebfXQ7AzicfJAoMBcmnLMdIBejdnGc+cRI0H6xLM7+5ODd9i
sNHcOxsuVAvZMwGTZSY7icHGoDQNshjKB7wUaxeUSaZG/19/55ohp5kxqVyNToaD
jL0n7eVuBEMsvR6HlxJres5678f5fM9Dh7BN9MMqq7qrd16fj2ylOZbGEgZhGyx0
0w8ezDGCRvm+31K9mORe7Y2McFTHp9CYP9I+F0idlJJTUKGHGl7lFu5QXbLnAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUqxfEO7/2DxM6C8290cBu2t9Wx8MwHwYDVR0j
BBgwFoAUUvdB0RM4E/jTCckMpKk4nBvx1pMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9wYkozN3hIUmh1b3doaUpXQTJubnJmZ0N5YUw0VHFVcUxTYXRYV3VOc1NU
LzEvNTJGNzQxRDExMzM4MTNGOEQzMDlDOTBDQTRBOTM4OUMxQkYxRDY5My5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81MkY3NDFEMTEzMzgxM0Y4RDMw
OUM5MENBNEE5Mzg5QzFCRjFENjkzLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9w
YkozN3hIUmh1b3doaUpXQTJubnJmZ0N5YUw0VHFVcUxTYXRYV3VOc1NULzEvMzEz
NzM3MmUzMzM5MmUzMTM3MzYyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2MzIz
NDMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAOxJ7AwDQYJKoZIhvcNAQELBQADggEBAAJ3QM9HXfRa
0g1TsR4BSkpwbJJ7nX2Jc4jHgRgIZ6/cwkT0H1/vHYkRwIPYV+ZQflcMDuImxP3U
dFf4WE/s1qr85JAfMg4+N6QYbC/kuUv+MIUKBhheCRQ94YkDIQ9zSJ/B2h38g1B8
Q0dSlKezKok2UCgouGhbhlY3pb3kBcOEe8aH70ZJPuoJa7glqn6oa73sXUBWcw/G
V2Cm9tHJQTAZ8iU3Y0PVbBw3DHVHnRpzm2wEYRL3IGvPoNcklQvbMbzEMGh8oQqJ
DviZva3GgJUDwqiLzJRI5Wx1/N9aDu8kbZRMpptrHwWgvVW44nTzllXSw3kZm14P
mFaniawD7Fw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:38:46 2025 by rpki-client