Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137372e37342e3137342e302f32332d3234203d3e203631393030.roa
File:                     3137372e37342e3137342e302f32332d3234203d3e203631393030.roa (raw, json)
Hash identifier:          cT8zdoihwPnkJHDD/5LEp0CcnP9CEnLjfsE7JvK23yE=
Subject key identifier:   56:83:EA:69:E0:33:43:78:DE:CD:73:52:17:64:64:10:35:B0:E3:22
Certificate issuer:       /CN=C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC
Certificate serial:       5D0CE05BFF7BF624D61AD82EE26406C74FD20570
Authority key identifier: C0:D5:F3:AC:1F:96:4C:6A:1A:6F:37:F3:9E:5E:A5:27:C6:39:8C:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137372e37342e3137342e302f32332d3234203d3e203631393030.roa
Signing time:             Tue 13 May 2025 18:54:48 +0000
ROA not before:           Tue 13 May 2025 18:49:48 +0000
ROA not after:            Tue 12 May 2026 18:54:48 +0000
asID:                     61900
IP address blocks:        177.74.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 13:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0c:e0:5b:ff:7b:f6:24:d6:1a:d8:2e:e2:64:06:c7:4f:d2:05:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC
        Validity
            Not Before: May 13 18:49:48 2025 GMT
            Not After : May 12 18:54:48 2026 GMT
        Subject: CN=5683EA69E0334378DECD73521764641035B0E322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f7:9c:a6:69:1c:59:57:8c:19:5e:61:25:f5:
                    99:9b:29:3a:4a:ab:fd:2b:0c:30:55:36:07:05:ff:
                    ea:c1:e1:1a:24:5a:ce:98:6e:26:70:63:73:c2:0f:
                    c9:61:7e:f7:4e:68:2e:5f:d5:1d:f8:6e:75:c9:71:
                    8b:9b:98:a9:46:15:57:73:ee:5d:5c:ce:ac:cd:7c:
                    ee:a0:58:fd:7a:60:1b:fb:fa:60:ef:e5:72:4f:92:
                    74:9f:e3:6a:aa:bf:bc:ee:6e:3c:b0:a3:6a:85:90:
                    6f:70:1e:34:ac:ca:00:e8:e2:86:66:33:93:b0:e4:
                    b9:23:66:45:1b:fb:ec:6f:a1:3d:b7:6b:72:ea:94:
                    32:76:9a:d1:ee:5d:f8:71:45:e2:eb:04:a0:27:0a:
                    fd:c0:a5:a1:8a:94:fd:4c:da:07:81:45:75:a2:ca:
                    c0:ea:11:1e:2a:9d:19:08:0f:3b:1c:56:3c:cb:16:
                    15:5e:35:7e:ea:7a:c0:0b:0a:f8:d0:38:ca:1a:c8:
                    59:60:69:4c:49:9c:19:50:9b:b3:cb:ec:0e:91:dc:
                    c3:f0:45:d3:6a:ed:9a:ef:73:1f:01:32:ec:fb:de:
                    b4:48:39:26:2d:7a:86:ae:4f:43:d8:98:57:ae:05:
                    b3:56:0a:20:d9:ab:f8:1c:69:96:1f:1f:d8:fe:25:
                    af:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:83:EA:69:E0:33:43:78:DE:CD:73:52:17:64:64:10:35:B0:E3:22
            X509v3 Authority Key Identifier:
                keyid:C0:D5:F3:AC:1F:96:4C:6A:1A:6F:37:F3:9E:5E:A5:27:C6:39:8C:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137372e37342e3137342e302f32332d3234203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:8e:ec:42:47:19:16:a0:61:bc:07:30:4e:b5:64:01:11:40:
         06:10:b9:5a:a1:48:49:62:41:15:63:07:5c:2c:be:24:c9:6d:
         18:49:42:93:a1:e2:a4:de:06:68:e6:77:27:22:30:4f:39:21:
         a6:ee:da:35:62:fc:d9:4c:6c:84:4e:64:95:18:9f:c4:c1:b9:
         4e:3f:74:08:8b:75:1f:d8:96:7b:04:24:97:de:da:40:30:61:
         ef:80:66:ad:b6:30:4f:ca:dd:52:02:6b:73:1d:f8:ad:04:c7:
         da:49:c4:49:52:13:17:2d:26:cb:04:02:a5:aa:ae:20:f7:c1:
         47:1d:f4:cd:9c:99:9f:f8:0a:93:07:e8:ca:41:df:88:84:e5:
         e8:d1:60:b2:c4:52:10:16:60:d0:8c:39:2e:b6:92:49:9a:37:
         b3:94:cd:62:26:29:4f:f3:d7:25:4f:54:b4:98:05:e1:b6:34:
         f5:7f:f2:a4:87:d2:4a:49:fc:c5:0d:d8:b8:76:ac:e6:4d:3d:
         f1:55:b0:56:3d:fd:fe:5a:f5:f4:a0:3c:ad:d7:93:29:7d:87:
         4c:5e:29:91:32:4b:a6:95:c2:63:97:a2:4c:f0:04:de:90:ac:
         25:c0:78:e7:f2:c5:f7:dc:b5:6e:22:7f:2d:0a:d2:f7:37:68:
         53:03:33:2a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXQzgW/979iTWGtgu4mQGx0/SBXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBENUYzQUMxRjk2NEM2QTFBNkYzN0YzOUU1RUE1MjdD
NjM5OENGQzAeFw0yNTA1MTMxODQ5NDhaFw0yNjA1MTIxODU0NDhaMDMxMTAvBgNV
BAMTKDU2ODNFQTY5RTAzMzQzNzhERUNENzM1MjE3NjQ2NDEwMzVCMEUzMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj95ymaRxZV4wZXmEl9ZmbKTpK
q/0rDDBVNgcF/+rB4RokWs6YbiZwY3PCD8lhfvdOaC5f1R34bnXJcYubmKlGFVdz
7l1czqzNfO6gWP16YBv7+mDv5XJPknSf42qqv7zubjywo2qFkG9wHjSsygDo4oZm
M5Ow5LkjZkUb++xvoT23a3LqlDJ2mtHuXfhxReLrBKAnCv3ApaGKlP1M2geBRXWi
ysDqER4qnRkIDzscVjzLFhVeNX7qesALCvjQOMoayFlgaUxJnBlQm7PL7A6R3MPw
RdNq7Zrvcx8BMuz73rRIOSYteoauT0PYmFeuBbNWCiDZq/gcaZYfH9j+Ja8JAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVoPqaeAzQ3jezXNSF2RkEDWw4yIwHwYDVR0j
BBgwFoAUwNXzrB+WTGoabzfznl6lJ8Y5jPwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG80MTRyOGtKWmloUURDdHBMakhFUm1QamN5anB4UFV5d2FSaDllaGNQ
SlgvMC9DMEQ1RjNBQzFGOTY0QzZBMUE2RjM3RjM5RTVFQTUyN0M2Mzk4Q0ZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwRDVGM0FDMUY5NjRDNkEx
QTZGMzdGMzlFNUVBNTI3QzYzOThDRkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRvNDE0cjhrSlppaFFEQ3RwTGpIRVJtUGpjeWpweFBVeXdhUmg5ZWhjUEpYLzAv
MzEzNzM3MmUzNzM0MmUzMTM3MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNjMx
MzkzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsUquMA0GCSqGSIb3DQEBCwUAA4IBAQCcjuxCRxkW
oGG8BzBOtWQBEUAGELlaoUhJYkEVYwdcLL4kyW0YSUKToeKk3gZo5ncnIjBPOSGm
7to1YvzZTGyETmSVGJ/EwblOP3QIi3Uf2JZ7BCSX3tpAMGHvgGattjBPyt1SAmtz
HfitBMfaScRJUhMXLSbLBAKlqq4g98FHHfTNnJmf+AqTB+jKQd+IhOXo0WCyxFIQ
FmDQjDkutpJJmjezlM1iJilP89clT1S0mAXhtjT1f/Kkh9JKSfzFDdi4dqzmTT3x
VbBWPf3+WvX0oDyt15MpfYdMXimRMkumlcJjl6JM8ATekKwlwHjn8sX33LVuIn8t
CtL3N2hTAzMq
-----END CERTIFICATE-----
Generated at Thu May 15 03:42:04 2025 by rpki-client