Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3130382e302f32322d3234203d3e20323633363134.roa
File:                     3137372e32332e3130382e302f32322d3234203d3e20323633363134.roa (raw, json)
Hash identifier:          RIIZ4CzZCP4EMwAUHr+UGUL0L8ODmas0S+R4yCq4INI=
Subject key identifier:   29:32:9B:F9:80:9A:A1:00:DE:B0:49:90:6F:35:7B:66:2A:2F:F2:AD
Certificate issuer:       /CN=12284CDA6822A8D5AD2892F46CF3BBE009E300C8
Certificate serial:       622AAFC97A37FC1245326B08CC6C2D159E55050E
Authority key identifier: 12:28:4C:DA:68:22:A8:D5:AD:28:92:F4:6C:F3:BB:E0:09:E3:00:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3130382e302f32322d3234203d3e20323633363134.roa
Signing time:             Fri 02 May 2025 16:21:07 +0000
ROA not before:           Fri 02 May 2025 16:16:07 +0000
ROA not after:            Fri 01 May 2026 16:21:07 +0000
asID:                     263614
IP address blocks:        177.23.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.crl
                          rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 08:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2a:af:c9:7a:37:fc:12:45:32:6b:08:cc:6c:2d:15:9e:55:05:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12284CDA6822A8D5AD2892F46CF3BBE009E300C8
        Validity
            Not Before: May  2 16:16:07 2025 GMT
            Not After : May  1 16:21:07 2026 GMT
        Subject: CN=29329BF9809AA100DEB049906F357B662A2FF2AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ab:be:ea:0c:32:24:3d:c9:41:6b:bb:75:1c:
                    72:35:ac:f0:79:ad:d8:bf:34:f8:43:40:c7:56:12:
                    2b:47:7a:7c:2e:42:e5:fc:6e:68:7f:7f:3e:b0:0b:
                    6f:86:c5:18:9c:d9:58:8d:10:5b:0e:94:65:2b:45:
                    91:b6:30:b8:92:ad:cb:c8:a2:c7:f2:d9:a2:15:09:
                    a6:8b:b7:f9:74:48:86:f9:36:90:7d:02:60:93:b7:
                    10:0c:c3:a1:4f:fb:86:73:d8:a9:fd:85:cb:e4:29:
                    72:4d:1c:33:b1:f9:1b:ca:7f:a7:81:47:b1:95:af:
                    3f:9a:f6:39:70:7e:d9:76:2c:fc:5b:9f:18:5f:28:
                    19:cc:44:6d:cf:c6:47:2f:4d:f9:52:ea:cb:fe:56:
                    df:eb:a7:d4:b1:4e:e9:9e:d5:8e:0e:36:20:03:39:
                    b2:af:8d:dc:3e:eb:c8:ba:1e:50:b0:27:5f:4e:7f:
                    b9:d8:7b:48:c7:cf:fb:b5:56:da:11:55:25:ba:5a:
                    43:47:bc:74:37:0c:f8:0b:a9:5d:27:3b:93:ea:03:
                    c0:df:42:df:d1:92:d1:be:85:b9:c3:9f:a8:af:d8:
                    a6:b3:9a:0c:cc:59:5f:fd:7b:6c:c4:87:cb:dc:69:
                    08:14:52:63:6e:88:86:49:a0:d8:5c:ad:e3:a0:e6:
                    c1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:32:9B:F9:80:9A:A1:00:DE:B0:49:90:6F:35:7B:66:2A:2F:F2:AD
            X509v3 Authority Key Identifier:
                keyid:12:28:4C:DA:68:22:A8:D5:AD:28:92:F4:6C:F3:BB:E0:09:E3:00:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3130382e302f32322d3234203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:dd:2a:ae:4e:6f:6a:1d:7a:53:96:c8:df:e3:92:8c:45:8b:
         65:99:65:b2:ae:4e:e0:50:fb:9c:e7:77:32:28:7b:c0:e6:6a:
         0f:a6:9c:b2:35:e6:9f:d8:38:83:8a:e0:2c:43:17:dd:56:0c:
         e7:ee:41:c3:d0:fc:28:3b:6a:b6:1b:00:f0:13:aa:5c:fe:b5:
         3d:29:d7:00:ad:24:10:d2:e7:bd:31:9d:76:c5:5d:96:96:6f:
         9d:e1:64:6d:92:b6:e5:9c:bf:07:de:9f:15:16:a6:9e:2f:3b:
         24:38:ff:19:be:75:43:06:84:ba:c2:3b:11:e1:1c:aa:f8:fd:
         d5:40:27:fb:21:a4:87:76:fa:2c:b6:85:0e:06:ec:aa:9d:cb:
         f4:b2:38:fb:e6:12:9e:70:70:00:9f:b4:58:3d:2f:75:30:9c:
         d5:1e:16:6e:dd:c2:b8:fa:52:1f:bb:ef:a4:e1:f0:38:87:28:
         ab:3c:e7:61:ca:75:a6:bd:5c:3c:b4:80:76:13:95:85:d6:ee:
         b5:2c:8f:5d:0c:ac:a0:b9:65:22:59:49:16:b6:eb:db:de:47:
         d6:ce:9e:4e:a2:9f:7b:ca:e8:04:64:36:40:99:db:cc:90:7a:
         fc:71:1d:8d:90:09:07:b3:3e:ba:28:23:b5:03:25:80:93:41:
         17:fd:32:7e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYiqvyXo3/BJFMmsIzGwtFZ5VBQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIyODRDREE2ODIyQThENUFEMjg5MkY0NkNGM0JCRTAw
OUUzMDBDODAeFw0yNTA1MDIxNjE2MDdaFw0yNjA1MDExNjIxMDdaMDMxMTAvBgNV
BAMTKDI5MzI5QkY5ODA5QUExMDBERUIwNDk5MDZGMzU3QjY2MkEyRkYyQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtq77qDDIkPclBa7t1HHI1rPB5
rdi/NPhDQMdWEitHenwuQuX8bmh/fz6wC2+GxRic2ViNEFsOlGUrRZG2MLiSrcvI
osfy2aIVCaaLt/l0SIb5NpB9AmCTtxAMw6FP+4Zz2Kn9hcvkKXJNHDOx+RvKf6eB
R7GVrz+a9jlwftl2LPxbnxhfKBnMRG3PxkcvTflS6sv+Vt/rp9SxTume1Y4ONiAD
ObKvjdw+68i6HlCwJ19Of7nYe0jHz/u1VtoRVSW6WkNHvHQ3DPgLqV0nO5PqA8Df
Qt/RktG+hbnDn6iv2KazmgzMWV/9e2zEh8vcaQgUUmNuiIZJoNhcreOg5sFjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKTKb+YCaoQDesEmQbzV7Ziov8q0wHwYDVR0j
BBgwFoAUEihM2mgiqNWtKJL0bPO74AnjAMgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlo0UGpqUHVnMmRick5hbWI1Zm0xTGdONUxpUFE5QllhUDVVdTNuWUpq
OHUvMC8xMjI4NENEQTY4MjJBOEQ1QUQyODkyRjQ2Q0YzQkJFMDA5RTMwMEM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyMjg0Q0RBNjgyMkE4RDVB
RDI4OTJGNDZDRjNCQkUwMDlFMzAwQzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZaNFBqalB1ZzJkYnJOYW1iNWZtMUxnTjVMaVBROUJZYVA1VXUzbllKajh1LzAv
MzEzNzM3MmUzMjMzMmUzMTMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxF2wwDQYJKoZIhvcNAQELBQADggEBAFbdKq5O
b2odelOWyN/jkoxFi2WZZbKuTuBQ+5zndzIoe8Dmag+mnLI15p/YOIOK4CxDF91W
DOfuQcPQ/Cg7arYbAPATqlz+tT0p1wCtJBDS570xnXbFXZaWb53hZG2StuWcvwfe
nxUWpp4vOyQ4/xm+dUMGhLrCOxHhHKr4/dVAJ/shpId2+iy2hQ4G7Kqdy/SyOPvm
Ep5wcACftFg9L3UwnNUeFm7dwrj6Uh+776Th8DiHKKs852HKdaa9XDy0gHYTlYXW
7rUsj10MrKC5ZSJZSRa269veR9bOnk6in3vK6ARkNkCZ28yQevxxHY2QCQezProo
I7UDJYCTQRf9Mn4=
-----END CERTIFICATE-----
Generated at Tue May 13 17:33:49 2025 by rpki-client