Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134312e302f32342d3234203d3e20323633353834.roa
File:                     3137372e3132392e3134312e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier:          SUo1BBOjwawi7OJq7F9iWV9ic+EVV2T+XUmB5ZZ5UhI=
Subject key identifier:   34:5A:1E:33:89:DC:F6:88:40:62:F1:88:FA:32:04:03:2B:02:91:E7
Certificate issuer:       /CN=AE237DC7B299A0FDCDF8225D9403B0A582305290
Certificate serial:       55EE873D26C13B050F4D1AA1063C8A1C2F24AC74
Authority key identifier: AE:23:7D:C7:B2:99:A0:FD:CD:F8:22:5D:94:03:B0:A5:82:30:52:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE237DC7B299A0FDCDF8225D9403B0A582305290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134312e302f32342d3234203d3e20323633353834.roa
Signing time:             Mon 11 Aug 2025 19:04:58 +0000
ROA not before:           Mon 11 Aug 2025 18:59:58 +0000
ROA not after:            Mon 10 Aug 2026 19:04:58 +0000
asID:                     263584
IP address blocks:        177.129.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/AE237DC7B299A0FDCDF8225D9403B0A582305290.crl
                          rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/AE237DC7B299A0FDCDF8225D9403B0A582305290.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE237DC7B299A0FDCDF8225D9403B0A582305290.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ee:87:3d:26:c1:3b:05:0f:4d:1a:a1:06:3c:8a:1c:2f:24:ac:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE237DC7B299A0FDCDF8225D9403B0A582305290
        Validity
            Not Before: Aug 11 18:59:58 2025 GMT
            Not After : Aug 10 19:04:58 2026 GMT
        Subject: CN=345A1E3389DCF6884062F188FA3204032B0291E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0b:12:f8:53:44:4e:bd:db:68:76:f4:a7:29:
                    fe:bd:be:ef:d1:5e:a6:8a:34:75:da:9c:97:59:96:
                    e9:d0:2e:22:3e:f7:31:ce:d5:4d:f2:a2:1d:a7:95:
                    02:f9:55:58:c2:fd:22:d1:ba:e4:91:54:c7:27:69:
                    13:23:d7:ad:da:67:7a:f5:2c:a5:ed:fc:30:db:2f:
                    a4:95:6d:36:56:07:af:57:35:b4:f9:eb:4e:7c:3d:
                    d0:78:3f:32:0a:7c:73:52:c8:56:08:16:27:ec:1e:
                    2a:7a:9c:75:17:8b:cc:37:55:b6:f4:64:90:e5:f0:
                    d8:28:53:f5:7a:63:b9:7b:3c:5d:66:3d:df:a3:3c:
                    da:a7:f0:6d:43:03:7d:84:e3:59:8c:6a:f3:eb:28:
                    85:15:df:07:65:3a:3e:c1:30:f4:03:42:3d:0e:03:
                    eb:75:6c:91:af:02:d3:4a:fd:39:5d:5c:f3:b0:fd:
                    27:f8:b0:a8:c7:63:94:89:da:37:61:77:37:1e:d7:
                    4e:06:84:f2:07:56:dd:b9:50:e9:7a:a5:39:ef:ad:
                    ac:b9:42:90:12:26:49:e2:ab:58:52:56:09:0e:fe:
                    41:68:b9:2f:67:6d:40:ee:1a:28:30:49:a8:e4:20:
                    05:cc:36:6d:5e:de:26:a8:f7:c5:1e:f1:33:35:1e:
                    84:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5A:1E:33:89:DC:F6:88:40:62:F1:88:FA:32:04:03:2B:02:91:E7
            X509v3 Authority Key Identifier:
                keyid:AE:23:7D:C7:B2:99:A0:FD:CD:F8:22:5D:94:03:B0:A5:82:30:52:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/AE237DC7B299A0FDCDF8225D9403B0A582305290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE237DC7B299A0FDCDF8225D9403B0A582305290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134312e302f32342d3234203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:e5:68:01:48:4e:ca:be:b0:9c:71:15:81:bf:d6:6e:5f:dd:
         20:8c:c1:25:e7:10:26:da:ad:58:a2:79:09:e8:f0:fd:0e:48:
         ad:1f:36:d8:38:4b:8d:fb:08:14:ab:3d:3d:09:2b:f2:b1:25:
         6a:7d:c9:e2:45:ad:d0:ad:0a:53:14:78:58:75:31:5f:42:b5:
         81:d7:81:2a:71:05:69:7d:54:3a:e9:60:44:fd:59:f3:4e:32:
         8f:e8:19:c3:bb:5e:84:23:67:b7:41:81:29:aa:c7:53:82:1e:
         d8:d8:59:55:0f:56:b1:bd:fb:92:a7:ba:1a:ae:d8:ec:bf:73:
         d4:7c:94:eb:f0:12:96:b2:7a:45:ae:b4:2b:e3:59:0f:8b:cd:
         55:21:31:45:20:97:ed:13:11:47:76:cc:da:5d:a9:3d:0d:89:
         1b:54:db:c4:bf:47:7b:72:54:f0:34:04:11:15:cd:ad:d4:df:
         75:4b:34:a3:e7:f7:ad:7c:e1:dd:e6:34:58:c0:92:82:44:67:
         5d:f8:4d:24:85:07:78:4f:0d:97:c3:9e:04:c1:a6:c7:76:aa:
         58:ab:be:90:1e:06:55:16:ac:95:da:1a:01:26:7c:08:2d:c5:
         12:9c:4e:e5:e7:06:1d:3b:15:4f:0e:28:f1:0f:d3:c9:4c:87:
         85:54:57:57
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVe6HPSbBOwUPTRqhBjyKHC8krHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyMzdEQzdCMjk5QTBGRENERjgyMjVEOTQwM0IwQTU4
MjMwNTI5MDAeFw0yNTA4MTExODU5NThaFw0yNjA4MTAxOTA0NThaMDMxMTAvBgNV
BAMTKDM0NUExRTMzODlEQ0Y2ODg0MDYyRjE4OEZBMzIwNDAzMkIwMjkxRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiCxL4U0ROvdtodvSnKf69vu/R
XqaKNHXanJdZlunQLiI+9zHO1U3yoh2nlQL5VVjC/SLRuuSRVMcnaRMj163aZ3r1
LKXt/DDbL6SVbTZWB69XNbT56058PdB4PzIKfHNSyFYIFifsHip6nHUXi8w3Vbb0
ZJDl8NgoU/V6Y7l7PF1mPd+jPNqn8G1DA32E41mMavPrKIUV3wdlOj7BMPQDQj0O
A+t1bJGvAtNK/TldXPOw/Sf4sKjHY5SJ2jdhdzce104GhPIHVt25UOl6pTnvray5
QpASJkniq1hSVgkO/kFouS9nbUDuGigwSajkIAXMNm1e3iao98Ue8TM1HoTZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUNFoeM4nc9ohAYvGI+jIEAysCkecwHwYDVR0j
BBgwFoAUriN9x7KZoP3N+CJdlAOwpYIwUpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0tpMnpZUHZWQ3ZVcGFLOFRSSFZhODhZa2RLUWk3d0J6S2d3am15TDRS
Q3EvMC9BRTIzN0RDN0IyOTlBMEZEQ0RGODIyNUQ5NDAzQjBBNTgyMzA1MjkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFMjM3REM3QjI5OUEwRkRD
REY4MjI1RDk0MDNCMEE1ODIzMDUyOTAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLaTJ6WVB2VkN2VXBhSzhUUkhWYTg4WWtkS1FpN3dCektnd2pteUw0UkNxLzAv
MzEzNzM3MmUzMTMyMzkyZTMxMzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGBjTANBgkqhkiG9w0BAQsFAAOCAQEAduVo
AUhOyr6wnHEVgb/Wbl/dIIzBJecQJtqtWKJ5Cejw/Q5IrR822DhLjfsIFKs9PQkr
8rElan3J4kWt0K0KUxR4WHUxX0K1gdeBKnEFaX1UOulgRP1Z804yj+gZw7tehCNn
t0GBKarHU4Ie2NhZVQ9Wsb37kqe6Gq7Y7L9z1HyU6/ASlrJ6Ra60K+NZD4vNVSEx
RSCX7RMRR3bM2l2pPQ2JG1TbxL9He3JU8DQEERXNrdTfdUs0o+f3rXzh3eY0WMCS
gkRnXfhNJIUHeE8Nl8OeBMGmx3aqWKu+kB4GVRasldoaASZ8CC3FEpxO5ecGHTsV
Tw4o8Q/TyUyHhVRXVw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:18:13 2025 by rpki-client