Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32312d3231203d3e20323632343630.roa
File:                     3137372e35332e37322e302f32312d3231203d3e20323632343630.roa (raw, json)
Hash identifier:          3NF3YG5yxtS1sdsojjlBPXHeczgckfYXXzKoGQCd5dw=
Subject key identifier:   03:F4:C3:DF:1F:72:17:9F:77:AE:B7:6A:8F:85:AE:54:AD:19:92:EF
Certificate issuer:       /CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
Certificate serial:       2230505531A8E5DB2643545C68F1FDEF76AB1AC1
Authority key identifier: 9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32312d3231203d3e20323632343630.roa
Signing time:             Thu 26 Jun 2025 14:37:47 +0000
ROA not before:           Thu 26 Jun 2025 14:32:47 +0000
ROA not after:            Thu 25 Jun 2026 14:37:47 +0000
asID:                     262460
IP address blocks:        177.53.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.crl
                          rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 08:38:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:30:50:55:31:a8:e5:db:26:43:54:5c:68:f1:fd:ef:76:ab:1a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
        Validity
            Not Before: Jun 26 14:32:47 2025 GMT
            Not After : Jun 25 14:37:47 2026 GMT
        Subject: CN=03F4C3DF1F72179F77AEB76A8F85AE54AD1992EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:29:e0:56:1a:cd:b2:35:cc:85:78:a6:15:57:
                    b3:6c:b3:95:18:2c:47:ef:b8:df:23:a1:ef:79:8a:
                    96:94:1b:9c:37:71:a4:bc:43:8d:7b:96:a3:0a:0b:
                    46:3e:10:0e:d2:c0:0c:da:75:f9:e7:f3:73:c3:b8:
                    73:d3:5d:c4:21:70:a1:e3:b4:57:d8:a2:79:0d:76:
                    0f:33:a9:75:aa:ff:14:c0:8f:1b:52:0d:34:e6:24:
                    81:80:fc:b8:50:44:ac:c7:30:c4:75:98:e3:4f:aa:
                    46:9e:6d:7b:cb:7f:a2:bf:6a:f2:69:2e:b6:50:e4:
                    ff:4d:1e:b6:7a:34:0e:35:8e:c1:05:44:14:38:2f:
                    fc:43:0e:45:0c:e3:4a:79:81:7e:30:9b:68:2b:21:
                    d2:d9:1d:f4:3b:02:55:60:1a:a1:0c:4e:0f:de:a0:
                    10:a2:bc:49:0f:4f:c1:d9:86:b9:37:be:a4:b3:57:
                    a9:ab:86:cc:6e:08:a8:6a:d7:46:b0:02:3c:cd:8e:
                    7b:38:b5:96:9d:4e:68:a7:3a:cf:db:07:b0:ba:b2:
                    e5:a4:18:00:a2:ce:c3:b2:85:36:39:f0:c7:24:89:
                    40:5e:0d:fd:7e:ac:8f:13:53:c5:fb:17:ec:03:9f:
                    94:9d:39:d0:dc:73:3b:30:f0:7c:17:e9:fa:e1:ce:
                    a4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F4:C3:DF:1F:72:17:9F:77:AE:B7:6A:8F:85:AE:54:AD:19:92:EF
            X509v3 Authority Key Identifier:
                keyid:9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32312d3231203d3e20323632343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a0:ea:c4:60:d1:81:e3:cb:b0:f6:32:7f:68:6c:07:a4:54:c1:
         a5:1f:77:fe:2e:bd:9b:95:df:fb:70:f5:fd:05:f7:99:c9:96:
         02:af:e2:e4:73:2b:10:cc:7e:1c:09:66:df:da:d1:49:5d:f4:
         b3:ee:18:79:7a:ab:d4:3b:f1:b8:dc:0b:88:5f:ec:da:65:1a:
         70:e5:c2:6d:0d:cf:c7:7f:00:6d:d5:c0:8b:d3:6b:28:10:48:
         2d:09:47:5f:3a:1c:ad:df:a0:e7:38:f9:67:e8:e0:7c:04:43:
         0e:eb:b8:07:fe:95:f7:9a:98:2f:df:f9:1f:ac:6b:a4:93:16:
         dd:9e:2c:ae:d4:79:82:85:6e:6c:fb:51:3d:b8:34:99:3c:ad:
         5d:6e:f8:88:13:b8:98:45:21:b0:cb:b1:6a:a9:c9:d7:bf:e2:
         66:0a:58:0b:79:70:c9:c8:43:59:1d:f3:61:f4:c5:6f:dd:d3:
         b5:2a:30:41:50:90:61:d4:66:a2:c5:a3:09:fd:24:a6:22:26:
         45:61:af:81:e6:e3:e1:6a:e3:95:00:08:3e:7f:24:68:57:a8:
         ba:6c:5f:ba:f6:6f:12:ef:19:b2:da:43:07:39:9a:52:0d:0b:
         6e:a4:ac:ea:5f:06:3f:6d:d1:6f:3b:86:a1:bf:e7:5d:98:dc:
         0a:f8:ed:e6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIjBQVTGo5dsmQ1RcaPH973arGsEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY5MjY0QkVENDhBMkM1OUFCOTUwQjRBRjkyRjlERkRF
MjcyRjg2NDAeFw0yNTA2MjYxNDMyNDdaFw0yNjA2MjUxNDM3NDdaMDMxMTAvBgNV
BAMTKDAzRjRDM0RGMUY3MjE3OUY3N0FFQjc2QThGODVBRTU0QUQxOTkyRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+KeBWGs2yNcyFeKYVV7Nss5UY
LEfvuN8joe95ipaUG5w3caS8Q417lqMKC0Y+EA7SwAzadfnn83PDuHPTXcQhcKHj
tFfYonkNdg8zqXWq/xTAjxtSDTTmJIGA/LhQRKzHMMR1mONPqkaebXvLf6K/avJp
LrZQ5P9NHrZ6NA41jsEFRBQ4L/xDDkUM40p5gX4wm2grIdLZHfQ7AlVgGqEMTg/e
oBCivEkPT8HZhrk3vqSzV6mrhsxuCKhq10awAjzNjns4tZadTminOs/bB7C6suWk
GACizsOyhTY58MckiUBeDf1+rI8TU8X7F+wDn5SdOdDcczsw8HwX6frhzqRnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUA/TD3x9yF593rrdqj4WuVK0Zku8wHwYDVR0j
BBgwFoAUn5JkvtSKLFmrlQtK+S+d/eJy+GQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2N0R1V3MW5hWnhROXc4RERVcVlQZWhCWUZpMndIdDlqTGJ0R0tGaTRU
Wk4vMC85RjkyNjRCRUQ0OEEyQzU5QUI5NTBCNEFGOTJGOURGREUyNzJGODY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGOTI2NEJFRDQ4QTJDNTlB
Qjk1MEI0QUY5MkY5REZERTI3MkY4NjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0djdEdVdzFuYVp4UTl3OEREVXFZUGVoQllGaTJ3SHQ5akxidEdLRmk0VFpOLzAv
MzEzNzM3MmUzNTMzMmUzNzMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNjMy
MzQzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsTVIMA0GCSqGSIb3DQEBCwUAA4IBAQCg6sRg0YHj
y7D2Mn9obAekVMGlH3f+Lr2bld/7cPX9BfeZyZYCr+LkcysQzH4cCWbf2tFJXfSz
7hh5eqvUO/G43AuIX+zaZRpw5cJtDc/HfwBt1cCL02soEEgtCUdfOhyt36DnOPln
6OB8BEMO67gH/pX3mpgv3/kfrGukkxbdniyu1HmChW5s+1E9uDSZPK1dbviIE7iY
RSGwy7FqqcnXv+JmClgLeXDJyENZHfNh9MVv3dO1KjBBUJBh1GaixaMJ/SSmIiZF
Ya+B5uPhauOVAAg+fyRoV6i6bF+69m8S7xmy2kMHOZpSDQtupKzqXwY/bdFvO4ah
v+ddmNwK+O3m
-----END CERTIFICATE-----
Generated at Thu Jul 3 21:47:39 2025 by rpki-client