Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31362e302f32322d3234203d3e20323731303432.roa
File:                     3137372e33362e31362e302f32322d3234203d3e20323731303432.roa (raw, json)
Hash identifier:          AHdUdhweJMVNGr0wis8zP3Q/9p4DOy2w7aa5paPDHNY=
Subject key identifier:   A3:3B:F2:3D:22:D3:E6:B1:1C:BF:F2:49:E8:FB:DC:0B:B2:B9:A4:DB
Certificate issuer:       /CN=7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB
Certificate serial:       66CED3735F57647603590A051833EDD054EFC721
Authority key identifier: 7B:55:64:D1:AD:D5:8A:3B:AA:49:E2:3D:AF:5A:6B:5A:67:C6:91:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31362e302f32322d3234203d3e20323731303432.roa
Signing time:             Tue 06 May 2025 14:05:48 +0000
ROA not before:           Tue 06 May 2025 14:00:48 +0000
ROA not after:            Tue 05 May 2026 14:05:48 +0000
asID:                     271042
IP address blocks:        177.36.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB.crl
                          rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 05:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ce:d3:73:5f:57:64:76:03:59:0a:05:18:33:ed:d0:54:ef:c7:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB
        Validity
            Not Before: May  6 14:00:48 2025 GMT
            Not After : May  5 14:05:48 2026 GMT
        Subject: CN=A33BF23D22D3E6B11CBFF249E8FBDC0BB2B9A4DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3a:01:73:64:cc:d5:63:cf:6b:67:c6:83:60:
                    7f:31:3f:15:6c:99:3c:39:04:a7:c0:38:9f:22:e4:
                    ed:b5:78:ec:b6:c2:ba:fa:62:a0:de:a7:5a:ea:00:
                    aa:4c:6b:8b:e2:49:a0:d3:50:13:f5:04:c4:ad:93:
                    78:67:8f:b1:2b:91:93:b7:f3:0c:4a:9d:85:b5:11:
                    34:1c:19:15:11:22:80:e2:0e:10:91:99:76:d7:2c:
                    d5:65:9f:a7:0d:d1:44:b6:28:4b:32:96:8f:45:e8:
                    55:4c:4b:db:27:26:76:5a:02:ef:82:14:32:00:f7:
                    57:8c:58:1c:48:1d:a0:b2:1d:eb:78:4c:e0:38:80:
                    e9:df:20:d6:72:f2:df:c8:e6:93:1b:11:11:82:f9:
                    e3:1f:f5:d5:32:be:11:dc:b9:d2:eb:92:b8:b1:4e:
                    7d:0a:0d:88:54:8a:db:55:37:36:2f:79:64:17:8e:
                    79:ac:07:cc:6a:22:f9:de:5f:b0:6f:e9:77:b3:9c:
                    91:3e:17:fb:56:11:0a:ee:90:0b:db:26:1c:fc:3a:
                    12:46:c3:6c:b6:b4:25:d6:a1:b8:fb:37:3d:cf:f3:
                    5c:66:c9:fb:98:5c:0e:cc:48:fb:47:fe:fc:36:ac:
                    84:b1:3d:81:0b:f9:70:e6:52:96:fe:65:d5:22:83:
                    ea:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3B:F2:3D:22:D3:E6:B1:1C:BF:F2:49:E8:FB:DC:0B:B2:B9:A4:DB
            X509v3 Authority Key Identifier:
                keyid:7B:55:64:D1:AD:D5:8A:3B:AA:49:E2:3D:AF:5A:6B:5A:67:C6:91:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5564D1ADD58A3BAA49E23DAF5A6B5A67C691EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31362e302f32322d3234203d3e20323731303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:c8:54:ad:3f:f7:7e:eb:20:90:32:f2:f1:24:29:ab:5b:c3:
         7f:29:81:ba:21:7e:0b:63:cf:1f:8b:02:05:3d:33:67:e7:74:
         bf:81:40:88:53:e6:6e:c2:0c:2e:30:d1:fd:51:f5:f8:5a:f6:
         fa:b7:2a:11:ee:3f:46:9d:8a:67:bb:f7:80:7e:48:60:a7:9b:
         d0:4b:1c:6b:d1:e8:53:44:38:10:ac:4d:d9:8a:2c:57:6c:00:
         1f:d7:53:70:3e:6b:a2:48:7a:a0:5f:58:2a:56:db:b5:74:da:
         9e:52:f4:cd:cf:76:4f:f4:54:ae:af:da:1d:1f:34:f0:ec:0d:
         19:89:84:3a:eb:93:e3:3e:cf:0c:9a:f6:68:bb:6e:02:ca:5a:
         8b:fc:3c:f5:3f:8d:9e:10:04:84:81:52:c7:9e:25:f2:e6:74:
         de:e7:4d:74:21:1c:6b:24:9a:ed:d5:f1:f8:17:2a:dc:3f:d6:
         17:e7:98:17:2a:af:60:8a:3a:45:dc:51:80:71:bf:ef:92:be:
         ca:de:63:2d:30:c8:3f:38:56:e2:be:79:cd:49:25:98:20:7d:
         65:02:74:64:8e:82:a9:d0:61:33:19:e3:76:1c:e9:4d:69:04:
         c1:b6:69:0a:56:17:c1:90:52:55:05:76:c5:dc:8e:6e:87:09:
         37:b1:10:59
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZs7Tc19XZHYDWQoFGDPt0FTvxyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I1NTY0RDFBREQ1OEEzQkFBNDlFMjNEQUY1QTZCNUE2
N0M2OTFFQjAeFw0yNTA1MDYxNDAwNDhaFw0yNjA1MDUxNDA1NDhaMDMxMTAvBgNV
BAMTKEEzM0JGMjNEMjJEM0U2QjExQ0JGRjI0OUU4RkJEQzBCQjJCOUE0REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpOgFzZMzVY89rZ8aDYH8xPxVs
mTw5BKfAOJ8i5O21eOy2wrr6YqDep1rqAKpMa4viSaDTUBP1BMStk3hnj7ErkZO3
8wxKnYW1ETQcGRURIoDiDhCRmXbXLNVln6cN0US2KEsylo9F6FVMS9snJnZaAu+C
FDIA91eMWBxIHaCyHet4TOA4gOnfINZy8t/I5pMbERGC+eMf9dUyvhHcudLrkrix
Tn0KDYhUittVNzYveWQXjnmsB8xqIvneX7Bv6XeznJE+F/tWEQrukAvbJhz8OhJG
w2y2tCXWobj7Nz3P81xmyfuYXA7MSPtH/vw2rISxPYEL+XDmUpb+ZdUig+rNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUozvyPSLT5rEcv/JJ6PvcC7K5pNswHwYDVR0j
BBgwFoAUe1Vk0a3VijuqSeI9r1prWmfGkeswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2YyWUFRQTRlaWtOcER0OFc2c1VERDJVeHhoVXpuWDlqQmRxdktyYjJm
ZDgvMC83QjU1NjREMUFERDU4QTNCQUE0OUUyM0RBRjVBNkI1QTY3QzY5MUVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCNTU2NEQxQURENThBM0JB
QTQ5RTIzREFGNUE2QjVBNjdDNjkxRUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dmMllBUUE0ZWlrTnBEdDhXNnNVREQyVXh4aFV6blg5akJkcXZLcmIyZmQ4LzAv
MzEzNzM3MmUzMzM2MmUzMTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMx
MzAzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsSQQMA0GCSqGSIb3DQEBCwUAA4IBAQA4yFStP/d+
6yCQMvLxJCmrW8N/KYG6IX4LY88fiwIFPTNn53S/gUCIU+ZuwgwuMNH9UfX4Wvb6
tyoR7j9GnYpnu/eAfkhgp5vQSxxr0ehTRDgQrE3ZiixXbAAf11NwPmuiSHqgX1gq
Vtu1dNqeUvTNz3ZP9FSur9odHzTw7A0ZiYQ665PjPs8MmvZou24CylqL/Dz1P42e
EASEgVLHniXy5nTe5010IRxrJJrt1fH4FyrcP9YX55gXKq9gijpF3FGAcb/vkr7K
3mMtMMg/OFbivnnNSSWYIH1lAnRkjoKp0GEzGeN2HOlNaQTBtmkKVhfBkFJVBXbF
3I5uhwk3sRBZ
-----END CERTIFICATE-----
Generated at Tue May 13 17:39:15 2025 by rpki-client