Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/3137372e3132352e3131322e302f32312d3234203d3e20323632333432.roa
File:                     3137372e3132352e3131322e302f32312d3234203d3e20323632333432.roa (raw, json)
Hash identifier:          ynhKy//8aj/Uty//zEauGCdgEKBZ/ORMn7BW1HQtC4c=
Subject key identifier:   FB:DD:5F:2D:1B:FE:85:0A:25:76:EE:07:90:24:48:76:FE:89:32:F7
Certificate issuer:       /CN=80F95120380D97B8617C6C767FCF3931BDE7880D
Certificate serial:       0E2ED7C1317B9D255378EFD34E5649F67FFC89
Authority key identifier: 80:F9:51:20:38:0D:97:B8:61:7C:6C:76:7F:CF:39:31:BD:E7:88:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F95120380D97B8617C6C767FCF3931BDE7880D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/3137372e3132352e3131322e302f32312d3234203d3e20323632333432.roa
Signing time:             Wed 25 Jun 2025 13:51:43 +0000
ROA not before:           Wed 25 Jun 2025 13:46:43 +0000
ROA not after:            Wed 24 Jun 2026 13:51:43 +0000
asID:                     262342
IP address blocks:        177.125.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/80F95120380D97B8617C6C767FCF3931BDE7880D.crl
                          rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/80F95120380D97B8617C6C767FCF3931BDE7880D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F95120380D97B8617C6C767FCF3931BDE7880D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2e:d7:c1:31:7b:9d:25:53:78:ef:d3:4e:56:49:f6:7f:fc:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F95120380D97B8617C6C767FCF3931BDE7880D
        Validity
            Not Before: Jun 25 13:46:43 2025 GMT
            Not After : Jun 24 13:51:43 2026 GMT
        Subject: CN=FBDD5F2D1BFE850A2576EE0790244876FE8932F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b6:84:a5:d1:21:c3:13:ae:4b:e3:90:1a:84:
                    ba:1f:a9:23:13:ce:48:d4:2e:23:d1:48:84:2f:62:
                    97:e8:88:17:58:bb:50:9e:ad:e2:92:f8:34:c9:71:
                    01:47:41:8d:68:3c:c5:fa:0d:51:93:cd:12:fb:f4:
                    8d:e2:d1:5c:a1:3a:55:82:61:57:d2:b5:9f:5b:1f:
                    10:2b:1a:c1:ff:c9:e9:40:9f:84:9a:eb:ce:bb:b0:
                    1c:21:bf:63:e0:58:b5:33:3b:b9:4d:26:18:52:66:
                    1a:6b:ab:dc:4a:5b:f9:45:e1:38:99:3a:3c:5f:10:
                    d6:e4:f8:52:73:47:89:ac:4b:6a:72:33:6c:b7:ea:
                    3f:8b:86:24:9d:9b:bb:7e:62:8a:36:07:5b:18:f9:
                    bd:ba:3d:fd:7d:fc:78:25:e6:f9:17:9a:71:79:0a:
                    f1:56:f9:4a:8b:28:fe:dd:4c:d4:80:7e:02:5b:57:
                    66:a4:3f:ae:23:4e:b7:0e:05:e8:c4:2a:87:d2:09:
                    80:6c:d9:9e:27:d3:bc:f9:9d:3d:6a:90:0c:1f:85:
                    0c:52:ea:e8:7d:08:15:f4:b9:cc:43:68:f4:a2:69:
                    73:d1:e1:52:e5:e2:49:26:03:94:b1:73:9c:7e:06:
                    dc:cb:35:a1:88:62:7c:d4:54:a1:33:2f:01:40:5e:
                    72:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DD:5F:2D:1B:FE:85:0A:25:76:EE:07:90:24:48:76:FE:89:32:F7
            X509v3 Authority Key Identifier:
                keyid:80:F9:51:20:38:0D:97:B8:61:7C:6C:76:7F:CF:39:31:BD:E7:88:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/80F95120380D97B8617C6C767FCF3931BDE7880D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F95120380D97B8617C6C767FCF3931BDE7880D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/3137372e3132352e3131322e302f32312d3234203d3e20323632333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:ac:7e:87:8e:97:c7:f4:36:48:19:9a:8d:7c:a2:61:31:a6:
         3b:b5:26:a0:eb:17:11:20:d2:55:03:c5:cc:c7:ca:a6:51:16:
         74:13:58:ec:9d:7e:ee:46:d3:56:80:09:10:60:df:cf:31:9e:
         bc:9b:c2:83:e2:df:89:65:40:54:c7:50:dc:22:1e:8d:a2:57:
         6d:a6:af:39:70:1e:c0:c6:f0:d3:2d:63:ef:0b:92:e0:e7:b2:
         dd:bc:0f:d5:c0:e2:a7:90:ff:10:bc:dc:fb:64:a5:2c:32:72:
         d7:1a:c2:ea:09:d9:9b:df:ae:af:72:04:6f:d2:7a:ff:83:2c:
         e2:50:9a:95:a9:aa:47:d4:ed:fa:78:07:89:11:d4:9b:c0:bc:
         92:7f:b1:f7:49:a0:65:74:3c:96:a6:f7:ad:b6:58:a6:c2:d8:
         8c:53:15:55:e5:80:52:96:9e:cc:e6:a9:68:c5:30:a0:c0:20:
         44:d0:e2:85:03:28:f0:2f:c0:15:00:ff:09:b9:cb:bc:98:a2:
         15:19:de:e0:da:78:47:d8:cd:e8:ba:5d:5e:0b:af:9a:57:19:
         1b:a7:0b:34:5b:bb:be:89:8f:76:b0:fd:7a:80:75:19:b3:66:
         18:de:a5:90:19:c6:ed:4a:ea:7a:f4:0c:76:99:0e:a2:b0:13:
         16:2f:85:fb
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgITDi7XwTF7nSVTeO/TTlZJ9n/8iTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg4MEY5NTEyMDM4MEQ5N0I4NjE3QzZDNzY3RkNGMzkzMUJE
RTc4ODBEMB4XDTI1MDYyNTEzNDY0M1oXDTI2MDYyNDEzNTE0M1owMzExMC8GA1UE
AxMoRkJERDVGMkQxQkZFODUwQTI1NzZFRTA3OTAyNDQ4NzZGRTg5MzJGNzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPi2hKXRIcMTrkvjkBqEuh+pIxPO
SNQuI9FIhC9il+iIF1i7UJ6t4pL4NMlxAUdBjWg8xfoNUZPNEvv0jeLRXKE6VYJh
V9K1n1sfECsawf/J6UCfhJrrzruwHCG/Y+BYtTM7uU0mGFJmGmur3Epb+UXhOJk6
PF8Q1uT4UnNHiaxLanIzbLfqP4uGJJ2bu35iijYHWxj5vbo9/X38eCXm+ReacXkK
8Vb5Soso/t1M1IB+AltXZqQ/riNOtw4F6MQqh9IJgGzZnifTvPmdPWqQDB+FDFLq
6H0IFfS5zENo9KJpc9HhUuXiSSYDlLFznH4G3Ms1oYhifNRUoTMvAUBeclUCAwEA
AaOCAlMwggJPMB0GA1UdDgQWBBT73V8tG/6FCiV27geQJEh2/oky9zAfBgNVHSME
GDAWgBSA+VEgOA2XuGF8bHZ/zzkxveeIDTAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9IalM0Z2dSZGZMQ01YdWhNUWdCNVV1YTI0cHdESHhoUVRDOVZDaEpHR3Yz
MS8xLzgwRjk1MTIwMzgwRDk3Qjg2MTdDNkM3NjdGQ0YzOTMxQkRFNzg4MEQuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvODBGOTUxMjAzODBEOTdCODYx
N0M2Qzc2N0ZDRjM5MzFCREU3ODgwRC5jZXIwgbAGCCsGAQUFBwELBIGjMIGgMIGd
BggrBgEFBQcwC4aBkHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGpTNGdnUmRmTENNWHVoTVFnQjVVdWEyNHB3REh4aFFUQzlWQ2hKR0d2MzEvMS8z
MTM3MzcyZTMxMzIzNTJlMzEzMTMyMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIz
NjMyMzMzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDsX1wMA0GCSqGSIb3DQEBCwUAA4IBAQBFrH6H
jpfH9DZIGZqNfKJhMaY7tSag6xcRINJVA8XMx8qmURZ0E1jsnX7uRtNWgAkQYN/P
MZ68m8KD4t+JZUBUx1DcIh6Noldtpq85cB7AxvDTLWPvC5Lg57LdvA/VwOKnkP8Q
vNz7ZKUsMnLXGsLqCdmb366vcgRv0nr/gyziUJqVqapH1O36eAeJEdSbwLySf7H3
SaBldDyWpvettlimwtiMUxVV5YBSlp7M5qloxTCgwCBE0OKFAyjwL8AVAP8Jucu8
mKIVGd7g2nhH2M3oul1eC6+aVxkbpws0W7u+iY92sP16gHUZs2YY3qWQGcbtSup6
9Ax2mQ6isBMWL4X7
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:58:01 2025 by rpki-client