Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137372e32332e3235322e302f32322d3234203d3e20313938393439.roa
File:                     3137372e32332e3235322e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          dehCB4orlDXeH9jZKGzdIXZQiqcOJniSDHYfl0mb61w=
Subject key identifier:   B2:F0:B4:C3:1E:D3:73:BD:3D:25:D4:F8:93:BF:15:52:25:D8:B9:C1
Certificate issuer:       /CN=F350A9A60C94593716E8BF7D10666C1777A7789E
Certificate serial:       19FDFA14AC0B14FD31F43AEF4F0DD5D19C0D127F
Authority key identifier: F3:50:A9:A6:0C:94:59:37:16:E8:BF:7D:10:66:6C:17:77:A7:78:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137372e32332e3235322e302f32322d3234203d3e20313938393439.roa
Signing time:             Mon 12 May 2025 14:50:58 +0000
ROA not before:           Mon 12 May 2025 14:45:58 +0000
ROA not after:            Mon 11 May 2026 14:50:58 +0000
asID:                     198949
IP address blocks:        177.23.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.crl
                          rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 18:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fd:fa:14:ac:0b:14:fd:31:f4:3a:ef:4f:0d:d5:d1:9c:0d:12:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F350A9A60C94593716E8BF7D10666C1777A7789E
        Validity
            Not Before: May 12 14:45:58 2025 GMT
            Not After : May 11 14:50:58 2026 GMT
        Subject: CN=B2F0B4C31ED373BD3D25D4F893BF155225D8B9C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3b:55:3c:62:25:f3:a0:e8:e4:3a:7e:f3:f0:
                    89:3e:47:19:8e:a6:5c:59:39:9f:d6:47:68:67:48:
                    1b:ee:52:4a:94:b9:da:fc:28:94:a4:2b:4c:c8:1b:
                    3b:bb:cf:5c:75:5c:20:37:f3:c1:64:9a:f9:f5:f5:
                    14:d9:df:1a:99:77:26:ae:66:3c:ae:fa:25:07:8c:
                    f9:d8:38:b2:22:29:2f:b0:f5:4b:fc:b2:72:32:61:
                    14:9c:50:66:9e:ef:64:6b:47:90:7f:6e:86:1f:93:
                    8e:b8:e6:15:54:6e:e5:87:7b:8c:64:9e:3f:55:b8:
                    80:2b:13:2d:ec:09:72:cb:99:a7:9e:08:12:3f:d7:
                    c7:33:db:da:74:66:a7:dd:6c:a3:d1:eb:48:ae:82:
                    30:b3:1a:e5:e8:1c:d0:6b:48:e0:37:56:99:af:e2:
                    8d:5d:db:4f:25:0d:f2:e1:f1:12:70:a8:d5:3e:99:
                    9d:dd:5a:1b:70:53:d3:83:0c:ad:cc:f8:92:47:bc:
                    fc:5a:32:a5:3b:2b:81:3b:ac:5b:ca:fd:a1:3a:78:
                    e1:7d:8d:9f:d1:c2:37:48:73:2a:74:d1:8c:fc:78:
                    fc:fc:e1:22:0d:3c:68:95:7d:1a:2c:8c:5e:df:8d:
                    8e:a8:7e:6a:ea:1c:60:f3:27:ed:8d:7e:3c:da:4c:
                    32:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F0:B4:C3:1E:D3:73:BD:3D:25:D4:F8:93:BF:15:52:25:D8:B9:C1
            X509v3 Authority Key Identifier:
                keyid:F3:50:A9:A6:0C:94:59:37:16:E8:BF:7D:10:66:6C:17:77:A7:78:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137372e32332e3235322e302f32322d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:82:29:2a:b7:83:96:2f:b1:f3:16:43:25:a6:e2:68:25:38:
         94:f9:4c:76:d4:11:d3:b2:30:ff:a5:b1:a0:94:11:fd:93:61:
         b6:26:ce:24:bc:38:e6:35:44:bb:59:48:c9:77:ff:a1:bf:8c:
         a0:fe:c1:c3:e5:15:5f:58:3c:11:59:25:94:2a:3d:b0:40:46:
         f5:18:b9:32:e9:15:79:04:b8:c2:dd:e7:f4:a3:d5:c8:8b:f9:
         a7:27:90:db:42:84:f5:8a:b7:b4:52:14:5d:9a:e3:d1:cd:3f:
         33:46:e3:7b:e8:c9:c3:13:16:ed:e4:53:ba:b4:75:c6:e0:94:
         64:6e:a8:bb:a8:84:c5:e5:06:8d:ac:ba:67:6b:bf:1a:b6:eb:
         a9:41:cf:fc:a6:b4:8b:35:80:9a:9f:92:10:23:f9:81:9b:e5:
         48:53:d0:fc:dc:46:27:a7:4a:aa:cb:57:42:71:cd:b0:ec:0b:
         33:5a:a2:50:0f:46:bf:dd:55:74:43:6d:2e:da:b6:d5:36:03:
         09:24:bc:12:92:50:0b:ff:7d:83:56:85:66:80:eb:bb:2e:00:
         37:d4:57:fa:41:f5:71:63:3c:ee:6a:87:b0:02:1a:b0:18:62:
         48:17:d7:19:ef:fe:87:00:6d:10:83:5b:e6:40:15:77:86:7b:
         b8:b1:9f:de
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGf36FKwLFP0x9DrvTw3V0ZwNEn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM1MEE5QTYwQzk0NTkzNzE2RThCRjdEMTA2NjZDMTc3
N0E3Nzg5RTAeFw0yNTA1MTIxNDQ1NThaFw0yNjA1MTExNDUwNThaMDMxMTAvBgNV
BAMTKEIyRjBCNEMzMUVEMzczQkQzRDI1RDRGODkzQkYxNTUyMjVEOEI5QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvO1U8YiXzoOjkOn7z8Ik+RxmO
plxZOZ/WR2hnSBvuUkqUudr8KJSkK0zIGzu7z1x1XCA388Fkmvn19RTZ3xqZdyau
Zjyu+iUHjPnYOLIiKS+w9Uv8snIyYRScUGae72RrR5B/boYfk4645hVUbuWHe4xk
nj9VuIArEy3sCXLLmaeeCBI/18cz29p0ZqfdbKPR60iugjCzGuXoHNBrSOA3Vpmv
4o1d208lDfLh8RJwqNU+mZ3dWhtwU9ODDK3M+JJHvPxaMqU7K4E7rFvK/aE6eOF9
jZ/RwjdIcyp00Yz8ePz84SINPGiVfRosjF7fjY6ofmrqHGDzJ+2NfjzaTDIzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsvC0wx7Tc709JdT4k78VUiXYucEwHwYDVR0j
BBgwFoAU81CppgyUWTcW6L99EGZsF3eneJ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHNCOVNvRjRqRmJpem5mNGR4S0RvZTdUc0x2MVFFTGszM2J4YlhrSEE5
UGcvMC9GMzUwQTlBNjBDOTQ1OTM3MTZFOEJGN0QxMDY2NkMxNzc3QTc3ODlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzNTBBOUE2MEM5NDU5Mzcx
NkU4QkY3RDEwNjY2QzE3NzdBNzc4OUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hzQjlTb0Y0akZiaXpuZjRkeEtEb2U3VHNMdjFRRUxrMzNieGJYa0hBOVBnLzAv
MzEzNzM3MmUzMjMzMmUzMjM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM5
MzgzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxF/wwDQYJKoZIhvcNAQELBQADggEBADSCKSq3
g5YvsfMWQyWm4mglOJT5THbUEdOyMP+lsaCUEf2TYbYmziS8OOY1RLtZSMl3/6G/
jKD+wcPlFV9YPBFZJZQqPbBARvUYuTLpFXkEuMLd5/Sj1ciL+acnkNtChPWKt7RS
FF2a49HNPzNG43voycMTFu3kU7q0dcbglGRuqLuohMXlBo2sumdrvxq266lBz/ym
tIs1gJqfkhAj+YGb5UhT0PzcRienSqrLV0JxzbDsCzNaolAPRr/dVXRDbS7attU2
AwkkvBKSUAv/fYNWhWaA67suADfUV/pB9XFjPO5qh7ACGrAYYkgX1xnv/ocAbRCD
W+ZAFXeGe7ixn94=
-----END CERTIFICATE-----
Generated at Thu May 15 23:38:06 2025 by rpki-client