Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/3137392e3130392e3132302e302f32322d3234203d3e20323637313738.roa
File:                     3137392e3130392e3132302e302f32322d3234203d3e20323637313738.roa (raw, json)
Hash identifier:          gNqDx5zzEZCS9dLwvRTEqYbzgBXT6dzHATwxkyXQMsk=
Subject key identifier:   84:91:AE:00:57:52:09:70:C9:1A:73:F0:E7:FB:ED:6F:A1:E0:72:9A
Certificate issuer:       /CN=ECABE999366C3D759F07776633849CF7F486B8D3
Certificate serial:       51DA37DD39ED88BF3710060A8D8420B47F553774
Authority key identifier: EC:AB:E9:99:36:6C:3D:75:9F:07:77:66:33:84:9C:F7:F4:86:B8:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECABE999366C3D759F07776633849CF7F486B8D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/3137392e3130392e3132302e302f32322d3234203d3e20323637313738.roa
Signing time:             Wed 13 Aug 2025 13:06:35 +0000
ROA not before:           Wed 13 Aug 2025 13:01:35 +0000
ROA not after:            Wed 12 Aug 2026 13:06:35 +0000
asID:                     267178
IP address blocks:        179.109.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/ECABE999366C3D759F07776633849CF7F486B8D3.crl
                          rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/ECABE999366C3D759F07776633849CF7F486B8D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECABE999366C3D759F07776633849CF7F486B8D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 06:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:da:37:dd:39:ed:88:bf:37:10:06:0a:8d:84:20:b4:7f:55:37:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECABE999366C3D759F07776633849CF7F486B8D3
        Validity
            Not Before: Aug 13 13:01:35 2025 GMT
            Not After : Aug 12 13:06:35 2026 GMT
        Subject: CN=8491AE0057520970C91A73F0E7FBED6FA1E0729A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:d6:41:fd:3b:cc:48:3a:16:a4:d9:49:0d:
                    a0:a8:33:e2:9c:ba:69:08:8a:9b:4c:f1:71:7e:0b:
                    70:2c:88:65:06:55:7d:7f:37:b5:4b:19:45:4a:90:
                    7c:80:37:63:c4:9e:a3:40:20:eb:2d:4e:47:e3:54:
                    b4:10:dd:bd:99:00:12:01:75:dc:86:eb:1e:df:8a:
                    8d:e9:f8:ae:7f:c7:c6:d9:eb:6e:5b:9f:0d:96:52:
                    1c:5d:9c:be:e8:d0:6a:43:90:e4:ed:4d:5c:55:70:
                    c2:ad:f7:3d:6c:b3:6b:13:73:3e:45:b7:a0:a1:cc:
                    cd:2c:61:d8:b7:de:88:7c:be:dc:e4:d5:03:91:b8:
                    c3:ac:2f:c5:cd:12:50:76:3d:a6:99:93:73:d6:76:
                    5d:a3:2e:38:74:37:57:54:66:a4:bb:00:24:e5:05:
                    fa:da:e4:09:75:6e:45:43:b4:23:cc:79:09:72:28:
                    ec:b9:bf:55:61:7e:0c:09:f0:ce:de:2b:37:45:34:
                    85:3f:96:25:42:3a:6a:4a:c4:cd:15:aa:f4:55:1a:
                    92:9f:17:6f:dc:b8:fd:75:dd:de:b3:de:88:b5:3a:
                    a8:00:39:5d:7b:43:c4:d1:36:3d:9b:92:cb:05:64:
                    72:7b:a2:3f:7f:69:cf:65:ef:96:92:71:90:ac:4f:
                    8e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:91:AE:00:57:52:09:70:C9:1A:73:F0:E7:FB:ED:6F:A1:E0:72:9A
            X509v3 Authority Key Identifier:
                keyid:EC:AB:E9:99:36:6C:3D:75:9F:07:77:66:33:84:9C:F7:F4:86:B8:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/ECABE999366C3D759F07776633849CF7F486B8D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECABE999366C3D759F07776633849CF7F486B8D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/3137392e3130392e3132302e302f32322d3234203d3e20323637313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:51:a2:12:95:74:d4:48:d0:60:c7:5c:7d:54:f9:1b:a6:49:
         7b:ba:b2:4f:5a:04:a3:57:81:3a:fe:d7:3d:b7:62:44:38:87:
         c7:c2:fc:89:e2:18:a4:0b:ba:5d:dd:d7:d6:bc:27:3c:98:70:
         d2:8d:8e:29:54:7e:25:49:97:42:90:af:5e:2e:fa:2f:9f:64:
         cd:cc:0b:91:cb:b6:84:4d:fb:2d:35:8f:fb:dc:c4:9f:13:13:
         e1:cd:42:94:0c:f3:f6:cd:8d:80:e4:6f:aa:b6:1f:78:ca:e1:
         31:8e:2b:00:61:10:ec:3e:7f:e5:44:7b:35:81:e9:60:ff:54:
         28:a5:99:39:2a:48:90:a7:de:9c:7d:0a:47:30:67:93:0a:82:
         4e:b6:29:69:65:2f:3e:50:37:47:fe:4b:28:a8:33:8f:7a:99:
         b7:ca:77:33:54:cf:85:3c:c5:05:45:51:b5:21:e6:25:ac:0e:
         c2:4b:01:95:e3:29:67:73:d0:b4:2b:31:50:e7:f6:78:7b:29:
         40:41:c6:08:d5:90:cf:48:8f:da:6e:71:f0:54:1d:83:6d:76:
         d1:83:69:4a:f3:9c:fc:ef:e5:57:aa:23:bb:53:a2:26:ca:4d:
         7a:52:7a:d9:7a:71:31:c0:56:8b:06:90:de:52:af:a7:45:d2:
         52:59:b5:aa
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUdo33TntiL83EAYKjYQgtH9VN3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNBQkU5OTkzNjZDM0Q3NTlGMDc3NzY2MzM4NDlDRjdG
NDg2QjhEMzAeFw0yNTA4MTMxMzAxMzVaFw0yNjA4MTIxMzA2MzVaMDMxMTAvBgNV
BAMTKDg0OTFBRTAwNTc1MjA5NzBDOTFBNzNGMEU3RkJFRDZGQTFFMDcyOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdsNZB/TvMSDoWpNlJDaCoM+Kc
umkIiptM8XF+C3AsiGUGVX1/N7VLGUVKkHyAN2PEnqNAIOstTkfjVLQQ3b2ZABIB
ddyG6x7fio3p+K5/x8bZ625bnw2WUhxdnL7o0GpDkOTtTVxVcMKt9z1ss2sTcz5F
t6ChzM0sYdi33oh8vtzk1QORuMOsL8XNElB2PaaZk3PWdl2jLjh0N1dUZqS7ACTl
Bfra5Al1bkVDtCPMeQlyKOy5v1VhfgwJ8M7eKzdFNIU/liVCOmpKxM0VqvRVGpKf
F2/cuP113d6z3oi1OqgAOV17Q8TRNj2bkssFZHJ7oj9/ac9l75aScZCsT46BAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUhJGuAFdSCXDJGnPw5/vtb6HgcpowHwYDVR0j
BBgwFoAU7KvpmTZsPXWfB3dmM4Sc9/SGuNMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9kVXNnZmphTDE2ODFLeFpuRGZNd29yZFBLWGNoSHdkOXF5Zk15eHE4eDh6
LzAvRUNBQkU5OTkzNjZDM0Q3NTlGMDc3NzY2MzM4NDlDRjdGNDg2QjhEMy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FQ0FCRTk5OTM2NkMzRDc1OUYw
Nzc3NjYzMzg0OUNGN0Y0ODZCOEQzLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9k
VXNnZmphTDE2ODFLeFpuRGZNd29yZFBLWGNoSHdkOXF5Zk15eHE4eDh6LzAvMzEz
NzM5MmUzMTMwMzkyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYz
NzMxMzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEArNteDANBgkqhkiG9w0BAQsFAAOCAQEApVGiEpV0
1EjQYMdcfVT5G6ZJe7qyT1oEo1eBOv7XPbdiRDiHx8L8ieIYpAu6Xd3X1rwnPJhw
0o2OKVR+JUmXQpCvXi76L59kzcwLkcu2hE37LTWP+9zEnxMT4c1ClAzz9s2NgORv
qrYfeMrhMY4rAGEQ7D5/5UR7NYHpYP9UKKWZOSpIkKfenH0KRzBnkwqCTrYpaWUv
PlA3R/5LKKgzj3qZt8p3M1TPhTzFBUVRtSHmJawOwksBleMpZ3PQtCsxUOf2eHsp
QEHGCNWQz0iP2m5x8FQdg2120YNpSvOc/O/lV6oju1OiJspNelJ62XpxMcBWiwaQ
3lKvp0XSUlm1qg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:41:29 2025 by rpki-client