Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39352e302f32342d3234203d3e20323633363237.roa
File:                     3137372e31322e39352e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          oSAquLz9AioGwjNKP8Kq0w6PYEeJcqh52qZ/aRBQRdk=
Subject key identifier:   51:9A:EA:AA:FA:2D:E0:21:80:49:D0:27:CC:1B:4E:6D:D7:DC:12:80
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       7411536F548E97E896E092E2EAC957182D7F6083
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39352e302f32342d3234203d3e20323633363237.roa
Signing time:             Tue 25 Mar 2025 20:13:32 +0000
ROA not before:           Tue 25 Mar 2025 20:08:32 +0000
ROA not after:            Tue 24 Mar 2026 20:13:32 +0000
asID:                     263627
IP address blocks:        177.12.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 01:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:11:53:6f:54:8e:97:e8:96:e0:92:e2:ea:c9:57:18:2d:7f:60:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Mar 25 20:08:32 2025 GMT
            Not After : Mar 24 20:13:32 2026 GMT
        Subject: CN=519AEAAAFA2DE0218049D027CC1B4E6DD7DC1280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bc:3a:10:b1:da:c8:ef:82:2f:b7:bd:d5:7b:
                    5d:b1:cc:d6:94:46:4b:1d:b0:a7:3b:57:13:0b:2e:
                    11:d8:13:5c:5c:82:e9:30:54:e0:b4:f8:25:b8:ac:
                    f2:7a:73:00:da:1e:93:b4:66:44:8f:f5:bc:50:dc:
                    8a:ca:c8:d9:57:34:1e:00:de:18:ae:9e:d8:7d:31:
                    a5:57:84:c8:81:3a:1d:5b:c7:e3:3c:3a:56:a8:1d:
                    cd:8e:bb:82:af:e2:58:30:ff:27:7c:2e:72:0c:45:
                    c6:db:92:c5:73:a8:44:ad:63:53:23:9a:af:ba:b1:
                    eb:f1:3c:ab:b3:7c:6f:01:03:e9:d4:9c:a2:65:8c:
                    97:dd:73:ba:26:8c:49:6c:cf:8f:6e:47:82:69:f6:
                    6d:ae:48:3d:b3:1b:1f:95:7e:a0:77:d9:68:e3:54:
                    44:b6:03:7c:10:f2:55:0a:0d:57:99:6b:87:9b:ba:
                    f5:d9:37:52:f9:03:31:b8:82:fe:7f:f0:ca:d4:93:
                    bd:4c:2e:5f:5c:16:eb:e6:c8:7b:98:34:e6:72:d9:
                    1e:52:95:74:46:0a:e2:31:46:4d:ba:b4:b0:88:41:
                    ca:04:a3:22:73:d8:b6:8a:4e:95:42:85:67:fc:07:
                    73:bc:95:1c:24:66:6c:06:40:00:05:46:93:60:60:
                    f2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9A:EA:AA:FA:2D:E0:21:80:49:D0:27:CC:1B:4E:6D:D7:DC:12:80
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39352e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:61:7b:8f:7b:1e:7e:50:ba:2b:05:54:3c:01:c3:db:2b:6e:
         e8:75:fa:f8:99:7b:d8:4f:b8:65:7e:ce:47:65:32:a4:44:76:
         43:66:de:6f:78:f7:21:ea:fe:49:5e:89:2d:e8:11:08:ab:de:
         bb:ac:17:ef:06:9d:23:03:c9:0c:28:05:4c:0b:bc:56:0a:73:
         86:fe:b0:24:7f:8e:6f:2c:91:36:67:49:1b:93:d3:21:5c:5f:
         42:8e:e9:4f:21:b9:32:ff:59:85:74:94:0a:5f:93:2b:43:90:
         39:25:a7:7b:ca:65:46:93:3c:5e:79:74:61:a8:6c:79:54:07:
         8f:54:b4:52:2b:4d:6e:1e:c9:bc:33:28:17:c2:49:bd:32:fc:
         fa:05:48:a9:cd:1b:c1:b3:d0:f1:40:34:fc:51:76:78:99:a9:
         96:26:91:68:89:14:de:6b:95:f3:19:32:78:36:7a:5d:cd:6b:
         28:bb:7b:da:42:4a:85:5c:18:12:2b:0b:04:01:62:4f:7e:2c:
         c5:97:79:61:44:a2:1a:31:3c:81:b7:f1:02:67:65:ae:3a:4c:
         e8:84:27:5f:1c:23:55:ac:0c:04:ab:38:68:c7:9f:f0:e8:31:
         bf:01:63:cb:32:69:47:89:bf:cc:9a:42:cc:05:b8:5a:f1:86:
         e0:32:e7:4d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdBFTb1SOl+iW4JLi6slXGC1/YIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFBMDE1MDYyMzE2MTFDODc0NjE0NDI0NzVCMTQwMUFE
NURFMzhEMjAeFw0yNTAzMjUyMDA4MzJaFw0yNjAzMjQyMDEzMzJaMDMxMTAvBgNV
BAMTKDUxOUFFQUFBRkEyREUwMjE4MDQ5RDAyN0NDMUI0RTZERDdEQzEyODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZvDoQsdrI74Ivt73Ve12xzNaU
RksdsKc7VxMLLhHYE1xcgukwVOC0+CW4rPJ6cwDaHpO0ZkSP9bxQ3IrKyNlXNB4A
3hiunth9MaVXhMiBOh1bx+M8OlaoHc2Ou4Kv4lgw/yd8LnIMRcbbksVzqEStY1Mj
mq+6sevxPKuzfG8BA+nUnKJljJfdc7omjElsz49uR4Jp9m2uSD2zGx+VfqB32Wjj
VES2A3wQ8lUKDVeZa4ebuvXZN1L5AzG4gv5/8MrUk71MLl9cFuvmyHuYNOZy2R5S
lXRGCuIxRk26tLCIQcoEoyJz2LaKTpVChWf8B3O8lRwkZmwGQAAFRpNgYPJNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUZrqqvot4CGASdAnzBtObdfcEoAwHwYDVR0j
BBgwFoAUEaAVBiMWEch0YUQkdbFAGtXeONIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3lqR2FYcGpoUG5ERVhoUnE4aDhkUVQ4dTNxYnZDempTbVRWdjN4VEx6
V2kvMC8xMUEwMTUwNjIzMTYxMUM4NzQ2MTQ0MjQ3NUIxNDAxQUQ1REUzOEQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQTAxNTA2MjMxNjExQzg3
NDYxNDQyNDc1QjE0MDFBRDVERTM4RDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN5akdhWHBqaFBuREVYaFJxOGg4ZFFUOHUzcWJ2Q3pqU21UVnYzeFRMeldpLzAv
MzEzNzM3MmUzMTMyMmUzOTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzYzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsQxfMA0GCSqGSIb3DQEBCwUAA4IBAQBSYXuPex5+
ULorBVQ8AcPbK27odfr4mXvYT7hlfs5HZTKkRHZDZt5vePch6v5JXokt6BEIq967
rBfvBp0jA8kMKAVMC7xWCnOG/rAkf45vLJE2Z0kbk9MhXF9CjulPIbky/1mFdJQK
X5MrQ5A5Jad7ymVGkzxeeXRhqGx5VAePVLRSK01uHsm8MygXwkm9Mvz6BUipzRvB
s9DxQDT8UXZ4mamWJpFoiRTea5XzGTJ4NnpdzWsou3vaQkqFXBgSKwsEAWJPfizF
l3lhRKIaMTyBt/ECZ2WuOkzohCdfHCNVrAwEqzhox5/w6DG/AWPLMmlHib/MmkLM
Bbha8YbgMudN
-----END CERTIFICATE-----
Generated at Sat May 10 04:59:27 2025 by rpki-client