Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/3137372e3132382e3132342e302f32322d3234203d3e203532383632.roa
File:                     3137372e3132382e3132342e302f32322d3234203d3e203532383632.roa (raw, json)
Hash identifier:          xaBahMA5u7mz93AlQgrRBSsw4TN0lT72nMLuQXbhdKY=
Subject key identifier:   69:CD:AD:81:AE:E9:62:AB:C1:B9:EC:E6:3D:8F:82:54:77:05:37:7B
Certificate issuer:       /CN=E4D2287A592D8B7C6149FCA020C2BE650D327DBC
Certificate serial:       44DE5469F6F371EFEF9B9A101121850407D0399A
Authority key identifier: E4:D2:28:7A:59:2D:8B:7C:61:49:FC:A0:20:C2:BE:65:0D:32:7D:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/3137372e3132382e3132342e302f32322d3234203d3e203532383632.roa
Signing time:             Thu 07 Aug 2025 15:08:39 +0000
ROA not before:           Thu 07 Aug 2025 15:03:39 +0000
ROA not after:            Thu 06 Aug 2026 15:08:39 +0000
asID:                     52862
IP address blocks:        177.128.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.crl
                          rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 06:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:de:54:69:f6:f3:71:ef:ef:9b:9a:10:11:21:85:04:07:d0:39:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D2287A592D8B7C6149FCA020C2BE650D327DBC
        Validity
            Not Before: Aug  7 15:03:39 2025 GMT
            Not After : Aug  6 15:08:39 2026 GMT
        Subject: CN=69CDAD81AEE962ABC1B9ECE63D8F82547705377B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d0:ee:a7:81:64:2b:69:00:21:a5:70:4f:03:
                    f6:b3:69:79:4a:db:bd:a0:24:61:21:b4:a7:bb:b4:
                    cd:88:db:5f:47:d6:90:f8:9d:b0:38:c1:fd:3b:e3:
                    e6:54:e2:36:1e:fb:18:d8:15:ff:29:b2:80:bf:d6:
                    0c:70:85:c2:1a:cc:aa:10:f6:94:5d:48:70:6f:8f:
                    07:35:01:3d:bb:77:4b:81:f4:52:92:c7:5f:78:f7:
                    1f:e3:e9:ec:7f:e7:95:66:ba:5c:dd:81:68:e7:e4:
                    0f:28:92:e9:f4:b2:75:c1:7d:9a:37:6c:65:85:9e:
                    d8:ec:31:5a:b2:6e:47:98:b7:9b:e9:bf:c8:3d:2c:
                    64:9c:39:b9:11:ca:82:76:c7:f0:9a:cf:a5:37:0f:
                    e3:2e:76:24:c3:3b:09:c2:b1:75:4b:9e:bc:49:e6:
                    c1:9d:a3:c1:ad:10:a2:4e:be:1a:86:8f:c5:29:76:
                    1a:93:45:25:2a:41:12:ab:8d:3a:99:f8:05:23:43:
                    ca:29:06:20:41:56:2c:47:dd:9c:df:af:66:02:bd:
                    f9:3e:23:6d:26:19:58:2a:7e:31:c1:3b:68:c5:2a:
                    23:15:d5:03:21:be:69:1c:02:dc:cb:6f:e4:fd:b5:
                    ae:52:b6:00:a3:d9:f2:15:75:99:cd:ad:67:e5:ca:
                    ec:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CD:AD:81:AE:E9:62:AB:C1:B9:EC:E6:3D:8F:82:54:77:05:37:7B
            X509v3 Authority Key Identifier:
                keyid:E4:D2:28:7A:59:2D:8B:7C:61:49:FC:A0:20:C2:BE:65:0D:32:7D:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/3137372e3132382e3132342e302f32322d3234203d3e203532383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:7d:a3:e8:7e:d0:9f:15:81:58:db:ba:ef:bd:d1:ef:25:9d:
         59:09:17:ee:aa:a1:f1:ac:62:2d:27:75:24:fb:0b:4d:dc:b1:
         5c:5c:0c:8f:3b:34:a2:df:7e:b0:ce:e9:d2:f0:3f:3a:ed:b0:
         29:4a:4e:4e:71:a1:e3:e2:32:74:e3:ae:88:0f:da:ba:b6:81:
         ba:1f:9d:b3:a3:b5:47:fc:3e:ff:82:d5:93:3d:0c:db:db:ab:
         ca:e2:c4:9a:32:84:2d:3d:c1:05:9d:24:3d:ac:de:b4:64:4a:
         e2:9e:4a:ff:63:8e:34:8c:67:eb:1f:b9:55:1c:bd:50:fc:b4:
         08:cd:7b:43:3f:41:09:19:38:6d:fd:ae:aa:ba:84:86:ac:39:
         b7:25:a3:b8:2d:86:78:1e:f9:0a:7b:ea:3d:63:5b:77:9d:cd:
         57:cb:0d:16:21:98:be:80:60:f6:2f:87:cf:6d:94:9b:19:d5:
         50:e7:90:db:ea:47:2a:1d:c7:31:2f:ff:9f:53:af:a5:b8:a2:
         0d:2f:f7:54:e2:11:eb:80:ce:b8:ce:4a:45:b8:68:2e:25:e3:
         92:04:cb:8d:da:a5:db:a7:f3:4a:a5:eb:a3:90:69:2c:00:51:
         19:47:bd:1c:65:06:1c:0b:bf:24:b1:b1:64:82:98:30:fb:db:
         87:eb:0c:ca
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURN5Uafbzce/vm5oQESGFBAfQOZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTREMjI4N0E1OTJEOEI3QzYxNDlGQ0EwMjBDMkJFNjUw
RDMyN0RCQzAeFw0yNTA4MDcxNTAzMzlaFw0yNjA4MDYxNTA4MzlaMDMxMTAvBgNV
BAMTKDY5Q0RBRDgxQUVFOTYyQUJDMUI5RUNFNjNEOEY4MjU0NzcwNTM3N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL0O6ngWQraQAhpXBPA/azaXlK
272gJGEhtKe7tM2I219H1pD4nbA4wf074+ZU4jYe+xjYFf8psoC/1gxwhcIazKoQ
9pRdSHBvjwc1AT27d0uB9FKSx1949x/j6ex/55VmulzdgWjn5A8okun0snXBfZo3
bGWFntjsMVqybkeYt5vpv8g9LGScObkRyoJ2x/Caz6U3D+MudiTDOwnCsXVLnrxJ
5sGdo8GtEKJOvhqGj8UpdhqTRSUqQRKrjTqZ+AUjQ8opBiBBVixH3Zzfr2YCvfk+
I20mGVgqfjHBO2jFKiMV1QMhvmkcAtzLb+T9ta5StgCj2fIVdZnNrWflyuwxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUac2tga7pYqvBuezmPY+CVHcFN3swHwYDVR0j
BBgwFoAU5NIoelkti3xhSfygIMK+ZQ0yfbwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODFnbVVWREVUOGZ1SzY2b2Y0UlpRSFNhS2I5aVZIdjNCVzR5d3VXOUFQ
NGIvMC9FNEQyMjg3QTU5MkQ4QjdDNjE0OUZDQTAyMEMyQkU2NTBEMzI3REJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0RDIyODdBNTkyRDhCN0M2
MTQ5RkNBMDIwQzJCRTY1MEQzMjdEQkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgxZ21VVkRFVDhmdUs2Nm9mNFJaUUhTYUtiOWlWSHYzQlc0eXd1VzlBUDRiLzAv
MzEzNzM3MmUzMTMyMzgyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1
MzIzODM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxgHwwDQYJKoZIhvcNAQELBQADggEBAJh9o+h+
0J8VgVjbuu+90e8lnVkJF+6qofGsYi0ndST7C03csVxcDI87NKLffrDO6dLwPzrt
sClKTk5xoePiMnTjrogP2rq2gbofnbOjtUf8Pv+C1ZM9DNvbq8rixJoyhC09wQWd
JD2s3rRkSuKeSv9jjjSMZ+sfuVUcvVD8tAjNe0M/QQkZOG39rqq6hIasObclo7gt
hnge+Qp76j1jW3edzVfLDRYhmL6AYPYvh89tlJsZ1VDnkNvqRyodxzEv/59Tr6W4
og0v91TiEeuAzrjOSkW4aC4l45IEy43apdun80ql66OQaSwAURlHvRxlBhwLvySx
sWSCmDD724frDMo=
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:27:38 2025 by rpki-client