Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/3137372e32322e33322e302f32302d3234203d3e203532393831.roa
File:                     3137372e32322e33322e302f32302d3234203d3e203532393831.roa (raw, json)
Hash identifier:          BtHO1/BvTn/rzMwnPK3Yuahu5bdt5KP1wDLdBeKpufg=
Subject key identifier:   D7:A5:66:03:5C:DD:0E:49:A3:76:6F:70:02:CC:C4:8F:3A:24:B5:77
Certificate issuer:       /CN=0B1CB0F64F2EB6F6050796AC4CD16208EC123488
Certificate serial:       64E3916F80793F3BE8138C86197D1673DD5CFF61
Authority key identifier: 0B:1C:B0:F6:4F:2E:B6:F6:05:07:96:AC:4C:D1:62:08:EC:12:34:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/3137372e32322e33322e302f32302d3234203d3e203532393831.roa
Signing time:             Fri 02 May 2025 17:25:08 +0000
ROA not before:           Fri 02 May 2025 17:20:08 +0000
ROA not after:            Fri 01 May 2026 17:25:08 +0000
asID:                     52981
IP address blocks:        177.22.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.crl
                          rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 19:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e3:91:6f:80:79:3f:3b:e8:13:8c:86:19:7d:16:73:dd:5c:ff:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1CB0F64F2EB6F6050796AC4CD16208EC123488
        Validity
            Not Before: May  2 17:20:08 2025 GMT
            Not After : May  1 17:25:08 2026 GMT
        Subject: CN=D7A566035CDD0E49A3766F7002CCC48F3A24B577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6b:f1:59:c5:02:89:7f:3e:a7:17:ba:79:83:
                    39:36:ae:be:e6:7a:42:fa:db:bf:6e:eb:4c:a5:ea:
                    bd:ca:d0:16:5a:23:a1:e4:30:0b:9b:8b:7f:4c:1f:
                    46:97:f9:91:f7:3e:1e:ce:d5:40:fb:ae:90:c5:7b:
                    e6:08:fd:55:fb:84:2d:6d:77:24:fc:cf:ec:de:e8:
                    9b:cc:d7:c9:ba:23:43:37:34:7e:1b:de:4a:b1:9e:
                    10:d0:80:a1:6e:d2:12:e8:f5:9a:cc:57:18:28:1b:
                    d2:6e:16:49:16:75:d9:c4:32:60:3e:62:14:e4:0a:
                    c4:a1:e1:bc:73:7f:82:82:a8:07:c0:b8:89:12:f7:
                    41:5d:ef:d3:90:a5:3a:f4:18:02:14:31:3f:a9:bb:
                    84:45:09:c5:b2:44:d9:19:4f:89:96:73:a7:fd:10:
                    af:43:9a:22:ae:14:5a:42:5d:93:27:99:f7:01:26:
                    0f:9b:b7:59:30:e8:fb:3e:a3:5d:c1:58:8b:83:3e:
                    12:ee:55:3d:18:49:88:33:d2:c2:c5:ea:22:52:85:
                    5e:68:13:ea:0a:d2:b9:7c:ad:8f:c0:dd:e2:46:8c:
                    10:b4:54:ea:77:c2:fd:96:26:16:b6:e7:72:0c:a7:
                    fc:96:6e:c6:cb:12:28:a7:08:34:be:42:24:92:66:
                    0e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A5:66:03:5C:DD:0E:49:A3:76:6F:70:02:CC:C4:8F:3A:24:B5:77
            X509v3 Authority Key Identifier:
                keyid:0B:1C:B0:F6:4F:2E:B6:F6:05:07:96:AC:4C:D1:62:08:EC:12:34:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/3137372e32322e33322e302f32302d3234203d3e203532393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:54:59:32:7b:a4:1a:76:01:d9:80:ef:11:70:4f:8c:b1:ed:
         5c:23:e1:fe:b1:20:d8:34:52:9e:19:a2:44:b6:56:8e:79:30:
         55:d8:27:8f:35:c2:81:17:d1:10:4c:41:fc:b9:b3:98:05:98:
         ed:59:de:17:53:f0:30:0e:cd:40:71:6e:ad:65:c8:1f:7f:dc:
         fb:c8:00:fa:b9:6b:a6:47:78:07:c7:1a:bb:ca:fb:d0:c5:75:
         a1:3f:d0:ad:21:53:1e:e9:d8:2e:17:38:1d:7a:6a:76:ec:84:
         eb:6d:96:94:1f:af:58:66:9a:e0:66:ef:73:fd:a9:e3:a3:33:
         dc:19:d1:2c:7c:82:33:43:86:fb:07:1b:f7:6a:ca:0e:6d:5d:
         6a:e5:ef:71:a3:91:70:61:e6:6c:cb:0d:a4:07:55:c3:1f:47:
         84:16:8e:67:df:39:45:0c:6f:c3:9b:a4:c1:ee:1d:80:9e:17:
         f6:3e:6a:44:c6:92:be:8d:d7:04:10:cd:52:90:7f:12:b0:f4:
         16:0a:0c:fd:56:05:e5:cc:fc:f9:28:cf:f8:53:3e:cc:bf:b7:
         6d:e1:1b:28:b8:57:96:98:7c:6e:64:6b:82:1e:52:84:ee:d8:
         6f:06:2a:80:68:75:77:55:25:d7:1c:22:60:7d:30:93:4d:e1:
         d0:0b:f2:57
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUZOORb4B5PzvoE4yGGX0Wc91c/2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIxQ0IwRjY0RjJFQjZGNjA1MDc5NkFDNENEMTYyMDhF
QzEyMzQ4ODAeFw0yNTA1MDIxNzIwMDhaFw0yNjA1MDExNzI1MDhaMDMxMTAvBgNV
BAMTKEQ3QTU2NjAzNUNERDBFNDlBMzc2NkY3MDAyQ0NDNDhGM0EyNEI1NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaa/FZxQKJfz6nF7p5gzk2rr7m
ekL6279u60yl6r3K0BZaI6HkMAubi39MH0aX+ZH3Ph7O1UD7rpDFe+YI/VX7hC1t
dyT8z+ze6JvM18m6I0M3NH4b3kqxnhDQgKFu0hLo9ZrMVxgoG9JuFkkWddnEMmA+
YhTkCsSh4bxzf4KCqAfAuIkS90Fd79OQpTr0GAIUMT+pu4RFCcWyRNkZT4mWc6f9
EK9DmiKuFFpCXZMnmfcBJg+bt1kw6Ps+o13BWIuDPhLuVT0YSYgz0sLF6iJShV5o
E+oK0rl8rY/A3eJGjBC0VOp3wv2WJha253IMp/yWbsbLEiinCDS+QiSSZg4hAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU16VmA1zdDkmjdm9wAszEjzoktXcwHwYDVR0j
BBgwFoAUCxyw9k8utvYFB5asTNFiCOwSNIgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFVrTUxkemQ4UEFoRjJ4Tmo1Y1JnbmFONFZCamRMZG50a3BiTm50RTN0
UUovMC8wQjFDQjBGNjRGMkVCNkY2MDUwNzk2QUM0Q0QxNjIwOEVDMTIzNDg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCMUNCMEY2NEYyRUI2RjYw
NTA3OTZBQzRDRDE2MjA4RUMxMjM0ODguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhVa01MZHpkOFBBaEYyeE5qNWNSZ25hTjRWQmpkTGRudGtwYk5udEUzdFFKLzAv
MzEzNzM3MmUzMjMyMmUzMzMyMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzUzMjM5
MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLEWIDANBgkqhkiG9w0BAQsFAAOCAQEAGVRZMnukGnYB
2YDvEXBPjLHtXCPh/rEg2DRSnhmiRLZWjnkwVdgnjzXCgRfREExB/LmzmAWY7Vne
F1PwMA7NQHFurWXIH3/c+8gA+rlrpkd4B8cau8r70MV1oT/QrSFTHunYLhc4HXpq
duyE622WlB+vWGaa4Gbvc/2p46Mz3BnRLHyCM0OG+wcb92rKDm1dauXvcaORcGHm
bMsNpAdVwx9HhBaOZ985RQxvw5ukwe4dgJ4X9j5qRMaSvo3XBBDNUpB/ErD0FgoM
/VYF5cz8+SjP+FM+zL+3beEbKLhXlph8bmRrgh5ShO7YbwYqgGh1d1Ul1xwiYH0w
k03h0AvyVw==
-----END CERTIFICATE-----
Generated at Fri May 2 21:08:59 2025 by rpki-client