Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33372e302f32342d3234203d3e20323632353738.roa
File:                     3137372e38342e33372e302f32342d3234203d3e20323632353738.roa (raw, json)
Hash identifier:          VEnB/oVoNxtuhPOMCxDhxUutNWkYQBmYlvSAp4b97uE=
Subject key identifier:   57:51:9F:0A:F1:B1:A0:E2:40:D3:DD:2B:F7:88:10:D8:87:54:B6:49
Certificate issuer:       /CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
Certificate serial:       4DC28F03296840B1906090AE2AA1AF9920B41AD4
Authority key identifier: A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33372e302f32342d3234203d3e20323632353738.roa
Signing time:             Fri 30 May 2025 17:46:27 +0000
ROA not before:           Fri 30 May 2025 17:41:27 +0000
ROA not after:            Fri 29 May 2026 17:46:27 +0000
asID:                     262578
IP address blocks:        177.84.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl
                          rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 06:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c2:8f:03:29:68:40:b1:90:60:90:ae:2a:a1:af:99:20:b4:1a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
        Validity
            Not Before: May 30 17:41:27 2025 GMT
            Not After : May 29 17:46:27 2026 GMT
        Subject: CN=57519F0AF1B1A0E240D3DD2BF78810D88754B649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:d0:23:3a:5b:44:bb:a8:8c:d6:e8:08:2c:
                    79:d3:11:8e:30:d6:2b:f9:23:e5:14:b0:70:8f:73:
                    0c:8b:3d:8e:e2:39:47:66:e7:69:ee:00:b4:2d:68:
                    78:87:ea:fd:65:8c:ff:6d:e8:c9:39:f2:de:8c:c8:
                    0b:b1:04:7d:e2:ab:5d:4d:f1:de:24:01:e6:d9:ea:
                    0b:15:ff:8f:ef:90:90:04:d4:96:e1:1c:5e:9c:13:
                    d4:2d:fe:2c:31:7f:2e:9d:4e:5e:c9:ac:64:f5:4a:
                    a8:2b:c6:ba:0a:11:1d:c3:39:2c:26:57:5a:f9:94:
                    73:e9:8e:2a:19:d6:04:b8:6d:bb:63:9e:7a:5d:c8:
                    de:ff:3f:50:11:d8:d8:f9:8f:c7:ff:ee:66:bc:f0:
                    94:3d:14:59:69:e5:e2:0e:e0:0a:81:ea:4b:71:9f:
                    8f:e0:20:29:41:dd:02:07:bd:eb:96:38:1c:72:5b:
                    12:33:7d:2b:99:5d:70:07:4f:cf:d0:b6:9f:92:6e:
                    dc:4a:f5:f8:26:88:cf:04:0e:2c:6f:a3:87:2d:be:
                    0c:06:d1:c7:03:6a:75:97:a1:9e:4d:de:27:1c:53:
                    f6:1e:aa:e8:e1:57:72:7b:73:b6:1d:1b:d9:93:f5:
                    c7:c0:14:be:a5:25:eb:a9:cb:1b:05:a7:b4:d1:db:
                    f0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:51:9F:0A:F1:B1:A0:E2:40:D3:DD:2B:F7:88:10:D8:87:54:B6:49
            X509v3 Authority Key Identifier:
                keyid:A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33372e302f32342d3234203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:89:ac:53:fe:d2:a2:b8:a2:18:e9:4c:fd:03:8d:91:81:9c:
         e0:91:cc:27:04:a3:02:d9:cd:64:88:d5:ad:d6:63:eb:16:f3:
         ce:cd:40:19:c6:e4:ef:9d:45:19:60:9a:78:2c:57:c1:8a:20:
         7e:80:87:89:47:ff:d4:e9:0b:60:fb:8d:9d:0a:b3:8b:df:cf:
         7a:4f:75:ac:70:dd:73:89:a4:ad:a4:de:7c:a3:c4:5c:9e:46:
         cc:4e:6f:6f:37:f7:77:10:94:7e:e5:f7:9d:9a:fb:b3:33:59:
         2b:76:32:a5:23:cc:34:71:f0:ee:f8:ff:96:35:29:eb:3d:f7:
         65:5a:50:88:f2:3e:51:cb:ec:b8:48:76:7c:06:9b:38:d7:61:
         cb:ac:b7:dc:11:5d:27:27:68:1b:e2:29:c5:f3:ba:0e:b4:29:
         e1:83:26:35:a1:99:41:57:e5:a3:58:df:45:c4:d1:7d:87:74:
         8f:d6:14:44:ca:f5:44:38:be:21:89:7f:bc:c3:74:c4:29:e8:
         d9:15:96:04:7f:8c:ad:fc:f5:1d:b1:9a:58:ca:2e:c3:96:f4:
         fa:14:ff:74:7e:77:eb:56:d1:21:74:92:fb:2b:0b:79:16:d0:
         a4:a2:99:7e:9a:40:41:b2:a0:76:0f:ae:84:de:b9:29:c2:bc:
         36:33:c8:02
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTcKPAyloQLGQYJCuKqGvmSC0GtQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTgwNDlEMDZDOUMzREQwOURCQjFBNDhBRjlEQTk0NkU5
RjU3QUU3NjAeFw0yNTA1MzAxNzQxMjdaFw0yNjA1MjkxNzQ2MjdaMDMxMTAvBgNV
BAMTKDU3NTE5RjBBRjFCMUEwRTI0MEQzREQyQkY3ODgxMEQ4ODc1NEI2NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoLdAjOltEu6iM1ugILHnTEY4w
1iv5I+UUsHCPcwyLPY7iOUdm52nuALQtaHiH6v1ljP9t6Mk58t6MyAuxBH3iq11N
8d4kAebZ6gsV/4/vkJAE1JbhHF6cE9Qt/iwxfy6dTl7JrGT1SqgrxroKER3DOSwm
V1r5lHPpjioZ1gS4bbtjnnpdyN7/P1AR2Nj5j8f/7ma88JQ9FFlp5eIO4AqB6ktx
n4/gIClB3QIHveuWOBxyWxIzfSuZXXAHT8/Qtp+SbtxK9fgmiM8EDixvo4ctvgwG
0ccDanWXoZ5N3iccU/YequjhV3J7c7YdG9mT9cfAFL6lJeupyxsFp7TR2/DxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUV1GfCvGxoOJA090r94gQ2IdUtkkwHwYDVR0j
BBgwFoAUqASdBsnD3QnbsaSK+dqUbp9XrnYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmNndlQ5SkU0WndkeE1EWlE4NVNFZm1MSmFzMjVLeUFSVHRCemJNNEw0
QkEvMC9BODA0OUQwNkM5QzNERDA5REJCMUE0OEFGOURBOTQ2RTlGNTdBRTc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4MDQ5RDA2QzlDM0REMDlE
QkIxQTQ4QUY5REE5NDZFOUY1N0FFNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JjZ3ZUOUpFNFp3ZHhNRFpRODVTRWZtTEphczI1S3lBUlR0QnpiTTRMNEJBLzAv
MzEzNzM3MmUzODM0MmUzMzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzUzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVQlMA0GCSqGSIb3DQEBCwUAA4IBAQCRiaxT/tKi
uKIY6Uz9A42RgZzgkcwnBKMC2c1kiNWt1mPrFvPOzUAZxuTvnUUZYJp4LFfBiiB+
gIeJR//U6Qtg+42dCrOL3896T3WscN1ziaStpN58o8RcnkbMTm9vN/d3EJR+5fed
mvuzM1krdjKlI8w0cfDu+P+WNSnrPfdlWlCI8j5Ry+y4SHZ8Bps412HLrLfcEV0n
J2gb4inF87oOtCnhgyY1oZlBV+WjWN9FxNF9h3SP1hREyvVEOL4hiX+8w3TEKejZ
FZYEf4yt/PUdsZpYyi7DlvT6FP90fnfrVtEhdJL7Kwt5FtCkopl+mkBBsqB2D66E
3rkpwrw2M8gC
-----END CERTIFICATE-----
Generated at Fri Jun 20 17:03:56 2025 by rpki-client