Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137372e3132392e3132332e302f32342d3234203d3e203238313538.roa
File:                     3137372e3132392e3132332e302f32342d3234203d3e203238313538.roa (raw, json)
Hash identifier:          9FZY4YSJIARhESDPd/kakYV6Pm51QlKYSbSSWAM8HpM=
Subject key identifier:   5F:26:1A:A4:DA:1E:6B:68:7C:BB:FF:14:78:EB:1A:0C:8E:1E:05:A3
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       6AE3F9B56BBA08EA5A1FC2E872677E26EE41B67B
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137372e3132392e3132332e302f32342d3234203d3e203238313538.roa
Signing time:             Thu 31 Jul 2025 20:47:33 +0000
ROA not before:           Thu 31 Jul 2025 20:42:33 +0000
ROA not after:            Thu 30 Jul 2026 20:47:33 +0000
asID:                     28158
IP address blocks:        177.129.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 06:18:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e3:f9:b5:6b:ba:08:ea:5a:1f:c2:e8:72:67:7e:26:ee:41:b6:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Jul 31 20:42:33 2025 GMT
            Not After : Jul 30 20:47:33 2026 GMT
        Subject: CN=5F261AA4DA1E6B687CBBFF1478EB1A0C8E1E05A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1d:fb:b5:5d:1e:69:7e:f7:e1:b5:bf:b6:bb:
                    23:c4:6a:65:96:b6:7e:ee:a8:d8:30:b9:d2:81:a6:
                    d8:b5:28:71:97:4e:44:4f:4d:f7:b7:96:a3:9b:ce:
                    2d:21:d1:c9:e7:e1:59:a9:e5:73:c2:17:a6:af:4e:
                    c9:47:d7:44:79:56:a4:06:e6:5b:61:15:11:05:d4:
                    34:90:3a:9f:eb:f8:85:67:55:6c:e4:b4:d4:a2:2f:
                    24:7c:8d:5a:3d:54:8d:0c:d2:b7:7f:ae:7f:03:2e:
                    72:e2:de:e8:08:f4:8e:74:b8:5b:6f:98:f1:fa:a5:
                    96:16:6c:ab:8f:29:1a:f0:ec:f1:b4:81:dc:2a:a5:
                    42:bc:7c:b3:cb:23:de:24:78:4f:f6:02:7b:fd:a6:
                    c2:1b:60:dc:36:b1:cc:1c:14:4b:48:a9:ea:7e:f4:
                    b6:1f:c0:a1:4e:e3:ff:0d:02:ac:e8:67:db:0c:98:
                    75:54:13:4c:78:32:d4:b5:82:8c:53:7e:b9:6b:91:
                    37:85:43:4c:eb:c1:c9:77:28:d8:49:30:3b:03:fc:
                    3f:b6:4b:2f:0d:62:38:c9:4a:de:68:a0:e6:95:ba:
                    75:fe:60:c3:6c:a4:8a:62:d2:11:25:8b:6f:5e:43:
                    9f:47:5e:3a:e7:80:1a:9d:6e:7a:cf:47:3b:df:d2:
                    d7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:26:1A:A4:DA:1E:6B:68:7C:BB:FF:14:78:EB:1A:0C:8E:1E:05:A3
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137372e3132392e3132332e302f32342d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:54:48:32:80:ad:a4:f1:ec:80:d3:bf:4b:c2:5a:f5:bc:a1:
         9f:87:a3:34:aa:c5:3a:ff:61:49:4d:b1:29:eb:29:8d:74:58:
         96:37:60:5f:89:0c:6e:c2:c7:2a:e7:2a:e3:71:27:a9:c8:7c:
         77:95:6b:62:70:ec:5f:11:26:3b:2a:b5:35:bf:d7:74:34:01:
         c5:c8:1e:47:61:46:16:34:c2:31:52:d3:48:19:44:df:4a:bf:
         fd:87:fd:99:ee:1a:06:cf:31:13:d1:dd:e3:53:f4:1c:4b:86:
         83:a0:e1:b2:14:79:04:48:a0:76:fb:cc:c2:be:bc:c8:f2:cf:
         11:79:4d:0b:d3:ff:fd:46:0f:8b:2d:e4:8e:22:c6:17:93:48:
         f0:b8:55:11:22:b2:43:bb:da:89:7a:a1:1a:21:a4:c0:a3:22:
         62:f5:42:82:cc:7d:92:5e:66:f6:80:61:c2:4b:29:58:83:fe:
         c2:20:a1:35:bd:e7:90:46:16:60:a3:7c:7e:ef:58:e7:a2:e3:
         3e:40:57:d9:6e:df:d5:4e:a5:aa:e2:1f:fa:fe:35:95:a0:c1:
         bf:b8:6c:95:9b:af:d4:b9:5b:59:bd:0c:c2:ce:fb:4b:6f:bc:
         06:22:9d:05:16:9c:5e:f0:25:8c:31:a5:01:af:6f:29:97:9a:
         02:5c:af:40
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUauP5tWu6COpaH8Locmd+Ju5BtnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ1RDFBOEFGNzREOTRCMEUwQjEzNTY3MzZDOEJDOUFG
QjAxODVGRTAeFw0yNTA3MzEyMDQyMzNaFw0yNjA3MzAyMDQ3MzNaMDMxMTAvBgNV
BAMTKDVGMjYxQUE0REExRTZCNjg3Q0JCRkYxNDc4RUIxQTBDOEUxRTA1QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjHfu1XR5pfvfhtb+2uyPEamWW
tn7uqNgwudKBpti1KHGXTkRPTfe3lqObzi0h0cnn4Vmp5XPCF6avTslH10R5VqQG
5lthFREF1DSQOp/r+IVnVWzktNSiLyR8jVo9VI0M0rd/rn8DLnLi3ugI9I50uFtv
mPH6pZYWbKuPKRrw7PG0gdwqpUK8fLPLI94keE/2Anv9psIbYNw2scwcFEtIqep+
9LYfwKFO4/8NAqzoZ9sMmHVUE0x4MtS1goxTfrlrkTeFQ0zrwcl3KNhJMDsD/D+2
Sy8NYjjJSt5ooOaVunX+YMNspIpi0hEli29eQ59HXjrngBqdbnrPRzvf0tePAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXyYapNoea2h8u/8UeOsaDI4eBaMwHwYDVR0j
BBgwFoAUtF0aivdNlLDgsTVnNsi8mvsBhf4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzd6d3hiQzJBaHJjWHZvQ2U2TUVvTURKQ2dGZVJnZ2diTFo4NFVoUENt
dGsvMC9CNDVEMUE4QUY3NEQ5NEIwRTBCMTM1NjczNkM4QkM5QUZCMDE4NUZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0NUQxQThBRjc0RDk0QjBF
MEIxMzU2NzM2QzhCQzlBRkIwMTg1RkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3end4YkMyQWhyY1h2b0NlNk1Fb01ESkNnRmVSZ2dnYkxaODRVaFBDbXRrLzAv
MzEzNzM3MmUzMTMyMzkyZTMxMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxgXswDQYJKoZIhvcNAQELBQADggEBAAFUSDKA
raTx7IDTv0vCWvW8oZ+HozSqxTr/YUlNsSnrKY10WJY3YF+JDG7CxyrnKuNxJ6nI
fHeVa2Jw7F8RJjsqtTW/13Q0AcXIHkdhRhY0wjFS00gZRN9Kv/2H/ZnuGgbPMRPR
3eNT9BxLhoOg4bIUeQRIoHb7zMK+vMjyzxF5TQvT//1GD4st5I4ixheTSPC4VREi
skO72ol6oRohpMCjImL1QoLMfZJeZvaAYcJLKViD/sIgoTW955BGFmCjfH7vWOei
4z5AV9lu39VOpariH/r+NZWgwb+4bJWbr9S5W1m9DMLO+0tvvAYinQUWnF7wJYwx
pQGvbymXmgJcr0A=
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:10:25 2025 by rpki-client