Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/3137392e35312e3137372e302f32342d3234203d3e20323731313735.roa
File:                     3137392e35312e3137372e302f32342d3234203d3e20323731313735.roa (raw, json)
Hash identifier:          P0pUoyNMLWvtRCsWESafGfgdeRUsGlQAsYFF1EfAcI0=
Subject key identifier:   14:13:2C:46:04:3D:09:D6:8E:1A:7F:7F:72:6F:25:54:2A:90:DC:E2
Certificate issuer:       /CN=46D2B31940627B8DA0E1405BFD2813DB97711E0A
Certificate serial:       23866D954297D829AB7E7AB614079DEFC2A6B863
Authority key identifier: 46:D2:B3:19:40:62:7B:8D:A0:E1:40:5B:FD:28:13:DB:97:71:1E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/3137392e35312e3137372e302f32342d3234203d3e20323731313735.roa
Signing time:             Fri 25 Apr 2025 11:14:47 +0000
ROA not before:           Fri 25 Apr 2025 11:09:47 +0000
ROA not after:            Fri 24 Apr 2026 11:14:47 +0000
asID:                     271175
IP address blocks:        179.51.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.crl
                          rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 22:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:86:6d:95:42:97:d8:29:ab:7e:7a:b6:14:07:9d:ef:c2:a6:b8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46D2B31940627B8DA0E1405BFD2813DB97711E0A
        Validity
            Not Before: Apr 25 11:09:47 2025 GMT
            Not After : Apr 24 11:14:47 2026 GMT
        Subject: CN=14132C46043D09D68E1A7F7F726F25542A90DCE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3c:54:5b:59:5e:9c:80:b4:b9:ca:3b:d6:98:
                    f0:ef:7f:5e:13:a2:17:6c:6e:ec:67:c9:87:cb:c5:
                    59:b4:7b:a5:a8:eb:06:32:87:d9:4e:79:0f:62:8c:
                    28:90:22:79:4c:57:55:8a:ca:53:db:b2:82:47:9d:
                    c5:99:f4:5f:e1:96:e8:24:95:3b:83:89:aa:fc:75:
                    89:27:3e:c5:1f:91:38:86:80:ea:30:f9:6f:24:b6:
                    4a:28:32:3e:ec:85:50:86:c2:91:7e:a9:f7:6f:49:
                    a7:9c:c5:1c:02:b1:9b:6a:92:d3:3d:80:27:12:92:
                    2b:f2:57:9a:ef:05:80:07:d5:91:3f:c4:51:5c:e1:
                    50:cc:08:91:d1:e2:05:b0:35:ca:dc:35:a7:81:01:
                    53:75:7f:0f:0f:06:46:9e:f7:0a:a6:96:a4:85:94:
                    65:33:57:04:7c:2b:dd:3d:b6:00:6f:4d:b6:f6:f3:
                    6e:57:86:c2:bd:63:b4:3a:32:59:e1:a2:4e:46:25:
                    af:4a:69:d6:ea:66:2c:07:9f:ac:cc:5c:34:c7:5d:
                    1d:c3:0a:69:e5:96:30:45:b2:7a:db:67:1a:fa:24:
                    e6:20:f2:43:06:64:ad:21:83:d8:f9:37:11:bd:5b:
                    11:23:34:8f:5a:4d:51:a5:01:1b:1a:cd:5e:7d:37:
                    3e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:13:2C:46:04:3D:09:D6:8E:1A:7F:7F:72:6F:25:54:2A:90:DC:E2
            X509v3 Authority Key Identifier:
                keyid:46:D2:B3:19:40:62:7B:8D:A0:E1:40:5B:FD:28:13:DB:97:71:1E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/3137392e35312e3137372e302f32342d3234203d3e20323731313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:37:d7:78:7f:a7:4a:0c:81:4e:6a:fc:f3:eb:5c:ab:5c:10:
         bf:96:d1:a9:d1:28:10:90:b1:3a:60:15:0b:6c:50:e0:4c:b1:
         36:e2:7b:20:2a:71:de:03:36:20:5d:66:0d:f5:dd:22:0d:e4:
         36:0d:d3:5d:2b:ae:f6:94:52:42:fd:74:f9:8b:e7:9a:cf:3f:
         87:72:14:18:76:47:34:b0:31:ae:3f:e8:46:24:8a:cf:e4:7e:
         5a:fc:c2:11:da:e7:67:8b:71:45:58:c3:9f:7f:67:89:62:7a:
         38:e5:1d:63:bb:0b:9e:5e:62:2f:53:a2:54:5d:b0:77:14:3d:
         1a:4a:81:b4:a5:26:88:a5:0b:7d:94:af:f4:98:3b:ed:79:7d:
         fe:a5:6d:d2:21:c8:be:e9:be:33:ae:54:73:4c:4b:3c:94:4f:
         9e:92:58:88:ab:e7:52:99:50:64:99:56:06:5d:11:35:10:cc:
         32:24:83:38:aa:d1:81:58:04:bb:27:f0:cb:64:db:c9:6a:bd:
         20:f7:5a:26:3c:7c:49:a0:cb:eb:44:36:d1:d1:81:ae:b9:58:
         23:4b:6b:6a:60:72:6c:cb:d8:eb:ea:5b:47:20:1f:dc:be:e7:
         ba:ae:0c:3d:a9:cb:32:3d:8f:68:da:fb:be:7c:e3:18:db:e6:
         d6:57:1f:87
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUI4ZtlUKX2Cmrfnq2FAed78KmuGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZEMkIzMTk0MDYyN0I4REEwRTE0MDVCRkQyODEzREI5
NzcxMUUwQTAeFw0yNTA0MjUxMTA5NDdaFw0yNjA0MjQxMTE0NDdaMDMxMTAvBgNV
BAMTKDE0MTMyQzQ2MDQzRDA5RDY4RTFBN0Y3RjcyNkYyNTU0MkE5MERDRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZPFRbWV6cgLS5yjvWmPDvf14T
ohdsbuxnyYfLxVm0e6Wo6wYyh9lOeQ9ijCiQInlMV1WKylPbsoJHncWZ9F/hlugk
lTuDiar8dYknPsUfkTiGgOow+W8ktkooMj7shVCGwpF+qfdvSaecxRwCsZtqktM9
gCcSkivyV5rvBYAH1ZE/xFFc4VDMCJHR4gWwNcrcNaeBAVN1fw8PBkae9wqmlqSF
lGUzVwR8K909tgBvTbb2825XhsK9Y7Q6Mlnhok5GJa9KadbqZiwHn6zMXDTHXR3D
CmnlljBFsnrbZxr6JOYg8kMGZK0hg9j5NxG9WxEjNI9aTVGlARsazV59Nz4dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFBMsRgQ9CdaOGn9/cm8lVCqQ3OIwHwYDVR0j
BBgwFoAURtKzGUBie42g4UBb/SgT25dxHgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZ6cHhGbVRoYUw3UW5uVWo5cGhXRnZuQ3J1aEdGaHlGb1VMUW5VN1di
a20vMC80NkQyQjMxOTQwNjI3QjhEQTBFMTQwNUJGRDI4MTNEQjk3NzExRTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2RDJCMzE5NDA2MjdCOERB
MEUxNDA1QkZEMjgxM0RCOTc3MTFFMEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGenB4Rm1UaGFMN1FublVqOXBoV0Z2bkNydWhHRmh5Rm9VTFFuVTdXYmttLzAv
MzEzNzM5MmUzNTMxMmUzMTM3MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMTM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzM7EwDQYJKoZIhvcNAQELBQADggEBAEs313h/
p0oMgU5q/PPrXKtcEL+W0anRKBCQsTpgFQtsUOBMsTbieyAqcd4DNiBdZg313SIN
5DYN010rrvaUUkL9dPmL55rPP4dyFBh2RzSwMa4/6EYkis/kflr8whHa52eLcUVY
w59/Z4liejjlHWO7C55eYi9TolRdsHcUPRpKgbSlJoilC32Ur/SYO+15ff6lbdIh
yL7pvjOuVHNMSzyUT56SWIir51KZUGSZVgZdETUQzDIkgziq0YFYBLsn8Mtk28lq
vSD3WiY8fEmgy+tENtHRga65WCNLa2pgcmzL2OvqW0cgH9y+57quDD2pyzI9j2ja
+7584xjb5tZXH4c=
-----END CERTIFICATE-----
Generated at Fri May 2 23:14:44 2025 by rpki-client