Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e37322e3230382e302f32312d3234203d3e203532393635.roa
File:                     3137372e37322e3230382e302f32312d3234203d3e203532393635.roa (raw, json)
Hash identifier:          cdVZlBL5/6VRlwCU7qIKtQ9eEqS+ZvDqNGIxNxhVaV8=
Subject key identifier:   B1:21:4A:2E:5B:B3:20:34:73:40:6C:99:26:8E:C8:19:4A:41:AC:EB
Certificate issuer:       /CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
Certificate serial:       37A8DC22EB311387516006C15B1B5B42D2646704
Authority key identifier: 31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e37322e3230382e302f32312d3234203d3e203532393635.roa
Signing time:             Thu 24 Apr 2025 12:35:33 +0000
ROA not before:           Thu 24 Apr 2025 12:30:33 +0000
ROA not after:            Thu 23 Apr 2026 12:35:33 +0000
asID:                     52965
IP address blocks:        177.72.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl
                          rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 May 2025 03:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a8:dc:22:eb:31:13:87:51:60:06:c1:5b:1b:5b:42:d2:64:67:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
        Validity
            Not Before: Apr 24 12:30:33 2025 GMT
            Not After : Apr 23 12:35:33 2026 GMT
        Subject: CN=B1214A2E5BB3203473406C99268EC8194A41ACEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:61:2b:ab:b9:d1:8d:dc:95:bb:1c:be:89:
                    ca:db:02:8d:93:77:8f:3a:4c:19:62:7b:82:34:cf:
                    34:e8:d1:2a:12:cb:3c:46:84:8d:76:76:b9:02:c6:
                    be:ee:a7:e6:d9:99:96:d5:3a:53:44:e4:cb:65:ac:
                    b3:14:17:1a:d7:a0:f6:59:85:72:e9:44:76:24:66:
                    d1:42:1d:88:54:82:88:5e:4f:b3:de:ee:25:39:e1:
                    35:e7:20:85:7b:11:96:71:35:5d:81:e3:5c:86:fd:
                    40:67:37:8f:22:9d:b7:2f:1d:8a:81:e8:76:dc:64:
                    75:0a:94:47:42:ea:cf:c2:86:b1:1b:d2:a3:d4:42:
                    b9:f5:e5:b4:ae:b5:2e:4b:39:3f:eb:4c:a2:4f:87:
                    ec:55:1b:21:76:85:28:49:44:ed:a1:85:c0:22:55:
                    a1:a2:c6:1e:26:11:aa:be:4e:0c:74:99:1c:ac:cf:
                    8d:15:9b:1a:a3:c5:51:a4:56:2b:2a:87:2d:76:c8:
                    b3:34:6e:3b:b3:03:c7:0a:dd:d0:98:94:ff:56:9a:
                    8d:47:f1:87:fe:9c:2d:eb:90:13:41:19:ce:3c:fe:
                    b9:28:7d:58:fb:7f:76:d2:e7:ba:ee:dc:6a:82:c7:
                    db:ae:47:ec:60:31:76:b9:97:15:fa:b7:9e:8d:dd:
                    62:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:21:4A:2E:5B:B3:20:34:73:40:6C:99:26:8E:C8:19:4A:41:AC:EB
            X509v3 Authority Key Identifier:
                keyid:31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e37322e3230382e302f32312d3234203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:a0:98:3a:a9:56:10:0b:d1:1f:6e:7e:93:46:0c:28:db:23:
         b4:c0:8b:e6:26:00:81:dd:ca:e9:c3:01:35:d8:86:17:aa:47:
         f0:b9:df:01:9d:d5:9c:21:9f:78:dc:8c:17:4e:37:22:32:96:
         73:01:cc:39:1c:99:d1:2a:91:ae:84:0e:c7:82:1b:68:2f:aa:
         85:02:d8:33:b6:a7:dc:62:5e:8b:14:71:3c:50:98:77:44:ac:
         d8:83:fb:cd:0a:17:45:c9:40:ac:32:b8:9b:50:be:71:56:ff:
         f6:32:d5:65:0e:f2:5e:49:0b:d4:d2:08:32:dc:e0:8c:24:4b:
         05:4e:3c:67:75:be:1a:a8:da:8c:ad:9c:c2:08:4c:50:0b:e2:
         76:ef:2d:3a:0f:82:91:72:f8:1f:b2:e6:36:4d:1c:d6:06:2c:
         9f:fd:e2:0b:a1:7f:c7:d5:82:58:51:87:6d:e3:11:21:40:ed:
         0c:1a:fb:04:22:8b:be:0b:97:e8:85:09:27:66:2c:b2:dd:e4:
         c6:58:75:6a:04:69:e2:ad:1f:a5:7f:7b:8a:cd:8f:9d:b3:d6:
         d6:cd:61:f8:01:73:c2:f5:8c:42:4b:1c:8d:22:be:f1:c1:bd:
         95:84:de:94:15:35:ab:25:11:e6:9b:98:91:91:55:03:ee:d8:
         5a:cd:a5:98
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUN6jcIusxE4dRYAbBWxtbQtJkZwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE2RjI5ODVEOTNEMzFEQ0ZFMkZFQTNCRkZBRDgxRTVC
NjA2RjZCMTAeFw0yNTA0MjQxMjMwMzNaFw0yNjA0MjMxMjM1MzNaMDMxMTAvBgNV
BAMTKEIxMjE0QTJFNUJCMzIwMzQ3MzQwNkM5OTI2OEVDODE5NEE0MUFDRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OGErq7nRjdyVuxy+icrbAo2T
d486TBlie4I0zzTo0SoSyzxGhI12drkCxr7up+bZmZbVOlNE5MtlrLMUFxrXoPZZ
hXLpRHYkZtFCHYhUgoheT7Pe7iU54TXnIIV7EZZxNV2B41yG/UBnN48inbcvHYqB
6HbcZHUKlEdC6s/ChrEb0qPUQrn15bSutS5LOT/rTKJPh+xVGyF2hShJRO2hhcAi
VaGixh4mEaq+Tgx0mRysz40VmxqjxVGkVisqhy12yLM0bjuzA8cK3dCYlP9Wmo1H
8Yf+nC3rkBNBGc48/rkofVj7f3bS57ru3GqCx9uuR+xgMXa5lxX6t56N3WLvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsSFKLluzIDRzQGyZJo7IGUpBrOswHwYDVR0j
BBgwFoAUMW8phdk9Mdz+L+o7/62B5bYG9rEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR24yOHN4bVB0Z0VmcXBhSjZFdHdENHE0S3dZTWRXaDQxemIxdVpFOWFC
Q1gvMC8zMTZGMjk4NUQ5M0QzMURDRkUyRkVBM0JGRkFEODFFNUI2MDZGNkIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxNkYyOTg1RDkzRDMxRENG
RTJGRUEzQkZGQUQ4MUU1QjYwNkY2QjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duMjhzeG1QdGdFZnFwYUo2RXR3RDRxNEt3WU1kV2g0MXpiMXVaRTlhQkNYLzAv
MzEzNzM3MmUzNzMyMmUzMjMwMzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMy
MzkzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsUjQMA0GCSqGSIb3DQEBCwUAA4IBAQCVoJg6qVYQ
C9Efbn6TRgwo2yO0wIvmJgCB3crpwwE12IYXqkfwud8BndWcIZ943IwXTjciMpZz
Acw5HJnRKpGuhA7HghtoL6qFAtgztqfcYl6LFHE8UJh3RKzYg/vNChdFyUCsMrib
UL5xVv/2MtVlDvJeSQvU0ggy3OCMJEsFTjxndb4aqNqMrZzCCExQC+J27y06D4KR
cvgfsuY2TRzWBiyf/eILoX/H1YJYUYdt4xEhQO0MGvsEIou+C5fohQknZiyy3eTG
WHVqBGnirR+lf3uKzY+ds9bWzWH4AXPC9YxCSxyNIr7xwb2VhN6UFTWrJRHmm5iR
kVUD7thazaWY
-----END CERTIFICATE-----
Generated at Wed May 7 14:00:17 2025 by rpki-client