Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/3137392e39372e31362e302f32312d3234203d3e203238313831.roa
File:                     3137392e39372e31362e302f32312d3234203d3e203238313831.roa (raw, json)
Hash identifier:          h2W8XM2at3NYFJYnufJYaTXSX9GJvpJOp/TMajp4JtE=
Subject key identifier:   B5:E8:42:A5:AC:CE:B0:A8:C6:A6:4B:E6:A3:3F:D2:09:21:FA:A2:5A
Certificate issuer:       /CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D
Certificate serial:       7CFE4C7A1B2FB17A4678B62B731FC97732C52391
Authority key identifier: CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/3137392e39372e31362e302f32312d3234203d3e203238313831.roa
Signing time:             Fri 28 Mar 2025 00:29:25 +0000
ROA not before:           Fri 28 Mar 2025 00:24:25 +0000
ROA not after:            Fri 27 Mar 2026 00:29:25 +0000
asID:                     28181
IP address blocks:        179.97.16.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl
                          rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:fe:4c:7a:1b:2f:b1:7a:46:78:b6:2b:73:1f:c9:77:32:c5:23:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D
        Validity
            Not Before: Mar 28 00:24:25 2025 GMT
            Not After : Mar 27 00:29:25 2026 GMT
        Subject: CN=B5E842A5ACCEB0A8C6A64BE6A33FD20921FAA25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b6:fd:03:be:61:74:fa:a4:5f:e0:00:0b:e9:
                    16:c3:2f:08:98:c1:b3:33:f0:4a:e2:ff:3a:1d:36:
                    84:38:72:e6:e5:dc:07:52:7c:a0:b4:f7:d3:4d:0c:
                    84:cd:44:b1:fa:cf:42:76:55:b2:a6:5f:9d:17:c6:
                    7d:4a:37:50:5a:41:fa:bf:aa:4e:3b:e7:d3:d7:89:
                    15:3e:50:a3:b7:c7:fa:2e:c1:14:92:15:03:4b:a4:
                    5a:c8:3f:7c:bc:d6:9b:b4:07:05:c7:b7:56:93:fb:
                    fe:94:c3:1d:24:f6:23:cd:a2:34:c5:bc:9e:49:63:
                    63:09:d5:9d:2c:49:a2:d0:8e:64:53:9c:f9:0b:9e:
                    4b:36:fb:4d:0a:5e:80:f9:88:86:54:71:d4:ff:fa:
                    3d:85:79:dc:3e:7e:2d:f7:29:03:fc:74:36:3d:bb:
                    62:fc:b3:93:c9:0e:b7:5d:b4:22:f6:08:a7:20:54:
                    b6:33:2f:c4:de:46:4d:92:89:62:bd:a2:da:05:9f:
                    f5:19:69:fe:2b:ea:b8:37:8a:4b:21:82:78:fd:58:
                    08:fa:a1:5d:78:71:c8:dd:06:61:f7:94:dd:17:99:
                    24:c9:81:10:6e:93:05:2e:1f:d1:2d:91:d5:2e:90:
                    4a:20:80:30:c3:58:f7:2d:3e:95:41:06:af:5b:f3:
                    c3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E8:42:A5:AC:CE:B0:A8:C6:A6:4B:E6:A3:3F:D2:09:21:FA:A2:5A
            X509v3 Authority Key Identifier:
                keyid:CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/3137392e39372e31362e302f32312d3234203d3e203238313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         51:9c:02:f7:a5:73:19:2a:58:5d:82:3f:38:20:e7:1f:b9:76:
         f6:3b:1e:20:f5:98:e8:9a:26:ae:8a:da:b5:67:01:4f:49:b9:
         f9:d8:da:fd:44:f1:08:72:f9:bb:d7:3f:1c:7c:b4:7d:17:70:
         00:22:40:d1:cc:7e:9d:3a:0e:d5:3a:05:6c:31:67:93:8e:f7:
         70:1a:6e:ac:98:f1:69:6b:af:35:12:cf:ea:94:6a:ba:24:47:
         32:59:f3:e5:75:77:5a:b4:ff:a6:d8:63:09:78:44:90:c9:f8:
         12:1a:de:46:0d:25:6c:41:e7:a2:06:ca:95:7d:35:82:b6:aa:
         91:75:8e:e9:12:07:88:5b:a6:1c:00:28:53:56:ac:9a:e7:80:
         88:4b:76:94:4a:c2:9f:31:54:03:ef:16:2b:27:e5:cc:18:06:
         bd:b4:92:09:e8:16:a6:80:49:44:4f:fa:28:12:ff:e8:52:b1:
         b0:fa:7a:8b:d0:c2:48:ad:4d:86:c9:bc:08:b6:b5:31:04:8c:
         35:e7:5a:c7:a3:ed:83:71:f6:4e:c0:07:6f:cb:b6:fe:ea:e0:
         ec:7b:b9:47:79:e3:5d:c0:f2:98:97:a3:31:99:10:10:2e:e0:
         1a:4a:d5:48:5d:5d:94:5a:45:40:dc:86:30:1f:f9:39:ef:ce:
         40:9f:b7:0b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUfP5MehsvsXpGeLYrcx/JdzLFI5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EyMEVGQzBCOTlBOEE4NkI0QjRDRkExMDdCMDAxRDUw
OEI3MjkwRDAeFw0yNTAzMjgwMDI0MjVaFw0yNjAzMjcwMDI5MjVaMDMxMTAvBgNV
BAMTKEI1RTg0MkE1QUNDRUIwQThDNkE2NEJFNkEzM0ZEMjA5MjFGQUEyNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbtv0DvmF0+qRf4AAL6RbDLwiY
wbMz8Eri/zodNoQ4cubl3AdSfKC099NNDITNRLH6z0J2VbKmX50Xxn1KN1BaQfq/
qk4759PXiRU+UKO3x/ouwRSSFQNLpFrIP3y81pu0BwXHt1aT+/6Uwx0k9iPNojTF
vJ5JY2MJ1Z0sSaLQjmRTnPkLnks2+00KXoD5iIZUcdT/+j2Fedw+fi33KQP8dDY9
u2L8s5PJDrddtCL2CKcgVLYzL8TeRk2SiWK9otoFn/UZaf4r6rg3ikshgnj9WAj6
oV14ccjdBmH3lN0XmSTJgRBukwUuH9EtkdUukEoggDDDWPctPpVBBq9b88OXAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUtehCpazOsKjGpkvmoz/SCSH6olowHwYDVR0j
BBgwFoAUyiDvwLmaioa0tM+hB7AB1Qi3KQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9Y
R0cvMC9DQTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMjBFRkMwQjk5QThBODZC
NEI0Q0ZBMTA3QjAwMUQ1MDhCNzI5MEQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlhZ25TVHd0NzRxQ1M1cHJKRnd3S1ZrVTRvRHBiSEdnYXdualhwWXBvWEdHLzAv
MzEzNzM5MmUzOTM3MmUzMTM2MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzODMx
MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7NhEDANBgkqhkiG9w0BAQsFAAOCAQEAUZwC96VzGSpY
XYI/OCDnH7l29jseIPWY6JomroratWcBT0m5+dja/UTxCHL5u9c/HHy0fRdwACJA
0cx+nToO1ToFbDFnk473cBpurJjxaWuvNRLP6pRquiRHMlnz5XV3WrT/pthjCXhE
kMn4EhreRg0lbEHnogbKlX01graqkXWO6RIHiFumHAAoU1asmueAiEt2lErCnzFU
A+8WKyflzBgGvbSSCegWpoBJRE/6KBL/6FKxsPp6i9DCSK1Nhsm8CLa1MQSMNeda
x6Ptg3H2TsAHb8u2/urg7Hu5R3njXcDymJejMZkQEC7gGkrVSF1dlFpFQNyGMB/5
Oe/OQJ+3Cw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:57 2025 by rpki-client on console.sobornost.net