Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa
File:                     3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa (raw, json)
Hash identifier:          WWQDaPRjLqL6gxa8oKBNJP8aA85LM8dmmWOF68n+4eM=
Subject key identifier:   FF:E8:02:B8:BB:48:C3:69:B4:77:A9:3D:AC:23:E7:E4:EA:7A:66:7C
Certificate issuer:       /CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555
Certificate serial:       35ECE63DAA98E81852993E123BB05E141D04E060
Authority key identifier: 1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa
Signing time:             Thu 06 Mar 2025 02:42:48 +0000
ROA not before:           Thu 06 Mar 2025 02:37:48 +0000
ROA not after:            Thu 05 Mar 2026 02:42:48 +0000
asID:                     262408
IP address blocks:        177.38.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl
                          rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 05:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ec:e6:3d:aa:98:e8:18:52:99:3e:12:3b:b0:5e:14:1d:04:e0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555
        Validity
            Not Before: Mar  6 02:37:48 2025 GMT
            Not After : Mar  5 02:42:48 2026 GMT
        Subject: CN=FFE802B8BB48C369B477A93DAC23E7E4EA7A667C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:12:1f:2c:71:47:6e:1d:8d:5a:e4:d9:46:
                    8f:97:76:93:43:2f:a3:29:eb:71:2a:a4:54:01:4a:
                    ac:fb:a0:dc:72:85:a0:3a:9d:62:af:31:d3:eb:84:
                    68:23:5c:40:54:31:1e:06:b5:9a:68:89:f0:82:6e:
                    35:df:76:d4:37:95:63:64:25:51:41:48:b8:f8:04:
                    7e:10:f7:ef:ca:f8:5c:24:2f:71:8b:cd:17:14:68:
                    47:21:26:36:aa:97:ea:8e:b0:4b:53:a9:03:b0:8d:
                    60:c6:71:95:39:a0:27:ed:49:e6:30:34:11:39:d9:
                    b4:ed:ea:05:8e:0e:bb:b2:b8:8b:f9:8b:5f:1d:c7:
                    8d:39:b3:9b:c9:fc:71:81:f1:75:64:dd:e1:f2:34:
                    42:e3:c6:dc:13:8c:07:d9:88:14:54:ba:a1:aa:20:
                    36:a0:5d:d7:3b:ec:7c:71:b0:6e:60:c3:49:f6:8e:
                    d9:72:5f:60:e0:ad:d7:82:5b:43:42:ac:7b:cd:db:
                    10:03:fe:df:92:ec:b2:3c:cd:48:59:aa:02:4b:f0:
                    7b:26:7a:a4:b2:00:5e:5a:a7:38:2d:ae:ea:d9:35:
                    ab:8f:c4:1d:45:d3:ba:a9:bb:1a:d5:3a:6d:b5:95:
                    a3:d6:62:fd:05:37:da:69:5a:7d:c1:40:45:00:4c:
                    35:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E8:02:B8:BB:48:C3:69:B4:77:A9:3D:AC:23:E7:E4:EA:7A:66:7C
            X509v3 Authority Key Identifier:
                keyid:1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:9a:81:82:b1:3f:f8:07:3d:21:f7:ea:7d:ff:a2:73:bd:b9:
         60:54:d3:bd:31:83:f6:1b:2d:6a:6e:b0:af:8f:ed:c1:0a:d7:
         b9:3c:4b:5d:04:9e:7f:e3:3b:bb:ac:59:ed:82:47:eb:d2:1f:
         c5:39:79:97:e6:cc:af:9e:43:3f:24:15:e7:6d:d2:48:c1:1c:
         b8:ef:62:7e:c7:79:05:0c:99:b9:1f:39:ae:4d:0d:b7:3a:a2:
         32:f6:c8:8b:dd:5e:7d:97:f9:70:98:34:b0:e9:d7:be:38:1c:
         d5:d6:69:bd:72:79:71:de:63:13:19:2a:df:47:83:3a:58:9a:
         e0:c6:18:b3:7c:a0:92:7b:f8:4c:5c:05:2f:8f:53:89:49:a0:
         0e:0d:97:05:01:99:01:79:71:30:58:bc:71:99:6f:8c:64:80:
         72:cc:07:ba:2c:08:2c:0c:f3:7b:07:59:c3:73:04:19:65:4b:
         b9:5c:13:61:41:69:90:e5:b8:d5:08:15:65:2a:c0:8a:60:a6:
         58:ef:cd:ef:4d:7e:6f:11:19:90:c9:56:d9:d5:fc:cb:99:93:
         0c:bd:6c:88:77:18:a7:57:96:83:08:92:9f:0c:7f:e2:d1:1e:
         da:5a:e8:f7:4c:22:ba:85:3c:14:0b:2d:ed:01:a2:1d:88:b9:
         76:65:c6:34
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNezmPaqY6BhSmT4SO7BeFB0E4GAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFGRkZGMUUzM0VBQkYyOThFOUIwNUYxNzcxNjZDOTZG
MkMzQjU1NTAeFw0yNTAzMDYwMjM3NDhaFw0yNjAzMDUwMjQyNDhaMDMxMTAvBgNV
BAMTKEZGRTgwMkI4QkI0OEMzNjlCNDc3QTkzREFDMjNFN0U0RUE3QTY2N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIAxIfLHFHbh2NWuTZRo+XdpND
L6Mp63EqpFQBSqz7oNxyhaA6nWKvMdPrhGgjXEBUMR4GtZpoifCCbjXfdtQ3lWNk
JVFBSLj4BH4Q9+/K+FwkL3GLzRcUaEchJjaql+qOsEtTqQOwjWDGcZU5oCftSeYw
NBE52bTt6gWODruyuIv5i18dx405s5vJ/HGB8XVk3eHyNELjxtwTjAfZiBRUuqGq
IDagXdc77HxxsG5gw0n2jtlyX2DgrdeCW0NCrHvN2xAD/t+S7LI8zUhZqgJL8Hsm
eqSyAF5apzgtrurZNauPxB1F07qpuxrVOm21laPWYv0FN9ppWn3BQEUATDXDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/+gCuLtIw2m0d6k9rCPn5Op6ZnwwHwYDVR0j
BBgwFoAUGv//HjPqvymOmwXxdxZslvLDtVUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmQzU1p5cXhlc2pMTUQ1QTd5R3dYZlA0WHBiNDh0QmpRcEZwa2NiRWQx
c0MvMS8xQUZGRkYxRTMzRUFCRjI5OEU5QjA1RjE3NzE2NkM5NkYyQzNCNTU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBRkZGRjFFMzNFQUJGMjk4
RTlCMDVGMTc3MTY2Qzk2RjJDM0I1NTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JkM1NaeXF4ZXNqTE1ENUE3eUd3WGZQNFhwYjQ4dEJqUXBGcGtjYkVkMXNDLzEv
MzEzNzM3MmUzMzM4MmUzMTM2MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxJqAwDQYJKoZIhvcNAQELBQADggEBACyagYKx
P/gHPSH36n3/onO9uWBU070xg/YbLWpusK+P7cEK17k8S10Enn/jO7usWe2CR+vS
H8U5eZfmzK+eQz8kFedt0kjBHLjvYn7HeQUMmbkfOa5NDbc6ojL2yIvdXn2X+XCY
NLDp1744HNXWab1yeXHeYxMZKt9HgzpYmuDGGLN8oJJ7+ExcBS+PU4lJoA4NlwUB
mQF5cTBYvHGZb4xkgHLMB7osCCwM83sHWcNzBBllS7lcE2FBaZDluNUIFWUqwIpg
pljvze9Nfm8RGZDJVtnV/MuZkwy9bIh3GKdXloMIkp8Mf+LRHtpa6PdMIrqFPBQL
Le0Boh2IuXZlxjQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:03 2025 by rpki-client on console.sobornost.net