Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/3137372e31302e35322e302f32322d3234203d3e20323633353734.roa
File:                     3137372e31302e35322e302f32322d3234203d3e20323633353734.roa (raw, json)
Hash identifier:          8NPB/hL+VVnUUDq52ExdHBpfUDe4Fm5z5nMC8fQ9uBo=
Subject key identifier:   5A:92:B2:B5:1F:AD:D9:DB:58:02:7C:79:BE:23:A3:1E:39:E9:DE:4E
Certificate issuer:       /CN=8D0F799DDE369B44B3A0931DBECC6483E27050C6
Certificate serial:       29BE30522551BE82E80FE181BAA9A175D5549DE1
Authority key identifier: 8D:0F:79:9D:DE:36:9B:44:B3:A0:93:1D:BE:CC:64:83:E2:70:50:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/3137372e31302e35322e302f32322d3234203d3e20323633353734.roa
Signing time:             Fri 14 Mar 2025 12:26:12 +0000
ROA not before:           Fri 14 Mar 2025 12:21:12 +0000
ROA not after:            Fri 13 Mar 2026 12:26:12 +0000
asID:                     263574
IP address blocks:        177.10.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.crl
                          rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:be:30:52:25:51:be:82:e8:0f:e1:81:ba:a9:a1:75:d5:54:9d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0F799DDE369B44B3A0931DBECC6483E27050C6
        Validity
            Not Before: Mar 14 12:21:12 2025 GMT
            Not After : Mar 13 12:26:12 2026 GMT
        Subject: CN=5A92B2B51FADD9DB58027C79BE23A31E39E9DE4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a8:f5:c3:c3:09:c4:2c:3f:c3:56:28:6d:1c:
                    c1:d9:3e:2a:e9:24:11:35:47:1c:72:7b:62:2e:a6:
                    95:bb:92:a0:3e:8e:bc:09:ae:17:e0:74:f2:c7:83:
                    7a:12:ba:e0:f1:26:46:95:5f:36:69:b0:79:0e:dd:
                    a9:52:65:90:39:ec:43:f3:67:f3:d7:35:e0:7e:60:
                    80:4f:e2:48:59:0f:a4:62:ae:5e:06:86:0d:20:9e:
                    ec:c4:79:52:bc:af:37:8c:2b:9b:52:cd:58:41:8e:
                    b2:c2:a6:99:f8:4b:b8:c6:50:86:50:c7:14:cc:e0:
                    7e:4d:ec:ca:68:27:77:b5:5b:ef:08:4a:cc:87:55:
                    cf:44:3e:b1:54:70:38:dc:de:03:28:ab:56:26:37:
                    c8:1e:90:69:cf:56:21:03:e4:1e:ab:ab:dc:4a:d8:
                    69:96:f9:2f:b6:97:4d:93:78:82:40:43:2d:fb:69:
                    e4:1e:b7:4a:dc:1b:8d:39:4d:99:77:f2:26:6f:15:
                    ae:dd:7d:65:b1:ed:b1:c0:41:44:20:9b:f5:7b:e5:
                    16:aa:0a:48:56:7e:ea:5f:d9:2a:e3:68:e0:0b:0e:
                    05:27:f0:4c:46:71:27:2e:ac:6c:d4:5e:1e:00:2d:
                    ab:9d:1b:33:dc:03:5a:1d:4c:60:81:c0:8e:3a:44:
                    d3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:92:B2:B5:1F:AD:D9:DB:58:02:7C:79:BE:23:A3:1E:39:E9:DE:4E
            X509v3 Authority Key Identifier:
                keyid:8D:0F:79:9D:DE:36:9B:44:B3:A0:93:1D:BE:CC:64:83:E2:70:50:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/3137372e31302e35322e302f32322d3234203d3e20323633353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:7b:13:64:65:9c:5a:0a:7a:e9:b5:2e:6d:8e:df:5f:8e:f2:
         83:0f:e1:51:61:f7:fe:ff:ac:16:db:a8:8d:65:7d:b0:93:ce:
         0e:9f:61:bc:fb:24:4c:ab:91:08:10:0c:76:2b:7a:6f:ff:a4:
         e5:b6:f1:1b:d8:89:e4:e4:8b:fd:b3:8e:dc:45:2b:20:5e:99:
         c6:1e:4c:7c:5b:2e:8a:9b:8b:10:d2:f3:f3:58:30:eb:77:93:
         c0:44:1b:3b:0d:01:40:8a:c0:be:bb:f1:69:55:e0:84:48:14:
         e5:47:33:5c:38:10:32:84:d8:9a:41:d2:71:9e:9a:b6:ee:6a:
         23:74:64:9d:92:83:f4:a0:47:f9:c2:e3:7e:9b:2b:d5:1c:8f:
         78:55:86:ab:b4:b8:b1:7b:b5:91:9f:88:c1:9a:ff:2a:0b:af:
         f1:8a:2c:5d:47:38:bd:1f:b1:db:8d:a0:df:76:63:ff:78:5d:
         fb:f2:74:bb:17:de:02:31:a1:30:a1:82:03:82:b4:c5:15:e4:
         5b:06:11:ef:b2:ef:78:f0:9d:96:fc:1c:e0:77:9a:a9:f8:dc:
         ea:bf:9e:34:99:ba:ef:51:6c:56:6b:c2:f1:fe:16:7a:70:e1:
         e4:39:d3:84:12:65:f0:e6:f9:d6:d0:62:d7:f9:03:17:0c:81:
         28:91:cb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:16:49 2025 by rpki-client