Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/3137372e3132382e36342e302f32312d3234203d3e203532383639.roa
File:                     3137372e3132382e36342e302f32312d3234203d3e203532383639.roa (raw, json)
Hash identifier:          8gzEWDF8i42eHf686Ra5Hy4/vvSVtAxDn3ySTpNWsmo=
Subject key identifier:   C3:35:53:FE:1F:A8:28:AB:FB:1F:07:74:5B:4D:16:A2:83:E2:04:92
Certificate issuer:       /CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17
Certificate serial:       40F7C4338944F86F4E6EC1E424454E19F1E067D2
Authority key identifier: 46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/3137372e3132382e36342e302f32312d3234203d3e203532383639.roa
Signing time:             Thu 06 Mar 2025 09:53:39 +0000
ROA not before:           Thu 06 Mar 2025 09:48:39 +0000
ROA not after:            Thu 05 Mar 2026 09:53:39 +0000
asID:                     52869
IP address blocks:        177.128.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl
                          rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 16:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f7:c4:33:89:44:f8:6f:4e:6e:c1:e4:24:45:4e:19:f1:e0:67:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17
        Validity
            Not Before: Mar  6 09:48:39 2025 GMT
            Not After : Mar  5 09:53:39 2026 GMT
        Subject: CN=C33553FE1FA828ABFB1F07745B4D16A283E20492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bf:f5:af:32:33:fe:2e:bf:47:db:88:82:ca:
                    e9:71:01:f3:0f:3a:64:14:e4:08:13:2d:79:34:0e:
                    12:01:e1:c5:41:95:39:e9:32:36:39:91:75:f6:48:
                    bd:de:96:b9:8d:3c:af:d7:fc:1e:69:30:c6:2c:71:
                    9d:24:83:f6:f1:64:a3:2f:20:31:86:c5:e3:ec:49:
                    a5:65:ca:de:d1:08:e9:8c:03:24:ee:90:73:12:c9:
                    07:e3:91:f8:e1:ce:a9:37:49:50:67:f4:1e:2d:c7:
                    3f:ff:92:f0:05:1d:96:d0:ad:2e:d1:08:66:a3:77:
                    31:e0:3c:3e:38:0b:fd:48:f3:a4:99:f6:e8:b6:f9:
                    f7:47:f9:d2:1f:1a:e3:73:67:fb:a3:16:1c:a4:83:
                    fb:36:d2:32:84:57:ce:37:ab:8c:f7:6a:a8:d0:09:
                    e4:d7:2d:6e:d3:d8:7d:7b:08:98:fb:cf:bd:e1:dc:
                    0a:a0:36:27:6b:71:59:90:e8:b7:96:ab:30:87:a3:
                    90:23:ec:1e:ad:dc:44:c2:62:aa:1a:67:4b:97:88:
                    c9:c5:13:f6:aa:30:ce:ff:c4:33:24:5a:ec:1f:8a:
                    26:30:da:59:e0:e6:b9:4b:30:48:52:2c:46:d4:cd:
                    70:c6:a9:29:69:ce:cd:7e:35:93:39:fd:ce:13:5f:
                    5c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:35:53:FE:1F:A8:28:AB:FB:1F:07:74:5B:4D:16:A2:83:E2:04:92
            X509v3 Authority Key Identifier:
                keyid:46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/3137372e3132382e36342e302f32312d3234203d3e203532383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ce:ae:74:57:3f:3e:e6:bc:a4:e8:f7:0d:f0:c7:54:43:45:f4:
         07:f5:b4:bc:ea:ce:93:95:7f:4d:02:12:48:72:83:03:9a:42:
         38:1c:94:5b:37:e4:0f:81:3d:ea:be:07:e7:4e:ba:02:20:8f:
         c9:f3:1a:98:c6:2e:95:1b:3a:37:17:5d:93:66:72:f7:02:53:
         f2:c4:7c:05:85:cd:ef:3c:b0:12:69:4d:2e:6e:8d:9b:f2:80:
         d1:16:15:0e:66:f6:9f:81:ce:02:16:29:65:bb:99:59:f1:03:
         41:a6:04:1e:18:da:74:18:c6:0f:54:9a:47:33:c2:f3:74:c5:
         6c:1e:ca:8a:7e:ac:47:71:33:23:26:b5:cc:8a:cb:6d:58:a4:
         1e:d2:eb:fb:bc:98:bb:56:00:7c:a6:56:5b:f2:49:fc:34:16:
         56:8f:d3:af:4a:b8:07:0a:49:c1:71:1b:d0:5b:fd:91:bb:6c:
         55:1b:10:4f:8a:e5:96:f8:8a:ff:5a:8e:a1:92:f2:46:f7:8c:
         0a:31:86:3c:70:ad:2b:b3:1f:4d:c4:b7:20:45:8b:7b:8d:1c:
         23:65:1f:5a:d8:c7:df:bc:11:b6:49:b9:44:80:6e:0a:b9:15:
         36:98:f3:c1:71:d3:e8:bd:52:38:ef:74:b0:32:1d:f9:16:e9:
         6e:25:37:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:41:08 2025 by rpki-client