Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/3137372e39332e3138342e302f32322d3234203d3e203532383639.roa
File:                     3137372e39332e3138342e302f32322d3234203d3e203532383639.roa (raw, json)
Hash identifier:          tvRic0kMMAl10dH+h0klz4g3tSflPxU0EbeB037XKr0=
Subject key identifier:   D7:C7:69:94:0D:E5:E8:B8:4C:AF:6A:B5:46:73:E2:EB:BC:61:5A:5A
Certificate issuer:       /CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17
Certificate serial:       28F56BE0D7FF942D1B278D7B419790DB5E5C6F02
Authority key identifier: 46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/3137372e39332e3138342e302f32322d3234203d3e203532383639.roa
Signing time:             Thu 06 Mar 2025 09:53:39 +0000
ROA not before:           Thu 06 Mar 2025 09:48:39 +0000
ROA not after:            Thu 05 Mar 2026 09:53:39 +0000
asID:                     52869
IP address blocks:        177.93.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl
                          rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 16:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f5:6b:e0:d7:ff:94:2d:1b:27:8d:7b:41:97:90:db:5e:5c:6f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17
        Validity
            Not Before: Mar  6 09:48:39 2025 GMT
            Not After : Mar  5 09:53:39 2026 GMT
        Subject: CN=D7C769940DE5E8B84CAF6AB54673E2EBBC615A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:49:a2:e2:85:5c:76:e1:ce:d3:89:c9:05:e2:
                    d1:54:13:79:b7:00:e0:77:e3:3d:de:5e:83:4a:55:
                    cf:71:26:37:b6:dc:bd:0c:1f:0e:0e:6c:74:88:1a:
                    d4:07:ab:0f:0b:f6:b6:9a:1b:cf:b5:85:58:13:8c:
                    b2:0c:58:08:33:41:99:4e:38:e1:77:ec:97:1f:5f:
                    57:52:2c:b1:a4:79:4e:42:3c:56:9a:bd:35:c5:2a:
                    3d:eb:c2:e5:0f:4e:79:2f:83:ab:03:a4:16:5a:70:
                    35:4b:e4:96:29:c3:e7:41:cb:df:00:a6:47:06:a1:
                    fb:77:57:bf:e4:53:fa:76:1e:21:48:d0:a0:dd:85:
                    be:7c:39:97:ce:29:e3:02:ad:d3:46:53:bf:e4:bf:
                    de:70:ec:1f:94:e1:43:ff:86:c7:b7:61:eb:89:47:
                    ea:b5:00:bc:bb:72:c6:64:04:a6:b3:2f:36:44:54:
                    22:13:3d:7b:28:48:d1:96:5a:bb:a4:29:32:a5:38:
                    ca:8e:b4:b7:c3:41:93:4a:17:e2:49:bc:a8:b9:33:
                    43:2f:93:4f:87:fe:bf:bd:b4:97:dd:2d:6b:08:86:
                    b3:08:8a:ea:8c:af:84:5f:15:e0:17:98:4a:16:c6:
                    e7:15:4b:de:60:99:6d:02:ac:03:b8:65:c5:66:ec:
                    3e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C7:69:94:0D:E5:E8:B8:4C:AF:6A:B5:46:73:E2:EB:BC:61:5A:5A
            X509v3 Authority Key Identifier:
                keyid:46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/3137372e39332e3138342e302f32322d3234203d3e203532383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:22:5a:a7:78:e4:d8:88:64:8e:5c:e2:41:78:11:eb:ba:8d:
         a9:35:54:1d:96:28:df:e2:e9:fc:25:ce:36:08:3e:bf:d0:03:
         1c:28:c5:2a:18:fc:d1:7f:b1:11:35:6b:e9:8d:14:2a:09:1e:
         8b:66:23:c2:75:a1:f4:47:68:bd:9d:0b:de:eb:7a:f3:da:6d:
         2e:29:0e:fe:1d:9d:f8:04:55:41:78:16:f1:d0:21:df:fb:1f:
         e8:cb:82:d0:29:e7:92:66:e5:c7:62:4d:9f:c8:f4:d4:11:35:
         39:61:ee:11:57:40:0a:cd:cd:42:f4:83:59:74:bd:77:7e:d3:
         e4:3e:fd:c7:e3:3d:5b:59:72:cc:62:a2:9f:d5:e5:eb:9d:6c:
         b7:a6:d5:3a:d7:87:6e:d0:6d:20:b1:68:d1:c5:eb:74:8d:2b:
         a4:d8:52:55:55:e3:03:c2:45:21:51:49:54:6a:4c:0a:b9:b8:
         c7:bc:64:6c:e0:a3:db:cd:3d:ad:dd:ef:59:ab:2d:36:85:b0:
         3b:fd:b6:cd:16:e9:19:61:84:7c:cc:18:cb:50:9f:9e:bc:ae:
         94:4a:a9:c1:3b:ac:07:f4:8d:5d:b2:fd:f8:b0:09:55:fb:8c:
         4b:3d:af:8d:ef:29:54:38:d6:31:bb:78:b3:e1:4d:5a:99:42:
         ad:60:9e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:45:53 2025 by rpki-client