Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233322e302f32322d3234203d3e203238353834.roa
File:                     3137372e3132392e3233322e302f32322d3234203d3e203238353834.roa (raw, json)
Hash identifier:          O0IhMYik6I8Aq4RqHbwK0LC5612IRE1tr5xKWrdAXK0=
Subject key identifier:   50:61:F3:D9:7C:A9:50:45:30:F6:98:56:F1:30:10:6D:6A:88:33:38
Certificate issuer:       /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial:       373D25AA5CBF5AF7C3EE244ECD0ABD7BA338C5A1
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233322e302f32322d3234203d3e203238353834.roa
Signing time:             Tue 08 Apr 2025 19:20:15 +0000
ROA not before:           Tue 08 Apr 2025 19:15:15 +0000
ROA not after:            Tue 07 Apr 2026 19:20:15 +0000
asID:                     28584
IP address blocks:        177.129.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
                          rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 11:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3d:25:aa:5c:bf:5a:f7:c3:ee:24:4e:cd:0a:bd:7b:a3:38:c5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
        Validity
            Not Before: Apr  8 19:15:15 2025 GMT
            Not After : Apr  7 19:20:15 2026 GMT
        Subject: CN=5061F3D97CA9504530F69856F130106D6A883338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:49:1f:c5:99:e8:ba:4f:53:df:11:6c:7b:
                    0d:2e:4f:b9:a4:4c:93:4a:bd:97:a2:19:6f:1b:41:
                    db:94:b2:75:c3:b6:7f:bc:ff:7b:7d:19:df:1e:71:
                    2c:1b:0f:88:c4:3c:2d:b1:53:44:6a:9a:e8:16:98:
                    27:18:ed:3a:8c:40:93:ea:37:01:42:5a:0c:61:3a:
                    4d:23:0c:b4:99:6a:8b:a3:c1:5b:bc:ac:11:84:a1:
                    9b:8c:9a:fe:b4:c5:96:f3:8a:21:2b:b0:ed:a1:18:
                    18:7a:aa:66:6e:3d:29:87:f6:17:68:dc:1a:36:f0:
                    1f:83:b6:6a:2b:70:8f:37:0e:01:bf:d7:f7:5d:1b:
                    d4:d7:54:a9:1b:9b:14:36:b4:f0:3b:2f:68:94:91:
                    01:b0:74:f0:ab:ee:89:9e:c3:1d:dc:44:39:a0:5e:
                    1a:9b:95:98:8c:cd:04:f9:a1:fb:fd:c2:ba:df:78:
                    0a:a9:22:4a:f0:ed:df:cb:85:69:7c:b8:5b:14:07:
                    2a:e4:d7:28:66:57:06:57:2e:fb:af:eb:c6:6f:cc:
                    46:d6:b4:c3:3d:a8:35:cb:52:d5:9b:5b:bf:fa:39:
                    db:95:ac:c2:8b:d6:10:9b:02:30:7b:a1:2a:40:f8:
                    c9:15:82:b5:2a:49:a1:5c:65:3b:9a:25:e9:1a:1c:
                    4b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:61:F3:D9:7C:A9:50:45:30:F6:98:56:F1:30:10:6D:6A:88:33:38
            X509v3 Authority Key Identifier:
                keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233322e302f32322d3234203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:4c:b1:1b:14:ed:cc:32:4d:14:c0:cb:39:d7:7f:b5:b6:bf:
         b4:bc:83:e6:70:f3:92:69:3a:11:d6:44:97:9f:33:4f:b3:d0:
         08:1a:e2:17:47:7e:a4:fa:3f:b3:91:a9:9e:a1:34:3f:72:3a:
         1a:dd:d3:d2:96:69:37:a7:28:4c:65:70:59:47:18:ac:cc:b3:
         6e:5c:09:6d:8a:8d:18:73:13:40:f4:ce:95:cd:d8:24:22:89:
         11:74:2f:c9:74:ed:45:33:cb:4a:c6:75:be:09:06:ff:84:8c:
         90:5f:0a:0d:3b:6f:0f:d1:fd:4c:64:61:a3:4c:05:81:3f:a6:
         15:20:e9:bb:22:8e:fa:d3:af:ed:41:69:f2:11:50:18:70:48:
         62:6a:d6:34:ef:b0:43:08:c6:84:34:d3:3b:c1:48:f7:4d:9c:
         f7:bd:a2:1d:ee:0a:6b:9a:23:94:85:c0:c9:ee:16:14:7a:13:
         8b:a5:93:4a:28:3d:83:67:38:9e:de:70:fb:15:91:12:e9:a5:
         32:de:08:2f:12:ce:e7:86:d3:25:1c:f8:0d:90:81:36:7e:89:
         ca:88:0d:12:d4:e2:9b:a8:75:e5:81:af:78:d0:23:a6:00:a4:
         c6:10:c1:31:66:af:e2:91:60:6d:21:61:50:cf:2f:2d:b8:a1:
         d8:fd:ff:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:16:39 2025 by rpki-client