Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3137372e37332e36302e302f32322d3234203d3e20323633343638.roa
File:                     3137372e37332e36302e302f32322d3234203d3e20323633343638.roa (raw, json)
Hash identifier:          ojNYwHHCihvNSk2FkbyfGPhui+Fo/NptmXx53NBSpaQ=
Subject key identifier:   C2:81:11:47:10:D6:E2:3F:68:42:D2:70:68:9D:B2:BC:C4:18:B6:F9
Certificate issuer:       /CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B
Certificate serial:       2B68AFBE83926A2BF16B8210C29037B2C4469BD8
Authority key identifier: D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3137372e37332e36302e302f32322d3234203d3e20323633343638.roa
Signing time:             Thu 19 Dec 2024 13:37:14 +0000
ROA not before:           Thu 19 Dec 2024 13:32:14 +0000
ROA not after:            Thu 18 Dec 2025 13:37:14 +0000
asID:                     263468
IP address blocks:        177.73.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl
                          rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 23:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:68:af:be:83:92:6a:2b:f1:6b:82:10:c2:90:37:b2:c4:46:9b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B
        Validity
            Not Before: Dec 19 13:32:14 2024 GMT
            Not After : Dec 18 13:37:14 2025 GMT
        Subject: CN=C281114710D6E23F6842D270689DB2BCC418B6F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:14:5c:08:9c:0d:95:bc:e4:be:fb:21:31:01:
                    10:ae:4a:c2:3a:c6:51:58:b7:28:59:27:49:54:8c:
                    a8:12:32:07:55:58:a8:ab:cf:40:b6:d7:a1:33:44:
                    f1:04:be:00:9a:42:f6:38:1a:df:86:29:b4:3e:5f:
                    e6:84:f8:d3:da:c9:02:d9:2b:6d:38:6d:f1:53:97:
                    d0:9d:93:5a:12:ad:79:f4:7e:ca:f2:93:43:64:bc:
                    9a:80:59:a3:65:48:e0:78:92:3b:fa:69:41:e9:68:
                    a6:99:d1:32:4f:31:2d:b8:8e:b3:02:98:96:ee:09:
                    ea:55:15:ea:e1:60:ca:8b:a5:d9:4b:e5:95:39:4b:
                    bb:16:96:7d:4b:d9:bf:3d:25:98:f8:e5:5a:64:70:
                    97:a8:26:fb:6f:de:d9:86:05:4f:ad:35:bd:39:6f:
                    70:3c:8c:59:31:1c:ec:97:f4:a7:75:b6:03:5d:41:
                    bf:2f:eb:de:62:18:08:3a:73:33:c9:32:d0:05:a3:
                    1f:5a:b1:b0:e6:5a:4c:96:c5:e1:e2:ab:29:ff:7e:
                    17:28:9b:39:28:48:4e:97:e3:a1:e4:bd:e4:6b:a5:
                    9e:b8:1f:da:31:24:24:06:55:dc:ce:d2:07:c1:72:
                    b1:5e:5b:73:72:fc:93:7d:ef:98:b6:1d:f2:f7:b9:
                    8f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:81:11:47:10:D6:E2:3F:68:42:D2:70:68:9D:B2:BC:C4:18:B6:F9
            X509v3 Authority Key Identifier:
                keyid:D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3137372e37332e36302e302f32322d3234203d3e20323633343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:49:c3:b9:f7:1f:9e:1c:77:20:5e:ee:43:ec:2e:e8:c2:60:
         6f:d3:82:cc:1f:f6:e9:9e:6e:57:11:97:15:ba:cd:3a:a4:3b:
         05:80:82:85:75:f0:b4:50:a5:45:4f:66:40:2b:75:6c:af:66:
         da:56:bb:96:96:d1:73:65:ed:eb:df:ca:bb:0b:3a:fa:26:74:
         15:7b:93:1d:5a:1c:f1:18:bc:ac:ad:03:7e:a5:b5:7a:f1:23:
         65:dc:5d:86:5c:ee:73:67:c0:0f:0f:bf:a9:07:70:7a:08:9e:
         c6:64:30:d1:07:11:97:aa:21:c3:3b:24:86:32:7f:2c:33:60:
         b8:01:9a:42:a9:ba:48:55:eb:08:12:54:9f:25:42:20:cb:37:
         04:b0:98:35:8a:78:e2:39:53:12:41:07:84:b2:1e:8a:94:40:
         e4:1e:61:75:2a:70:8d:8b:3a:8a:f9:16:e8:48:45:e4:ff:b4:
         98:33:82:f5:e9:12:fb:58:b8:6d:49:67:24:a8:73:b8:26:b5:
         15:55:e9:de:34:c9:ef:c5:e8:37:68:a9:a4:d9:8a:87:96:4b:
         13:95:8a:54:ed:03:3a:8b:ed:db:84:c2:b9:9a:45:44:0e:90:
         eb:6f:62:d6:92:eb:f2:42:af:b5:dc:58:4e:a0:87:cc:a0:8e:
         d9:f7:27:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:54:16 2025 by rpki-client