Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/3137372e32312e39362e302f31392d3234203d3e203533323436.roa
File:                     3137372e32312e39362e302f31392d3234203d3e203533323436.roa (raw, json)
Hash identifier:          llqRDlr7jcHOWXxlZW7OqR0pOnFUX4QMvyU47Wukxqs=
Subject key identifier:   0B:CE:6C:62:21:52:F3:DA:F4:54:9D:9D:8E:8C:DA:97:E3:F5:5F:D0
Certificate issuer:       /CN=30FE93C29B2D9E965F52FCED04760810A240E9E1
Certificate serial:       2E52174FCC22F6EF5564EE9A04885DA541BF6176
Authority key identifier: 30:FE:93:C2:9B:2D:9E:96:5F:52:FC:ED:04:76:08:10:A2:40:E9:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/3137372e32312e39362e302f31392d3234203d3e203533323436.roa
Signing time:             Thu 06 Mar 2025 18:57:29 +0000
ROA not before:           Thu 06 Mar 2025 18:52:29 +0000
ROA not after:            Thu 05 Mar 2026 18:57:29 +0000
asID:                     53246
IP address blocks:        177.21.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.crl
                          rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 03:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:52:17:4f:cc:22:f6:ef:55:64:ee:9a:04:88:5d:a5:41:bf:61:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30FE93C29B2D9E965F52FCED04760810A240E9E1
        Validity
            Not Before: Mar  6 18:52:29 2025 GMT
            Not After : Mar  5 18:57:29 2026 GMT
        Subject: CN=0BCE6C622152F3DAF4549D9D8E8CDA97E3F55FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c5:c8:85:ac:6a:c3:69:4f:1a:65:50:36:36:
                    cc:74:20:0d:ed:3b:be:09:53:e9:b6:94:50:96:91:
                    eb:ea:32:db:e3:54:21:17:f2:73:dc:5e:3f:d2:98:
                    34:52:ab:ec:c9:b6:d4:c8:5f:38:c8:7a:d8:d9:4c:
                    a7:57:dd:25:92:de:a0:f2:c4:3f:61:b3:9c:50:03:
                    60:f6:a5:11:5b:b3:f0:ad:93:57:ad:1f:c2:cd:2a:
                    f7:02:d8:06:01:39:9a:f7:f2:d2:c7:21:dd:e4:c5:
                    8d:38:a8:27:be:05:ca:94:87:1e:db:0f:b5:b0:56:
                    93:69:f4:dc:8a:d9:08:62:d9:b9:9d:e6:da:84:3a:
                    70:36:4b:ef:16:69:2f:37:b1:e3:61:ce:df:58:9e:
                    71:6c:16:ed:00:12:f2:f0:98:ca:4d:56:bf:63:1a:
                    df:2a:3d:27:34:b2:7e:c3:1c:40:ee:7a:64:a7:d6:
                    11:a2:14:b8:13:24:5c:3f:92:85:2f:5f:41:ca:e5:
                    c8:61:61:d1:de:54:73:0e:5e:6c:48:93:81:2d:da:
                    9c:9a:53:5f:eb:62:42:db:65:44:41:cc:13:e8:9c:
                    5f:5c:c6:1f:bd:3c:d8:20:a8:ac:38:7b:2d:d1:c0:
                    c3:da:39:b2:3e:9c:ef:87:2e:2a:10:3e:1c:cf:9d:
                    3a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CE:6C:62:21:52:F3:DA:F4:54:9D:9D:8E:8C:DA:97:E3:F5:5F:D0
            X509v3 Authority Key Identifier:
                keyid:30:FE:93:C2:9B:2D:9E:96:5F:52:FC:ED:04:76:08:10:A2:40:E9:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/3137372e32312e39362e302f31392d3234203d3e203533323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         73:a5:c9:c8:6b:bb:69:b6:90:19:50:d9:7e:84:6c:d8:31:83:
         b5:a5:3d:98:58:07:ac:90:09:c4:fc:0a:92:78:bf:66:a8:68:
         88:9a:35:20:5c:ff:b7:7b:e5:00:5b:57:70:19:bb:35:eb:df:
         cc:3d:db:d3:91:e3:66:3e:09:44:91:b8:a0:1e:b9:85:d5:e1:
         bd:69:e7:d5:e8:1d:af:83:e5:0b:d2:06:34:1f:73:ba:c5:d1:
         80:43:4e:19:22:12:89:74:b7:75:e4:21:0c:ee:e3:4e:af:b2:
         a3:cd:ec:9c:69:6c:56:b6:47:d5:a2:37:09:5f:bd:90:bd:91:
         48:c4:8e:64:d9:18:ce:43:c3:2d:92:c4:72:96:83:13:d1:9c:
         fe:09:dc:1d:7f:2d:40:91:f6:87:85:7a:4f:0a:77:90:28:dd:
         c7:0d:be:59:6a:6a:01:93:9a:b9:d3:6d:16:f7:4c:cb:8b:d6:
         89:50:cb:c4:bd:7a:49:bc:32:2e:83:6e:60:11:04:fe:51:a3:
         14:89:cd:4f:b8:b9:c3:c0:81:f2:4b:d6:06:d8:24:30:d0:d2:
         0c:f1:eb:b5:47:be:4b:08:8b:62:49:b2:39:27:07:1b:58:85:
         6f:79:88:d8:6a:b7:eb:71:98:64:67:98:fb:f4:24:96:7e:b0:
         3b:f7:e0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:09:48 2025 by rpki-client