Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3137372e32332e3136382e302f32312d3234203d3e203532393133.roa
File:                     3137372e32332e3136382e302f32312d3234203d3e203532393133.roa (raw, json)
Hash identifier:          T/SpWSzWq/EKwVb72W4louC31Dw+ByGimjZONGUb+w4=
Subject key identifier:   35:85:52:3D:AE:8C:BE:36:EF:86:4A:8B:FE:65:A2:0E:B8:50:3F:4A
Certificate issuer:       /CN=8204A8F62764E655E183BB09417B0875F11B3A7D
Certificate serial:       764FA84127C3B186512F544B31AD48B2943A243C
Authority key identifier: 82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3137372e32332e3136382e302f32312d3234203d3e203532393133.roa
Signing time:             Thu 13 Mar 2025 18:26:29 +0000
ROA not before:           Thu 13 Mar 2025 18:21:29 +0000
ROA not after:            Thu 12 Mar 2026 18:26:29 +0000
asID:                     52913
IP address blocks:        177.23.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 19:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4f:a8:41:27:c3:b1:86:51:2f:54:4b:31:ad:48:b2:94:3a:24:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8204A8F62764E655E183BB09417B0875F11B3A7D
        Validity
            Not Before: Mar 13 18:21:29 2025 GMT
            Not After : Mar 12 18:26:29 2026 GMT
        Subject: CN=3585523DAE8CBE36EF864A8BFE65A20EB8503F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b7:73:78:9a:4b:b9:02:7a:33:af:95:dd:a0:
                    eb:35:d7:6f:c0:b6:ef:2d:f2:25:58:b8:d0:1d:f8:
                    6c:ab:8c:44:3c:5e:35:3b:75:e1:24:c4:6c:26:b8:
                    73:3a:df:cf:da:84:47:a6:78:ad:41:2a:a9:53:e0:
                    26:6b:ea:1d:71:22:ab:a7:32:e3:b0:e2:4b:48:83:
                    49:49:a8:4b:92:33:ff:e1:dd:26:37:d1:bb:f9:5f:
                    d4:86:a8:4a:9b:00:22:a9:05:25:ce:82:35:bc:2f:
                    d6:ec:d5:60:07:0a:e1:8e:d0:f9:bb:67:7d:06:37:
                    d8:ab:bd:b0:1a:3c:36:a2:b2:9b:d9:12:af:51:7c:
                    c4:1a:18:77:6f:1f:1d:56:14:16:bc:e0:53:c2:23:
                    59:ad:77:0e:d9:3b:41:51:32:72:c7:3d:5f:30:ce:
                    02:af:78:2b:41:28:95:e0:73:2c:04:a1:2d:a3:44:
                    f0:d6:e6:2a:8e:40:f5:5a:db:3b:b0:0e:03:86:9c:
                    e5:56:9a:e3:90:42:9a:ce:60:5f:24:92:c8:a3:b1:
                    df:37:9a:77:7b:60:e2:49:62:63:c0:1f:4f:34:91:
                    1e:93:4e:ab:fd:b1:12:c6:3e:c1:c5:40:7e:4c:b8:
                    c7:02:22:38:3e:f4:f6:42:b0:16:8f:85:b8:51:db:
                    ed:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:85:52:3D:AE:8C:BE:36:EF:86:4A:8B:FE:65:A2:0E:B8:50:3F:4A
            X509v3 Authority Key Identifier:
                keyid:82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3137372e32332e3136382e302f32312d3234203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         27:95:14:51:d8:55:21:88:df:96:8f:41:d7:cc:6d:dd:1b:0a:
         ac:c7:ab:47:3d:fa:9c:27:21:06:ab:3a:21:54:aa:08:25:c4:
         72:a0:3f:9d:0a:a4:22:bd:75:2b:a0:52:c4:a2:24:3f:b6:14:
         2b:26:08:19:ac:56:8c:19:f5:2b:44:e6:24:0a:9a:44:f0:c6:
         69:3b:a8:28:4d:ee:d8:0a:70:a6:b5:a0:19:5b:c2:07:c2:ad:
         31:00:19:59:e6:1b:ba:09:f4:e1:c1:dd:78:12:32:57:ec:58:
         21:b6:e6:68:9a:7c:58:60:12:82:b9:e1:ac:6a:9a:6f:52:8a:
         86:3e:3a:64:74:0b:6e:1a:e0:49:f3:c2:34:ce:42:e7:18:e7:
         d9:c8:c9:39:24:f7:00:72:74:b3:45:7e:66:4e:b5:5e:2e:a9:
         d2:04:c7:33:a5:51:99:c5:8d:8e:5d:47:1a:5c:73:19:dc:2e:
         32:8b:57:0b:87:8b:2c:26:7c:38:b4:42:02:b7:a1:a1:64:0a:
         47:a5:71:25:78:44:14:de:08:d0:e3:22:3b:d1:34:7f:a0:30:
         39:33:21:d6:11:8c:d6:e8:ac:7d:f7:72:6b:1d:03:90:cf:b7:
         4c:93:2b:90:a0:d2:e2:f2:eb:fc:18:cb:f8:69:a2:8e:ca:86:
         f9:8d:a0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:45 2025 by rpki-client