Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130302e302f32332d3233203d3e203631363732.roa
File:                     3137372e31312e3130302e302f32332d3233203d3e203631363732.roa (raw, json)
Hash identifier:          sphsamzsN+3v6rf42OTo2kyi8M4pQtLKOm7aevrbVRI=
Subject key identifier:   34:37:15:F0:78:E0:4C:D4:8B:72:7E:BF:3D:2C:E2:B8:4F:28:91:BF
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       5E6B034D1D2C7E1F6F50D1CC6DC0956142F86933
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130302e302f32332d3233203d3e203631363732.roa
Signing time:             Thu 06 Mar 2025 18:53:29 +0000
ROA not before:           Thu 06 Mar 2025 18:48:29 +0000
ROA not after:            Thu 05 Mar 2026 18:53:29 +0000
asID:                     61672
IP address blocks:        177.11.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 11:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6b:03:4d:1d:2c:7e:1f:6f:50:d1:cc:6d:c0:95:61:42:f8:69:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Mar  6 18:48:29 2025 GMT
            Not After : Mar  5 18:53:29 2026 GMT
        Subject: CN=343715F078E04CD48B727EBF3D2CE2B84F2891BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:0c:c2:e7:81:40:64:a2:24:24:04:d3:dd:
                    40:f8:2b:5a:66:65:de:bd:a7:8c:8c:6a:3f:95:b3:
                    f6:d9:e3:ab:a2:35:d3:21:33:7d:3f:69:4d:77:b1:
                    c7:03:82:d0:b4:73:9a:5c:4e:23:77:2f:a1:f0:56:
                    29:7a:71:d9:de:35:6b:b0:55:c8:01:09:3f:27:48:
                    d2:0e:ab:39:85:90:e4:f8:09:18:be:e0:bc:4b:ee:
                    86:65:17:20:dc:4b:6a:2f:c6:2e:5c:c9:5d:79:dc:
                    fb:5f:76:09:eb:ac:d6:ff:0b:51:6b:d0:8f:78:3a:
                    53:98:6a:53:68:29:99:71:82:85:5a:e1:1b:4e:a2:
                    08:56:67:d2:d3:94:41:da:5c:3a:68:83:0d:d5:d2:
                    47:c2:65:73:30:5e:93:8d:2a:de:38:5f:85:86:6b:
                    f6:58:8c:e4:a6:a2:ee:ca:66:5f:06:e9:bf:95:00:
                    a4:99:21:e5:bf:4e:03:b9:45:36:a4:fd:43:3f:81:
                    4b:0c:4c:8a:21:ea:92:c8:c6:9a:f3:8c:d8:36:18:
                    2f:e3:62:97:a2:56:89:e8:7d:7e:d2:31:eb:43:f7:
                    21:08:ac:55:db:91:84:e7:73:cd:9c:b8:b6:2d:bf:
                    e1:55:2c:5f:99:c9:c5:ba:d8:30:8c:1c:f1:0f:26:
                    7e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:37:15:F0:78:E0:4C:D4:8B:72:7E:BF:3D:2C:E2:B8:4F:28:91:BF
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130302e302f32332d3233203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:25:b7:5c:91:35:14:d2:32:52:73:0c:44:f0:3f:38:d6:63:
         8c:5b:94:ca:12:7c:f0:1a:83:2d:cd:ee:ac:2a:80:93:4d:34:
         86:04:d7:26:89:25:54:3e:5c:d4:46:28:fb:15:66:a0:e6:a7:
         70:60:05:63:0d:1d:f3:cd:13:0d:0e:48:17:65:cb:a8:3c:da:
         80:f8:a1:c9:b9:a1:90:64:d4:93:0a:7c:66:b7:4f:e0:f2:36:
         a9:d3:17:2e:62:0e:49:db:d7:08:4c:02:54:98:e5:57:1a:95:
         20:1d:d9:e2:5b:3a:9c:99:e2:e6:a4:b2:43:33:c6:6f:81:44:
         29:1a:3e:26:5b:cc:82:95:19:95:4f:26:00:09:89:e7:1c:3f:
         4f:7e:c0:4e:12:92:31:b2:5a:b3:3a:c4:de:be:36:d1:a7:0a:
         49:50:cc:a0:f6:6a:fe:37:4b:c2:f6:a1:02:88:52:ef:c5:3b:
         f7:53:d4:d4:b6:7f:fc:e2:1c:72:63:0b:67:3d:ae:b0:03:88:
         36:93:26:82:05:11:f3:38:c5:b3:05:aa:fb:6d:fe:96:75:06:
         ef:8c:82:65:70:ca:32:1a:d4:e5:20:e6:e3:fc:dd:c3:48:ad:
         ff:f9:42:a5:79:1b:8f:ea:64:74:66:e1:30:30:3d:3c:3f:c2:
         f9:28:58:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:10:14 2025 by rpki-client