Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/3137372e3135352e38302e302f32322d3332203d3e20323633353833.roa
File:                     3137372e3135352e38302e302f32322d3332203d3e20323633353833.roa (raw, json)
Hash identifier:          ViWqxAKsvHtd+LQe4Wpm6dZfCIp9vVrHL4saDiGbN6Q=
Subject key identifier:   9B:45:E8:BC:BE:91:A4:B4:B7:C3:40:19:A3:08:25:BB:CF:4C:A5:E8
Certificate issuer:       /CN=C4B19BCE1E9AB5297235D80B57CF3DD82FEED751
Certificate serial:       0C613D2C267617E436FABFB41E2E592D14FFF4AD
Authority key identifier: C4:B1:9B:CE:1E:9A:B5:29:72:35:D8:0B:57:CF:3D:D8:2F:EE:D7:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/3137372e3135352e38302e302f32322d3332203d3e20323633353833.roa
Signing time:             Fri 01 Nov 2024 20:27:44 +0000
ROA not before:           Fri 01 Nov 2024 20:22:44 +0000
ROA not after:            Fri 31 Oct 2025 20:27:44 +0000
asID:                     263583
IP address blocks:        177.155.80.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.crl
                          rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 18:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:61:3d:2c:26:76:17:e4:36:fa:bf:b4:1e:2e:59:2d:14:ff:f4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B19BCE1E9AB5297235D80B57CF3DD82FEED751
        Validity
            Not Before: Nov  1 20:22:44 2024 GMT
            Not After : Oct 31 20:27:44 2025 GMT
        Subject: CN=9B45E8BCBE91A4B4B7C34019A30825BBCF4CA5E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7c:b7:5c:b5:48:70:94:09:2e:b7:53:4c:e5:
                    f3:3f:48:79:82:80:fb:68:dd:89:80:6e:c5:48:6d:
                    19:33:f4:84:e4:1b:52:43:0d:b0:e9:4f:f9:70:a5:
                    11:51:d9:03:f4:bc:6f:ba:a2:9c:da:54:2a:64:45:
                    4e:ab:60:db:6a:ab:42:9a:dd:89:90:cb:f9:27:e7:
                    00:f6:79:f5:21:0b:15:a5:b8:42:fb:f6:06:62:28:
                    0c:fd:c0:a3:d5:67:0f:57:19:8e:e9:dc:0a:8e:83:
                    61:d4:44:22:58:e4:c7:7a:c0:b6:a3:6a:a8:19:b8:
                    5e:85:e6:9d:36:c6:16:b7:45:45:56:50:3e:d6:a9:
                    03:a0:39:69:0a:d4:ce:5f:e1:34:8b:aa:18:a9:a7:
                    d3:4c:55:e4:e1:b1:07:82:f8:73:2c:fe:d2:75:f5:
                    c5:d1:fc:b2:73:45:af:59:b6:b6:b9:58:2b:60:70:
                    bb:f0:43:0f:c0:df:7b:44:29:a0:5d:8a:63:43:e7:
                    05:e2:cd:6c:57:61:5a:1a:6e:30:7a:33:35:62:a9:
                    44:56:02:0a:71:81:63:91:49:39:9a:6b:a0:9d:23:
                    a5:96:a8:95:4b:90:02:6b:9b:b6:f7:6f:ec:00:6d:
                    e5:56:80:48:d5:10:5e:5a:6f:95:b5:08:15:78:10:
                    6c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:45:E8:BC:BE:91:A4:B4:B7:C3:40:19:A3:08:25:BB:CF:4C:A5:E8
            X509v3 Authority Key Identifier:
                keyid:C4:B1:9B:CE:1E:9A:B5:29:72:35:D8:0B:57:CF:3D:D8:2F:EE:D7:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/3137372e3135352e38302e302f32322d3332203d3e20323633353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:3a:41:e7:2f:7f:26:3c:c2:b9:4b:dd:0e:7b:ef:d1:fc:1f:
         b9:72:ee:42:9e:b5:cb:f2:f2:43:3d:6e:5c:af:fb:fc:20:fd:
         39:5e:3c:25:bb:2e:2c:0a:ef:72:b6:5d:9a:03:18:bc:2f:39:
         61:85:a1:73:65:2a:4b:c6:51:bd:78:4c:08:0a:c5:3d:12:e3:
         2a:74:76:99:d3:7b:b2:c3:e5:9c:a7:e3:3f:8b:e4:2d:ce:b6:
         f7:1a:3d:28:be:38:d9:7c:ba:b9:c0:0a:cc:80:f9:8b:ef:46:
         59:14:4d:91:93:0d:9d:ed:00:e6:16:6e:b6:50:e4:05:b6:69:
         21:54:b3:66:df:01:b9:79:1e:17:61:1b:bd:32:60:50:fa:c2:
         82:ba:83:80:9d:c3:44:3e:e4:01:ca:eb:a5:b0:5d:bb:68:d7:
         86:0d:98:18:2d:6a:ed:ec:c9:7a:c7:38:60:60:fe:cc:62:66:
         bc:84:46:af:cc:2d:95:08:b8:68:c0:5b:87:28:ca:c4:eb:dc:
         c5:19:84:2c:b7:f1:3f:25:3d:e8:83:d9:84:01:3b:d8:36:16:
         3b:ea:f4:fc:07:2c:44:9d:98:19:a0:cc:4a:94:80:f9:44:83:
         db:77:cb:59:70:42:5e:e0:4d:4b:2e:9d:97:6b:1c:29:42:6c:
         9f:2c:bf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:56 2025 by rpki-client