Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38312e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38312e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          scX7ajDlWI5she/zz7z53/c0rZEIOI8r25VSe/X+G+Y=
Subject key identifier:   C9:D2:58:D8:7A:38:03:32:91:B7:2B:7C:6B:C1:AD:45:F9:38:73:F8
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       222AF85EE9B0FFDA0B0039B6DD32D291B2D1BC7E
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38312e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:02 +0000
ROA not before:           Wed 05 Mar 2025 23:55:02 +0000
ROA not after:            Thu 05 Mar 2026 00:00:02 +0000
asID:                     52653
IP address blocks:        177.221.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2a:f8:5e:e9:b0:ff:da:0b:00:39:b6:dd:32:d2:91:b2:d1:bc:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:02 2025 GMT
            Not After : Mar  5 00:00:02 2026 GMT
        Subject: CN=C9D258D87A38033291B72B7C6BC1AD45F93873F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:a5:31:ef:3d:c4:49:de:de:03:99:b7:89:
                    1d:44:06:a7:82:03:c4:ec:c8:25:01:c6:22:82:f7:
                    88:af:90:68:b0:20:27:47:20:71:b9:92:30:e7:36:
                    3c:b4:b8:22:b0:47:3c:72:b8:90:b7:15:0d:3e:32:
                    26:d8:a3:af:99:6e:02:fb:1d:85:67:bb:2b:dc:78:
                    db:dc:2c:5f:d4:53:57:48:d7:17:b9:75:b4:45:eb:
                    d6:e3:d6:b0:65:dc:87:80:52:7d:48:5c:6c:34:32:
                    7e:27:9d:b2:d6:ce:b3:74:b9:93:87:33:7d:d8:d0:
                    b0:63:cd:c6:0b:c0:02:b7:81:40:54:a8:00:29:c1:
                    74:d2:ae:0c:b6:17:e8:94:77:d2:d1:52:8e:31:91:
                    62:ab:25:4c:38:ae:26:2b:2b:a2:fb:15:f4:85:86:
                    6e:c9:66:24:df:4c:68:11:2a:e2:4c:0a:89:6d:10:
                    b3:03:88:82:cf:bc:31:37:a0:82:35:92:ba:a7:3b:
                    3f:11:21:b7:da:8c:4b:a6:79:be:38:60:fc:c0:86:
                    83:88:36:9d:bd:c1:df:e3:e4:fc:12:62:5e:01:95:
                    e2:72:9d:42:c3:40:d5:58:0f:e0:c1:27:76:e4:92:
                    6e:45:52:8c:a1:79:a4:4e:74:60:e4:5f:24:c9:8a:
                    ba:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D2:58:D8:7A:38:03:32:91:B7:2B:7C:6B:C1:AD:45:F9:38:73:F8
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38312e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:ce:60:9f:45:8b:1a:aa:77:c5:1f:23:f9:fb:ca:79:be:16:
         b0:a2:3c:44:53:2b:15:72:b8:f1:7c:5f:f5:a3:ad:59:0c:c3:
         7d:c0:34:d2:16:3c:53:88:07:7d:17:8b:00:e6:ca:1e:66:a1:
         03:34:75:9c:16:9d:1c:95:87:f5:b6:a3:2a:84:10:1a:2d:89:
         62:99:c9:8c:13:fd:0a:8f:10:c3:45:42:f8:9d:7f:50:49:2d:
         81:15:cd:62:51:a4:d6:f7:e5:c9:1b:e1:86:12:7e:20:7c:58:
         a2:2c:c7:b6:97:f3:f9:27:6e:c6:93:16:35:cc:c0:c4:d3:53:
         c6:2c:8a:1a:12:9c:36:6f:c3:17:d8:a3:33:f7:fd:56:1b:59:
         0e:0b:40:9e:e9:aa:ec:1f:1f:04:72:e9:7a:cd:58:94:e1:dc:
         8a:61:1e:cb:cf:fa:72:7c:03:94:d1:cc:af:ed:f5:44:f8:fe:
         c5:dd:09:e0:f7:fb:c2:ad:cd:df:3d:8d:43:24:10:db:60:8c:
         ff:3a:17:0f:79:53:d3:03:22:f2:4f:c8:15:c2:29:4d:1e:26:
         fe:bb:c2:55:a7:fc:60:27:c3:11:c4:d2:b5:fc:c3:93:d9:ca:
         db:8e:1d:f1:d4:6e:89:0e:b1:29:c5:11:df:1d:ce:2c:72:4a:
         1a:0b:d0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:12:50 2025 by rpki-client