Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38362e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38362e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          iu4iuMS6dNXvsD1QpdE7+IsSN8uUpolAHLW+5X5gppU=
Subject key identifier:   E3:2E:B4:06:0F:66:73:82:E6:4D:7D:DB:1E:6B:E2:AE:92:8E:93:25
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       1752B597B2441D2746113B395E7DE535FC5F1899
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38362e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:03 +0000
ROA not before:           Wed 05 Mar 2025 23:55:03 +0000
ROA not after:            Thu 05 Mar 2026 00:00:03 +0000
asID:                     52653
IP address blocks:        177.221.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:52:b5:97:b2:44:1d:27:46:11:3b:39:5e:7d:e5:35:fc:5f:18:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:03 2025 GMT
            Not After : Mar  5 00:00:03 2026 GMT
        Subject: CN=E32EB4060F667382E64D7DDB1E6BE2AE928E9325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:83:13:c3:33:61:40:fc:58:85:33:e1:b3:2c:
                    08:a1:08:7b:96:25:64:0c:20:ac:5e:2a:68:89:3a:
                    02:2d:18:05:24:e9:43:01:ef:27:b1:27:f3:17:a1:
                    7f:98:0d:1d:57:5b:3b:52:48:52:b1:e7:7c:49:dc:
                    e3:5f:a4:3c:62:2d:ce:76:b4:d3:b6:10:76:f6:f8:
                    1e:d3:e3:9a:39:99:e8:3d:82:f5:62:1d:ab:07:6b:
                    63:f5:7b:e1:4c:4b:23:42:db:83:d2:0f:94:58:26:
                    30:3b:f4:da:e1:af:75:21:9e:01:27:f7:eb:dd:4f:
                    37:c7:c4:96:fe:72:9a:0d:4f:22:02:a4:22:5e:d6:
                    b1:df:63:fe:54:87:63:de:ca:97:8d:b9:c8:2d:7c:
                    4d:72:07:a9:67:e0:29:a7:8f:c5:be:44:ce:7a:e9:
                    d6:cf:07:5c:95:5c:ea:5d:30:6d:6e:c9:78:14:03:
                    ea:36:d1:d4:5b:03:01:3c:77:d6:54:ca:c8:da:97:
                    c3:26:05:b1:6a:ff:e8:24:31:6d:b3:f2:f1:72:c9:
                    8d:db:d4:97:e4:4a:90:34:8c:57:40:db:37:b6:e4:
                    2a:e9:a7:d7:d2:4f:a3:0b:03:28:47:63:be:ea:a2:
                    3a:16:52:5f:ed:e2:fc:b9:dd:71:f8:00:57:ff:61:
                    c4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2E:B4:06:0F:66:73:82:E6:4D:7D:DB:1E:6B:E2:AE:92:8E:93:25
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38362e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:b2:c6:f6:54:90:3e:1b:8e:74:1e:e0:5f:70:35:93:d3:14:
         34:63:c5:37:70:d5:17:90:19:fd:b2:b4:90:92:a1:f2:35:e6:
         73:87:85:73:a2:ac:b7:dc:12:2e:9a:db:c7:47:ec:be:9d:08:
         56:0c:15:d6:de:8d:4b:06:3c:1f:05:37:61:9f:82:3a:9f:ff:
         e3:5f:f2:b2:a0:d3:72:4e:62:24:89:2b:94:1e:3d:20:55:f5:
         94:6f:f7:55:c2:77:81:2e:23:96:68:3a:be:46:e5:f2:a9:66:
         8e:f3:f8:2d:22:13:3a:97:67:be:6d:ab:4e:06:b7:61:76:f6:
         1a:72:b2:32:f6:25:e4:6a:da:d0:51:f1:98:af:1b:40:c9:75:
         8e:ba:b0:a3:ce:c0:0d:cb:03:47:c3:ac:ff:0f:2e:38:bc:22:
         ca:66:4f:c7:cb:ea:8f:81:92:3a:6e:0f:6f:90:18:47:b4:38:
         36:0b:5f:46:02:7b:a6:41:0f:58:de:0a:ae:fd:bd:20:6e:e1:
         7e:f5:fc:bb:46:4f:c7:36:a3:c0:e7:1f:e4:a7:36:6a:43:71:
         5e:ea:52:bd:5d:65:6b:8b:1b:83:0e:d8:f6:6e:5e:10:bb:8c:
         82:c1:e7:29:3b:80:ed:cc:4b:d4:bc:59:b7:ba:68:49:a3:76:
         d4:58:d8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:10:00 2025 by rpki-client