Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38382e302f32332d3233203d3e203532363533.roa
File:                     3137372e3232312e38382e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          1PeW25XvO7XrRgx7gKBZH7DuSsWn5D7Oc8w3kx9VgUg=
Subject key identifier:   0F:75:A8:08:DA:88:36:B5:42:5E:7C:8C:15:CC:86:DD:82:0A:48:9C
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       5A6CC4DDD376CB1DF5CC926DCBD996A856E5E277
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38382e302f32332d3233203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:04 +0000
ROA not before:           Wed 05 Mar 2025 23:55:04 +0000
ROA not after:            Thu 05 Mar 2026 00:00:04 +0000
asID:                     52653
IP address blocks:        177.221.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6c:c4:dd:d3:76:cb:1d:f5:cc:92:6d:cb:d9:96:a8:56:e5:e2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:04 2025 GMT
            Not After : Mar  5 00:00:04 2026 GMT
        Subject: CN=0F75A808DA8836B5425E7C8C15CC86DD820A489C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:46:bb:9d:86:fa:95:da:a2:2c:6b:9e:5a:
                    36:db:6b:5a:1b:e9:43:d9:5a:17:99:7e:76:05:e9:
                    bf:71:0a:f1:63:ac:a0:4f:4d:11:0b:5e:80:f2:8f:
                    cd:80:a8:38:1c:26:ff:57:5c:83:b7:5c:0a:b6:95:
                    11:83:03:e7:e1:e0:fb:19:bc:d7:8c:ab:d4:ce:77:
                    fb:38:3d:43:7e:9a:8b:5e:7e:bc:54:56:9f:a6:60:
                    ab:b1:a5:bb:8a:c0:2a:ff:d3:6b:05:df:d2:f1:8c:
                    f7:8d:89:2f:28:e4:6e:cc:87:95:67:00:f9:5a:10:
                    f0:ef:8f:1a:1e:b0:9c:bd:7b:fe:76:f8:8d:b6:b6:
                    3c:d1:d5:8e:11:51:a1:ff:90:6d:69:40:26:5c:8a:
                    4e:a8:0d:68:fe:fe:28:46:32:16:ce:6a:76:b8:e0:
                    18:99:0d:aa:cd:72:80:5b:e5:57:03:2a:c1:66:e9:
                    0f:ee:21:8f:6a:92:9e:d0:29:96:0d:2d:fb:f7:1a:
                    88:f3:77:62:eb:fa:fd:58:f1:d3:25:ef:13:33:64:
                    34:da:9e:60:d5:26:11:34:c1:49:9e:9a:eb:89:df:
                    dd:40:b9:47:a3:bf:d2:47:a8:d4:5c:cf:8d:81:bc:
                    f6:99:23:bd:de:fd:50:ef:62:13:c8:7d:f3:a5:b3:
                    af:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:75:A8:08:DA:88:36:B5:42:5E:7C:8C:15:CC:86:DD:82:0A:48:9C
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38382e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:5d:57:e3:24:43:bd:d4:91:fb:ac:77:57:e9:43:58:22:ac:
         3a:18:5f:85:01:cc:60:54:fe:1d:02:bf:f8:ea:9a:eb:d2:50:
         df:1f:4c:b7:88:12:78:6a:f7:d1:65:12:62:a9:78:7e:0e:f7:
         7b:1f:1f:4c:fb:00:21:49:62:40:db:cb:ae:20:ae:e3:cd:ac:
         7d:d9:6a:48:14:7c:6c:99:f6:e3:fc:6c:3f:db:2d:03:1f:84:
         33:7f:9e:8c:d5:0a:05:b2:f8:1c:bc:3e:d2:8f:26:36:ac:f4:
         bf:4d:7a:ca:bb:dc:54:99:9e:1f:0f:77:d9:af:46:3f:b8:ca:
         91:6c:35:19:80:0a:a9:7b:20:d0:e2:ca:9f:be:91:f8:9e:cb:
         ec:4e:3e:8d:af:33:00:e8:76:fd:ac:97:6e:c9:69:56:1e:d6:
         17:55:38:bb:70:e2:b7:df:5f:65:e3:67:bf:d9:05:05:46:12:
         75:ee:89:10:0d:7e:19:09:c5:3b:04:7f:88:b6:3c:ba:5f:7b:
         62:92:45:ca:a1:b0:de:70:e2:e2:35:f6:9a:3c:1f:28:7a:41:
         58:ba:0b:87:f6:56:d9:a9:b3:56:69:72:b8:a7:50:29:0f:0f:
         27:26:29:a4:12:88:2a:5d:2e:d0:29:60:97:0f:e3:15:d6:b1:
         83:9f:8d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:10:57 2025 by rpki-client