Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38382e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38382e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          S4/f7JfRkd8Bkr2inzwegeFxfKOoKrma3PQ5c+WJ8eY=
Subject key identifier:   2F:6F:8E:A7:76:C1:88:2E:2F:C0:57:CC:BA:2B:04:02:30:C1:18:2C
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       29B3F98DB6AB850194ECA1522654F82172E63614
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38382e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:03 +0000
ROA not before:           Wed 05 Mar 2025 23:55:03 +0000
ROA not after:            Thu 05 Mar 2026 00:00:03 +0000
asID:                     52653
IP address blocks:        177.221.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b3:f9:8d:b6:ab:85:01:94:ec:a1:52:26:54:f8:21:72:e6:36:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:03 2025 GMT
            Not After : Mar  5 00:00:03 2026 GMT
        Subject: CN=2F6F8EA776C1882E2FC057CCBA2B040230C1182C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:52:2a:52:e6:23:41:74:96:eb:ac:aa:49:
                    ec:40:57:68:e3:f3:ba:37:f9:e0:31:8e:67:80:5c:
                    89:ab:b0:6a:00:2a:a0:23:48:e3:0a:89:40:7a:0c:
                    21:32:de:9a:7d:61:3c:04:9b:83:e0:31:60:7c:04:
                    25:bb:ca:70:b6:09:e6:82:ff:01:61:75:b6:22:fe:
                    50:56:33:08:19:9a:cf:dd:22:81:13:4c:aa:73:03:
                    6a:b6:b9:64:df:cc:77:e3:79:bb:89:47:d1:00:55:
                    ee:fd:5a:70:38:b0:f3:a4:d6:2c:04:19:6d:d5:58:
                    07:71:3c:d6:43:dc:ca:a2:36:44:69:ad:2f:d8:0e:
                    e3:3b:e6:30:74:70:3b:4f:79:cf:1a:81:8c:5b:56:
                    e0:d9:93:e8:cf:b5:bf:d9:3f:c2:f0:9f:06:70:60:
                    b8:3f:45:5a:fb:6c:33:35:26:a4:a5:2a:b9:fa:d1:
                    c7:09:35:a7:ad:43:97:e5:b3:93:a8:52:65:87:e9:
                    9d:25:a5:9a:51:e8:58:be:71:f4:b3:4d:cc:ea:93:
                    80:99:dd:42:fe:ff:b2:11:92:9c:8b:f0:c7:09:35:
                    bb:6a:6f:46:2f:38:73:6f:a3:c9:83:03:d9:28:cb:
                    c1:96:ee:62:6b:6f:e9:b6:bf:26:54:e5:ca:8d:3e:
                    b2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6F:8E:A7:76:C1:88:2E:2F:C0:57:CC:BA:2B:04:02:30:C1:18:2C
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38382e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:56:40:1f:bc:48:0f:f1:a7:73:4f:15:48:47:25:84:70:46:
         54:cf:a9:bd:ae:61:a3:5f:27:db:55:cd:d7:4b:28:45:da:9a:
         a4:ab:20:f4:9c:f2:2b:9f:46:33:1f:8c:3b:3d:22:da:bb:ea:
         9f:dc:59:43:f4:2d:1e:d6:01:f6:75:e0:ae:3c:fd:2a:a9:9b:
         5a:f1:fe:c4:0f:7d:1c:64:d4:f4:39:f8:31:aa:65:a6:ca:e5:
         1b:fc:5a:44:5e:d7:ef:d8:f7:a1:23:49:79:db:8b:b7:5a:11:
         bb:87:45:d6:21:8e:0c:6b:5e:d0:19:e2:9b:17:ea:8b:c8:53:
         41:ad:73:d4:cd:d5:86:a7:9f:5e:0c:93:9f:39:62:2f:42:56:
         11:a0:28:a5:38:df:44:73:b9:5b:8a:cf:91:12:89:ac:38:72:
         67:70:b6:b7:6e:01:12:e9:87:9e:13:67:0d:79:72:bb:78:f3:
         0c:f7:8b:5b:84:1b:9a:58:65:f6:62:b2:3c:e7:5a:9b:c3:f7:
         4a:91:55:bf:40:e7:ea:cc:80:1d:3f:e1:94:e6:85:2b:68:7c:
         20:43:73:0e:f3:b5:a7:51:d0:b7:22:e6:ba:fd:0f:cd:bd:0a:
         16:69:41:0a:22:dc:ab:37:6b:3e:ab:dd:ab:b2:42:1c:95:4a:
         c3:a5:aa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:13:33 2025 by rpki-client