Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/3137372e36362e3135322e302f32322d3232203d3e20323632343939.roa
File:                     3137372e36362e3135322e302f32322d3232203d3e20323632343939.roa (raw, json)
Hash identifier:          sj2JtpNhGu9/ztHVKdkWqSNViNVqzCX3obxZMGRf8I0=
Subject key identifier:   DA:E8:DE:CB:1A:6F:D1:2C:04:58:47:77:EB:97:2E:F9:6E:98:3C:55
Certificate issuer:       /CN=58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8
Certificate serial:       78FAA1EA0B88058D0A2509FF606ADF5F8CCADB83
Authority key identifier: 58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/3137372e36362e3135322e302f32322d3232203d3e20323632343939.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     262499
IP address blocks:        177.66.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl
                          rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 03:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:fa:a1:ea:0b:88:05:8d:0a:25:09:ff:60:6a:df:5f:8c:ca:db:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=DAE8DECB1A6FD12C04584777EB972EF96E983C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2a:25:74:8b:2c:66:4d:2f:cb:15:4e:25:08:
                    3e:3e:04:9b:9e:11:ef:9b:e4:ef:1f:e2:aa:66:28:
                    07:4f:b1:ad:8a:ed:59:12:ca:b5:7b:70:05:9f:48:
                    45:1a:e6:89:73:f2:14:af:60:cd:7f:fb:8b:bf:7f:
                    d6:6f:95:36:1a:f6:57:5e:c0:71:63:ac:e9:87:7b:
                    af:13:37:c0:22:55:31:2a:8e:49:60:09:bc:80:74:
                    f1:60:6a:65:70:3c:b0:ea:74:85:22:9c:49:35:41:
                    f7:6b:12:0c:5e:3f:48:02:fe:f6:41:48:9e:70:c4:
                    06:41:54:7a:ec:a0:31:ed:3a:91:e3:22:29:50:f7:
                    43:80:b9:d0:c7:16:5c:d8:ba:81:2c:d7:47:23:1b:
                    de:e3:63:70:aa:c6:f8:75:e0:e1:d6:fc:81:1c:ff:
                    2e:ac:36:67:92:3a:98:6b:75:de:70:d5:6c:94:01:
                    73:57:65:3d:26:86:2d:99:ec:c9:71:f9:31:29:23:
                    fa:bd:db:c8:04:cc:5e:2f:fd:a3:4c:64:97:aa:46:
                    c5:0b:06:e4:e1:eb:98:fb:58:08:1e:cb:2c:82:b3:
                    5b:11:1a:d3:61:73:05:8f:fe:92:b2:3d:bb:49:5c:
                    10:c2:0d:b2:fb:ab:fc:d9:19:9a:bd:fa:e1:e1:f1:
                    4e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E8:DE:CB:1A:6F:D1:2C:04:58:47:77:EB:97:2E:F9:6E:98:3C:55
            X509v3 Authority Key Identifier:
                keyid:58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/3137372e36362e3135322e302f32322d3232203d3e20323632343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:82:f1:93:0c:63:ff:6c:f2:49:e0:45:6e:cd:fb:ce:21:4d:
         5f:e5:ff:95:58:93:12:a3:a6:64:95:db:21:a3:b4:09:ed:80:
         94:e9:f8:1c:3a:a1:90:d0:66:c9:bc:a3:d9:62:bf:a0:b5:0f:
         3c:b0:9c:71:ab:1e:7b:ac:0e:9c:f6:44:fb:58:2f:ad:b6:23:
         26:4e:25:53:df:4b:b4:25:f3:ad:2c:ec:b1:b4:b1:9f:a2:44:
         5b:c1:36:07:d2:4f:07:39:89:25:0f:8c:14:e4:17:01:d4:62:
         4c:0e:d4:25:5b:2d:35:91:73:f5:cc:aa:bd:3a:47:b2:f9:e8:
         ff:cd:e4:c3:e2:5c:31:6c:7c:1b:40:2d:94:c1:36:77:a2:bb:
         89:b0:f9:7b:0e:5a:80:ad:f5:a3:43:33:13:14:5a:b4:7e:1f:
         77:a0:66:32:c8:58:74:10:44:62:2f:05:96:89:ff:08:e9:77:
         ed:64:34:ad:00:f1:20:c9:19:a9:18:30:15:46:62:50:04:8b:
         7c:1d:b8:ad:a9:ec:7d:3a:24:9a:e4:01:14:7a:c5:9f:56:60:
         86:38:89:c1:1b:28:3d:8e:1e:ca:05:12:17:31:c8:7d:91:e0:
         22:80:7e:fb:8a:c1:4d:1a:f0:d8:cf:86:05:05:b0:a3:07:00:
         83:58:d1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:50:08 2025 by rpki-client