Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e31382e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e31382e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          6mL2Ea4qKb7BWnjGNg4iHXVwBUPvS+0+hATwTgKmP8Q=
Subject key identifier:   3B:DE:C6:0A:7E:E5:1F:E7:3C:37:FD:17:32:CC:3A:27:FA:4D:3B:F4
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       51AFD9066D8C8E5D47D3A15DDD4894F50FB14A4D
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e31382e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:36 +0000
ROA not before:           Thu 06 Mar 2025 02:26:36 +0000
ROA not after:            Thu 05 Mar 2026 02:31:36 +0000
asID:                     52706
IP address blocks:        177.126.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 10:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:af:d9:06:6d:8c:8e:5d:47:d3:a1:5d:dd:48:94:f5:0f:b1:4a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:36 2025 GMT
            Not After : Mar  5 02:31:36 2026 GMT
        Subject: CN=3BDEC60A7EE51FE73C37FD1732CC3A27FA4D3BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ac:39:f0:12:56:52:6d:fe:6a:8e:7b:28:9e:
                    2b:dc:a1:7a:1b:ec:cf:29:0e:0d:08:17:10:e7:c0:
                    16:da:9f:13:6d:c0:b7:4a:07:34:f9:30:bf:81:98:
                    83:d6:4c:77:1d:24:9f:ba:3d:1a:d2:a5:f7:f3:ef:
                    48:f5:b6:4d:8a:44:3f:5f:92:6b:5a:71:cb:ae:85:
                    76:b0:90:f2:8f:eb:f1:11:19:7a:cd:ac:cd:3b:dc:
                    02:01:4b:c6:28:31:6a:16:b1:02:f5:04:b7:27:67:
                    ab:fa:99:e5:7e:94:7a:da:28:ea:6f:d9:8d:9d:2f:
                    36:5e:1a:69:4d:12:55:99:e1:d7:48:e6:0d:20:93:
                    ab:55:f6:7d:6e:09:b9:f4:54:df:22:56:0b:cb:70:
                    45:25:6f:bd:dc:f4:e6:a5:98:71:4f:76:cc:7b:5d:
                    bf:8e:c2:23:1b:48:2b:56:fe:be:c9:8f:d6:1e:3f:
                    fd:0c:18:b5:cc:5b:61:d7:d8:9a:92:ce:e3:8d:d4:
                    16:8e:1b:2a:e3:5c:33:7f:bf:3e:d5:a2:02:28:77:
                    b7:6a:44:b4:8d:6c:10:b2:a2:f4:d2:6f:fe:48:ac:
                    64:4e:89:a7:ad:23:c4:18:92:1d:70:45:26:70:80:
                    54:02:13:a6:20:ce:61:b9:ff:cf:8a:2c:14:c9:59:
                    7b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DE:C6:0A:7E:E5:1F:E7:3C:37:FD:17:32:CC:3A:27:FA:4D:3B:F4
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e31382e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:55:cb:46:1c:ac:98:e6:19:de:d7:68:4a:79:c8:4d:da:ab:
         60:c7:71:11:2f:19:5e:55:73:29:d4:44:95:7b:55:c7:36:93:
         e6:9a:ed:4c:da:13:3e:77:8c:f9:0b:08:45:9e:91:74:a8:3e:
         97:2e:21:d2:00:2e:63:36:c1:08:9c:5b:b0:b4:e0:31:a6:0a:
         92:95:ad:c5:ff:4f:93:e1:e7:6e:62:6d:38:40:8a:40:87:9d:
         66:3e:19:21:4c:90:0c:95:b8:ba:b8:96:ad:61:a4:cb:3f:bc:
         61:5f:55:46:06:9f:3b:75:99:97:44:f6:d7:c4:63:c7:99:c5:
         53:d5:0d:d9:3b:ed:62:e4:23:7f:ce:d2:ab:50:db:80:d6:d9:
         20:2e:df:8b:b0:2a:24:f8:1b:df:7f:72:af:70:e9:f0:e8:5f:
         6d:d9:2e:17:6b:2c:db:07:7b:cc:cd:65:be:71:71:b1:e6:46:
         b3:13:2b:38:1c:6e:bb:7d:8c:63:9b:ef:5a:3c:15:ce:f4:da:
         07:fe:fd:e8:b4:12:23:5d:48:87:9b:56:da:a3:6b:fb:24:6c:
         52:61:1f:84:89:5e:db:e2:58:73:1d:83:71:fd:a4:16:be:12:
         ea:90:97:84:0f:8f:dc:d8:10:50:e9:6c:65:14:1b:a7:9b:d9:
         30:52:b5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:01:40 2025 by rpki-client