Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32312e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e32312e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          rqkkk/Q0Kqpmaetos1T6sM6AX7/RBRVnWfuuaJuU87M=
Subject key identifier:   90:CD:E1:10:52:7E:27:B8:16:89:27:30:8B:27:BE:1F:02:9E:F4:F9
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       203B8B693F5AC5584B1D7234C9540521629CC2DE
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32312e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:43 +0000
ROA not before:           Thu 06 Mar 2025 02:26:43 +0000
ROA not after:            Thu 05 Mar 2026 02:31:43 +0000
asID:                     52706
IP address blocks:        177.126.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3b:8b:69:3f:5a:c5:58:4b:1d:72:34:c9:54:05:21:62:9c:c2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:43 2025 GMT
            Not After : Mar  5 02:31:43 2026 GMT
        Subject: CN=90CDE110527E27B8168927308B27BE1F029EF4F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ae:c3:38:e8:71:d0:d4:e1:1a:a1:9e:fe:27:
                    8b:93:1f:e4:fa:3a:ad:83:c9:12:ba:c4:46:fe:f9:
                    d3:fb:66:f7:dd:d1:2e:03:49:c4:19:5b:46:68:70:
                    c8:bc:45:1f:80:5d:38:af:d7:88:10:66:2a:80:12:
                    e9:9f:42:03:c2:f6:21:5e:0b:3a:7b:90:6c:31:df:
                    9c:c1:89:57:8f:c7:35:fb:9f:86:6c:a3:ce:7a:eb:
                    b3:b8:f8:b1:d2:94:82:16:f0:b9:36:0e:b0:1e:2e:
                    aa:df:9e:f9:bd:b0:21:e3:33:6d:27:b8:2c:dc:a5:
                    bc:e5:8e:e0:76:c8:7f:ad:f2:2e:1a:39:be:69:d6:
                    b5:3f:58:37:e4:80:83:c5:5f:8b:dc:ba:90:ee:2b:
                    a9:e3:f4:65:bf:68:e5:c8:0d:72:99:bf:14:f3:ae:
                    eb:a7:bd:c6:aa:dd:a8:0c:a9:1d:32:6b:db:bc:25:
                    71:f3:90:fa:2f:37:6c:4d:51:66:53:d1:49:b0:26:
                    6e:ea:02:57:5a:56:24:dd:bc:55:0e:d8:11:a8:69:
                    4a:6a:fd:3e:6a:b7:ba:ec:8b:ea:a3:06:6d:d5:42:
                    ed:2b:26:5a:9c:f5:1c:b7:f6:fe:a9:16:bb:2b:b8:
                    c2:3d:82:e3:48:14:a9:a3:84:d0:c7:0a:38:a3:54:
                    98:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CD:E1:10:52:7E:27:B8:16:89:27:30:8B:27:BE:1F:02:9E:F4:F9
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32312e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:b7:1c:0d:fe:60:73:d1:a5:ba:d8:c2:fe:a5:2c:01:41:00:
         f5:a9:93:b2:b2:73:d3:a7:c7:bd:76:9b:14:c8:bd:33:a4:94:
         72:3e:80:4b:31:36:c7:52:f9:18:e0:5d:3e:7b:61:ad:28:4f:
         8a:59:48:3d:80:30:c5:98:ad:6f:f3:fd:06:d5:b3:eb:04:2c:
         60:17:fd:cb:9e:16:57:d0:44:50:08:39:a4:bf:f2:6f:6f:d6:
         d3:4b:01:a1:51:1f:84:61:a7:f9:26:ce:4a:24:68:2b:a5:e7:
         84:b2:c5:e1:51:93:40:66:f7:74:ff:17:1e:6c:7f:8b:5c:60:
         80:4c:bd:cc:28:4c:0d:ab:f4:9e:5d:a8:b4:dc:85:d3:e3:41:
         ad:0d:9b:ea:e9:1a:0f:6c:c5:bd:44:02:48:d4:24:d7:3e:4c:
         72:1e:6f:62:55:ad:0c:3d:d0:d4:cf:c3:02:72:02:fe:40:c1:
         b8:21:ca:79:8f:75:ab:a2:31:5c:d0:09:08:49:18:be:a2:b8:
         2f:cb:02:49:83:89:58:6a:9e:3d:65:92:93:7c:8e:48:b4:b3:
         0f:d3:25:18:8e:4d:b6:ad:d8:19:78:58:b0:ac:ef:67:dc:31:
         ec:83:a0:ad:3e:ed:f4:95:f1:ff:0f:53:1d:84:ff:c1:fb:a8:
         cf:ff:05:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 21:07:12 2025 by rpki-client