Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32382e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e32382e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          nDbTB7R5nzyrYYiq6c1yyf/ETDMacHKr+8QxGG4JLC8=
Subject key identifier:   02:19:2A:3C:CE:DF:AF:DA:30:72:BF:51:57:2F:30:0C:32:A3:74:33
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       7448274F0EF6A21B4249DC3AA87E0F00C985D10D
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32382e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:44 +0000
ROA not before:           Thu 06 Mar 2025 02:26:44 +0000
ROA not after:            Thu 05 Mar 2026 02:31:44 +0000
asID:                     52706
IP address blocks:        177.126.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 10:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:48:27:4f:0e:f6:a2:1b:42:49:dc:3a:a8:7e:0f:00:c9:85:d1:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:44 2025 GMT
            Not After : Mar  5 02:31:44 2026 GMT
        Subject: CN=02192A3CCEDFAFDA3072BF51572F300C32A37433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:b9:cd:0f:1c:d1:24:be:cd:17:b6:aa:0d:
                    63:20:30:8a:c2:11:49:d3:83:64:55:94:a1:97:bb:
                    ec:6a:d9:ce:c8:1e:d5:89:46:79:b9:e7:8c:88:59:
                    66:e9:6d:3d:31:28:89:8a:59:db:9e:0f:3a:32:c1:
                    b2:68:de:c8:18:d5:8b:2e:3b:08:58:fe:8f:19:1b:
                    95:a8:58:0a:03:61:be:ef:ff:02:32:86:48:ce:e1:
                    03:8e:04:9e:a9:ec:0a:ac:72:0f:cb:d5:82:cc:c6:
                    83:a9:9d:9f:76:eb:82:dc:da:f1:4b:b5:6b:a7:0d:
                    6a:ff:6a:f2:d4:77:8c:0d:57:21:e6:b2:fa:03:fb:
                    e6:91:10:3f:29:27:53:af:5b:b9:7a:fd:f0:1c:13:
                    a1:0f:50:3a:e3:e7:d6:ff:c9:cd:33:65:60:a7:32:
                    72:96:50:1c:fe:de:37:74:4d:59:f8:2f:1b:6f:d4:
                    76:fb:86:1e:3e:b3:db:28:55:d8:a1:7c:84:06:73:
                    5c:9e:51:3e:ca:c3:e6:1f:75:8c:64:ef:d4:ee:2e:
                    87:9e:d0:66:68:ef:af:77:f1:68:6f:71:77:02:07:
                    5c:9f:5e:60:96:a6:da:15:c7:bf:57:81:9a:68:79:
                    7e:8a:26:6c:37:82:1a:29:ec:6c:3b:db:9a:7f:91:
                    ba:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:19:2A:3C:CE:DF:AF:DA:30:72:BF:51:57:2F:30:0C:32:A3:74:33
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32382e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:3c:89:7d:28:3b:ee:b3:a9:2b:08:d2:c9:6d:6d:41:97:70:
         79:6a:ea:76:de:b3:b3:bd:b7:f3:c9:84:29:68:b6:ed:e1:77:
         27:fa:3d:d0:31:72:e9:86:f5:16:a0:d4:b0:b2:f1:e6:dd:6d:
         bd:27:b4:dc:c4:c5:fb:f6:76:45:31:80:b6:66:f5:65:5a:dd:
         fc:ef:60:9a:4e:d7:54:9d:cb:3e:49:c4:27:89:6c:f3:65:4d:
         67:71:89:79:48:d8:a3:78:5b:e1:82:49:65:bf:c5:4a:97:69:
         02:6c:c3:ab:bf:1f:6e:1b:89:41:a3:db:4f:58:0a:40:a5:9a:
         50:93:5f:8b:f3:16:a5:f2:06:0c:a1:a4:42:cd:10:45:07:fc:
         12:14:d9:c4:b9:65:3f:69:d2:86:50:c9:66:15:2a:f9:43:6b:
         6f:09:c0:37:0e:db:46:22:61:8f:b9:81:08:2b:9d:ee:74:b6:
         71:84:24:3f:2a:42:56:76:c3:6f:de:a1:07:87:0f:67:c4:06:
         45:e3:3e:80:8a:84:8c:80:26:c9:c1:09:41:a4:9e:b7:3f:30:
         6d:de:90:fc:5f:3c:21:4e:8f:96:30:ad:71:2e:fd:e7:68:34:
         00:7b:db:d6:ff:3b:d4:d3:88:73:82:1e:58:ae:43:89:8f:ac:
         a9:e6:90:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:01:35 2025 by rpki-client