Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e33302e302f32332d3233203d3e203532373036.roa
File:                     3137372e3132362e33302e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          sxckA0D1Dl1+sLC15VmvRP31t0fbV1IRxk17MZ5UgPw=
Subject key identifier:   69:E2:77:34:41:BF:BE:0A:15:ED:78:3B:11:F9:FE:9E:C1:19:70:FA
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       110D3D02FBE4513C99421A2797AFEC443C219B7E
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e33302e302f32332d3233203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:46 +0000
ROA not before:           Thu 06 Mar 2025 02:26:46 +0000
ROA not after:            Thu 05 Mar 2026 02:31:46 +0000
asID:                     52706
IP address blocks:        177.126.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0d:3d:02:fb:e4:51:3c:99:42:1a:27:97:af:ec:44:3c:21:9b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:46 2025 GMT
            Not After : Mar  5 02:31:46 2026 GMT
        Subject: CN=69E2773441BFBE0A15ED783B11F9FE9EC11970FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:b1:3e:a1:81:94:26:ed:23:c1:86:ae:5c:
                    c7:e1:1c:cf:f1:c5:c1:15:59:2b:f2:2b:99:ff:8c:
                    dd:f9:4b:8e:18:4b:9a:eb:a5:95:76:1d:b5:ee:e0:
                    3f:93:a0:6b:ec:05:ae:e5:00:87:59:62:c3:50:6e:
                    78:2b:62:5b:50:46:34:2a:69:79:7b:f5:a7:b8:8b:
                    43:b4:17:22:f3:d8:b0:38:17:4b:6f:69:52:23:ae:
                    0f:e1:45:97:d3:33:20:50:eb:08:d9:0c:f8:4f:24:
                    fa:16:e7:2d:05:7f:3b:6d:c2:a0:4f:ca:ed:67:86:
                    7f:a0:68:69:48:1e:6a:ea:0e:d9:a7:b2:4e:cd:a8:
                    39:1f:97:bf:bc:ec:37:09:0a:14:6c:02:df:e5:40:
                    b7:be:f5:1d:e4:d2:a7:1a:e1:69:39:5e:e0:03:aa:
                    49:48:31:a1:df:b7:a0:76:50:2c:aa:0d:72:b7:8c:
                    c2:84:ac:bf:b7:89:e3:3d:f6:bf:cd:5d:25:b6:cf:
                    e5:6f:69:7d:ee:e2:98:be:b5:42:ef:86:17:9b:19:
                    0e:46:b8:25:c1:04:89:fa:97:9b:1e:49:ff:86:3b:
                    59:c4:66:71:fc:40:fa:00:62:65:12:28:b9:b7:76:
                    28:1d:28:1e:67:e7:c9:ab:0f:2e:9a:d7:03:47:e8:
                    44:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E2:77:34:41:BF:BE:0A:15:ED:78:3B:11:F9:FE:9E:C1:19:70:FA
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e33302e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:4a:b7:9d:9d:52:ab:14:2b:f2:a9:6d:1d:38:ee:4c:cf:0c:
         6d:39:90:f9:89:d6:10:c1:73:64:0f:5b:78:4f:8c:8c:9b:3f:
         74:c7:45:04:e9:8e:a8:cd:34:c6:81:af:f7:83:7f:3d:a3:1a:
         1b:a1:64:00:73:0a:51:6f:e0:85:4c:d0:b8:80:34:93:2a:ff:
         8f:6b:eb:60:ae:6a:b6:fc:5f:c8:f7:2e:b2:35:eb:4d:98:87:
         0d:1d:80:f2:11:ac:ef:8c:68:05:c5:72:40:d6:60:fc:f3:2a:
         19:dd:ff:8c:31:a4:2c:7b:c9:52:79:ba:a8:3f:2a:20:ad:22:
         23:8f:61:3c:5f:6b:b2:2d:4b:de:05:70:85:5b:37:46:dc:34:
         12:ce:a4:08:f9:85:26:f1:20:36:85:3c:cd:92:88:31:e3:17:
         80:f6:0f:ef:c1:cc:97:b6:1a:2d:3b:e6:a6:a8:27:1d:26:33:
         77:3c:1c:7f:cf:7f:2f:7b:89:08:da:ea:ba:44:2f:60:a9:ae:
         f6:93:bd:6f:77:bc:fe:e9:25:50:fc:d9:d3:b6:56:e0:8c:6f:
         48:ff:60:8e:cf:5b:30:05:45:00:2a:81:17:ed:f7:36:65:72:
         17:13:35:bb:3b:76:e9:cd:26:48:28:db:4c:94:a2:1e:7b:c5:
         d8:0e:35:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 20:02:00 2025 by rpki-client