Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/1/3137372e3139302e37322e302f32312d3234203d3e20323633313335.roa
File:                     3137372e3139302e37322e302f32312d3234203d3e20323633313335.roa (raw, json)
Hash identifier:          FexFu9h7VQGmQc6h2Jgr4/P67kFfywSKdcH9wKi0DUQ=
Subject key identifier:   75:35:87:16:14:DC:63:63:93:F2:1B:FA:33:89:64:CE:E5:73:9D:47
Certificate issuer:       /CN=390010F3F1326B8B7E553DD78E62D9DBA2FA7408
Certificate serial:       7BF6B78F39427D28441F44BD0E5B382388EF6537
Authority key identifier: 39:00:10:F3:F1:32:6B:8B:7E:55:3D:D7:8E:62:D9:DB:A2:FA:74:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/1/3137372e3139302e37322e302f32312d3234203d3e20323633313335.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     263135
IP address blocks:        177.190.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.crl
                          rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 12:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f6:b7:8f:39:42:7d:28:44:1f:44:bd:0e:5b:38:23:88:ef:65:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390010F3F1326B8B7E553DD78E62D9DBA2FA7408
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=7535871614DC636393F21BFA338964CEE5739D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:c1:46:97:da:e5:ab:aa:47:21:79:91:22:
                    38:c0:1a:9e:0c:01:29:70:eb:c5:af:21:12:48:33:
                    8e:33:d6:95:74:73:69:0f:6a:9d:64:b3:fa:73:a8:
                    ce:02:13:b7:74:85:bf:03:2f:c7:a8:3d:62:49:cd:
                    42:a0:a5:a1:a7:a3:2f:28:41:81:94:d2:34:c3:3d:
                    80:53:cc:fd:d6:bc:63:ea:8b:c8:de:c2:3b:48:1f:
                    70:2a:64:c2:7d:7a:58:6b:2b:65:81:be:77:6c:7e:
                    15:2a:4f:03:ea:d1:c3:55:1a:ac:0f:02:5d:3f:69:
                    a7:ea:fb:61:c7:f4:1a:14:bf:22:2f:14:30:0f:60:
                    fd:8c:06:22:13:d3:0e:88:ad:bd:0f:f8:07:bc:b8:
                    29:65:bf:37:83:61:c8:d7:cb:42:0c:01:4a:a2:d5:
                    38:a1:05:d4:45:e5:90:73:01:ab:03:e4:39:62:a5:
                    3d:31:1c:99:4f:80:1b:89:b9:dd:62:17:31:2b:0e:
                    c7:fb:2a:1f:c4:82:f2:34:02:af:32:e3:6f:c9:c3:
                    bd:6f:37:49:62:f7:0f:1d:b5:5d:78:b2:2e:ba:ec:
                    22:37:48:1c:26:e0:c3:b6:aa:29:f2:eb:65:f2:bb:
                    69:91:da:64:a8:11:fb:cf:ed:4d:4b:76:7d:76:a8:
                    89:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:35:87:16:14:DC:63:63:93:F2:1B:FA:33:89:64:CE:E5:73:9D:47
            X509v3 Authority Key Identifier:
                keyid:39:00:10:F3:F1:32:6B:8B:7E:55:3D:D7:8E:62:D9:DB:A2:FA:74:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/1/3137372e3139302e37322e302f32312d3234203d3e20323633313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:5f:32:ad:a0:12:64:8c:23:ba:43:53:5c:ef:d8:0d:c9:d0:
         86:68:71:17:d0:8c:2c:e0:ff:d5:89:6e:d0:af:58:08:e8:ac:
         44:17:b8:7b:7a:07:b7:a0:9c:5e:8f:2f:06:7c:8b:7c:53:41:
         48:01:78:85:ea:36:02:96:e1:ec:47:6a:a0:e0:04:a2:bc:68:
         8d:55:33:c9:99:68:8d:39:b9:88:06:65:95:4a:a3:b2:d2:53:
         dd:c7:f0:41:3a:78:9c:fd:7e:83:a3:24:da:c2:d7:32:38:4b:
         7d:31:a4:2d:bb:7c:84:0e:be:65:52:d1:de:89:3b:16:e2:f9:
         e5:9d:2f:d4:c2:d9:db:c7:7b:7a:db:a1:bd:af:c2:66:69:bc:
         3c:0c:c5:51:9d:48:bd:0c:88:f4:3b:a1:84:fb:ef:a7:57:3a:
         84:e0:2a:a8:0e:2e:70:c8:6a:a5:4a:db:ff:00:73:3a:8e:28:
         f3:d4:cf:fc:90:d3:49:1a:15:e6:7e:30:05:9a:95:c4:20:2c:
         0e:08:37:12:6a:43:c8:a5:63:a3:d9:bc:01:4e:4d:4c:a2:50:
         91:f2:49:51:cc:03:4a:c7:75:7b:ee:6f:16:89:6a:50:6a:a3:
         e9:a0:41:65:14:7f:fb:4e:2d:48:f5:2c:9f:ae:46:7b:eb:a0:
         7f:3e:66:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:26:41 2025 by rpki-client