Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3137372e35342e3232342e302f32302d3234203d3e20323632343632.roa
File:                     3137372e35342e3232342e302f32302d3234203d3e20323632343632.roa (raw, json)
Hash identifier:          yPHkpVLZElcbvwBSW0QkkvXT0aiFZvxCCyjchvEhP3Q=
Subject key identifier:   C0:7A:55:B3:F3:46:91:16:23:05:11:9B:27:DC:73:EC:46:BD:B0:90
Certificate issuer:       /CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
Certificate serial:       693758DB5A908FF7E453AF659A16316170750E43
Authority key identifier: 94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3137372e35342e3232342e302f32302d3234203d3e20323632343632.roa
Signing time:             Fri 07 Mar 2025 05:11:16 +0000
ROA not before:           Fri 07 Mar 2025 05:06:16 +0000
ROA not after:            Fri 06 Mar 2026 05:11:16 +0000
asID:                     262462
IP address blocks:        177.54.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:37:58:db:5a:90:8f:f7:e4:53:af:65:9a:16:31:61:70:75:0e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
        Validity
            Not Before: Mar  7 05:06:16 2025 GMT
            Not After : Mar  6 05:11:16 2026 GMT
        Subject: CN=C07A55B3F34691162305119B27DC73EC46BDB090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6b:40:97:7b:d5:42:15:d4:ae:ff:87:db:d9:
                    51:76:c8:43:ed:26:63:d0:2c:bf:8b:92:fd:8e:d3:
                    34:34:5c:ee:6e:8a:8f:e1:ba:e6:b4:3f:51:4a:f4:
                    fd:df:62:5d:9b:2e:2f:9f:81:5e:18:d3:b6:0e:86:
                    ec:71:df:ee:48:79:10:cc:61:d0:9a:7e:2d:27:c8:
                    74:a4:f8:8b:f9:e4:11:d7:08:ed:6f:11:ba:b3:77:
                    b4:ec:61:14:b6:9d:8d:f1:94:ed:d4:7b:9b:da:1e:
                    e1:7d:df:88:ad:5f:a2:04:67:a3:7c:e1:7e:cd:3b:
                    87:d2:f5:7f:e5:5b:c7:70:e8:03:5c:23:58:11:60:
                    5f:c8:9e:76:28:b3:9c:c9:c5:62:f8:02:a3:0b:e7:
                    49:df:78:c2:a1:fd:a1:ec:7a:24:2b:d4:08:85:c7:
                    70:80:8d:52:83:86:67:7e:6a:d1:55:50:00:5a:a8:
                    75:fb:3a:aa:76:78:bd:e2:70:2c:81:8f:b4:94:5a:
                    fc:8b:24:ed:6d:b6:50:04:62:66:9c:64:7f:8f:6a:
                    b6:1b:39:87:75:77:59:47:ec:96:f0:09:44:a8:33:
                    e6:e2:95:a0:d9:da:07:f0:9e:23:31:53:6a:ea:53:
                    62:dc:a1:2c:46:b1:63:dd:12:ff:80:f5:0e:a0:e1:
                    4d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7A:55:B3:F3:46:91:16:23:05:11:9B:27:DC:73:EC:46:BD:B0:90
            X509v3 Authority Key Identifier:
                keyid:94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3137372e35342e3232342e302f32302d3234203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:d9:1c:6f:84:9f:39:da:83:46:68:3b:62:93:d9:99:49:6b:
         5d:eb:0f:f7:4a:5b:5b:4e:2b:52:dd:49:b1:f3:ae:e7:87:f6:
         36:f5:b6:05:3d:32:cc:65:8b:b1:ea:b6:f1:36:c2:1c:41:ad:
         24:74:29:58:64:c7:90:9e:97:19:39:5d:4c:6d:f9:69:88:bd:
         34:0b:b4:7a:78:98:e7:f5:d9:45:f3:da:27:ff:62:13:ec:8b:
         21:a5:58:aa:9e:bc:e4:96:b0:a4:2e:2d:56:ec:4d:52:0e:92:
         ee:ab:8a:43:7e:44:0e:be:a5:43:69:65:5a:67:c9:87:1b:26:
         77:47:11:a8:a0:4d:5c:a3:f4:af:9f:60:b9:c7:61:f7:18:5f:
         ad:98:1e:32:e4:91:f3:aa:06:41:c7:0c:e8:a0:5c:c3:73:55:
         58:2d:c3:76:90:70:d2:69:6f:b6:63:f1:e1:93:a3:a8:12:4f:
         be:3c:6f:d0:20:d8:04:68:7b:e3:57:9d:3b:95:ea:48:7a:cd:
         ea:7f:2b:67:c1:f5:65:ac:34:d9:7e:83:54:f8:76:5f:4c:4c:
         44:99:d6:5d:21:3d:6a:68:73:63:8d:9f:16:c1:5b:e6:75:c2:
         8f:d6:e2:ad:ef:59:86:76:88:24:77:26:0c:d7:9e:f1:3e:c0:
         cf:28:a2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:16:06 2025 by rpki-client