Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3137372e3133302e3132382e302f31392d3235203d3e203238323032.roa
File:                     3137372e3133302e3132382e302f31392d3235203d3e203238323032.roa (raw, json)
Hash identifier:          /eR18qDngHcquq6a08QWEXghH0EHAYwuYJO2PeGPMMA=
Subject key identifier:   24:58:82:BE:55:EB:6E:8C:1C:3C:DB:66:DC:39:1E:BC:07:A5:12:96
Certificate issuer:       /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial:       3332E62AB70F8FE0FA367A8C00BB2B40A7DBA584
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3137372e3133302e3132382e302f31392d3235203d3e203238323032.roa
Signing time:             Mon 13 Jan 2025 13:32:27 +0000
ROA not before:           Mon 13 Jan 2025 13:27:27 +0000
ROA not after:            Mon 12 Jan 2026 13:32:27 +0000
asID:                     28202
IP address blocks:        177.130.128.0/19 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
                          rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 18:49:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:32:e6:2a:b7:0f:8f:e0:fa:36:7a:8c:00:bb:2b:40:a7:db:a5:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
        Validity
            Not Before: Jan 13 13:27:27 2025 GMT
            Not After : Jan 12 13:32:27 2026 GMT
        Subject: CN=245882BE55EB6E8C1C3CDB66DC391EBC07A51296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:fc:72:bd:e3:f4:10:f4:c0:32:8b:0d:9d:
                    e4:a8:c0:eb:79:9d:ad:4e:0c:34:28:70:33:a8:30:
                    87:01:aa:36:b4:d4:d0:26:33:e4:aa:44:da:a9:46:
                    94:ee:a0:3f:f8:36:a5:70:c0:64:97:ee:4b:58:cb:
                    85:70:70:65:13:8b:58:41:a1:47:30:06:41:47:50:
                    ef:69:01:78:35:5d:ea:4e:0c:6c:c3:06:be:b7:a8:
                    3a:4d:5e:7f:3e:e1:6c:59:d1:cf:1b:da:84:0d:ea:
                    2c:6e:1b:fd:b3:de:a6:33:26:ca:ba:03:e6:c4:f9:
                    57:ee:fe:a4:45:f9:0d:9d:13:03:f2:76:e8:d5:39:
                    c2:29:87:23:34:5d:ae:77:b7:01:fa:11:f7:44:08:
                    d3:8f:37:9c:0c:0a:7a:ca:ba:1f:41:8e:97:04:d1:
                    1c:90:fc:8f:ca:45:1c:da:1e:e3:3b:e3:f5:e3:8d:
                    5b:65:fe:dd:77:d3:23:34:e5:3d:36:77:04:95:94:
                    0c:4c:90:9b:30:d9:4b:d3:4a:fc:db:15:6e:14:e7:
                    4a:9e:bd:7e:c5:cf:3e:99:54:6d:2d:b0:2e:85:31:
                    db:f4:8e:dc:02:58:88:3b:c5:e6:1c:37:a1:86:12:
                    9c:3a:bd:b0:ae:26:40:0d:a3:39:a5:67:ca:2b:c2:
                    73:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:58:82:BE:55:EB:6E:8C:1C:3C:DB:66:DC:39:1E:BC:07:A5:12:96
            X509v3 Authority Key Identifier:
                keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3137372e3133302e3132382e302f31392d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5c:16:ea:39:9e:83:34:4e:c6:c2:89:18:a5:ae:a4:91:1e:0c:
         d8:3c:96:07:28:b1:86:39:83:cb:33:9e:c4:ee:d3:21:78:7a:
         3c:65:96:d2:e4:3c:b2:d4:9e:d5:93:fc:2e:e7:52:b6:78:f1:
         b8:ee:14:26:05:65:c3:70:f6:ed:36:b4:59:e9:72:c3:2d:f6:
         2f:dd:95:f2:65:99:a3:f7:31:76:71:13:72:d6:53:4b:5a:1d:
         95:d6:16:71:ca:4c:60:7d:17:4c:18:77:0a:34:b5:e1:f6:ea:
         26:5a:38:fb:a0:d9:8c:e2:be:81:6d:0b:ac:7d:d9:dc:3e:f1:
         c9:e5:3b:fd:a2:91:ea:fd:93:a5:aa:c4:30:fa:69:ca:fb:51:
         fa:29:b3:ab:f9:20:5f:fd:db:c8:13:c1:f3:f8:91:00:43:c6:
         0e:2a:30:7d:47:12:f4:65:cd:a4:fa:fc:94:08:61:e8:c6:5f:
         85:d7:cc:a8:81:65:9e:32:c4:53:1d:4c:5e:9b:30:dc:fa:9e:
         e0:a7:dc:6b:85:cc:6d:c3:06:ee:47:34:5c:9b:9a:85:1c:95:
         22:d6:d2:a4:f7:cb:2d:69:38:65:a0:58:0d:e9:77:7f:88:e8:
         3d:cc:9f:bb:f4:cc:d9:98:d1:a0:e7:db:ca:f8:01:24:9c:b5:
         02:53:9d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:53 2025 by rpki-client