Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3137372e34342e302e302f31372d3235203d3e203238323032.roa
File:                     3137372e34342e302e302f31372d3235203d3e203238323032.roa (raw, json)
Hash identifier:          G6YdJPEcHmS9u9Mv0UTgdhw7uGuSXu8ncupP6aIz7ls=
Subject key identifier:   18:C3:C2:9F:28:BD:B3:A7:71:36:B9:27:5C:49:E9:1D:B6:40:8E:D9
Certificate issuer:       /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial:       5AFE58E290A8757E1DBDFC8791AD7E510A1ACC99
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3137372e34342e302e302f31372d3235203d3e203238323032.roa
Signing time:             Mon 13 Jan 2025 13:32:21 +0000
ROA not before:           Mon 13 Jan 2025 13:27:21 +0000
ROA not after:            Mon 12 Jan 2026 13:32:21 +0000
asID:                     28202
IP address blocks:        177.44.0.0/17 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
                          rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 18:49:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:fe:58:e2:90:a8:75:7e:1d:bd:fc:87:91:ad:7e:51:0a:1a:cc:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
        Validity
            Not Before: Jan 13 13:27:21 2025 GMT
            Not After : Jan 12 13:32:21 2026 GMT
        Subject: CN=18C3C29F28BDB3A77136B9275C49E91DB6408ED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8f:39:6b:78:2c:97:d1:6d:42:54:f2:c0:e0:
                    a9:84:ec:dd:06:5f:cd:8d:2e:3b:be:a2:0f:29:28:
                    17:8a:23:8f:93:54:cb:6e:c9:c8:34:5c:00:c4:46:
                    82:8a:45:4d:87:0a:9c:40:d9:dd:78:2e:19:a4:3a:
                    ce:af:68:ed:3a:e5:17:67:c0:39:d3:cd:50:9b:b1:
                    a7:28:a0:24:18:0a:15:83:37:c0:38:62:e1:9f:10:
                    81:fa:7e:80:a0:5a:4d:76:ce:48:0a:74:a0:a5:a4:
                    e8:5a:41:43:da:3f:ef:1b:50:97:2e:04:bc:b8:8a:
                    0f:60:2f:d7:b0:c3:0f:b7:65:b6:2e:ff:16:07:6b:
                    ed:1a:c3:58:12:64:99:c0:b2:91:b2:b9:65:f0:61:
                    20:17:e4:a1:bf:cb:00:6e:8e:7a:1b:53:49:a6:d3:
                    f9:50:09:a9:50:a4:1e:b5:11:79:37:f8:3f:45:0e:
                    2f:63:dd:8b:b5:6b:1c:ef:90:a6:cf:43:1f:6e:51:
                    41:8f:d9:27:df:48:df:cc:b4:b1:93:56:71:f8:ae:
                    62:85:8d:e1:d3:4e:ed:20:ec:18:5f:fa:08:9d:48:
                    e5:1c:12:0a:23:34:f9:0c:b3:9d:82:55:53:64:15:
                    42:03:7d:33:d6:be:ba:73:a1:1f:52:96:ea:bc:72:
                    cd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C3:C2:9F:28:BD:B3:A7:71:36:B9:27:5C:49:E9:1D:B6:40:8E:D9
            X509v3 Authority Key Identifier:
                keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3137372e34342e302e302f31372d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         81:f9:41:72:43:c5:a6:27:b4:5b:9a:62:a8:7f:1f:25:f3:6e:
         9a:72:51:6e:bd:25:94:28:f0:2c:00:fb:f1:1e:cc:0e:fe:a5:
         ca:66:07:23:85:e9:e5:6a:41:9a:bd:d1:19:04:21:ca:ba:ef:
         d2:1c:ab:cc:4e:37:80:e3:b8:7e:5d:fe:82:57:21:07:e7:f0:
         71:a2:e4:29:14:99:1a:7b:18:c1:55:92:8a:ad:9a:8a:10:4b:
         4a:59:92:4f:8b:f2:95:9d:b6:e3:e8:d9:0a:ed:1b:84:62:05:
         dc:3b:de:5d:e8:4f:db:29:79:91:b3:97:ba:f4:34:d7:56:1f:
         8c:76:5d:11:7a:78:38:2b:52:7a:27:ce:7f:09:15:f6:a4:ba:
         68:be:f3:0a:d0:01:59:b5:be:b4:1a:d5:05:4e:13:e3:b6:75:
         b4:5e:22:ec:ec:d1:7b:a6:72:86:ed:7a:04:85:64:27:e8:8a:
         08:ad:22:c8:c3:26:01:25:9d:fa:f3:c5:40:c4:94:a3:c1:a3:
         11:9b:fd:e5:ad:40:c3:32:9c:44:32:eb:d8:3f:84:7b:93:ec:
         b7:8c:f4:c6:ee:fc:89:66:40:5f:f9:0d:b4:2e:73:65:39:c4:
         50:fc:f5:66:7e:ea:72:08:26:ef:cf:ef:88:19:22:4f:8f:21:
         cb:d0:57:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:36:38 2025 by rpki-client