Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/3137372e38352e3133322e302f32342d3234203d3e20323632363038.roa
File:                     3137372e38352e3133322e302f32342d3234203d3e20323632363038.roa (raw, json)
Hash identifier:          /UgyYVHxFXmLtl/okr3rX3nhMe1sGcE9QbwuNeQsfTs=
Subject key identifier:   B6:ED:A9:31:72:98:D2:B6:A6:0A:B5:34:AB:5E:D6:36:E7:ED:6F:FD
Certificate issuer:       /CN=14FF5A751C4E19792B967D92C271B9738745BFED
Certificate serial:       55E20F3B3141B8740C27D3CDD3B71EF62D33F6C7
Authority key identifier: 14:FF:5A:75:1C:4E:19:79:2B:96:7D:92:C2:71:B9:73:87:45:BF:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FF5A751C4E19792B967D92C271B9738745BFED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/3137372e38352e3133322e302f32342d3234203d3e20323632363038.roa
Signing time:             Tue 25 Mar 2025 14:04:47 +0000
ROA not before:           Tue 25 Mar 2025 13:59:47 +0000
ROA not after:            Tue 24 Mar 2026 14:04:47 +0000
asID:                     262608
IP address blocks:        177.85.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.crl
                          rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FF5A751C4E19792B967D92C271B9738745BFED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 12:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e2:0f:3b:31:41:b8:74:0c:27:d3:cd:d3:b7:1e:f6:2d:33:f6:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14FF5A751C4E19792B967D92C271B9738745BFED
        Validity
            Not Before: Mar 25 13:59:47 2025 GMT
            Not After : Mar 24 14:04:47 2026 GMT
        Subject: CN=B6EDA9317298D2B6A60AB534AB5ED636E7ED6FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:42:d0:13:12:ad:85:4c:62:aa:d8:e6:57:85:
                    cc:df:50:3a:d7:10:9d:12:a6:60:7c:99:e8:3f:3b:
                    9c:67:aa:1f:92:96:37:63:3c:89:f7:d7:a4:db:8c:
                    d8:7e:ee:15:ec:48:6d:62:84:b7:0c:5b:59:89:91:
                    1c:ff:4e:d9:06:bc:99:fe:4a:fb:ed:49:6a:9e:0f:
                    d6:63:e1:f8:cd:d3:74:70:23:38:17:17:56:57:0f:
                    f4:18:4a:e3:15:bc:57:1c:86:67:5c:e5:d9:2f:90:
                    9c:a1:ec:9b:6c:45:43:af:a9:8c:e4:f6:3f:ef:54:
                    cf:9f:05:18:49:1e:ed:45:b1:de:e8:64:a8:cc:6e:
                    08:b6:92:07:8d:a3:5d:23:94:ee:66:8a:b8:af:b3:
                    05:29:d3:c0:00:e6:64:58:cc:05:b7:7a:57:f5:27:
                    82:98:c0:c0:a7:fd:4f:df:4d:2a:cc:2c:7e:f8:49:
                    f4:b3:c3:08:45:11:c9:e3:88:2d:97:6f:00:96:e5:
                    08:83:a1:a4:c0:10:57:65:9d:ad:84:22:52:4b:ea:
                    a1:dd:3f:d5:97:01:1e:44:36:5d:1b:29:e6:72:73:
                    0c:0f:67:06:01:62:95:47:d2:40:3a:00:17:78:b8:
                    dd:c3:fd:f1:ef:d8:f2:d8:6f:7c:55:4b:ea:7b:73:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:ED:A9:31:72:98:D2:B6:A6:0A:B5:34:AB:5E:D6:36:E7:ED:6F:FD
            X509v3 Authority Key Identifier:
                keyid:14:FF:5A:75:1C:4E:19:79:2B:96:7D:92:C2:71:B9:73:87:45:BF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FF5A751C4E19792B967D92C271B9738745BFED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/3137372e38352e3133322e302f32342d3234203d3e20323632363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:4e:b2:59:2d:db:b5:b2:78:e2:cd:5f:0b:30:4e:20:46:54:
         9b:9f:33:7b:53:00:53:d2:10:c3:bf:c0:f9:cd:3e:54:20:2e:
         8e:a8:34:de:11:b8:08:ac:28:4d:ee:f5:f7:be:47:24:b4:78:
         86:6d:6a:1a:1e:bc:e5:ce:c9:45:7e:45:fd:83:5a:63:bd:3d:
         d8:93:7a:6d:21:f3:17:fd:cf:0d:73:76:12:ae:a5:1a:bc:86:
         cc:a4:c3:e5:fc:b8:7c:27:fa:ca:af:1d:38:5c:93:90:6d:6b:
         40:6d:ef:a6:fe:3e:bb:4c:a2:75:3e:25:98:66:01:4e:0e:19:
         60:08:79:6d:bf:51:ec:f6:c2:d5:d3:ca:79:8d:9d:60:de:a4:
         f2:77:57:56:93:ed:f1:a2:b0:b8:88:ba:a3:5c:0f:90:5e:ef:
         d7:c3:ca:5e:24:9d:b1:28:a5:11:bd:72:a0:16:f9:cb:f7:56:
         b6:62:11:bf:97:c3:83:ef:82:1d:bf:ef:f3:ec:08:60:f8:87:
         5d:7f:6e:3f:9c:d6:3e:9e:cd:3f:90:26:1f:56:01:2d:9a:e9:
         b6:b3:e9:87:c3:51:86:2a:6a:d0:85:4a:ef:08:13:b4:f5:2a:
         6a:5d:d9:80:0b:98:27:37:5d:82:a4:10:a8:42:ce:46:97:9e:
         22:1c:01:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:01:14 2025 by rpki-client