Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/3137372e38352e3133332e302f32342d3234203d3e20323632363038.roa
File:                     3137372e38352e3133332e302f32342d3234203d3e20323632363038.roa (raw, json)
Hash identifier:          XCAJARc3/kFXOWUPkJmixYG6fxhg4pBn+bGY79b5QmE=
Subject key identifier:   D3:39:6D:95:F8:BC:23:EE:07:1B:3A:49:FD:1E:7C:7A:40:77:4E:A7
Certificate issuer:       /CN=14FF5A751C4E19792B967D92C271B9738745BFED
Certificate serial:       69D13F68B73B9D0FAD1DC57252183F045C5B0123
Authority key identifier: 14:FF:5A:75:1C:4E:19:79:2B:96:7D:92:C2:71:B9:73:87:45:BF:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FF5A751C4E19792B967D92C271B9738745BFED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/3137372e38352e3133332e302f32342d3234203d3e20323632363038.roa
Signing time:             Tue 25 Mar 2025 14:05:02 +0000
ROA not before:           Tue 25 Mar 2025 14:00:02 +0000
ROA not after:            Tue 24 Mar 2026 14:05:02 +0000
asID:                     262608
IP address blocks:        177.85.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.crl
                          rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FF5A751C4E19792B967D92C271B9738745BFED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 12:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d1:3f:68:b7:3b:9d:0f:ad:1d:c5:72:52:18:3f:04:5c:5b:01:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14FF5A751C4E19792B967D92C271B9738745BFED
        Validity
            Not Before: Mar 25 14:00:02 2025 GMT
            Not After : Mar 24 14:05:02 2026 GMT
        Subject: CN=D3396D95F8BC23EE071B3A49FD1E7C7A40774EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b0:58:81:f5:d3:c5:5a:bb:5d:a7:f5:1e:79:
                    37:f9:73:0a:69:d6:b5:b3:a8:29:c9:05:b7:4d:51:
                    ed:1f:a6:ba:01:de:b4:1e:82:3d:7f:b1:4a:45:c1:
                    69:b5:7c:6e:bc:4e:04:ac:03:ee:3a:37:e2:4e:2c:
                    51:a4:ca:f8:45:25:e3:e8:b5:0c:ae:52:5b:f7:25:
                    f9:7b:e4:e8:b2:3a:fb:85:d2:af:59:86:f7:45:2f:
                    9b:73:1e:ab:ad:72:0f:ae:7b:21:02:9d:eb:cd:c1:
                    af:28:3e:ca:5a:a8:80:88:71:50:c2:4d:4f:b2:a0:
                    a8:eb:4a:39:04:1a:5c:8a:78:c0:0a:bb:d1:62:8a:
                    6c:6e:71:e4:44:cf:84:aa:0e:63:22:76:00:bd:39:
                    92:f9:3f:7e:3c:3c:c5:ca:fb:c6:21:33:8e:be:ad:
                    9a:08:3b:51:ef:66:2b:b6:78:7a:87:e5:36:d7:de:
                    72:38:67:54:04:75:65:c7:a9:95:d9:4e:0e:28:4c:
                    8c:1d:6a:7a:66:ff:b0:f4:ff:8e:bf:15:f8:8c:03:
                    62:71:8a:b6:aa:4d:79:7e:74:7f:27:b2:8e:db:f8:
                    f2:50:de:84:76:04:4c:e2:f5:ef:b5:6e:90:b3:3c:
                    d8:1e:f4:91:bc:ff:fe:b1:c9:3f:2c:ec:a2:02:2a:
                    ce:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:39:6D:95:F8:BC:23:EE:07:1B:3A:49:FD:1E:7C:7A:40:77:4E:A7
            X509v3 Authority Key Identifier:
                keyid:14:FF:5A:75:1C:4E:19:79:2B:96:7D:92:C2:71:B9:73:87:45:BF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FF5A751C4E19792B967D92C271B9738745BFED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/3137372e38352e3133332e302f32342d3234203d3e20323632363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:40:88:f9:1a:89:78:33:66:ac:f9:02:dc:18:e2:06:fc:07:
         e5:59:36:13:f8:6c:7a:dc:5c:1d:1a:b4:09:0e:c5:d0:57:de:
         28:97:5f:00:94:ac:8a:ff:1f:99:e3:81:fe:97:6e:6c:0a:9c:
         0e:d1:35:b6:f2:86:86:f1:42:9d:8f:89:cc:bf:8c:fb:b0:3b:
         97:fd:db:a8:11:3f:55:cf:97:50:17:b7:a2:c1:89:f7:9d:2f:
         66:9d:c4:e8:cc:70:c1:9e:ca:a1:c9:5d:b8:77:c4:16:7e:3f:
         67:c2:6a:2b:a1:a3:22:9b:b7:8d:13:69:63:78:c2:47:f4:e9:
         00:fc:c6:cc:79:8a:58:fb:94:33:5a:48:db:0f:0b:39:7d:f7:
         1d:f8:b9:f8:46:c0:f5:9e:86:ed:07:bd:6d:cd:ea:f3:7f:97:
         ae:25:76:6b:4c:e5:32:26:c2:89:58:4d:91:ec:ec:d2:13:d0:
         ab:d5:4b:f5:98:55:24:71:16:aa:10:b8:e8:01:80:ee:5e:38:
         b4:f4:66:4f:dd:e5:71:e5:52:8c:21:3d:d0:28:07:0b:4e:97:
         0d:67:19:5f:42:90:bf:b4:4a:6e:10:39:bd:c7:92:c3:50:a4:
         cd:0f:1e:2c:08:57:f9:3e:dc:ea:cd:60:44:1b:5e:bf:d9:f2:
         c9:80:f9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:08:35 2025 by rpki-client