Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/3137372e38352e3133352e302f32342d3234203d3e20323632363038.roa
File:                     3137372e38352e3133352e302f32342d3234203d3e20323632363038.roa (raw, json)
Hash identifier:          l5w10JDDKk7+ihQAvz1FSTpMV+C0z7Qqa2cCzeaS3HQ=
Subject key identifier:   03:B0:6F:43:92:38:1E:D1:EF:8D:DF:A7:7D:72:24:2E:15:47:BD:8D
Certificate issuer:       /CN=14FF5A751C4E19792B967D92C271B9738745BFED
Certificate serial:       41E5B3845265D3E186CF62F4957ED132889417E9
Authority key identifier: 14:FF:5A:75:1C:4E:19:79:2B:96:7D:92:C2:71:B9:73:87:45:BF:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FF5A751C4E19792B967D92C271B9738745BFED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/3137372e38352e3133352e302f32342d3234203d3e20323632363038.roa
Signing time:             Tue 25 Mar 2025 14:05:14 +0000
ROA not before:           Tue 25 Mar 2025 14:00:14 +0000
ROA not after:            Tue 24 Mar 2026 14:05:14 +0000
asID:                     262608
IP address blocks:        177.85.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.crl
                          rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FF5A751C4E19792B967D92C271B9738745BFED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 12:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e5:b3:84:52:65:d3:e1:86:cf:62:f4:95:7e:d1:32:88:94:17:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14FF5A751C4E19792B967D92C271B9738745BFED
        Validity
            Not Before: Mar 25 14:00:14 2025 GMT
            Not After : Mar 24 14:05:14 2026 GMT
        Subject: CN=03B06F4392381ED1EF8DDFA77D72242E1547BD8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d3:cc:29:fc:01:81:2a:e7:f4:d4:8d:ad:48:
                    14:82:5b:8f:cf:8c:da:a1:2a:65:be:8a:3c:87:ec:
                    bb:b5:67:83:d4:19:6b:c5:1d:3f:fb:cb:de:35:8f:
                    a3:12:ed:0e:42:9c:b0:e3:13:5a:1a:7e:d9:01:a0:
                    e4:97:0b:64:7a:bc:ee:39:82:4d:3f:d9:98:82:10:
                    11:9f:a5:16:84:8a:69:a1:00:9f:a3:22:d4:30:ca:
                    22:f1:56:6f:70:b0:f0:7e:ef:9c:79:d3:0f:e4:ad:
                    22:0d:38:f8:f5:54:bf:3e:a1:f9:db:9a:59:e8:2e:
                    e9:e7:e1:4a:e8:16:22:79:eb:91:eb:1a:cd:ad:2c:
                    fd:4b:33:83:1f:49:8b:d6:35:33:fc:26:cf:2d:c5:
                    bc:46:d6:7b:f1:07:ba:0d:3d:69:8f:e1:ec:ad:2d:
                    18:9d:e6:5d:93:7d:b7:00:f7:ea:6e:b3:d1:6b:b3:
                    b7:f9:19:2a:d6:9d:e3:b9:f3:a0:ca:eb:7a:e6:a5:
                    bc:84:d2:65:d9:26:aa:6e:65:5b:27:a9:86:4a:ec:
                    e6:59:05:2e:84:39:58:93:18:23:27:25:de:92:34:
                    08:fa:75:76:04:5a:ca:71:cf:9f:28:23:94:fc:6a:
                    4c:bc:f5:11:7d:fd:a1:eb:7a:d2:59:c3:d9:f2:62:
                    0a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B0:6F:43:92:38:1E:D1:EF:8D:DF:A7:7D:72:24:2E:15:47:BD:8D
            X509v3 Authority Key Identifier:
                keyid:14:FF:5A:75:1C:4E:19:79:2B:96:7D:92:C2:71:B9:73:87:45:BF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FF5A751C4E19792B967D92C271B9738745BFED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/3137372e38352e3133352e302f32342d3234203d3e20323632363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:7e:68:c1:ba:70:41:ea:f8:71:f8:ed:ed:9c:1f:a7:76:88:
         fa:61:9a:b0:63:7f:7e:f5:bf:42:76:a6:94:0f:c7:c2:75:14:
         01:12:2b:6b:ca:e2:cc:72:55:ec:ea:b2:ad:11:93:bb:48:39:
         72:73:78:72:84:c3:2a:20:77:9e:a0:8e:24:37:71:89:5a:5f:
         8e:03:83:f2:6a:37:1d:10:ca:f5:ab:d7:37:0c:e8:86:1e:ee:
         30:c7:85:73:f1:c3:58:63:fd:1d:44:29:d3:fa:b2:4b:46:89:
         ea:f6:d9:3e:0e:a8:57:27:58:eb:5d:6f:47:a1:3f:2b:69:43:
         35:9e:d2:37:6c:d6:d5:6b:85:e9:ce:f8:c4:98:d5:7b:6d:6b:
         29:92:25:41:28:c1:b9:8b:2a:b6:5e:c4:df:f9:6d:c5:91:bd:
         87:4b:7a:86:7a:1b:58:f5:e2:86:b2:32:db:97:b1:90:be:d0:
         12:26:fd:fe:a8:b1:5b:84:57:5c:ee:15:59:6c:fe:e8:d4:3d:
         fa:09:a2:d6:ac:f9:fa:56:08:b0:38:4b:5a:2e:e9:9a:1c:83:
         16:4a:23:6b:30:65:eb:fb:38:c9:f7:03:9f:7c:e1:cc:b0:fe:
         42:ac:df:fb:6f:f7:b4:ed:60:c2:59:91:3f:02:6f:87:71:a4:
         88:be:5d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:08:33 2025 by rpki-client