Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32302d3234203d3e20323632383636.roa
File:                     3137372e31322e3234302e302f32302d3234203d3e20323632383636.roa (raw, json)
Hash identifier:          T7Fo177/loZrzu2hFm2MTlYFgQlW15PX+K3pzy03GfM=
Subject key identifier:   69:84:62:DD:8B:51:34:8D:96:6F:B5:D4:5C:D6:E8:45:9B:3C:51:52
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       1CFABCA699F519AA1B45AC3AAE3564A33271EC94
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32302d3234203d3e20323632383636.roa
Signing time:             Thu 06 Mar 2025 01:21:40 +0000
ROA not before:           Thu 06 Mar 2025 01:16:40 +0000
ROA not after:            Thu 05 Mar 2026 01:21:40 +0000
asID:                     262866
IP address blocks:        177.12.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl
                          rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 19:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:fa:bc:a6:99:f5:19:aa:1b:45:ac:3a:ae:35:64:a3:32:71:ec:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Mar  6 01:16:40 2025 GMT
            Not After : Mar  5 01:21:40 2026 GMT
        Subject: CN=698462DD8B51348D966FB5D45CD6E8459B3C5152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:14:ec:0f:dd:66:7a:64:da:7d:e7:b7:10:55:
                    a3:34:ad:ff:c3:f5:2c:c9:f5:35:df:c5:3e:03:44:
                    54:4c:e1:3e:a4:dc:7e:d1:f5:1f:dd:d5:e6:ad:3b:
                    8f:2c:be:32:6c:05:d5:3c:68:3e:ee:80:2c:42:d7:
                    9f:e2:3d:79:88:4f:ce:53:74:01:9d:c9:08:5f:35:
                    64:90:7c:70:3b:aa:8f:3b:79:ea:ea:39:00:79:4c:
                    28:1b:d5:09:98:8b:20:45:0b:cd:bb:d4:e9:a4:d9:
                    8a:94:cc:f4:d5:d3:cb:fb:d8:31:fc:88:05:f7:02:
                    6b:05:82:6c:a9:7b:1d:df:c4:49:7c:59:30:62:97:
                    c1:8d:ff:b6:b4:86:34:e0:8e:fc:b4:f7:82:45:17:
                    cd:40:b3:29:50:ea:1f:ab:eb:11:8d:cf:8b:c1:49:
                    00:63:cc:41:71:3c:f3:84:f9:8d:95:d1:60:5d:e4:
                    b3:43:f6:21:b2:65:dc:a1:f4:04:4b:01:b8:d8:90:
                    3c:1a:23:de:75:0d:0b:ff:98:50:51:51:48:3f:c5:
                    26:df:5a:b8:a0:9c:a2:f6:4b:9a:12:8d:18:3c:79:
                    86:b9:58:d1:43:c8:22:65:33:fc:90:ab:2f:df:45:
                    1d:81:58:35:31:be:c8:53:d1:79:8f:3f:60:6e:42:
                    da:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:84:62:DD:8B:51:34:8D:96:6F:B5:D4:5C:D6:E8:45:9B:3C:51:52
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32302d3234203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b6:0e:0a:b3:79:e6:4c:91:a0:e6:18:43:6b:3e:21:8f:31:88:
         33:34:75:09:1f:d0:63:89:50:8a:33:1b:5f:9c:79:86:1e:83:
         f6:10:b3:9c:78:3d:04:b1:c3:67:6b:91:1e:df:d1:01:38:9e:
         31:a2:9a:97:e2:d9:b9:e2:f3:b8:f0:a0:cc:c3:0d:94:33:d0:
         8e:0c:a3:dc:b4:c1:17:58:81:3a:9b:b1:16:9c:54:e0:5e:f7:
         45:d6:4f:a6:04:ca:63:f5:1e:11:67:68:65:4d:f1:23:27:2f:
         dc:2a:95:fc:f0:4f:17:aa:10:cf:79:76:87:5e:b9:f5:f8:e1:
         65:c2:e3:23:b1:83:b6:c5:da:66:14:3b:24:32:88:aa:54:73:
         55:b7:31:98:1e:35:4b:3c:54:19:d1:22:f3:38:c7:03:15:1c:
         91:83:12:81:15:ff:0c:14:53:d6:0c:ca:2b:45:85:a4:cf:4e:
         12:e8:70:24:47:d4:04:f0:93:ca:69:b4:b9:79:65:61:54:bc:
         f8:95:98:12:2e:08:dc:26:80:fa:87:66:25:a4:27:d6:0e:5f:
         61:44:0b:6b:22:c3:1d:e6:bd:c6:5d:99:4b:5f:01:4d:99:3f:
         ff:5e:85:8a:84:ec:60:a3:25:d9:c4:2c:17:4b:8d:9c:83:bd:
         d0:c6:24:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:28:35 2025 by rpki-client