Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32332d3233203d3e20323632383636.roa
File:                     3137372e31322e3234302e302f32332d3233203d3e20323632383636.roa (raw, json)
Hash identifier:          duUhNpbBZk0fegEtNlaTtDwK9exDgP06NC1Ul60HdlI=
Subject key identifier:   26:15:8D:D3:10:21:51:41:B9:02:6F:CA:BB:5D:C8:5B:44:0F:9D:92
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       10F17E0D3F8AD1A65500A3CA284C99977F4FBD7B
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32332d3233203d3e20323632383636.roa
Signing time:             Thu 06 Mar 2025 01:21:40 +0000
ROA not before:           Thu 06 Mar 2025 01:16:40 +0000
ROA not after:            Thu 05 Mar 2026 01:21:40 +0000
asID:                     262866
IP address blocks:        177.12.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl
                          rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f1:7e:0d:3f:8a:d1:a6:55:00:a3:ca:28:4c:99:97:7f:4f:bd:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Mar  6 01:16:40 2025 GMT
            Not After : Mar  5 01:21:40 2026 GMT
        Subject: CN=26158DD310215141B9026FCABB5DC85B440F9D92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:18:5a:ef:8f:56:25:e0:b6:3b:63:8c:e6:
                    9e:2a:9e:46:33:3f:02:2c:59:70:cd:23:b8:8f:89:
                    64:96:e4:42:31:f7:ea:0f:4e:d9:f4:f7:c8:e3:4b:
                    80:88:fa:7d:aa:6a:55:61:25:c8:05:2d:f5:52:06:
                    07:d8:a0:2f:7b:32:0e:e4:90:68:51:47:bb:2c:5a:
                    54:d5:21:ec:ec:18:26:fc:00:07:8a:87:bf:e7:bb:
                    b3:d7:2d:b5:f6:f3:83:93:53:fc:c2:85:c4:41:40:
                    ae:d0:db:eb:58:e0:a8:90:99:ed:64:0f:95:f2:9f:
                    0e:1f:e5:27:70:08:45:84:3f:d2:ab:da:5c:fd:9b:
                    41:de:74:bc:21:b8:58:2c:e4:22:ce:0d:d1:20:e8:
                    d4:cd:1f:7e:b4:0b:b3:2a:97:92:c2:f6:aa:10:94:
                    5f:4d:8b:68:da:a2:12:6c:37:70:57:54:e8:88:d8:
                    bb:35:53:cc:71:74:a8:0d:f1:62:5e:cb:90:f9:0d:
                    11:0b:5a:ed:03:3b:b4:59:6b:73:6f:1b:ea:3b:0d:
                    08:a2:d3:e5:47:58:9d:cb:8a:09:5e:bc:5c:18:eb:
                    5f:b8:54:4f:7d:91:6e:29:2f:23:cf:46:4f:6b:01:
                    44:11:b6:8e:7d:ae:bf:2b:1a:07:fb:c6:df:c2:54:
                    bc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:15:8D:D3:10:21:51:41:B9:02:6F:CA:BB:5D:C8:5B:44:0F:9D:92
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32332d3233203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:3d:01:5b:9f:39:1a:79:45:6b:59:84:21:d3:71:aa:04:b1:
         68:48:df:d0:95:3c:a2:4d:85:08:a1:ef:af:11:28:3f:64:42:
         e8:e8:e8:70:ce:5a:13:4b:a8:25:a9:43:fd:c3:68:8e:ad:8a:
         7b:79:c3:5a:30:ec:2d:85:ec:42:f9:86:52:01:02:e0:c2:cf:
         36:81:ca:04:77:2a:74:4e:d5:88:4c:9b:a1:9b:36:f6:89:88:
         f1:50:fb:0a:b9:b5:0e:3e:2a:dd:a0:63:43:ae:62:13:c4:6e:
         eb:ae:5c:d7:55:4b:94:d4:5b:9a:3e:ae:20:3d:a1:d4:15:a7:
         8a:1a:83:15:5d:bf:e4:ea:e0:94:36:f0:b0:f0:af:97:45:b0:
         13:6e:05:cd:86:b9:0c:31:eb:18:b9:6b:71:04:e1:30:1f:f9:
         d5:8c:0b:eb:bc:23:bc:fc:b1:01:da:66:99:61:ab:c0:eb:b4:
         6f:fd:dd:2b:4e:d8:42:ba:d4:5f:fd:93:42:17:a3:83:62:ed:
         64:4c:87:ec:be:af:b1:b2:89:94:ed:19:8a:9a:6d:42:46:19:
         2c:70:17:67:af:16:8c:dd:4e:35:c0:1f:ca:e9:a8:48:4d:48:
         e4:df:8e:5c:0f:42:bb:8c:83:c8:a2:b5:ab:80:b8:f7:f4:69:
         c1:be:cc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:04:14 2025 by rpki-client