Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234382e302f32332d3233203d3e20323632383636.roa
File:                     3137372e31322e3234382e302f32332d3233203d3e20323632383636.roa (raw, json)
Hash identifier:          HIvpw0rxeihHbGBw0PkQPTxLRHIFeIYOVB9tfSObQec=
Subject key identifier:   48:80:B0:AA:DB:E5:34:BD:A6:13:EF:20:7C:7D:5B:5E:11:12:89:CB
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       4FCFEBA4FA7AE9A589B2BFE67CE85007E0D108A2
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234382e302f32332d3233203d3e20323632383636.roa
Signing time:             Thu 06 Mar 2025 01:21:40 +0000
ROA not before:           Thu 06 Mar 2025 01:16:40 +0000
ROA not after:            Thu 05 Mar 2026 01:21:40 +0000
asID:                     262866
IP address blocks:        177.12.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl
                          rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:cf:eb:a4:fa:7a:e9:a5:89:b2:bf:e6:7c:e8:50:07:e0:d1:08:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Mar  6 01:16:40 2025 GMT
            Not After : Mar  5 01:21:40 2026 GMT
        Subject: CN=4880B0AADBE534BDA613EF207C7D5B5E111289CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:38:75:cb:91:33:ec:f1:f3:6d:8a:c2:35:75:
                    7a:30:37:5a:c3:7d:9c:8b:de:e1:48:d6:79:dc:0c:
                    22:57:27:f1:02:c1:02:ea:0c:cf:ba:d0:37:88:d6:
                    21:3b:4d:0b:b2:c6:b6:79:c3:a7:c5:f5:8e:16:60:
                    e0:b1:9e:f8:1e:a2:de:b7:38:0b:4a:55:e1:a0:19:
                    a3:0b:d1:49:85:74:3d:73:32:7c:b5:5d:91:4f:7f:
                    9b:96:13:61:06:1a:ee:70:7f:80:2f:bb:96:f3:75:
                    73:a4:b6:8d:6d:2b:0e:aa:bc:29:74:63:96:c2:d2:
                    ce:1a:6c:fa:0e:bc:3f:e6:ee:0c:e8:f9:6c:b3:8d:
                    76:32:56:66:84:e9:f9:77:f0:24:f7:a7:62:22:9f:
                    d2:31:99:47:6b:fd:fd:ef:2c:95:83:49:c7:95:dc:
                    8a:58:a0:c6:d9:95:ff:9f:86:43:b5:9b:70:23:a5:
                    59:63:de:1d:50:6f:61:a9:2d:7d:f5:72:1e:f2:8e:
                    7d:41:ef:66:31:86:fc:6f:31:4a:c0:fa:14:53:35:
                    ff:5a:78:88:84:93:c9:b0:b0:c0:78:3a:b8:14:b1:
                    6b:b4:97:ae:1f:f3:55:c8:4b:ce:52:bb:da:26:c1:
                    f7:3f:24:9c:22:93:4e:2b:f7:e9:55:e0:e4:7f:4c:
                    ea:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:80:B0:AA:DB:E5:34:BD:A6:13:EF:20:7C:7D:5B:5E:11:12:89:CB
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234382e302f32332d3233203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:f7:90:53:81:ca:b7:d9:7e:31:00:a2:d3:c3:f3:cd:15:76:
         26:99:7c:d6:a8:91:aa:2b:c4:c9:71:a7:64:3f:b3:01:ca:cf:
         d7:e4:f8:31:6d:7d:66:48:b1:7f:be:b2:97:87:43:54:62:d9:
         f9:6a:f9:9b:99:7f:d8:52:65:5f:0d:31:af:d5:38:fa:65:c8:
         d1:1a:a0:0c:70:47:d0:a8:26:ff:bf:87:d9:66:81:41:27:71:
         68:a4:f5:03:eb:98:c1:5e:a0:c0:14:73:40:22:a6:fb:30:cd:
         8f:8d:c8:ae:bd:cc:cb:ea:8c:84:c0:0c:29:f4:e4:eb:40:22:
         6f:b1:eb:3e:21:12:42:94:52:4e:42:13:fc:a3:e3:79:36:09:
         65:ad:02:e0:88:df:ee:28:68:90:6e:f4:cc:be:5c:12:74:e3:
         ce:9a:48:d4:93:a0:5f:4a:f7:f9:3b:e5:65:f6:c4:f2:b4:d3:
         66:7c:33:41:c7:47:e0:94:10:97:86:ef:57:ec:6b:67:46:06:
         d7:cc:65:45:49:04:24:03:47:dd:06:76:bc:52:17:ee:80:f2:
         7d:ee:7f:8d:28:20:51:2b:d3:f9:1b:f7:a6:6d:c8:14:9c:c7:
         5c:52:e3:b4:f4:8b:d0:22:67:fa:6a:de:10:99:ef:65:94:2c:
         82:88:1a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:36:44 2025 by rpki-client