Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137372e39322e3136352e302f32342d3234203d3e203631393138.roa
File:                     3137372e39322e3136352e302f32342d3234203d3e203631393138.roa (raw, json)
Hash identifier:          EgmspQPtp3aZSoa3ndxmQXH2R3/D6CFgr+Knm3l9xO0=
Subject key identifier:   C3:2B:9C:F5:F5:75:C2:94:5C:65:49:07:29:A8:2D:32:A4:51:87:04
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       5D69F03A9D3EFFB8CEB8708223812182DC6DA2BD
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137372e39322e3136352e302f32342d3234203d3e203631393138.roa
Signing time:             Wed 05 Mar 2025 19:00:11 +0000
ROA not before:           Wed 05 Mar 2025 18:55:11 +0000
ROA not after:            Wed 04 Mar 2026 19:00:11 +0000
asID:                     61918
IP address blocks:        177.92.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:69:f0:3a:9d:3e:ff:b8:ce:b8:70:82:23:81:21:82:dc:6d:a2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Mar  5 18:55:11 2025 GMT
            Not After : Mar  4 19:00:11 2026 GMT
        Subject: CN=C32B9CF5F575C2945C65490729A82D32A4518704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:93:ab:c2:cd:0f:2d:74:b8:ad:e8:00:38:82:
                    bb:37:e5:9c:9e:a0:8b:51:32:bb:e3:65:b1:23:bc:
                    86:8a:d1:5d:db:b3:93:99:75:88:51:33:d4:8f:03:
                    f7:c2:e9:db:05:68:24:18:90:79:04:03:a8:24:d7:
                    a9:cc:d0:0e:0b:f1:5f:fd:36:1f:e1:00:6b:d7:a3:
                    16:37:f0:11:d0:d9:69:ad:82:36:56:e0:01:ba:ea:
                    ae:b2:b3:2b:bf:f7:b7:24:1c:d1:6f:e3:e7:ee:16:
                    1e:d2:fb:3b:4f:40:43:bf:88:4b:a1:52:f8:bc:aa:
                    e9:32:58:d3:68:1f:64:f1:fb:53:b3:8d:6c:e0:18:
                    b9:37:ec:ad:f2:03:c1:8e:5f:85:cc:27:b2:73:ee:
                    2b:a1:b9:e0:d1:41:4f:78:07:b3:de:3c:67:99:25:
                    2b:5e:1a:46:37:e1:57:88:87:60:a0:ef:3b:1f:c5:
                    fc:ce:90:8e:f3:e0:7b:a9:38:1c:98:9d:9c:6a:52:
                    70:b8:e3:9b:8c:7b:dd:a2:91:d6:2e:1a:3c:40:3a:
                    e6:ed:a5:44:2e:9b:cd:d0:1d:6d:16:01:d7:2b:48:
                    ef:bd:fa:38:7d:59:34:2e:7c:f6:9a:fb:7d:cc:77:
                    b5:9b:40:df:ff:b6:ab:5a:d6:20:74:c8:42:13:65:
                    7c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2B:9C:F5:F5:75:C2:94:5C:65:49:07:29:A8:2D:32:A4:51:87:04
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137372e39322e3136352e302f32342d3234203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:b5:97:45:46:b3:ee:4a:fe:37:bb:74:80:06:f9:f2:8d:73:
         95:1c:95:18:46:16:b6:9a:d0:0c:da:36:da:87:45:eb:72:66:
         1c:4d:e4:b0:d2:3a:96:5d:b4:f2:e9:0d:7b:7f:bf:5f:ed:ba:
         01:d7:c6:61:fb:57:a0:76:39:01:53:67:81:fe:f6:5b:a0:e1:
         20:1d:1f:2e:0f:ed:da:9b:20:d9:b5:9a:d6:54:32:6d:73:41:
         0b:8b:95:a2:52:b0:3c:8c:42:66:90:33:18:b9:c7:70:3e:06:
         17:bb:d6:e9:f2:de:6b:16:c6:0b:05:27:3e:49:b5:0a:ea:06:
         30:26:da:05:71:a4:21:8b:bc:a3:fd:bc:dc:ba:a0:25:a0:be:
         00:51:bc:b0:0b:14:b8:04:f5:f3:0e:aa:b0:37:b5:76:23:27:
         82:b4:c3:ce:7f:44:9b:15:31:c8:05:fc:d8:43:9f:f0:c8:9e:
         8c:f2:30:db:77:7b:e3:84:53:14:e6:6b:b6:b0:38:aa:a4:0d:
         97:9e:c0:8d:10:35:a5:7d:b2:9f:a2:9d:65:be:d9:6c:15:56:
         22:24:ec:99:40:e5:b4:25:75:61:65:c7:0e:25:7f:75:18:ae:
         c2:a9:fa:f8:85:44:28:f6:0d:9e:97:b2:f8:15:27:38:e9:2b:
         7f:41:50:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:28:59 2025 by rpki-client