Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38382e302f32322d3232203d3e20323633363034.roa
File:                     3137372e37312e38382e302f32322d3232203d3e20323633363034.roa (raw, json)
Hash identifier:          AudcQzPkwG7uDfbZQwd4CR/94lIwID2SLcM+8Rf4VP8=
Subject key identifier:   0A:22:4E:0D:94:9E:19:74:00:67:9A:91:51:68:0A:FB:23:A8:B1:19
Certificate issuer:       /CN=973FD823CD817717DD26100AA8B8CB95E8DA0F75
Certificate serial:       09036D384F0295D2369AD6B62E20C10AF565E131
Authority key identifier: 97:3F:D8:23:CD:81:77:17:DD:26:10:0A:A8:B8:CB:95:E8:DA:0F:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/973FD823CD817717DD26100AA8B8CB95E8DA0F75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38382e302f32322d3232203d3e20323633363034.roa
Signing time:             Mon 07 Apr 2025 19:27:15 +0000
ROA not before:           Mon 07 Apr 2025 19:22:15 +0000
ROA not after:            Mon 06 Apr 2026 19:27:15 +0000
asID:                     263604
IP address blocks:        177.71.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.crl
                          rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/973FD823CD817717DD26100AA8B8CB95E8DA0F75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:03:6d:38:4f:02:95:d2:36:9a:d6:b6:2e:20:c1:0a:f5:65:e1:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=973FD823CD817717DD26100AA8B8CB95E8DA0F75
        Validity
            Not Before: Apr  7 19:22:15 2025 GMT
            Not After : Apr  6 19:27:15 2026 GMT
        Subject: CN=0A224E0D949E197400679A9151680AFB23A8B119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:da:27:c1:23:12:e7:8d:49:78:b2:51:b4:19:
                    b6:dd:22:16:c8:d7:71:b5:5d:43:78:7d:c3:5a:19:
                    f3:b0:c9:e1:81:95:f2:b0:44:62:22:9f:a0:82:d2:
                    10:12:ec:a3:06:87:41:70:64:63:76:1c:9c:c8:34:
                    64:8e:d8:5b:5c:ce:47:44:e7:fa:23:43:4c:45:61:
                    32:38:4e:5a:7f:1d:03:ae:13:58:ca:05:1c:b8:f8:
                    f0:aa:d0:ca:36:31:6d:46:23:c0:27:f5:2d:6c:b3:
                    86:e7:59:32:0e:7b:fb:0b:be:a9:cf:ff:28:50:6b:
                    8e:2c:5a:cd:b3:12:fb:71:22:55:aa:dd:bc:79:00:
                    1e:64:71:bd:a3:d4:5e:ae:75:cf:dc:4f:b8:b6:58:
                    dd:d5:21:e8:fc:39:3f:25:e2:31:b6:18:95:64:19:
                    29:29:5a:5f:35:89:72:ae:4b:8c:31:64:d2:70:dc:
                    4e:1a:a4:64:91:cf:21:a4:18:88:19:87:62:15:26:
                    0c:52:58:a3:dc:95:74:ca:44:c5:23:a4:a6:79:fc:
                    ce:9a:7e:ed:85:a8:68:36:f1:60:a8:2b:cf:4d:58:
                    26:23:26:a6:ba:d0:01:25:a2:80:66:8b:82:e9:49:
                    0b:96:04:ee:3c:ba:4c:2d:0b:c0:92:3b:5a:30:b5:
                    9f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:22:4E:0D:94:9E:19:74:00:67:9A:91:51:68:0A:FB:23:A8:B1:19
            X509v3 Authority Key Identifier:
                keyid:97:3F:D8:23:CD:81:77:17:DD:26:10:0A:A8:B8:CB:95:E8:DA:0F:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/973FD823CD817717DD26100AA8B8CB95E8DA0F75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38382e302f32322d3232203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:e3:a9:68:08:e0:bd:26:d3:44:58:bf:98:3f:71:0a:89:b7:
         52:09:dc:53:61:17:c7:cc:b0:bd:c0:3e:c1:98:75:e7:1c:ed:
         cf:2d:29:8a:af:18:bf:a7:96:49:81:af:53:62:15:03:ad:96:
         d9:17:8e:71:6a:07:0c:b6:82:e2:07:98:6d:be:3b:91:57:bb:
         ff:93:63:33:d3:62:7c:e7:52:03:08:98:fb:24:3f:9d:96:c8:
         73:09:46:5b:b0:bd:87:0d:a5:38:d4:52:0c:11:11:e8:da:62:
         d2:d2:31:35:2e:f0:16:86:fa:07:d5:dc:00:4d:57:9c:95:7b:
         f2:8d:bc:39:05:00:28:32:82:5a:46:f4:10:1e:2c:ab:58:9d:
         1e:5c:0c:3b:38:32:0a:ed:5c:25:a2:01:92:8a:5f:61:33:95:
         c6:c2:fb:92:42:46:35:0a:d6:60:34:42:71:45:40:ec:34:e6:
         bc:7b:40:19:d9:37:33:f0:0d:5d:53:a7:b2:65:ee:58:e9:f8:
         a8:6f:ce:f2:55:f2:8f:28:19:ae:01:ad:07:42:e2:6f:72:7a:
         90:63:61:1c:1a:a0:92:20:5c:2c:04:d3:3f:00:3e:9b:cc:28:
         c5:30:b6:24:d6:12:3d:c1:2c:c4:42:a5:40:41:93:10:6f:23:
         d8:fc:28:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:57:54 2025 by rpki-client