Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e39302e302f32332d3233203d3e20323633363034.roa
File:                     3137372e37312e39302e302f32332d3233203d3e20323633363034.roa (raw, json)
Hash identifier:          CLVVHsIZqBkZiDioH9hmdHREqOjXWkavrc1EqIjeG+4=
Subject key identifier:   B4:EB:8D:6C:6F:D3:E6:A4:F0:86:36:5C:EF:CA:4A:7E:9E:66:25:F0
Certificate issuer:       /CN=973FD823CD817717DD26100AA8B8CB95E8DA0F75
Certificate serial:       6E3AB6A6B0E49443F6AC9CE0303E2D4B9F9B6AEC
Authority key identifier: 97:3F:D8:23:CD:81:77:17:DD:26:10:0A:A8:B8:CB:95:E8:DA:0F:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/973FD823CD817717DD26100AA8B8CB95E8DA0F75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e39302e302f32332d3233203d3e20323633363034.roa
Signing time:             Mon 07 Apr 2025 19:27:15 +0000
ROA not before:           Mon 07 Apr 2025 19:22:15 +0000
ROA not after:            Mon 06 Apr 2026 19:27:15 +0000
asID:                     263604
IP address blocks:        177.71.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.crl
                          rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/973FD823CD817717DD26100AA8B8CB95E8DA0F75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3a:b6:a6:b0:e4:94:43:f6:ac:9c:e0:30:3e:2d:4b:9f:9b:6a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=973FD823CD817717DD26100AA8B8CB95E8DA0F75
        Validity
            Not Before: Apr  7 19:22:15 2025 GMT
            Not After : Apr  6 19:27:15 2026 GMT
        Subject: CN=B4EB8D6C6FD3E6A4F086365CEFCA4A7E9E6625F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:99:53:59:21:05:08:e0:3d:ce:13:21:05:
                    f6:6f:b8:54:2a:e9:3c:eb:48:1c:2e:31:83:07:2e:
                    bf:8f:bf:4d:18:cc:13:f5:cc:55:3a:4a:64:18:92:
                    9f:89:b4:80:6c:90:27:5d:59:a7:b0:38:29:44:94:
                    c3:c7:a8:6b:b2:7a:3b:2d:54:e1:c0:2b:64:63:22:
                    22:11:8d:e5:6c:15:91:48:79:fc:fb:5f:e4:cb:75:
                    4f:0d:f7:2a:7f:85:e1:fe:e8:c5:54:52:0b:41:1f:
                    38:ce:60:e9:ac:77:14:c3:fd:a7:e4:ab:f3:2c:b7:
                    d8:9f:81:7f:b7:ca:8b:99:94:1c:e2:8c:4f:9d:1c:
                    45:f3:0d:fa:fd:8d:e1:a0:7e:b2:3d:4c:09:e6:90:
                    97:5d:21:64:1f:0c:ca:ee:82:9e:8d:e9:4c:00:6f:
                    9d:85:3e:e3:98:19:c8:15:f4:c3:07:7a:c9:f3:aa:
                    96:7e:27:7e:a0:61:59:47:5d:83:5f:a6:f5:8b:2e:
                    15:25:f5:6d:b8:91:9f:3a:82:36:cf:ae:48:54:92:
                    a8:a5:15:a9:18:d6:f0:44:55:89:88:22:e4:8c:e7:
                    0e:b7:12:37:6e:c4:45:93:74:65:79:31:2b:d2:00:
                    da:09:fb:53:97:3c:03:3e:bf:8a:a0:93:12:4c:25:
                    09:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EB:8D:6C:6F:D3:E6:A4:F0:86:36:5C:EF:CA:4A:7E:9E:66:25:F0
            X509v3 Authority Key Identifier:
                keyid:97:3F:D8:23:CD:81:77:17:DD:26:10:0A:A8:B8:CB:95:E8:DA:0F:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/973FD823CD817717DD26100AA8B8CB95E8DA0F75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e39302e302f32332d3233203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:7e:03:93:f2:13:2d:fb:32:c3:d5:64:ff:01:75:e7:b1:c4:
         2f:a7:e4:ce:a5:1c:36:c9:f3:04:cb:9b:d1:d9:7c:4e:af:a9:
         0c:b9:4c:11:1d:fd:c4:31:bf:8b:92:2c:5b:f0:49:43:5f:0e:
         00:af:66:3e:6a:a4:c1:7d:a8:ab:fe:cc:89:3a:59:ae:f9:6b:
         f1:83:8e:29:95:f1:ab:4d:2c:9a:6b:6a:d2:1e:be:19:10:f7:
         9e:1a:52:bf:86:12:51:2a:e3:23:05:7e:43:36:ed:de:4e:a7:
         e7:2f:bc:e5:5f:68:42:ef:84:df:1d:ee:f6:26:82:41:33:09:
         fa:d7:6c:7e:36:69:35:53:9a:44:4c:d8:52:9d:b7:d2:95:11:
         4d:2e:ca:bb:09:15:84:9c:64:da:bd:c6:3a:9e:60:b1:bb:d8:
         2b:90:9d:e7:6c:48:a0:d7:6b:eb:be:79:29:3d:7a:b9:fa:29:
         23:54:6d:12:ec:e1:4c:99:9f:55:5c:52:36:3e:39:a8:8b:f1:
         5e:8a:3d:ec:31:ed:de:ba:77:7d:00:40:87:f9:eb:6a:2c:f7:
         2a:55:95:b2:ab:81:22:7a:10:3c:3a:00:de:e9:e8:0c:9a:62:
         c1:2e:ea:be:29:28:af:2c:1b:d2:67:50:e9:25:a2:2d:b8:38:
         13:a6:76:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:57:52 2025 by rpki-client