Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231392e302f32342d3234203d3e20323632343532.roa
File:                     3137372e35322e3231392e302f32342d3234203d3e20323632343532.roa (raw, json)
Hash identifier:          U6ePlF8ZHE9j7yHkCGHckMRtw0CsBNDA0mdBOt0YUMM=
Subject key identifier:   12:EE:0E:49:08:EA:B1:9A:49:73:42:41:4D:E8:F2:81:B8:7F:2C:15
Certificate issuer:       /CN=F432E0EDB69BD6E253EE20F4C1589A46267AA2B9
Certificate serial:       594E63D3ACEB41448C7C35238979C9573244C20E
Authority key identifier: F4:32:E0:ED:B6:9B:D6:E2:53:EE:20:F4:C1:58:9A:46:26:7A:A2:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231392e302f32342d3234203d3e20323632343532.roa
Signing time:             Mon 10 Feb 2025 18:28:46 +0000
ROA not before:           Mon 10 Feb 2025 18:23:46 +0000
ROA not after:            Mon 09 Feb 2026 18:28:46 +0000
asID:                     262452
IP address blocks:        177.52.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.crl
                          rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 18:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:4e:63:d3:ac:eb:41:44:8c:7c:35:23:89:79:c9:57:32:44:c2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F432E0EDB69BD6E253EE20F4C1589A46267AA2B9
        Validity
            Not Before: Feb 10 18:23:46 2025 GMT
            Not After : Feb  9 18:28:46 2026 GMT
        Subject: CN=12EE0E4908EAB19A497342414DE8F281B87F2C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8b:37:66:3a:e2:ae:e9:96:48:bb:c2:4b:71:
                    fb:9a:03:18:7c:48:be:3e:c4:42:90:96:d7:7c:94:
                    c7:31:6a:27:ad:c9:98:00:4b:1c:97:41:13:55:63:
                    20:f8:f0:7b:2d:36:cf:ad:a8:12:95:27:ee:55:96:
                    ee:1a:11:4e:5a:89:2e:55:e8:c1:9f:2a:a0:84:2c:
                    53:b9:a9:a9:35:34:fb:01:1e:51:cb:6f:8a:97:54:
                    12:ba:22:6d:ec:39:49:71:15:6b:5b:a9:12:ac:0a:
                    40:cc:17:6c:57:70:d0:92:4f:e2:85:c2:66:de:bc:
                    38:b8:c7:dd:4f:90:f8:14:cb:bd:2e:a2:ec:13:98:
                    8f:27:1b:a4:84:6f:8f:cd:fc:45:7d:94:71:58:90:
                    4f:54:c2:16:fa:b6:37:33:de:30:00:07:1b:a2:84:
                    8c:1d:3f:8d:10:8a:ee:35:a6:f8:78:f6:47:52:70:
                    38:47:19:cc:94:5f:9b:b8:89:ea:a5:f5:da:01:95:
                    63:60:42:b7:08:f7:f1:fa:b5:90:1e:cb:b7:54:d3:
                    e7:49:2a:00:55:a3:0e:89:68:8d:8e:6d:b2:95:f8:
                    78:8e:94:e4:1a:3f:34:ca:29:1a:74:75:7b:8b:e3:
                    51:3f:63:f8:1b:c3:51:9c:0a:4c:84:2e:09:81:16:
                    92:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EE:0E:49:08:EA:B1:9A:49:73:42:41:4D:E8:F2:81:B8:7F:2C:15
            X509v3 Authority Key Identifier:
                keyid:F4:32:E0:ED:B6:9B:D6:E2:53:EE:20:F4:C1:58:9A:46:26:7A:A2:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231392e302f32342d3234203d3e20323632343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:74:55:a3:cc:45:72:f5:c2:9b:7f:7e:e6:a2:80:20:2b:bd:
         c5:13:e4:68:e2:49:0f:19:26:8c:d6:43:12:44:89:97:47:71:
         13:20:2b:fa:84:b8:8f:ec:e5:ac:18:07:e5:28:d9:a1:c8:50:
         11:4e:53:19:77:f9:26:61:2f:d6:69:43:bd:75:38:39:26:17:
         59:5d:c2:77:78:c3:04:6b:8a:91:69:ef:3b:4b:2b:92:dc:7e:
         6a:ee:38:b4:4c:1f:5a:1c:c9:c7:9b:fd:1d:59:3a:ec:23:e5:
         ef:cb:df:c4:ab:0c:b2:eb:73:5b:c3:74:4b:78:dc:f3:13:e6:
         9a:df:49:fc:29:2e:41:8f:5d:ea:05:27:9f:01:b1:4a:62:1e:
         fc:06:95:cf:4a:f9:27:80:cc:3a:aa:52:75:b5:a4:2f:bb:01:
         87:31:2b:d1:70:1a:21:8c:18:1d:29:f4:2b:dc:78:9d:ab:7a:
         18:05:42:00:09:07:89:4c:a9:1f:9d:10:f8:1d:94:c0:bd:fb:
         5b:d6:97:7d:98:2e:6f:56:28:08:72:cd:44:92:12:96:84:97:
         ec:16:b1:72:a3:d2:20:ff:ed:01:45:a1:2d:92:09:94:4f:54:
         77:c4:1b:aa:18:72:58:4d:8d:1d:0b:18:0e:6d:64:37:ad:86:
         e1:ac:f4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:08 2025 by rpki-client