Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133302e302f32332d3233203d3e20323632343234.roa
File:                     3137372e34342e3133302e302f32332d3233203d3e20323632343234.roa (raw, json)
Hash identifier:          8crLzcTZ/ibGM7r2z52YfY/VhvXvUbYpl01sqzOQ4go=
Subject key identifier:   B1:0B:00:D2:D6:02:B0:67:72:2F:9D:18:30:AB:88:79:EE:3A:71:6C
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       26168A09B8186345086AEB671F93C7BCFA4A9E6D
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133302e302f32332d3233203d3e20323632343234.roa
Signing time:             Wed 16 Apr 2025 14:25:43 +0000
ROA not before:           Wed 16 Apr 2025 14:20:43 +0000
ROA not after:            Wed 15 Apr 2026 14:25:43 +0000
asID:                     262424
IP address blocks:        177.44.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:16:8a:09:b8:18:63:45:08:6a:eb:67:1f:93:c7:bc:fa:4a:9e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: Apr 16 14:20:43 2025 GMT
            Not After : Apr 15 14:25:43 2026 GMT
        Subject: CN=B10B00D2D602B067722F9D1830AB8879EE3A716C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:df:13:d3:9f:e1:77:dd:bc:59:b4:54:fe:
                    4e:8f:db:6e:b8:f2:82:b9:b9:df:ee:19:84:54:01:
                    9d:21:6e:dc:33:de:44:32:60:f8:21:ea:d5:fa:72:
                    b1:2e:78:db:75:9f:05:7d:93:ba:e1:04:ff:5f:64:
                    fa:c4:34:13:36:d9:f9:c1:db:31:d7:59:85:04:3f:
                    32:76:07:32:88:89:81:4b:78:d4:49:66:ad:fb:c3:
                    45:ae:b9:c5:df:8d:eb:6a:4f:78:0c:bc:6c:f9:ee:
                    d7:e9:71:3e:4a:5e:78:ab:b1:f3:38:fb:5d:14:38:
                    14:d5:c8:8b:71:44:9a:f8:c5:d0:bc:d4:79:3c:09:
                    5c:68:13:e7:cf:85:be:63:7c:54:10:7c:75:b5:29:
                    11:fa:ed:c9:09:66:14:5b:c2:c6:80:45:da:34:22:
                    47:33:1e:94:a5:e4:af:05:a4:b6:ca:55:26:2f:e4:
                    e2:3d:06:a0:60:e3:be:00:8c:8b:6d:42:e4:eb:d1:
                    29:2e:7b:57:84:71:d9:b2:1d:3b:ab:63:c5:6e:1f:
                    e4:6b:51:b2:2d:04:a0:9a:bd:7a:04:0a:30:3c:0f:
                    64:a3:fe:89:65:5b:d6:cf:61:5c:f1:fb:6a:a7:e2:
                    04:1b:c1:b8:ab:c7:77:e8:3e:e2:54:1d:2d:1f:fe:
                    fb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0B:00:D2:D6:02:B0:67:72:2F:9D:18:30:AB:88:79:EE:3A:71:6C
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133302e302f32332d3233203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:f6:f9:f1:a3:af:44:13:88:81:4d:56:9a:43:57:65:b0:59:
         a9:3e:a4:17:7f:7e:40:13:97:6a:c8:41:85:93:0a:49:a5:a9:
         54:8a:38:46:d7:f6:b4:89:96:b7:6f:a1:37:18:da:3a:74:79:
         54:9d:44:10:60:71:cc:b7:3e:cd:19:75:b2:6c:4a:0f:2b:98:
         83:05:f0:b6:d8:12:87:7d:4e:fa:80:5c:0f:d9:e9:ab:6f:90:
         a4:d4:46:4a:ee:69:a3:0a:c3:19:e7:3a:91:80:e0:85:0b:0c:
         00:93:3d:dd:d9:44:c9:07:87:75:10:47:88:02:c6:18:43:a7:
         59:df:1d:4c:c6:00:92:1c:86:d9:ca:a2:7f:14:81:9d:9f:cb:
         b3:4f:05:5f:1c:97:c3:cd:1e:84:b0:88:db:e2:75:fd:4b:f7:
         fc:38:c1:78:18:d4:57:7d:17:87:c2:05:b6:90:35:cd:1c:b1:
         7d:f6:9d:bc:06:31:b5:f9:a8:6c:5b:f4:a9:01:0a:bb:6f:c3:
         15:df:42:8c:81:2e:a4:24:84:2b:64:b1:31:bc:88:e0:5b:70:
         2d:36:b7:4b:a8:c5:9f:17:44:4b:bc:69:72:2e:33:18:c8:52:
         72:55:78:7f:99:62:d8:4d:fc:7f:75:d7:94:1f:d3:76:8f:71:
         1b:55:82:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:51:56 2025 by rpki-client