Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3134312e302f32342d3234203d3e20323632343234.roa
File:                     3137372e34342e3134312e302f32342d3234203d3e20323632343234.roa (raw, json)
Hash identifier:          75ppA2+VvU+iDYhvyNw2oMh9Ulm0IxLulzBor1WK1gM=
Subject key identifier:   FC:BF:10:08:62:62:4D:81:BC:D0:B7:DF:88:1B:D0:47:68:7E:AE:37
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       4AFAF30EBF482C67E7464D2B81EEB11BCEA2668E
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3134312e302f32342d3234203d3e20323632343234.roa
Signing time:             Wed 16 Apr 2025 14:25:42 +0000
ROA not before:           Wed 16 Apr 2025 14:20:42 +0000
ROA not after:            Wed 15 Apr 2026 14:25:42 +0000
asID:                     262424
IP address blocks:        177.44.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 00:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fa:f3:0e:bf:48:2c:67:e7:46:4d:2b:81:ee:b1:1b:ce:a2:66:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: Apr 16 14:20:42 2025 GMT
            Not After : Apr 15 14:25:42 2026 GMT
        Subject: CN=FCBF100862624D81BCD0B7DF881BD047687EAE37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:e5:b4:99:38:ad:a8:0e:f0:97:0d:eb:fc:
                    32:cf:0c:86:f8:8d:a6:4e:db:e6:d3:92:0e:1e:8d:
                    44:db:16:cd:eb:e1:ab:bf:41:8b:10:4b:21:b3:e5:
                    e8:91:89:bb:7f:5f:2d:7b:f7:ed:ba:6a:ff:dd:ae:
                    6a:b8:8a:36:35:bc:bb:7a:dd:71:bf:3b:94:4f:79:
                    80:b3:4b:74:40:9d:e0:9f:42:d9:aa:c1:c1:75:1a:
                    1d:f6:81:4b:a9:2a:3a:ce:50:bc:d8:19:bd:4e:c8:
                    51:f0:ee:11:eb:26:51:3f:83:f7:13:98:ac:de:8a:
                    bb:30:7f:f6:34:67:35:5f:11:49:39:e6:8d:9c:4b:
                    51:df:64:6a:69:6c:e4:9d:f2:43:1a:57:d8:ca:43:
                    f4:a0:25:80:d5:51:0d:c3:2e:15:1e:f8:28:45:f6:
                    9c:73:24:3d:1b:55:8c:18:28:98:a0:cf:d7:74:22:
                    12:7a:28:bd:51:76:45:25:b8:5d:96:c4:b9:c5:b1:
                    b3:17:53:a3:40:d4:ba:a3:c8:83:b7:94:b8:78:7e:
                    b5:43:6d:6c:a8:ba:1f:2d:28:67:b7:5c:5e:79:a9:
                    64:61:f2:f8:4a:01:58:c4:5d:87:7f:eb:08:d5:17:
                    1e:46:05:c6:cb:4f:6f:c7:77:54:e6:19:44:45:47:
                    bd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BF:10:08:62:62:4D:81:BC:D0:B7:DF:88:1B:D0:47:68:7E:AE:37
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3134312e302f32342d3234203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:3a:4f:e5:9d:54:a1:07:e1:72:c8:8b:cf:b3:a1:8a:43:d4:
         03:e4:7c:0a:07:08:67:52:52:d3:ba:a9:4f:2f:3f:ce:1f:56:
         1d:15:30:03:58:54:08:61:6b:6c:4f:0a:fe:e8:30:7a:c7:fd:
         22:a1:f1:25:94:0e:22:ab:cb:83:dd:7f:d3:c7:63:28:df:71:
         22:c1:58:80:38:ba:79:5f:e4:43:4b:c5:9c:a2:d4:5d:44:a5:
         2f:c2:76:8d:b9:c2:89:3d:f5:b7:66:c4:07:c1:dd:c6:cb:e4:
         43:dd:22:79:80:37:49:54:a7:5e:38:9a:95:e5:6b:1b:87:29:
         5b:73:23:de:ed:7d:6f:d9:eb:fe:e4:fb:4e:49:32:90:de:74:
         9a:0b:07:30:9b:de:97:1c:d1:f9:ab:43:fe:a7:0a:96:e0:50:
         49:9a:b2:4f:a5:3d:62:30:d6:da:4c:57:5f:8e:d0:1b:b1:2f:
         da:f1:0a:bd:21:1f:b2:59:14:e9:3d:28:1f:86:20:3b:4e:ba:
         c6:71:97:8b:7a:58:46:86:60:4d:6b:fb:14:68:08:de:09:34:
         61:48:0e:e0:c5:78:d6:a2:86:cf:a9:d9:ae:a2:53:6b:4a:5a:
         2f:06:ad:ab:a2:88:c1:bb:28:06:23:95:c0:d5:9d:94:10:8f:
         cc:83:7a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:35:05 2025 by rpki-client