Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/3137372e31302e3230342e302f32322d3332203d3e20323632333032.roa
File:                     3137372e31302e3230342e302f32322d3332203d3e20323632333032.roa (raw, json)
Hash identifier:          zXZVmG0BvN5Qp80Uihq7QXyG1HoNMssDmv/MIwdlRT4=
Subject key identifier:   7E:BC:7D:64:EE:C5:B6:D3:EB:0E:D0:5D:FD:52:57:51:FF:E1:3A:86
Certificate issuer:       /CN=901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F
Certificate serial:       144960ACA8B764E399DFA4E267A11F01B1305B2B
Authority key identifier: 90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/3137372e31302e3230342e302f32322d3332203d3e20323632333032.roa
Signing time:             Wed 05 Mar 2025 23:00:54 +0000
ROA not before:           Wed 05 Mar 2025 22:55:54 +0000
ROA not after:            Wed 04 Mar 2026 23:00:54 +0000
asID:                     262302
IP address blocks:        177.10.204.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.crl
                          rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 11:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:49:60:ac:a8:b7:64:e3:99:df:a4:e2:67:a1:1f:01:b1:30:5b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F
        Validity
            Not Before: Mar  5 22:55:54 2025 GMT
            Not After : Mar  4 23:00:54 2026 GMT
        Subject: CN=7EBC7D64EEC5B6D3EB0ED05DFD525751FFE13A86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c2:ec:f4:a1:b9:c2:b0:70:d2:17:c9:5d:ba:
                    05:10:71:43:98:50:89:33:a9:f5:30:ca:0c:f8:df:
                    67:ac:aa:97:f5:f8:35:00:da:bb:db:e7:87:e2:5a:
                    ae:ad:4f:b5:d8:a4:d0:f0:a9:a5:76:6e:a0:12:76:
                    51:7f:d7:a3:29:c1:7b:cb:03:e6:b0:f0:66:1b:6d:
                    be:16:38:82:59:e7:27:53:f9:23:ba:62:3a:2a:4f:
                    f7:3c:85:86:60:c5:6e:e3:67:f1:4e:f0:62:b0:c1:
                    ed:b6:20:9a:56:72:f5:18:ca:f2:94:d3:d1:ba:2b:
                    3c:f9:e9:c7:6a:a9:9e:f4:47:68:4a:b8:86:93:06:
                    56:7a:d2:fb:66:15:a2:e4:1a:64:7d:85:57:87:cd:
                    eb:65:b6:cd:a7:7c:6a:08:e7:e9:ce:22:98:cd:c8:
                    a3:dc:bb:94:ce:f2:a1:16:1b:9b:6a:6c:1a:d4:12:
                    cb:d4:5a:36:2c:f9:0f:78:55:d7:75:a3:79:c0:03:
                    15:d7:ca:22:1c:25:4c:d4:b8:37:bb:c8:d0:4e:2d:
                    1b:fc:ec:fb:f1:c8:63:95:d5:e6:ef:5d:b6:6d:d6:
                    59:fd:86:87:45:0d:aa:3b:f2:e8:fa:0c:34:a3:f9:
                    4c:69:d0:c9:59:ee:b0:cb:6e:5a:3d:3a:7c:46:88:
                    8d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BC:7D:64:EE:C5:B6:D3:EB:0E:D0:5D:FD:52:57:51:FF:E1:3A:86
            X509v3 Authority Key Identifier:
                keyid:90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/3137372e31302e3230342e302f32322d3332203d3e20323632333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:de:6b:4a:33:ca:a1:05:b5:cc:95:65:cf:ad:c7:7c:3f:b7:
         1a:db:d5:e4:83:99:5a:1b:52:d6:2d:a2:69:15:bb:cf:1a:59:
         18:0c:b8:8f:ab:f8:a9:3a:da:84:3b:47:f4:08:8f:67:33:a4:
         e2:5c:d2:8d:08:68:90:22:c4:60:bb:93:68:78:9e:eb:dc:68:
         9e:9a:1a:39:15:15:98:8c:dc:b7:0b:94:e3:52:78:d9:e1:80:
         8e:cf:9f:89:76:9b:07:cd:0d:e6:8e:af:43:4b:a6:21:11:82:
         de:ad:f0:3c:6c:4d:a3:06:9e:87:5d:fd:b0:d9:f7:79:01:08:
         85:4d:c1:12:a5:b9:d6:19:03:a6:6a:d1:00:e4:a6:1d:21:b2:
         9e:c4:f3:39:50:7a:b3:02:2b:97:a2:6b:7b:e2:28:1a:33:22:
         ef:14:74:bb:16:d3:a1:c3:78:aa:6a:2e:69:da:05:86:90:b2:
         72:cb:d8:b5:d7:e8:db:b9:2e:85:c7:85:f8:94:57:a0:bd:dd:
         a6:98:68:de:69:27:9e:79:44:b0:97:94:be:8b:73:7d:11:32:
         96:b6:b8:13:f1:61:17:8c:8a:0c:3e:6d:a3:95:37:47:6c:b9:
         63:72:b8:c2:2d:c4:3e:6c:81:a2:78:df:f6:e2:c4:a1:23:87:
         f5:34:f9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:43:31 2025 by rpki-client