Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/3137372e38372e3132382e302f32322d3332203d3e20323632333032.roa
File:                     3137372e38372e3132382e302f32322d3332203d3e20323632333032.roa (raw, json)
Hash identifier:          7kgaaTH8I9272TqXqvm9uJZFGNVlZ3gRXBFXlOixjtM=
Subject key identifier:   D7:92:18:B1:DC:B0:8A:59:CD:9B:05:93:1D:89:16:22:A3:04:92:EF
Certificate issuer:       /CN=901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F
Certificate serial:       4A5BDB5A35A1BB63A6BAFBAD61710174E72F89D4
Authority key identifier: 90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/3137372e38372e3132382e302f32322d3332203d3e20323632333032.roa
Signing time:             Wed 05 Mar 2025 23:00:54 +0000
ROA not before:           Wed 05 Mar 2025 22:55:54 +0000
ROA not after:            Wed 04 Mar 2026 23:00:54 +0000
asID:                     262302
IP address blocks:        177.87.128.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.crl
                          rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 08:37:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5b:db:5a:35:a1:bb:63:a6:ba:fb:ad:61:71:01:74:e7:2f:89:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F
        Validity
            Not Before: Mar  5 22:55:54 2025 GMT
            Not After : Mar  4 23:00:54 2026 GMT
        Subject: CN=D79218B1DCB08A59CD9B05931D891622A30492EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c2:df:64:86:8a:80:cd:cf:1f:04:2e:42:71:
                    e4:64:ec:4b:70:de:4f:ab:28:8f:f1:9c:74:02:0c:
                    bb:7b:4f:1f:f4:f1:ff:f5:fe:a8:ca:5c:a1:0c:46:
                    53:e8:87:56:d9:8c:68:07:f6:ac:24:23:f7:30:ee:
                    4d:72:e6:1d:43:79:42:66:b8:04:3c:a1:e7:df:10:
                    68:8e:e8:94:b1:f2:f1:4a:34:60:10:00:de:05:c7:
                    6f:c9:43:61:73:36:04:c7:46:2f:0a:8f:f5:71:d7:
                    9e:78:2e:4b:27:b4:ce:3b:3f:8b:e9:0f:68:aa:be:
                    00:51:37:ba:5c:fa:e1:09:f8:9a:7e:0c:22:1a:76:
                    e9:b1:03:fa:fe:e7:28:e8:86:02:8c:68:47:d8:1e:
                    62:24:fd:50:6e:91:3e:44:88:b4:34:96:ed:84:d5:
                    3e:03:bc:e0:0b:5f:56:c7:2e:3d:c1:df:27:02:4c:
                    d2:92:0b:78:23:fa:85:94:1b:9a:29:67:77:f9:27:
                    66:a1:fe:fa:31:77:28:4b:aa:33:05:21:63:a2:c3:
                    ea:67:68:93:a5:25:8c:be:a1:8c:d0:9a:b4:3c:01:
                    e9:57:1b:25:bd:32:88:06:e8:e7:2e:bb:5d:5b:d3:
                    f9:06:a9:22:0b:8f:b9:65:45:e1:a3:05:f5:ce:4a:
                    11:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:92:18:B1:DC:B0:8A:59:CD:9B:05:93:1D:89:16:22:A3:04:92:EF
            X509v3 Authority Key Identifier:
                keyid:90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/3137372e38372e3132382e302f32322d3332203d3e20323632333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:eb:06:1f:37:6b:c2:df:88:22:3c:8a:e3:4d:fc:dc:2e:a9:
         cf:6f:e6:2e:57:17:e5:a2:37:c3:49:7e:09:10:5d:7f:ed:44:
         98:ca:ba:5e:6d:bc:c6:b6:81:ac:43:d4:43:58:5e:2b:0e:08:
         2d:87:78:cc:1b:65:71:04:81:bd:d2:9f:51:5f:37:c6:2c:20:
         dd:d2:82:39:65:5d:05:1d:6c:96:7d:99:46:d9:d3:12:cd:19:
         d4:64:7f:11:43:34:25:2a:3d:ec:4c:75:21:3e:6a:61:cc:d3:
         a2:46:ef:31:3f:df:17:dd:72:00:4b:e9:50:4f:93:07:ec:79:
         13:5c:aa:ca:96:84:75:54:8e:ee:a1:5e:61:3e:c4:22:3b:a1:
         f1:ec:79:67:26:16:f9:e1:01:15:d5:45:c2:d3:b7:6d:3c:6b:
         c2:a4:b5:2b:b0:fc:0d:7f:86:5e:ec:bb:b5:79:ba:09:9f:3c:
         31:6c:eb:5c:17:d2:d6:eb:88:c8:49:12:5e:85:36:08:21:97:
         91:3d:8f:64:bb:e4:a3:28:1c:9f:ef:fd:92:33:89:48:65:8f:
         dd:1b:7e:a5:66:9d:cb:66:bf:a5:ab:32:46:53:ec:a6:b9:ad:
         b3:36:45:ab:3e:0c:ac:79:7b:f8:59:54:3d:10:39:e0:41:00:
         8c:9c:31:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:25:05 2025 by rpki-client