Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/3137372e3230302e31362e302f32302d3234203d3e20323633363238.roa
File:                     3137372e3230302e31362e302f32302d3234203d3e20323633363238.roa (raw, json)
Hash identifier:          rCBK2jxDeo38ocs8BK0wbODN0NVQTGGVOv0ny7CHs20=
Subject key identifier:   13:C0:8B:C9:40:85:12:23:BA:87:74:0B:BE:27:CD:5C:FE:36:4F:F4
Certificate issuer:       /CN=82570D137F4A2CB963DFFC57F5D09035250E3A33
Certificate serial:       48804A6DF30AFD08B9D281ED046D7E0CF9E5B89E
Authority key identifier: 82:57:0D:13:7F:4A:2C:B9:63:DF:FC:57:F5:D0:90:35:25:0E:3A:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/3137372e3230302e31362e302f32302d3234203d3e20323633363238.roa
Signing time:             Thu 06 Mar 2025 16:40:32 +0000
ROA not before:           Thu 06 Mar 2025 16:35:32 +0000
ROA not after:            Thu 05 Mar 2026 16:40:32 +0000
asID:                     263628
IP address blocks:        177.200.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.crl
                          rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 23:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:80:4a:6d:f3:0a:fd:08:b9:d2:81:ed:04:6d:7e:0c:f9:e5:b8:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82570D137F4A2CB963DFFC57F5D09035250E3A33
        Validity
            Not Before: Mar  6 16:35:32 2025 GMT
            Not After : Mar  5 16:40:32 2026 GMT
        Subject: CN=13C08BC940851223BA87740BBE27CD5CFE364FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:dc:b1:9f:15:ae:79:df:a2:f7:f6:b6:34:00:
                    1a:e6:5e:18:da:99:90:4f:8c:22:f2:89:1f:66:4d:
                    78:cb:0b:24:18:f7:b1:23:76:9f:01:b4:11:04:48:
                    2f:72:8e:57:35:c9:c0:a2:5e:93:3c:39:d8:13:b6:
                    fc:1a:12:89:64:d9:45:08:80:9b:37:81:59:7e:ff:
                    ad:b3:03:90:5a:62:37:31:98:02:6d:42:2d:59:71:
                    c4:6f:5a:cc:5f:e9:0d:9b:11:8d:16:1e:53:43:e3:
                    64:bf:f1:ff:65:36:21:f6:d2:bb:b7:73:c9:e9:bf:
                    46:df:dc:7c:bb:79:7e:a6:b7:ea:d4:ee:f0:4d:cc:
                    96:6b:b2:a1:97:c5:2d:ce:3f:91:ff:90:28:63:52:
                    0c:92:16:88:b6:c3:9b:8f:d9:21:ef:7e:ca:6f:e7:
                    59:06:21:fb:23:07:90:d3:a2:ec:92:2d:fb:67:9b:
                    80:49:c4:8c:75:00:30:ef:b9:32:c7:74:8c:d3:74:
                    dc:3f:4e:f1:b1:29:ab:01:b3:67:10:43:d6:f5:89:
                    cf:e9:24:45:95:2e:36:37:67:76:41:e6:45:27:5c:
                    49:54:5f:60:c3:a5:fb:49:66:dd:95:81:6e:eb:16:
                    be:9c:7d:74:5f:2f:b5:34:f2:68:e9:0c:ed:f2:52:
                    e9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C0:8B:C9:40:85:12:23:BA:87:74:0B:BE:27:CD:5C:FE:36:4F:F4
            X509v3 Authority Key Identifier:
                keyid:82:57:0D:13:7F:4A:2C:B9:63:DF:FC:57:F5:D0:90:35:25:0E:3A:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/3137372e3230302e31362e302f32302d3234203d3e20323633363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:79:78:e9:c0:cf:80:86:1f:c1:bf:5c:29:65:50:14:88:8f:
         45:ba:27:bb:56:f6:59:7d:2e:f4:f2:8a:79:73:e3:51:7e:d4:
         38:10:40:6f:95:88:08:06:ce:4e:6a:e4:14:49:fb:1c:b2:4d:
         fa:0d:75:79:cd:a4:be:5a:e3:fa:23:b8:07:c1:36:8c:93:06:
         85:40:e3:17:d0:4c:18:a6:b7:dd:31:75:05:16:68:da:aa:99:
         de:88:69:9b:37:e8:26:42:ff:ae:ff:c4:12:0e:0d:cf:b9:24:
         4d:42:87:60:c4:e6:ef:04:61:a8:70:34:42:3a:0a:b2:ea:69:
         f2:f7:9d:b9:71:1a:1a:99:48:69:f9:ea:61:7e:3e:f7:ad:eb:
         ca:c5:48:6b:38:e2:ff:26:a8:a1:91:96:61:37:c3:b6:f1:81:
         8e:aa:1f:16:22:09:09:7d:2a:73:31:f4:b7:c4:10:a3:83:dc:
         5c:9d:76:14:2a:64:32:1c:b1:fa:f2:46:5a:ed:f7:6b:c3:34:
         0b:51:cc:d9:83:7e:ed:f0:07:c9:58:e7:36:6d:1f:eb:4c:2a:
         08:94:17:8a:aa:b1:ed:3f:cf:de:dc:a2:42:c3:42:33:2f:e0:
         24:52:78:8c:21:6c:94:e3:ed:0b:c6:e9:15:e2:17:26:12:2a:
         dc:22:6a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:10:20 2025 by rpki-client