Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e302e302f32322d3232203d3e20323632363432.roa
File:                     3137372e38372e302e302f32322d3232203d3e20323632363432.roa (raw, json)
Hash identifier:          HOnRpARnHNGYU9xLX12rGjP9BBY64Gb3xZUepbjtQ1M=
Subject key identifier:   86:06:0E:B5:82:47:F1:37:5B:FE:11:8B:07:6C:EC:DB:71:E9:2D:AD
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       301D4469F0C1541AD8995A6D83EA578600C1A823
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e302e302f32322d3232203d3e20323632363432.roa
Signing time:             Thu 06 Mar 2025 03:49:59 +0000
ROA not before:           Thu 06 Mar 2025 03:44:59 +0000
ROA not after:            Thu 05 Mar 2026 03:49:59 +0000
asID:                     262642
IP address blocks:        177.87.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1d:44:69:f0:c1:54:1a:d8:99:5a:6d:83:ea:57:86:00:c1:a8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Mar  6 03:44:59 2025 GMT
            Not After : Mar  5 03:49:59 2026 GMT
        Subject: CN=86060EB58247F1375BFE118B076CECDB71E92DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:76:bf:81:73:91:d1:75:5d:e1:74:3b:06:d5:
                    5a:22:7c:22:e0:cc:4e:1d:4c:54:54:b7:8d:d4:ab:
                    dc:62:49:82:59:c6:92:bb:df:96:a3:3f:e7:d1:19:
                    7d:81:6e:6a:e3:64:a2:36:27:73:2f:7a:33:55:9d:
                    6a:af:5b:6b:40:3b:eb:7c:c3:31:77:9b:95:52:32:
                    64:f3:7e:3e:87:26:ca:e4:2f:b7:83:6e:b4:6c:96:
                    13:e0:59:96:36:b0:ea:f6:a0:d1:73:e4:a2:b9:7a:
                    fa:ea:75:a8:81:cd:fa:0a:6e:73:57:7c:49:00:35:
                    dd:5e:71:09:0f:83:1e:5f:2a:5d:9c:ae:be:4a:af:
                    07:ed:22:4d:e7:06:7c:40:4f:9b:a4:2a:df:0f:8f:
                    0b:e2:b7:63:a7:33:4e:0b:93:ec:55:bc:71:d4:e7:
                    dc:36:da:7f:68:cb:e2:90:ad:9a:4e:9a:58:d7:14:
                    41:7d:d6:20:07:78:dd:64:ca:4e:e7:33:40:ba:2c:
                    ac:93:7a:24:80:4a:8f:46:42:3e:ee:19:59:0f:51:
                    d2:d1:c2:64:6f:2d:3c:bc:ba:ce:57:ff:0c:68:a5:
                    57:0d:44:e6:36:fb:94:f6:fa:da:53:be:8a:0c:4b:
                    e9:22:2c:8b:ad:bf:86:a3:0f:d7:de:2d:9a:86:8d:
                    38:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:06:0E:B5:82:47:F1:37:5B:FE:11:8B:07:6C:EC:DB:71:E9:2D:AD
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e302e302f32322d3232203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:c3:48:47:29:f6:6a:28:32:4d:d3:70:bf:67:a0:04:8b:db:
         42:80:ed:3b:49:b5:8c:82:b1:d2:a4:32:1f:5a:2f:4e:ce:93:
         b2:d1:b7:b4:ea:1b:1c:0f:e6:45:e3:75:e9:c7:87:c1:aa:a7:
         54:99:f3:ba:26:0d:ea:78:89:c6:97:4b:c5:c0:d4:80:09:4d:
         2e:0b:31:67:75:02:79:4c:3e:87:67:90:61:f8:6a:45:73:92:
         36:6e:da:23:49:f1:df:74:c3:ba:df:ad:30:31:7b:f3:54:8f:
         b5:29:39:f7:ef:ef:33:05:02:14:b1:97:03:89:53:20:8a:f1:
         fd:04:53:6a:79:25:37:5e:4e:c4:ac:e7:88:83:58:93:c7:26:
         fd:02:83:0e:c0:d7:48:0c:75:b1:b8:dd:46:af:e1:2d:d1:ae:
         45:22:a0:de:95:af:ae:eb:6e:78:7f:cb:2b:aa:93:0f:2d:d6:
         bc:d5:af:a4:98:7e:99:71:4f:b8:09:48:a3:ce:76:50:ee:74:
         4d:21:96:e6:87:6f:a1:02:9b:c4:23:91:74:a3:e0:40:ce:6b:
         93:a8:5c:09:6d:e2:7c:e0:75:ef:4c:92:67:99:ce:66:a2:4d:
         b7:3e:a0:9f:ea:d5:a3:58:27:2f:54:33:37:cb:5e:21:4d:1a:
         51:94:05:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:24:05 2025 by rpki-client