Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e302e302f32332d3233203d3e20323632363432.roa
File:                     3137372e38372e302e302f32332d3233203d3e20323632363432.roa (raw, json)
Hash identifier:          DYCcxeP+DwtRFvAgELJK6Ebb7nkjHkZ1ve6OIi0hAIs=
Subject key identifier:   98:8A:CC:E7:7D:7D:A4:81:62:82:64:87:CA:68:8E:EE:E8:A2:7F:1C
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       7FD95FF8A0DEE00553A72A43EAB6438F2FBBF4E3
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e302e302f32332d3233203d3e20323632363432.roa
Signing time:             Thu 06 Mar 2025 03:49:59 +0000
ROA not before:           Thu 06 Mar 2025 03:44:59 +0000
ROA not after:            Thu 05 Mar 2026 03:49:59 +0000
asID:                     262642
IP address blocks:        177.87.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d9:5f:f8:a0:de:e0:05:53:a7:2a:43:ea:b6:43:8f:2f:bb:f4:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Mar  6 03:44:59 2025 GMT
            Not After : Mar  5 03:49:59 2026 GMT
        Subject: CN=988ACCE77D7DA48162826487CA688EEEE8A27F1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ea:6c:bc:f3:a9:e7:5d:12:90:73:87:03:62:
                    4a:f8:77:a6:66:5b:87:02:01:64:74:66:ba:6d:32:
                    a2:44:d1:c1:e3:a6:51:8e:fc:de:a1:42:ec:ec:24:
                    43:11:54:7c:56:69:16:a0:e0:08:af:3e:8f:95:83:
                    9e:68:4c:dc:ce:68:44:77:73:4f:7e:2e:32:6b:bb:
                    2f:0c:56:e4:69:66:11:1a:a1:2c:05:9d:9c:ea:2d:
                    22:34:73:da:28:5e:a9:d8:9c:75:48:6d:36:57:84:
                    76:0c:b2:7a:fd:44:b4:e5:86:dd:c1:60:f3:61:14:
                    72:04:5e:bb:cd:63:66:17:8c:f2:f8:26:9b:0c:79:
                    cc:2a:c0:0a:4b:b5:d5:ca:3a:5c:27:ec:e6:5d:97:
                    d6:ce:6a:75:6b:24:c8:7b:c7:fc:9e:66:4c:aa:13:
                    99:e8:18:4c:34:cd:0e:22:78:57:d4:b0:b8:08:4e:
                    a0:97:e8:87:ef:2e:bf:d7:09:8c:11:1e:2c:23:15:
                    52:30:e6:81:ca:cd:8d:45:4e:27:8c:f7:52:82:3f:
                    4e:df:59:83:6b:29:65:a5:3f:54:d9:a9:97:43:7a:
                    c0:ce:85:61:f2:62:64:6b:94:8c:04:7d:22:07:6a:
                    2e:81:38:3b:ad:ef:58:7c:c7:6d:8a:bc:ea:02:e9:
                    e4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8A:CC:E7:7D:7D:A4:81:62:82:64:87:CA:68:8E:EE:E8:A2:7F:1C
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e302e302f32332d3233203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:50:01:d3:79:f2:96:c8:a4:c3:9c:ab:c1:99:94:c4:b4:c3:
         d8:86:85:25:7e:b4:3e:de:33:31:b8:29:79:fd:a0:f7:91:78:
         fa:df:e2:3b:a4:99:32:f5:e8:ce:87:58:9d:4b:87:52:00:c3:
         52:d8:cd:58:4f:60:35:84:2c:63:f4:83:81:b1:b9:d1:e1:ab:
         79:6b:9b:0b:84:0c:25:7d:0a:fc:cc:22:e3:99:a5:f5:cb:0f:
         8d:59:5a:b6:2e:22:84:64:c9:83:2b:db:38:8d:bd:4a:58:d1:
         15:8e:14:35:34:7a:5f:72:f1:a8:fb:b4:6c:50:b3:c0:dd:7d:
         af:37:8c:6b:f0:0f:76:74:72:fb:53:7b:3a:9c:2e:8f:7b:b5:
         82:9e:20:ff:63:8a:10:3e:66:ed:39:19:e8:70:58:ef:92:22:
         02:13:e2:f2:35:24:aa:2b:56:d1:c9:de:a0:11:3e:0a:99:5c:
         60:e8:8b:27:05:7f:ca:ce:7a:6b:bf:4d:ea:96:2d:af:c0:c2:
         dc:4e:00:98:5f:f2:ea:de:59:6c:68:19:16:89:b3:7d:2d:49:
         2c:3d:81:6a:17:ce:19:c8:43:96:2c:54:03:ef:4f:22:88:8e:
         66:f7:21:03:c2:d0:15:e9:1e:6b:46:04:03:61:bc:39:f9:5b:
         37:de:df:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:24:03 2025 by rpki-client