Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38312e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38312e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          NxPf62Hjv4EMe2PQB7IrWm5XUUael5Y4BKB5hf7xyeY=
Subject key identifier:   28:E5:76:36:C7:1B:76:FE:36:E7:CD:08:E6:3F:19:6D:14:38:84:73
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       0491970CA209982EB839BDB9F9B5B2B998FF7A79
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38312e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 05 Dec 2024 13:00:19 +0000
ROA not before:           Thu 05 Dec 2024 12:55:19 +0000
ROA not after:            Thu 04 Dec 2025 13:00:19 +0000
asID:                     53047
IP address blocks:        177.101.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:91:97:0c:a2:09:98:2e:b8:39:bd:b9:f9:b5:b2:b9:98:ff:7a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Dec  5 12:55:19 2024 GMT
            Not After : Dec  4 13:00:19 2025 GMT
        Subject: CN=28E57636C71B76FE36E7CD08E63F196D14388473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:4a:28:7d:f2:e7:95:a9:73:5b:89:ef:4b:
                    39:6c:06:0a:23:05:d0:f2:1f:16:ac:8f:e1:a5:e2:
                    d4:c1:d4:04:6b:b3:a0:2e:70:39:c1:a2:4a:21:19:
                    74:8a:e4:f3:d6:68:59:ff:cb:a9:9c:f3:6f:c6:a3:
                    e3:f9:76:7e:ef:73:e6:e6:6c:61:de:65:90:15:25:
                    1d:bc:d1:ab:dc:3e:db:90:b8:35:d4:18:fe:1e:2b:
                    22:23:03:9c:6f:dc:70:0d:58:80:33:bf:c5:c0:33:
                    3e:a6:3f:13:a3:d7:da:e3:cc:12:eb:f8:d2:90:a2:
                    09:f2:f6:74:37:45:c5:80:6f:b9:75:4a:f4:cf:be:
                    4b:17:81:75:0d:8f:3d:8d:9f:3a:cd:99:c6:0b:ac:
                    97:26:3f:31:da:a2:a7:3f:54:53:cf:94:0b:ac:c0:
                    ec:00:ea:71:fe:77:77:c7:dc:7d:5b:00:05:7e:fc:
                    13:22:69:5d:d2:56:f2:27:32:4e:67:b5:b6:71:6a:
                    d9:30:7b:12:e1:68:73:9a:5c:9b:57:9b:cc:3a:f6:
                    5c:c8:76:95:1f:69:82:a0:69:e5:e4:d4:6d:39:89:
                    f1:34:72:f2:51:0f:71:4d:11:82:14:fe:ed:e8:3b:
                    aa:97:b5:27:c9:b6:7f:9e:43:3f:b4:91:f9:b5:ae:
                    26:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E5:76:36:C7:1B:76:FE:36:E7:CD:08:E6:3F:19:6D:14:38:84:73
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38312e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:bb:9c:76:ac:74:45:6f:d6:dc:b7:2e:83:ac:70:c9:2c:e0:
         fb:5b:52:24:3d:d0:86:a5:92:eb:0f:b6:6e:f6:68:09:70:69:
         4a:08:3e:73:33:e4:e4:2d:2d:8b:00:09:27:5f:c7:6e:59:fe:
         64:b4:ea:40:f5:11:2b:88:d4:49:f1:fd:42:a2:93:f1:10:fc:
         f8:26:85:56:eb:d6:6d:55:45:d5:12:4f:c0:7a:43:4d:e5:88:
         7a:61:02:28:7a:59:c0:5b:02:2d:93:1a:b1:77:82:95:ce:a7:
         1a:13:5d:8d:bd:8c:7c:31:4d:36:76:3d:42:0b:7c:d6:8a:d5:
         8a:fe:e6:22:d4:8c:da:54:12:19:36:06:f3:4f:c5:35:41:e6:
         ba:81:32:4c:c9:b1:82:96:8b:72:aa:10:9e:93:8e:7b:1d:59:
         43:46:5e:72:a3:ca:5c:c6:e4:cc:b0:80:36:b1:c3:15:7e:d3:
         e1:98:ed:c4:2f:06:b5:5d:57:e9:11:76:10:84:d2:00:e5:41:
         f5:02:21:cd:dd:23:ac:98:99:9e:11:ab:cf:5b:9e:a0:27:37:
         11:0e:53:3a:0e:2f:43:bf:77:6a:7e:42:0c:db:b0:bd:5f:e2:
         8b:1a:7f:e8:10:64:97:9b:a9:6f:9e:17:ce:be:fe:6f:5d:23:
         85:00:26:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:08 2025 by rpki-client