Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/3137372e37322e32342e302f32322d3332203d3e20323632353339.roa
File:                     3137372e37322e32342e302f32322d3332203d3e20323632353339.roa (raw, json)
Hash identifier:          a9+csAgc05hv4YFWusZnnqa5ylwnWfK9qmhRT+bS1To=
Subject key identifier:   38:AF:8C:37:C6:F1:EA:CB:A0:94:13:C7:4F:3E:8D:61:24:E3:B3:6B
Certificate issuer:       /CN=5BBAA26A1B1C199630D76AA2B81403371285F562
Certificate serial:       1E5279A60F01D926919D740D7847749D88EDF677
Authority key identifier: 5B:BA:A2:6A:1B:1C:19:96:30:D7:6A:A2:B8:14:03:37:12:85:F5:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BBAA26A1B1C199630D76AA2B81403371285F562.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/3137372e37322e32342e302f32322d3332203d3e20323632353339.roa
Signing time:             Mon 24 Mar 2025 20:00:19 +0000
ROA not before:           Mon 24 Mar 2025 19:55:19 +0000
ROA not after:            Mon 23 Mar 2026 20:00:19 +0000
asID:                     262539
IP address blocks:        177.72.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/5BBAA26A1B1C199630D76AA2B81403371285F562.crl
                          rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/5BBAA26A1B1C199630D76AA2B81403371285F562.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BBAA26A1B1C199630D76AA2B81403371285F562.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 03:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:52:79:a6:0f:01:d9:26:91:9d:74:0d:78:47:74:9d:88:ed:f6:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BBAA26A1B1C199630D76AA2B81403371285F562
        Validity
            Not Before: Mar 24 19:55:19 2025 GMT
            Not After : Mar 23 20:00:19 2026 GMT
        Subject: CN=38AF8C37C6F1EACBA09413C74F3E8D6124E3B36B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:26:ad:50:bd:97:8d:b3:a7:db:61:05:7f:4a:
                    ae:bb:69:f9:20:3e:4b:5c:af:06:f8:c8:e1:6d:55:
                    b9:db:15:65:9b:78:f2:e6:61:e1:69:44:5f:3f:7b:
                    e9:c1:bf:fa:22:d4:06:27:8e:5e:91:d2:42:d9:30:
                    e9:a6:03:e3:b6:5c:58:33:dd:e2:d9:6b:de:19:3e:
                    70:77:56:09:b5:30:f4:98:06:e3:c9:b6:47:6f:29:
                    f6:98:e9:f9:64:f7:66:1a:44:c7:f0:52:7f:9e:21:
                    a2:42:74:e0:5c:92:d6:ba:66:70:78:5b:77:7d:ca:
                    fa:5f:15:9e:81:8e:ba:63:42:b0:7e:5c:7d:bd:d5:
                    fb:72:fc:b4:14:e9:bf:fc:79:e1:65:41:0f:07:8c:
                    0c:cb:23:3e:7f:46:0d:d2:82:ad:52:18:d7:5f:e8:
                    f1:fb:48:58:53:80:dc:19:ab:ad:a9:cf:65:a3:fc:
                    c5:02:22:33:9a:bf:c3:1a:37:8a:6e:d9:0a:b6:94:
                    51:76:61:c0:23:5e:c4:50:b8:90:9e:a9:82:f1:6e:
                    18:5e:ed:f9:04:7f:90:8e:2e:fb:b2:96:72:dd:f0:
                    cc:96:99:07:6b:cd:f1:05:6e:03:68:39:03:d4:f1:
                    27:68:02:3d:1e:27:1e:61:b7:07:c0:c0:f1:e0:e9:
                    b6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AF:8C:37:C6:F1:EA:CB:A0:94:13:C7:4F:3E:8D:61:24:E3:B3:6B
            X509v3 Authority Key Identifier:
                keyid:5B:BA:A2:6A:1B:1C:19:96:30:D7:6A:A2:B8:14:03:37:12:85:F5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/5BBAA26A1B1C199630D76AA2B81403371285F562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BBAA26A1B1C199630D76AA2B81403371285F562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/3137372e37322e32342e302f32322d3332203d3e20323632353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:ab:29:41:ff:97:1f:63:98:5a:70:9d:b7:13:a4:4f:db:a5:
         c8:33:4c:e6:5e:80:14:38:07:d5:0d:fa:9c:94:02:23:27:93:
         75:a7:ac:bc:34:2c:4f:ec:15:96:5f:93:38:ec:04:ed:3d:8b:
         b6:9b:b6:32:51:cb:8c:91:2c:7f:7e:ea:b3:70:2c:37:5d:20:
         fe:60:b4:f9:df:9e:7e:2b:c9:f9:67:a8:79:98:d2:83:dd:3b:
         31:b8:e5:1c:16:fd:bc:af:fa:15:19:2b:3c:6e:48:6c:de:03:
         3d:04:c9:92:2d:25:a8:05:99:dd:c6:16:b2:c4:1d:9e:4c:59:
         0e:bb:59:25:40:67:6b:01:5e:27:81:56:7a:8e:8f:70:f2:5a:
         22:21:d9:34:46:28:5a:6d:ea:8a:ac:0e:90:b8:5d:83:e0:a8:
         99:26:43:67:cf:8a:0a:6d:59:c0:2b:6e:12:6b:86:41:e0:d1:
         51:f7:0d:bd:da:e4:b2:54:e6:25:8d:50:71:6e:be:6a:c1:b2:
         cc:f4:2d:af:90:e8:a5:b6:7f:bb:05:00:38:2c:15:99:7d:e0:
         7f:d9:20:1b:bb:52:42:79:c1:f2:66:29:37:4b:e5:2c:ee:bc:
         4f:40:ce:9a:25:35:e0:7c:d2:3d:d4:d4:cf:33:49:37:63:8b:
         c7:4a:ff:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:35:23 2025 by rpki-client