Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/1/3137372e3132392e3232382e302f32322d3234203d3e20323731303338.roa
File:                     3137372e3132392e3232382e302f32322d3234203d3e20323731303338.roa (raw, json)
Hash identifier:          rMwcsL5hK5xNXk6RLLlbdBNYnUXf6g5k61gaK66OoyQ=
Subject key identifier:   44:72:C7:88:65:47:8D:F0:A0:EB:C1:06:67:84:31:4C:66:C1:43:1C
Certificate issuer:       /CN=24CB5380EF2DE3395262F5E5DC8D8EB896E99F66
Certificate serial:       53E6F684E16F2AA47743E5091622DB006327EFEF
Authority key identifier: 24:CB:53:80:EF:2D:E3:39:52:62:F5:E5:DC:8D:8E:B8:96:E9:9F:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/1/3137372e3132392e3232382e302f32322d3234203d3e20323731303338.roa
Signing time:             Thu 06 Mar 2025 18:52:22 +0000
ROA not before:           Thu 06 Mar 2025 18:47:22 +0000
ROA not after:            Thu 05 Mar 2026 18:52:22 +0000
asID:                     271038
IP address blocks:        177.129.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.crl
                          rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 19:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e6:f6:84:e1:6f:2a:a4:77:43:e5:09:16:22:db:00:63:27:ef:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CB5380EF2DE3395262F5E5DC8D8EB896E99F66
        Validity
            Not Before: Mar  6 18:47:22 2025 GMT
            Not After : Mar  5 18:52:22 2026 GMT
        Subject: CN=4472C78865478DF0A0EBC1066784314C66C1431C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:56:1d:9b:8e:97:38:8c:a9:9f:3c:7a:de:
                    ba:17:7a:36:bb:cf:43:bd:cd:aa:22:a1:86:c2:ef:
                    a9:7d:87:bf:6a:07:7e:67:93:49:b4:85:70:d4:40:
                    93:2d:96:74:0d:31:70:80:3f:58:4c:bc:4a:ef:ad:
                    5e:4c:e7:f3:02:fd:9b:a5:a2:a0:87:21:4f:c7:a8:
                    c5:67:0b:be:42:51:df:69:0b:87:3f:19:7d:35:7d:
                    0a:90:0f:dd:2e:43:4b:59:81:36:27:bf:c0:74:f7:
                    19:a3:b4:e6:8f:44:0d:30:93:c2:93:9c:33:40:2a:
                    95:1c:24:1b:51:8b:78:6e:ac:d8:e6:ff:d1:0a:b9:
                    cc:bb:a0:c9:6c:7a:22:77:5b:2d:2d:51:99:00:09:
                    15:6f:9e:c7:1b:63:17:10:b7:81:c4:b5:61:f6:68:
                    e2:c5:8b:7b:ad:58:28:17:4e:2d:83:77:a1:81:3e:
                    96:08:e2:b3:3d:77:1a:41:19:9e:52:94:80:db:7e:
                    ea:df:cb:93:5e:61:1e:c3:52:69:07:0f:10:5d:0a:
                    93:ec:50:84:68:68:01:a0:9e:8c:de:68:7b:2d:24:
                    77:6b:c2:b0:e0:08:e1:8c:0e:2f:12:7d:b2:78:0e:
                    d1:3f:d1:9b:e4:c4:eb:7b:30:fb:db:8b:7c:88:cb:
                    5d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:72:C7:88:65:47:8D:F0:A0:EB:C1:06:67:84:31:4C:66:C1:43:1C
            X509v3 Authority Key Identifier:
                keyid:24:CB:53:80:EF:2D:E3:39:52:62:F5:E5:DC:8D:8E:B8:96:E9:9F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/1/3137372e3132392e3232382e302f32322d3234203d3e20323731303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:7b:f0:60:6e:d0:32:fd:23:4c:7c:c2:50:56:14:4a:86:ab:
         3b:18:98:45:75:e3:12:46:f4:b4:26:b1:36:ae:cb:3a:3e:0b:
         f3:74:12:81:69:a9:b5:d3:4e:bf:d9:d8:e3:65:2c:f1:e4:de:
         8c:38:c4:65:81:63:31:df:3d:10:af:16:e7:f0:23:8e:84:33:
         6d:d0:a0:7b:aa:f6:03:36:e7:5d:8e:8d:5c:ba:6c:5b:f3:e6:
         a5:16:32:d8:ae:2f:f1:2e:85:e5:b3:9a:8d:8d:6e:8f:14:65:
         6c:74:a9:fc:53:fc:28:8e:bb:10:c5:df:48:dd:35:aa:fd:8c:
         c3:d4:46:64:50:69:a6:9a:25:f4:17:c2:1d:d0:f1:27:6d:c4:
         10:d6:50:6e:82:a5:34:d1:07:f8:d8:aa:07:7d:b5:fd:e5:6a:
         fa:36:56:f3:70:5b:c7:f6:44:34:51:44:84:63:a5:6f:00:49:
         e1:f3:6a:cc:1a:57:7d:55:f0:b4:80:14:e8:42:66:1a:64:94:
         28:e7:b4:b2:5c:da:1c:d4:03:32:1a:de:5c:10:97:28:f6:75:
         f1:a6:7a:5b:dc:00:1c:04:e8:15:be:33:78:f5:cd:56:ae:5d:
         a9:04:02:af:22:05:61:44:57:3f:33:e1:bf:ea:eb:91:f6:19:
         05:4d:bd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:56:52 2025 by rpki-client