Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/3137372e31312e31362e302f32322d3234203d3e20323632383639.roa
File:                     3137372e31312e31362e302f32322d3234203d3e20323632383639.roa (raw, json)
Hash identifier:          dhKWjMMaawDeszyBualtTmwGJZxqBmG/nV5EJCo6G98=
Subject key identifier:   30:37:B4:8A:6E:6B:42:C3:EE:61:AB:03:48:4B:25:98:BA:25:26:C6
Certificate issuer:       /CN=B15DE8A39643F9E3852DE2E7153C75CAAA401A15
Certificate serial:       7F4538BCE1C7399E03DCCB02DFCB44881344D7C1
Authority key identifier: B1:5D:E8:A3:96:43:F9:E3:85:2D:E2:E7:15:3C:75:CA:AA:40:1A:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/3137372e31312e31362e302f32322d3234203d3e20323632383639.roa
Signing time:             Thu 22 Aug 2024 13:44:15 +0000
ROA not before:           Thu 22 Aug 2024 13:39:15 +0000
ROA not after:            Thu 21 Aug 2025 13:44:15 +0000
asID:                     262869
IP address blocks:        177.11.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.crl
                          rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 07:10:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:45:38:bc:e1:c7:39:9e:03:dc:cb:02:df:cb:44:88:13:44:d7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B15DE8A39643F9E3852DE2E7153C75CAAA401A15
        Validity
            Not Before: Aug 22 13:39:15 2024 GMT
            Not After : Aug 21 13:44:15 2025 GMT
        Subject: CN=3037B48A6E6B42C3EE61AB03484B2598BA2526C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f3:98:fe:8b:94:29:ee:c6:56:a6:fd:8a:bc:
                    f6:ba:42:98:77:6e:6c:6e:04:2b:a4:24:a7:2d:d2:
                    ea:0f:ed:54:21:08:a3:82:f8:7f:37:9b:64:bc:fd:
                    f2:51:aa:85:d7:2c:0b:a7:0a:19:b9:b6:2b:f7:5d:
                    8d:44:a9:5a:b9:28:bc:42:a5:f8:de:e3:3b:9e:5b:
                    f2:2e:3c:81:4c:e7:4f:ab:3c:bd:b0:df:01:97:c3:
                    d1:f3:ea:61:68:d3:63:20:54:5f:43:0e:d7:dd:89:
                    be:57:48:01:6e:f9:45:ce:e6:0e:b8:7f:f2:c5:fd:
                    d7:44:19:83:a5:84:a3:9b:f8:94:4a:b6:e6:96:ff:
                    64:9d:00:22:34:46:a1:bc:c6:36:3c:0d:68:2e:c4:
                    11:c9:e1:48:13:96:81:72:32:d1:7b:d6:40:52:81:
                    f6:7f:70:bf:f0:0d:e6:d8:a1:59:4d:dc:de:e9:16:
                    f4:a8:39:64:f5:9f:38:d0:8c:76:ba:3f:ad:d0:59:
                    45:dd:f6:90:81:23:18:01:8b:95:1b:4a:0d:a2:90:
                    00:53:1a:5d:41:f1:b4:4a:05:10:0e:b1:74:a4:7b:
                    4c:d3:8b:b9:74:42:11:5d:5a:58:44:3e:bf:7b:5d:
                    09:a2:ce:29:e9:61:76:19:55:0e:a5:57:84:54:7b:
                    f7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:37:B4:8A:6E:6B:42:C3:EE:61:AB:03:48:4B:25:98:BA:25:26:C6
            X509v3 Authority Key Identifier:
                keyid:B1:5D:E8:A3:96:43:F9:E3:85:2D:E2:E7:15:3C:75:CA:AA:40:1A:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/3137372e31312e31362e302f32322d3234203d3e20323632383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:57:a9:a7:af:86:f6:16:ef:d4:81:b8:fa:bb:4d:da:fd:ec:
         bb:cd:a8:42:4e:f0:e6:63:13:36:c5:64:9f:17:4b:79:99:f5:
         5b:d4:c8:a9:67:b2:1f:b4:77:90:e4:c5:5f:fc:06:70:c1:56:
         c3:a9:34:5b:12:a0:e6:13:0e:7a:37:e6:be:ef:e9:9c:2e:15:
         ea:9f:eb:83:c5:79:35:29:73:c5:d7:56:60:8d:49:8c:fd:05:
         ac:46:35:66:b3:9b:51:48:16:f7:38:cf:f2:49:34:8f:2b:56:
         b1:0d:b2:ee:ef:29:c2:84:54:7f:d7:f7:f4:d8:9a:f1:81:dd:
         a3:22:23:5f:c6:1b:a1:76:d7:fd:87:d2:d8:98:f1:19:c8:b4:
         60:be:93:57:09:aa:4f:1e:89:8b:07:e1:33:16:1d:5e:31:f3:
         72:26:39:f4:46:bd:3a:65:45:9c:9b:ca:cd:c2:db:8a:09:57:
         00:a4:ea:2d:ac:b2:3d:d3:39:92:9e:93:b9:7a:e6:ea:11:bd:
         6f:06:7b:5b:27:2c:7b:48:92:06:56:b2:ef:6e:fc:1b:e8:c7:
         44:4e:99:29:01:a6:71:b3:ff:a4:7f:39:58:f2:22:a5:28:c2:
         65:0e:d1:43:4d:92:0e:5a:67:2c:6f:63:6d:64:3f:51:88:3e:
         bb:36:15:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:21:10 2025 by rpki-client