Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32332d3233203d3e20323632333133.roa
File:                     3137372e3130352e3232342e302f32332d3233203d3e20323632333133.roa (raw, json)
Hash identifier:          3g3p9j/QeCIlPTSI+loRFfSSeZ/+4PmwcpSr6BlbLGM=
Subject key identifier:   E4:42:6E:4A:6E:D4:62:5D:6C:B1:D6:26:59:C0:FB:E4:F6:29:B3:8C
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       2B8965DE88C7A1B7449E4182E4C322A7EE7CED79
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32332d3233203d3e20323632333133.roa
Signing time:             Wed 05 Mar 2025 22:00:28 +0000
ROA not before:           Wed 05 Mar 2025 21:55:28 +0000
ROA not after:            Wed 04 Mar 2026 22:00:28 +0000
asID:                     262313
IP address blocks:        177.105.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 00:33:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:89:65:de:88:c7:a1:b7:44:9e:41:82:e4:c3:22:a7:ee:7c:ed:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Mar  5 21:55:28 2025 GMT
            Not After : Mar  4 22:00:28 2026 GMT
        Subject: CN=E4426E4A6ED4625D6CB1D62659C0FBE4F629B38C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:f4:08:3a:1a:7f:5c:95:5a:b8:51:30:ec:
                    6b:78:61:c1:d8:80:2b:5a:4b:85:76:92:59:f3:95:
                    ce:ae:46:c3:ed:28:e4:30:49:64:19:f2:51:9e:b5:
                    c6:6f:df:d6:a0:b5:94:73:62:5d:51:52:69:8f:7f:
                    64:9a:28:b2:20:07:ab:c7:a1:c4:66:ad:54:c5:aa:
                    aa:4d:75:84:81:fd:97:8f:b0:fb:e4:f0:96:4d:5d:
                    d3:f8:f3:5f:51:9a:b7:fe:39:d7:bf:c3:fe:88:05:
                    97:47:ce:fb:1d:f3:e9:ea:b7:5e:52:77:2f:8a:18:
                    3d:b4:73:d8:cb:65:42:13:2b:65:77:38:6c:fc:5d:
                    d1:3c:8b:b8:02:fb:2f:fd:42:53:69:c4:79:30:56:
                    37:18:06:74:f8:38:db:56:60:33:f1:71:f4:d9:c9:
                    1d:15:ff:19:89:09:6f:e6:52:c9:24:3b:be:af:99:
                    75:60:04:c9:7a:41:70:ec:d4:d7:95:a0:7d:1c:62:
                    43:68:37:d5:45:c9:b2:f0:6c:c5:1e:8d:a4:e2:27:
                    40:dc:ba:90:a3:aa:51:26:16:41:73:7a:f8:71:64:
                    63:5b:03:b4:3d:42:5f:fb:8f:ea:7f:10:cf:11:90:
                    1f:42:c8:45:f1:d5:3b:7b:7b:75:07:20:79:92:25:
                    10:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:42:6E:4A:6E:D4:62:5D:6C:B1:D6:26:59:C0:FB:E4:F6:29:B3:8C
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32332d3233203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:21:cb:ee:15:e8:4b:63:aa:58:a0:c4:a6:01:3a:c9:dc:d7:
         6d:90:43:87:a8:e8:c7:a3:d3:8f:26:c4:76:e3:c1:29:ed:0a:
         68:d2:c8:4f:4d:01:43:ae:c1:3d:31:78:93:d3:b1:c9:8d:84:
         ca:19:18:ce:c2:41:c6:67:48:74:9f:36:8b:bd:c0:df:54:15:
         f1:dd:4c:0c:85:47:ba:87:87:13:40:b9:69:e7:86:69:c4:8c:
         7b:22:5f:ed:d8:30:62:f8:87:dd:2c:57:99:08:76:8f:bf:c1:
         b9:df:39:3c:5f:af:e7:23:1d:f1:65:d5:9d:90:fa:bf:4c:dd:
         e7:40:66:7b:c5:5d:3d:7d:14:95:4e:09:bc:ef:03:ac:8f:f5:
         19:9a:f7:50:d0:50:dc:a7:10:a6:2d:2c:05:b7:56:c4:8f:e3:
         f2:70:85:4a:a2:1d:10:0c:13:b0:e3:65:70:89:bb:71:d7:a2:
         ec:09:f6:cf:53:81:48:7e:00:3e:27:c7:e8:79:e6:95:c3:78:
         94:50:25:ad:7e:bb:9e:ff:9c:54:69:56:41:73:b0:40:ec:c6:
         33:21:e3:2e:3d:9d:a8:b9:05:d1:d7:c7:9e:76:6f:00:28:6b:
         b8:06:43:54:7b:88:a5:d9:c7:81:53:c2:46:8b:c1:32:73:21:
         23:fd:cc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:51 2025 by rpki-client