Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233322e302f32312d3231203d3e20323632333133.roa
File:                     3137372e3130352e3233322e302f32312d3231203d3e20323632333133.roa (raw, json)
Hash identifier:          Gy0LHSaKqiiOZf23mLIh2wo5bdw2PReBGQM1toc1lRg=
Subject key identifier:   29:8B:F5:A3:0F:C1:15:94:38:81:F0:E9:3B:A3:E9:6A:18:C3:A6:A0
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       6C7899D72AA22F5D77984CF39798F0E35DCF50A6
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233322e302f32312d3231203d3e20323632333133.roa
Signing time:             Wed 05 Mar 2025 22:00:29 +0000
ROA not before:           Wed 05 Mar 2025 21:55:29 +0000
ROA not after:            Wed 04 Mar 2026 22:00:29 +0000
asID:                     262313
IP address blocks:        177.105.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 01:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:78:99:d7:2a:a2:2f:5d:77:98:4c:f3:97:98:f0:e3:5d:cf:50:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Mar  5 21:55:29 2025 GMT
            Not After : Mar  4 22:00:29 2026 GMT
        Subject: CN=298BF5A30FC115943881F0E93BA3E96A18C3A6A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:30:6d:43:1e:92:18:6c:f2:87:bd:86:5e:39:
                    79:a5:ce:4b:60:ec:73:59:4a:ed:48:e9:cf:9f:08:
                    85:a0:28:07:af:cd:7b:61:86:fe:f2:8c:1c:28:7a:
                    00:4d:7c:19:27:06:13:7c:30:b6:81:f2:a5:80:d0:
                    80:5c:1e:13:91:e0:a7:8b:88:63:be:b4:b4:a5:f6:
                    4e:3f:51:09:e9:83:40:d4:fd:1b:91:9c:22:50:ff:
                    0d:d7:ab:92:1c:9e:28:14:92:3a:aa:3d:d5:bc:8e:
                    ca:80:cf:47:33:a4:2f:66:fb:11:e7:87:2a:48:d1:
                    41:ef:c1:dd:77:10:62:97:ee:c1:15:81:f1:3a:11:
                    00:1c:8c:70:db:99:50:5f:fe:0f:59:e3:f7:41:ee:
                    c8:38:28:a1:a4:a3:52:c6:be:a3:1c:e4:31:a3:9d:
                    d6:2e:66:28:80:68:4c:b3:ff:46:9f:81:96:e2:57:
                    99:62:82:0b:3b:97:d8:40:9b:b7:94:d9:e9:cd:01:
                    2b:e9:37:06:de:7a:60:b5:38:55:cc:89:4f:bf:c8:
                    bd:f9:da:46:1f:1f:59:d3:e2:46:06:ea:0a:d0:f9:
                    dd:21:7b:35:2e:7e:52:cf:a6:96:1f:0a:76:20:36:
                    d3:7c:59:d4:12:76:87:d3:e9:2d:f7:3b:f0:09:07:
                    a7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8B:F5:A3:0F:C1:15:94:38:81:F0:E9:3B:A3:E9:6A:18:C3:A6:A0
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233322e302f32312d3231203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:5c:84:85:bf:cf:d0:c2:c4:8f:55:55:2e:ac:96:33:e9:8a:
         d4:ba:57:ca:14:62:40:66:cc:e3:ca:a9:98:2a:35:d9:56:41:
         11:da:d4:ae:bd:4c:61:38:ec:5c:6d:6b:e4:38:c5:da:7e:48:
         9a:16:39:f8:cd:b2:a8:51:a2:4a:73:9c:eb:65:f3:99:2c:a4:
         b7:70:ec:ba:46:58:ae:3a:54:55:7b:e0:73:09:b0:dc:31:b4:
         fd:15:40:9b:09:3b:e0:44:20:45:de:00:da:b1:3f:98:ad:25:
         38:0a:75:6c:22:e1:cb:c2:6e:03:f5:03:d2:90:92:b1:a6:ac:
         a4:78:0c:c9:ae:76:30:72:f2:9c:32:8f:3b:04:06:cb:b1:f4:
         ef:74:83:87:5a:6c:87:d8:9d:bb:b6:21:be:ba:40:02:5c:88:
         bd:ff:6a:26:7a:d5:3e:83:9b:2e:a7:21:25:00:17:11:42:ac:
         d3:d7:fb:1a:92:9b:1d:e2:bb:20:88:73:7f:81:4c:75:0f:4e:
         e3:e5:73:c8:50:8b:61:fa:93:5a:6c:23:d1:3a:df:26:6b:f0:
         21:01:3d:38:05:51:0d:45:9b:37:56:b4:06:51:93:fb:17:aa:
         2a:55:b5:c2:02:7a:f1:3a:2b:5d:dd:8e:fe:98:e4:62:03:f9:
         08:c2:60:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:29:09 2025 by rpki-client