Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3137372e3138352e3234302e302f32302d3234203d3e20323633363233.roa
File:                     3137372e3138352e3234302e302f32302d3234203d3e20323633363233.roa (raw, json)
Hash identifier:          H7uByCC2qL1DDQ87q5K4MJvKwx8zUG8Dbrz4+leblfM=
Subject key identifier:   B7:CD:AB:2B:9E:EF:E7:5B:B4:77:DA:18:68:46:7D:44:8F:27:A8:58
Certificate issuer:       /CN=E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1
Certificate serial:       291B6A2579CF257C3E85150B472243715B8F2EA7
Authority key identifier: E3:9C:8B:A5:F3:D1:22:7D:86:25:CE:6F:02:FE:CB:FA:6E:3B:82:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3137372e3138352e3234302e302f32302d3234203d3e20323633363233.roa
Signing time:             Mon 12 Aug 2024 16:58:22 +0000
ROA not before:           Mon 12 Aug 2024 16:53:22 +0000
ROA not after:            Mon 11 Aug 2025 16:58:22 +0000
asID:                     263623
IP address blocks:        177.185.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.crl
                          rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 17:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:1b:6a:25:79:cf:25:7c:3e:85:15:0b:47:22:43:71:5b:8f:2e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1
        Validity
            Not Before: Aug 12 16:53:22 2024 GMT
            Not After : Aug 11 16:58:22 2025 GMT
        Subject: CN=B7CDAB2B9EEFE75BB477DA1868467D448F27A858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:3e:01:11:68:b4:c8:2b:12:27:66:0d:26:
                    6f:ea:24:af:28:53:73:98:1b:62:02:9e:7a:c9:f4:
                    5c:b9:b3:b9:c9:5b:7d:2d:14:a0:6f:1d:61:89:89:
                    ff:71:0c:7a:18:f7:b8:9b:d4:8b:eb:dc:c8:19:e3:
                    d9:aa:d3:04:96:77:f8:64:1e:4b:51:d7:67:80:fe:
                    a9:94:a7:92:69:c8:fd:31:82:be:4c:8b:70:dc:9e:
                    f1:57:ed:04:04:38:6c:f8:d7:89:72:56:e3:76:c1:
                    b2:81:f8:ac:3a:9c:6c:ad:7a:1a:90:73:ed:4c:aa:
                    3e:0a:0c:a1:da:f6:75:a8:54:e5:48:23:b4:db:09:
                    9f:d4:ad:2a:d6:0e:9d:a2:30:7b:1c:0d:08:32:6c:
                    36:56:35:1f:01:fe:bf:90:5e:d4:3f:77:d5:85:eb:
                    95:58:6a:54:41:17:ed:28:ce:ee:ee:d4:c2:6b:b7:
                    2b:ba:9d:84:60:25:1b:c6:1c:b5:28:c0:89:3d:e8:
                    4c:74:2f:df:cb:90:98:4b:c1:81:67:37:02:d6:c6:
                    13:9e:f6:84:98:9e:d5:0c:66:7a:74:67:e4:c0:52:
                    63:f2:48:b5:3c:12:e0:68:b1:ea:41:5f:d9:e2:1a:
                    ec:3a:b7:0b:3f:9c:2e:4e:3a:67:40:e0:59:e8:7e:
                    38:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CD:AB:2B:9E:EF:E7:5B:B4:77:DA:18:68:46:7D:44:8F:27:A8:58
            X509v3 Authority Key Identifier:
                keyid:E3:9C:8B:A5:F3:D1:22:7D:86:25:CE:6F:02:FE:CB:FA:6E:3B:82:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3137372e3138352e3234302e302f32302d3234203d3e20323633363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:9f:58:21:c6:57:82:8c:dd:26:73:16:12:88:88:54:d9:ab:
         d6:b3:53:9d:d6:ea:9a:12:6a:8c:59:13:f3:f8:3b:5f:f5:21:
         fc:ef:24:74:b9:75:5c:ec:03:e7:f2:9a:4c:f2:9a:1f:3a:92:
         9b:f7:bc:ad:bb:37:89:41:03:e2:b4:ea:75:d1:ba:af:b2:ae:
         47:f0:f5:fa:48:fd:64:0e:a7:9e:2b:97:54:b6:94:84:2e:3c:
         c8:d1:56:3f:12:10:63:7f:70:37:f1:8c:71:14:de:a6:32:08:
         e4:41:a6:9f:96:31:9c:3b:de:80:03:23:bf:70:99:2a:b5:7d:
         3b:31:95:9d:20:3b:45:e2:44:15:76:a4:82:ee:88:bc:00:72:
         e3:e2:b6:55:28:71:82:74:3c:4f:ae:f1:32:dd:e1:7f:2c:99:
         75:69:a2:60:3b:c3:c5:c8:3e:3c:51:5d:56:fe:42:04:4f:4c:
         61:81:e4:0e:c5:67:2e:18:e6:52:bc:c7:64:d9:e2:8c:e3:30:
         af:dd:f6:aa:e3:f0:e8:7f:c3:98:fa:79:da:ed:13:87:94:15:
         8c:2e:43:0f:9b:5b:0d:ff:f7:23:66:85:db:d6:f2:78:d3:dd:
         d4:a8:53:0a:e2:4d:23:29:8c:3d:09:62:39:99:35:b6:b3:3b:
         32:9b:6c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:24 2025 by rpki-client