Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/3137372e3132352e3235322e302f32332d3233203d3e20323633333936.roa
File:                     3137372e3132352e3235322e302f32332d3233203d3e20323633333936.roa (raw, json)
Hash identifier:          AYHgYInvzVHvMPtaFzD8rQEmEMJ54kd/cONS2jDJTA8=
Subject key identifier:   89:C3:06:1E:AE:5D:0A:4D:38:07:D4:06:50:AB:F0:9F:19:1C:7C:E4
Certificate issuer:       /CN=40636332B02FA344DE75686E874C7425B2C58624
Certificate serial:       5DD13AA8E5DCD4A1B959B0F085F879FB101A83AE
Authority key identifier: 40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/3137372e3132352e3235322e302f32332d3233203d3e20323633333936.roa
Signing time:             Thu 06 Mar 2025 20:14:52 +0000
ROA not before:           Thu 06 Mar 2025 20:09:52 +0000
ROA not after:            Thu 05 Mar 2026 20:14:52 +0000
asID:                     263396
IP address blocks:        177.125.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl
                          rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 20:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d1:3a:a8:e5:dc:d4:a1:b9:59:b0:f0:85:f8:79:fb:10:1a:83:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40636332B02FA344DE75686E874C7425B2C58624
        Validity
            Not Before: Mar  6 20:09:52 2025 GMT
            Not After : Mar  5 20:14:52 2026 GMT
        Subject: CN=89C3061EAE5D0A4D3807D40650ABF09F191C7CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:24:9a:0c:9e:04:6f:03:4a:b1:a8:9f:4e:18:
                    f6:1e:fe:2d:aa:25:92:c0:43:9e:8e:10:9f:38:04:
                    50:2b:2b:06:78:e8:26:87:19:45:b1:f5:e1:fc:0b:
                    18:1d:3b:3d:bd:0c:02:da:52:4a:94:a2:a4:d5:24:
                    91:97:4e:c4:09:28:af:83:90:d3:5e:01:6e:67:59:
                    ac:57:21:a7:e1:70:ac:87:79:d3:b8:90:83:9a:5b:
                    65:20:9c:ad:9b:e7:dd:36:a6:e2:79:c6:10:36:c5:
                    d7:a6:c9:fa:2a:c0:b7:d8:71:d9:b0:de:89:88:0f:
                    2e:6c:f8:01:7a:1f:5f:91:d7:b2:d2:92:0e:16:be:
                    67:84:58:28:23:01:d3:aa:53:1c:1e:6d:e4:78:d9:
                    ae:64:af:2c:36:58:6d:a8:37:6a:88:fd:66:62:27:
                    37:66:ca:22:71:61:93:06:2c:63:06:f5:04:0b:ae:
                    4b:c0:7c:92:ff:c6:1e:bc:a4:16:9c:f5:d5:e8:f4:
                    13:b3:1f:47:5d:c6:36:9a:f8:56:93:01:c2:4e:a1:
                    d7:97:cd:0f:1d:6c:64:17:e8:66:64:27:07:09:a2:
                    ad:7d:1c:e8:f9:6d:65:a9:d0:74:9f:60:a0:42:e0:
                    1b:f8:5f:c9:91:e3:04:3f:b1:d5:7a:9f:39:11:8b:
                    9e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C3:06:1E:AE:5D:0A:4D:38:07:D4:06:50:AB:F0:9F:19:1C:7C:E4
            X509v3 Authority Key Identifier:
                keyid:40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/3137372e3132352e3235322e302f32332d3233203d3e20323633333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:9f:78:8e:bc:52:56:d2:f3:a3:67:57:db:26:07:59:89:ba:
         11:e5:38:c3:3f:8b:cc:92:84:ad:98:60:ac:03:b0:95:e6:95:
         62:4f:66:01:20:c0:d7:ed:83:87:f9:d2:8f:1b:dd:dd:11:9e:
         f2:53:87:5a:93:9c:b1:9f:d1:67:c4:12:c6:b5:3a:f3:05:d4:
         9c:b3:52:b2:7a:ae:10:c5:a5:2b:31:1e:9a:ae:f4:57:58:1a:
         f7:1d:8a:12:b4:37:2a:96:30:8e:fe:1d:d3:2c:18:a9:03:65:
         ee:c8:01:3d:e1:c7:5f:af:44:ba:0a:8f:14:73:e8:b9:98:d9:
         45:98:6a:df:9a:24:da:b2:15:7b:8d:4e:52:a7:74:6e:25:86:
         c7:df:6b:4d:b1:32:d4:88:a2:32:dc:2e:07:d0:55:6f:71:28:
         08:e8:b1:d5:b8:89:cd:46:dd:8c:dd:4c:69:16:b8:b2:03:16:
         1d:84:bf:b4:c6:60:c7:28:8f:f8:18:b3:e7:9e:39:3d:21:3e:
         92:cf:54:6e:b7:07:dd:bb:f7:a5:82:ef:30:4a:7e:34:84:56:
         67:03:41:10:cb:9b:47:10:18:1c:d4:84:41:fe:92:18:a7:20:
         66:94:f9:3e:d2:8b:92:57:65:f8:a2:23:31:b1:5b:11:d9:e9:
         11:0e:0b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:59:09 2025 by rpki-client