Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/3137372e3132352e3235342e302f32342d3234203d3e20323633333936.roa
File:                     3137372e3132352e3235342e302f32342d3234203d3e20323633333936.roa (raw, json)
Hash identifier:          ViaLBm/au1l+dJYtCRvIR8ineqO6UdN06kUrCSLc9Mg=
Subject key identifier:   D6:C5:2D:D2:F1:F5:A0:F1:F4:E2:A0:4F:01:BA:71:E6:0C:EB:79:D2
Certificate issuer:       /CN=40636332B02FA344DE75686E874C7425B2C58624
Certificate serial:       07FB6C817EBC3B4E4AE6B1F8CB07AE52D7127002
Authority key identifier: 40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/3137372e3132352e3235342e302f32342d3234203d3e20323633333936.roa
Signing time:             Thu 06 Mar 2025 20:14:52 +0000
ROA not before:           Thu 06 Mar 2025 20:09:52 +0000
ROA not after:            Thu 05 Mar 2026 20:14:52 +0000
asID:                     263396
IP address blocks:        177.125.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl
                          rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 10:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fb:6c:81:7e:bc:3b:4e:4a:e6:b1:f8:cb:07:ae:52:d7:12:70:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40636332B02FA344DE75686E874C7425B2C58624
        Validity
            Not Before: Mar  6 20:09:52 2025 GMT
            Not After : Mar  5 20:14:52 2026 GMT
        Subject: CN=D6C52DD2F1F5A0F1F4E2A04F01BA71E60CEB79D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:73:b9:76:d9:1e:ba:8b:c7:e1:9b:a1:c3:c0:
                    f9:8e:63:b5:28:27:ca:07:6e:27:87:21:ae:3e:92:
                    3b:e1:ab:af:45:c2:28:68:f3:f1:61:b0:58:cc:c9:
                    6d:9c:af:8a:0e:33:46:17:e4:64:95:1f:ed:73:62:
                    38:08:ee:da:50:20:88:db:51:7f:39:8e:fe:f5:e3:
                    b4:e4:61:b8:ed:b7:da:ca:aa:79:cb:04:44:76:9c:
                    20:46:3c:38:3a:0d:12:db:bf:53:93:10:c5:76:f8:
                    cd:87:09:c0:a1:6d:f0:f0:d4:b5:97:01:8e:cd:09:
                    3a:41:f1:9a:45:ea:ea:26:3b:b1:b6:cd:cf:18:c4:
                    ef:af:04:be:34:36:20:72:e2:dd:3a:83:90:40:99:
                    ec:b7:7a:a4:b7:36:3d:d7:37:bd:ff:c1:ff:3b:2f:
                    61:cb:df:36:82:0f:ec:32:3e:12:1d:2a:62:ec:5d:
                    dc:96:52:c4:f4:4f:b2:68:3c:fd:d1:2a:28:06:1b:
                    af:89:1a:be:af:68:97:26:db:c6:a5:50:b5:cb:74:
                    93:49:88:cc:f0:7b:5b:ca:12:b4:b0:de:aa:08:3f:
                    e0:6e:6f:33:b2:db:2d:d6:1d:b8:f4:ce:a6:6e:07:
                    a3:bf:11:6b:09:25:07:f4:aa:23:1e:43:7f:98:26:
                    df:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C5:2D:D2:F1:F5:A0:F1:F4:E2:A0:4F:01:BA:71:E6:0C:EB:79:D2
            X509v3 Authority Key Identifier:
                keyid:40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/3137372e3132352e3235342e302f32342d3234203d3e20323633333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:11:7d:d9:03:a0:69:83:55:a8:8d:4b:2d:f4:4f:10:bd:58:
         7d:d2:95:16:bb:da:0f:33:91:1b:5f:45:cd:41:dc:04:86:d4:
         62:78:fa:4a:d9:da:cc:e4:da:78:ff:09:e1:35:25:3f:6a:0e:
         7c:11:c5:a6:2d:37:6a:51:06:34:46:e1:d7:39:3e:65:38:99:
         53:98:04:9b:54:ae:14:5e:22:73:97:d1:67:40:3b:92:bc:1a:
         1f:da:c4:43:59:79:aa:4f:ba:b9:cb:03:67:2b:07:8d:c2:94:
         86:ed:69:79:d2:82:c4:13:2d:2f:ac:5a:8f:05:56:70:31:5b:
         3b:cf:5a:6b:c4:1b:6c:ae:6b:10:c5:e3:f1:3b:0a:70:6d:cf:
         a4:07:d1:bf:91:b0:ce:03:ae:0d:21:e1:5a:42:2a:ce:9e:90:
         cd:15:6d:a3:24:5c:83:6a:46:69:45:49:d2:cf:b9:53:85:d3:
         e6:d9:36:cd:65:07:91:a8:12:ae:a0:a0:cf:8b:28:22:16:85:
         cb:b2:53:97:4a:66:68:df:a1:da:e6:ee:3c:d7:90:56:57:9f:
         41:3b:56:11:1f:3e:d4:5d:cd:ae:9d:85:94:4d:f6:ff:4b:ef:
         75:56:72:64:82:17:57:59:02:85:91:65:75:bb:49:7f:95:64:
         98:b2:a1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:49:35 2025 by rpki-client