Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3232342e302f32302d3234203d3e20323632353035.roa
File:                     3137372e36362e3232342e302f32302d3234203d3e20323632353035.roa (raw, json)
Hash identifier:          uoXg+/i1vqkCjLeQcZZHb23rRqkDNAzdOy88uLT9wl0=
Subject key identifier:   45:46:A4:D7:5D:DF:65:1B:1B:9C:28:D6:59:92:0E:C8:FF:03:5F:35
Certificate issuer:       /CN=2E32AC81A60DECBD55792A2594C40A5D7742559E
Certificate serial:       647C1142C3D147616E62676BDBCDFDAC4A8EE8A7
Authority key identifier: 2E:32:AC:81:A6:0D:EC:BD:55:79:2A:25:94:C4:0A:5D:77:42:55:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3232342e302f32302d3234203d3e20323632353035.roa
Signing time:             Mon 15 Jul 2024 19:22:05 +0000
ROA not before:           Mon 15 Jul 2024 19:17:05 +0000
ROA not after:            Mon 14 Jul 2025 19:22:05 +0000
asID:                     262505
IP address blocks:        177.66.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.crl
                          rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7c:11:42:c3:d1:47:61:6e:62:67:6b:db:cd:fd:ac:4a:8e:e8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E32AC81A60DECBD55792A2594C40A5D7742559E
        Validity
            Not Before: Jul 15 19:17:05 2024 GMT
            Not After : Jul 14 19:22:05 2025 GMT
        Subject: CN=4546A4D75DDF651B1B9C28D659920EC8FF035F35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b5:76:48:0b:19:f9:72:f1:fe:03:8c:3d:aa:
                    65:06:22:1f:c2:fa:4b:ba:38:0b:f1:af:bf:81:42:
                    c6:94:b4:e5:7f:57:e2:ef:66:f3:e0:b7:d2:39:14:
                    02:9f:81:e4:9d:6a:db:a8:3b:79:ec:ee:01:46:c7:
                    25:56:07:5d:42:c1:f3:12:f6:0a:88:de:0e:59:ea:
                    07:06:be:12:24:24:0e:35:79:4c:93:fd:5d:36:8b:
                    ec:e9:e4:01:bd:81:4d:aa:cf:0e:ac:58:3c:8a:73:
                    c5:65:08:aa:9c:bf:63:d8:24:b3:dd:f0:a4:3c:9b:
                    d7:a5:60:09:c3:89:1c:b7:d5:a6:52:ec:2e:93:95:
                    6c:47:d4:9d:e7:52:5d:2c:c2:1a:b7:58:5e:90:50:
                    29:9e:82:ae:b3:b8:09:22:5b:98:95:70:78:e7:09:
                    4b:85:4a:2c:80:80:5d:1c:bf:54:f1:c8:93:cb:2f:
                    be:d5:e3:97:72:14:d8:a6:68:8b:ac:56:05:e1:85:
                    a4:96:ed:ed:b3:85:e4:84:ff:52:1c:6c:fc:76:82:
                    1f:b3:95:67:4e:4f:d5:07:34:6e:83:bb:89:3a:03:
                    0e:f9:3d:6c:f0:4a:4f:be:41:3f:0f:ad:a6:e9:63:
                    3a:eb:65:6d:e7:79:65:35:44:52:6f:e3:31:31:be:
                    ee:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:46:A4:D7:5D:DF:65:1B:1B:9C:28:D6:59:92:0E:C8:FF:03:5F:35
            X509v3 Authority Key Identifier:
                keyid:2E:32:AC:81:A6:0D:EC:BD:55:79:2A:25:94:C4:0A:5D:77:42:55:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3232342e302f32302d3234203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cf:32:50:e7:48:60:8c:75:60:a7:81:42:65:8a:f0:05:56:69:
         77:fd:a3:d5:05:cf:c9:ea:16:4c:d6:f6:e4:e4:9d:79:0f:fc:
         33:d7:16:ef:7e:bd:62:ec:01:5f:b1:af:cf:5d:88:33:44:85:
         3b:e3:8f:55:a6:06:66:69:05:91:94:b0:d8:e5:89:4e:1e:32:
         7e:f4:58:4d:fe:72:db:2f:ab:2c:18:ba:fa:95:73:40:a3:6c:
         49:5d:d3:06:97:c6:f4:83:be:dc:fc:47:0c:8f:bc:97:8a:6e:
         d8:2d:93:a1:d0:02:87:ba:97:01:73:b8:2a:78:e9:72:81:0f:
         d3:b3:d0:14:b3:a7:f3:11:44:72:3e:e5:6b:a6:fd:21:d9:b2:
         47:56:37:38:01:09:46:a2:a2:48:14:bc:b0:0e:d7:8c:c6:09:
         c8:60:bc:79:c1:26:00:11:11:f8:d5:cf:26:ed:ae:26:64:b4:
         dc:c3:54:d3:da:e6:5d:db:30:65:af:91:b6:42:b0:82:92:0b:
         7b:6f:55:99:b5:fb:ea:b4:6a:d9:5b:0f:58:53:f9:aa:f3:b6:
         ae:4a:52:20:43:5a:00:85:9e:74:c6:dc:e2:28:86:cf:ce:67:
         89:36:00:a5:ce:e1:a5:ca:b1:2a:55:fb:b5:68:e0:70:15:07:
         78:2b:34:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:27 2025 by rpki-client