Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/3137372e33392e38302e302f32312d3234203d3e20323632343232.roa
File:                     3137372e33392e38302e302f32312d3234203d3e20323632343232.roa (raw, json)
Hash identifier:          +VsihtT40UXUDslQFosRezPR5S+3EFSwp+A0r5iVJB0=
Subject key identifier:   07:D1:D1:33:1A:A5:6F:F4:1A:40:03:8E:8D:AC:BF:C1:0D:B6:F2:FD
Certificate issuer:       /CN=244388DDFE9A99D71CEB27CDB6C76637D22CAB8F
Certificate serial:       1D18A52E774C22DC4F0E815414AD13FDF12B7EBF
Authority key identifier: 24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/3137372e33392e38302e302f32312d3234203d3e20323632343232.roa
Signing time:             Wed 05 Mar 2025 20:00:26 +0000
ROA not before:           Wed 05 Mar 2025 19:55:26 +0000
ROA not after:            Wed 04 Mar 2026 20:00:26 +0000
asID:                     262422
IP address blocks:        177.39.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl
                          rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 23:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:18:a5:2e:77:4c:22:dc:4f:0e:81:54:14:ad:13:fd:f1:2b:7e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=244388DDFE9A99D71CEB27CDB6C76637D22CAB8F
        Validity
            Not Before: Mar  5 19:55:26 2025 GMT
            Not After : Mar  4 20:00:26 2026 GMT
        Subject: CN=07D1D1331AA56FF41A40038E8DACBFC10DB6F2FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:43:be:2e:30:f5:8e:1d:7c:fc:a6:f4:ff:
                    01:19:01:44:24:5a:f3:5a:73:b4:51:94:e1:fd:0f:
                    22:db:2a:01:66:c5:32:79:f9:8b:89:e3:4c:3f:aa:
                    d4:1c:c3:9d:e0:61:8e:d1:e4:2e:92:af:50:25:92:
                    ad:58:5c:bf:39:cc:07:9f:65:50:78:36:65:e6:e1:
                    3a:e5:ae:8b:91:88:e9:6c:62:79:96:84:1c:49:9f:
                    5e:2e:7b:31:c6:21:3d:41:e1:1b:65:12:ab:57:c0:
                    f0:d7:04:b5:0c:87:c2:b3:aa:b2:b4:0f:22:c3:f8:
                    fe:a6:60:d6:f9:90:61:9f:87:18:af:1f:2c:48:7b:
                    26:25:31:f1:e6:19:3e:e5:37:07:0d:ea:0d:2e:db:
                    9f:a5:90:3f:82:98:8f:1c:bc:04:ca:b3:3e:9a:24:
                    82:15:40:7d:47:5e:3b:39:01:1a:7b:d4:f0:c8:b5:
                    e2:89:68:9c:ef:b3:05:08:9d:6b:86:b4:2c:18:93:
                    32:53:7a:60:da:5f:d6:d0:89:ca:03:29:0c:23:fa:
                    0c:ff:5c:e5:a0:e0:87:ff:4c:5a:c3:49:5a:ad:52:
                    92:5c:27:23:12:ce:db:36:73:79:9a:f8:38:5f:9c:
                    f6:a7:61:4b:ae:46:f7:f4:b6:e4:6c:a7:c8:8f:b1:
                    56:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D1:D1:33:1A:A5:6F:F4:1A:40:03:8E:8D:AC:BF:C1:0D:B6:F2:FD
            X509v3 Authority Key Identifier:
                keyid:24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/3137372e33392e38302e302f32312d3234203d3e20323632343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:2f:4f:b4:77:bf:d1:9f:df:2c:52:bb:94:f6:e7:a3:48:87:
         d2:00:26:7b:d2:58:66:ac:d4:8a:29:24:0f:4c:43:5a:56:7f:
         f6:60:57:c4:2d:db:e0:09:b1:a1:29:59:ef:30:93:4e:ca:cf:
         4b:e1:75:e0:e3:37:9a:a1:d9:66:d7:3c:30:cf:1f:56:a2:13:
         bb:b1:78:e4:52:1d:9c:11:5d:4e:d7:2a:82:d1:c2:7e:92:e2:
         af:d3:ba:72:aa:c5:db:b6:2d:93:61:8b:2c:06:de:6d:0e:e4:
         b1:6c:79:50:8e:ee:f4:99:35:5b:c5:8b:04:13:50:06:2a:90:
         25:53:e5:d6:01:a1:04:71:01:0d:62:c2:ef:f7:b0:f0:d5:df:
         ae:b3:0f:c5:8c:85:27:5d:b4:0f:07:46:a4:e2:e8:5a:68:78:
         32:c4:16:09:a2:81:d5:1f:a6:83:6b:77:26:e1:44:c2:9c:90:
         63:5d:e6:6f:5e:34:a9:62:58:40:22:ff:79:c7:59:5c:39:5d:
         39:03:ee:37:d0:4c:5d:12:7b:a5:cf:ff:33:4b:92:54:fd:80:
         ef:e1:eb:84:81:ee:7f:54:6e:86:17:e1:42:35:14:c6:53:8e:
         e2:b3:95:e3:e0:fd:e7:16:16:b3:4b:20:3a:af:5c:58:fc:f2:
         c0:e1:e5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:03:24 2025 by rpki-client