Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3137372e35342e34382e302f32302d3234203d3e203238323932.roa
File:                     3137372e35342e34382e302f32302d3234203d3e203238323932.roa (raw, json)
Hash identifier:          40IYTjHiZO7EvGhruJ83FGAT4mQNUc8uvivoD/9QYP0=
Subject key identifier:   89:17:D3:CB:58:79:FA:05:8E:40:5E:53:83:33:3F:D1:D2:FD:0E:CC
Certificate issuer:       /CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
Certificate serial:       0B9669F3BC2B505E1B26A6EF3BA9B50DDE05145D
Authority key identifier: B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3137372e35342e34382e302f32302d3234203d3e203238323932.roa
Signing time:             Thu 06 Mar 2025 20:00:00 +0000
ROA not before:           Thu 06 Mar 2025 19:55:00 +0000
ROA not after:            Fri 06 Mar 2026 20:00:00 +0000
asID:                     28292
IP address blocks:        177.54.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl
                          rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:96:69:f3:bc:2b:50:5e:1b:26:a6:ef:3b:a9:b5:0d:de:05:14:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
        Validity
            Not Before: Mar  6 19:55:00 2025 GMT
            Not After : Mar  6 20:00:00 2026 GMT
        Subject: CN=3082010A0282010100CA0DB7FEA9004DB631AF4CF6C3CA696D994ED5B279A68EC8A4D02B77FF911BA77BD06C7FF8C8E5F99B323C120E127C945479224B609893E7E386C1523E216816DB709EA8E8098FF04278FBBA63275BA865075269240615EF6F4F60F2AAA6AA2FC82CB702CF501233DE109F51FCCBEEFC06915682497756F57575FAE570C59E2298892CFF7FBD94344D0E2E216CC495BEEBCA7B9CB09414A2EC96E569A99A9979329B253A3509A5CDD4D25BF0F948F1C505295084449ADC8A1BF046AE3BC7E2F1793491DC3395E37A9EE77EEBA7E49EA753150FCC6CEAED784B9EABF59127F71C919B62EBF69DC3D515808B2C253CF3FE464958E6E24CAFD2037D65240F96B7990203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0d:b7:fe:a9:00:4d:b6:31:af:4c:f6:c3:ca:
                    69:6d:99:4e:d5:b2:79:a6:8e:c8:a4:d0:2b:77:ff:
                    91:1b:a7:7b:d0:6c:7f:f8:c8:e5:f9:9b:32:3c:12:
                    0e:12:7c:94:54:79:22:4b:60:98:93:e7:e3:86:c1:
                    52:3e:21:68:16:db:70:9e:a8:e8:09:8f:f0:42:78:
                    fb:ba:63:27:5b:a8:65:07:52:69:24:06:15:ef:6f:
                    4f:60:f2:aa:a6:aa:2f:c8:2c:b7:02:cf:50:12:33:
                    de:10:9f:51:fc:cb:ee:fc:06:91:56:82:49:77:56:
                    f5:75:75:fa:e5:70:c5:9e:22:98:89:2c:ff:7f:bd:
                    94:34:4d:0e:2e:21:6c:c4:95:be:eb:ca:7b:9c:b0:
                    94:14:a2:ec:96:e5:69:a9:9a:99:79:32:9b:25:3a:
                    35:09:a5:cd:d4:d2:5b:f0:f9:48:f1:c5:05:29:50:
                    84:44:9a:dc:8a:1b:f0:46:ae:3b:c7:e2:f1:79:34:
                    91:dc:33:95:e3:7a:9e:e7:7e:eb:a7:e4:9e:a7:53:
                    15:0f:cc:6c:ea:ed:78:4b:9e:ab:f5:91:27:f7:1c:
                    91:9b:62:eb:f6:9d:c3:d5:15:80:8b:2c:25:3c:f3:
                    fe:46:49:58:e6:e2:4c:af:d2:03:7d:65:24:0f:96:
                    b7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:17:D3:CB:58:79:FA:05:8E:40:5E:53:83:33:3F:D1:D2:FD:0E:CC
            X509v3 Authority Key Identifier:
                keyid:B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3137372e35342e34382e302f32302d3234203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         63:5b:49:bf:0a:d1:cc:e2:45:13:ee:10:eb:5a:14:6f:db:58:
         a1:a7:e0:17:ef:4d:29:f2:76:18:6f:b4:9b:85:64:92:29:a2:
         c2:57:cd:7e:2f:32:86:92:d5:4f:05:1a:7b:3e:a1:25:f0:f9:
         6b:0b:b7:ea:db:b8:ca:f1:59:b3:e3:69:e4:2a:c5:1f:45:50:
         df:d5:2c:86:5c:aa:00:f2:d2:92:74:93:dc:a7:1d:cf:d0:bc:
         19:5a:89:bd:a9:42:d9:1c:4c:dc:f3:f2:36:c7:d3:04:aa:4e:
         c3:b5:81:c9:51:53:a2:49:7a:a8:08:99:ea:18:96:60:e3:06:
         a6:23:b3:b2:c4:8e:1a:e0:34:66:63:b7:67:45:b2:2a:bb:02:
         9d:46:74:31:26:25:74:9b:48:61:98:24:40:c3:67:58:8b:74:
         a5:33:e6:a7:06:81:ce:1c:36:75:59:0e:fa:ab:40:22:5d:dd:
         bd:28:29:8b:5b:3b:db:71:26:d7:b0:9e:56:23:e3:b8:37:ce:
         c5:c4:31:20:08:be:2b:06:f6:8b:ed:b4:b7:67:7b:78:d0:e8:
         07:6b:87:f0:72:01:8c:8b:7f:dc:18:9c:45:b2:65:a3:ce:75:
         9e:99:1e:c4:92:97:56:57:2f:c3:68:33:0f:51:2f:57:68:3b:
         fa:f9:c7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:31:14 2025 by rpki-client