Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e3132362e3139322e302f32302d3234203d3e203238323234.roa
File:                     3137372e3132362e3139322e302f32302d3234203d3e203238323234.roa (raw, json)
Hash identifier:          gZZZ3nPf7EwuZvMaxNvHrOagKFSelm+oni8yZwzdlF4=
Subject key identifier:   68:3E:4E:18:3E:1F:F0:8A:86:C5:26:46:54:8B:8C:00:5D:C0:FD:52
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       1AE0385F739C28F25CA130A8AE5900AABC6EE450
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e3132362e3139322e302f32302d3234203d3e203238323234.roa
Signing time:             Mon 12 May 2025 13:00:27 +0000
ROA not before:           Mon 12 May 2025 12:55:27 +0000
ROA not after:            Mon 11 May 2026 13:00:27 +0000
asID:                     28224
IP address blocks:        177.126.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 07:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e0:38:5f:73:9c:28:f2:5c:a1:30:a8:ae:59:00:aa:bc:6e:e4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:55:27 2025 GMT
            Not After : May 11 13:00:27 2026 GMT
        Subject: CN=683E4E183E1FF08A86C52646548B8C005DC0FD52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:c6:f1:82:2a:10:cc:5b:1d:29:dd:fa:fe:
                    18:bf:3e:d0:54:f4:67:9b:36:d0:9b:1e:20:17:6c:
                    e9:cc:24:03:ce:59:ab:35:03:fb:09:94:3f:3d:b2:
                    31:6b:7f:65:b8:f8:d0:c0:de:8a:fd:3c:89:ec:9b:
                    d1:e7:18:16:70:11:32:1b:f9:e2:fc:8d:14:70:26:
                    89:00:59:68:b4:2e:63:ad:7b:f8:55:5a:23:db:9f:
                    1d:18:61:8e:58:26:90:33:3d:cf:2d:9f:45:4a:94:
                    da:82:76:9b:a4:e9:8a:68:81:60:20:36:5c:7e:66:
                    f5:76:42:60:3f:ee:2e:18:17:14:dc:c4:71:d7:eb:
                    4c:70:c5:e3:7b:61:1e:49:83:a9:06:8d:49:a5:36:
                    5a:e1:65:b8:a0:71:3b:61:13:26:9d:d4:9c:9a:0c:
                    74:8f:99:01:79:73:4f:9e:d8:93:12:1f:73:9b:56:
                    a6:d9:72:a7:28:cc:9a:ef:69:49:e3:c4:d7:0c:5e:
                    e9:12:c4:03:ab:23:c4:fa:2d:b5:39:6d:8b:2f:18:
                    f2:59:0e:f9:66:7b:e1:e7:ce:9a:ca:10:ee:00:80:
                    30:bb:36:3e:9a:3d:9d:61:43:15:b0:c9:1d:4e:79:
                    8d:c0:d4:4d:51:2c:5a:b2:57:23:33:d1:57:4a:36:
                    ef:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3E:4E:18:3E:1F:F0:8A:86:C5:26:46:54:8B:8C:00:5D:C0:FD:52
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e3132362e3139322e302f32302d3234203d3e203238323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:d2:c6:68:a4:5f:d5:73:df:e1:d4:bd:b1:ff:2f:58:6b:54:
         09:51:f5:0e:cf:32:4e:2c:c8:2b:fc:08:6d:db:aa:8f:48:38:
         81:38:6c:d8:8e:b8:f6:c4:16:af:80:85:c4:82:eb:f3:a2:35:
         8d:9e:19:27:08:55:ab:a4:31:f7:f9:e9:23:dc:c2:d4:36:57:
         ad:6f:7d:49:3f:06:ae:6c:6e:e5:87:8c:e2:ae:9a:65:06:96:
         75:92:42:57:35:f9:27:d9:92:49:93:8b:93:8d:c9:da:9a:32:
         2f:17:e3:ff:43:f7:95:67:18:c0:1f:b1:c8:b4:02:d9:d2:7b:
         c3:08:5a:e0:c0:0d:41:f4:d6:0e:03:13:18:6c:9b:f4:f5:97:
         48:0f:cb:b4:f8:88:db:fc:90:29:19:c4:87:b4:2d:a2:9a:93:
         cd:80:ff:18:18:dd:ac:7f:8d:65:4b:69:fa:a3:8b:72:f1:1e:
         5f:b9:f7:52:8c:a8:5f:a8:dc:15:2d:18:0d:a7:85:e1:56:54:
         1f:1a:2c:ee:13:af:7c:25:94:6e:80:e0:4d:28:0b:ee:f7:cb:
         a3:16:e7:a8:d7:dd:57:d5:2e:b8:55:37:ae:91:68:15:4e:c0:
         b5:f9:83:f3:24:93:5c:24:fb:26:af:da:85:51:cd:54:2e:b4:
         af:26:08:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:52:13 2025 by rpki-client