Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37352e3132382e302f32302d3234203d3e203238313436.roa
File:                     3137372e37352e3132382e302f32302d3234203d3e203238313436.roa (raw, json)
Hash identifier:          if8B+7SEEGTvW0DaMOHxp0hTEwbSV4jsqCNNxWTjiAU=
Subject key identifier:   2B:1F:B2:5D:D0:DB:F5:0F:81:26:BD:70:C4:B6:E1:EF:1F:FA:5F:9C
Certificate issuer:       /CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
Certificate serial:       75FADBD83B1BBFCC2E6FD2FE111529A7A28B6113
Authority key identifier: C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37352e3132382e302f32302d3234203d3e203238313436.roa
Signing time:             Fri 08 Nov 2024 18:30:01 +0000
ROA not before:           Fri 08 Nov 2024 18:25:01 +0000
ROA not after:            Fri 07 Nov 2025 18:30:01 +0000
asID:                     28146
IP address blocks:        177.75.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 04:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fa:db:d8:3b:1b:bf:cc:2e:6f:d2:fe:11:15:29:a7:a2:8b:61:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
        Validity
            Not Before: Nov  8 18:25:01 2024 GMT
            Not After : Nov  7 18:30:01 2025 GMT
        Subject: CN=2B1FB25DD0DBF50F8126BD70C4B6E1EF1FFA5F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e6:b2:21:df:97:67:be:12:18:19:48:c8:d4:
                    f0:03:36:f3:39:00:9b:90:45:89:63:c0:88:f9:29:
                    d0:d3:c1:59:99:df:ae:f5:38:61:f3:af:b7:ee:c5:
                    66:c9:46:48:eb:5a:73:8b:13:f3:71:5e:45:97:33:
                    d3:45:63:d4:56:11:f0:d5:06:dc:c2:34:59:c3:ba:
                    d9:e8:37:1c:f2:db:13:cd:cc:30:25:b0:2d:f6:d7:
                    8b:e1:32:7e:a4:52:80:13:61:30:03:5c:ad:e9:12:
                    f0:d3:f8:e3:6f:e1:9e:26:d3:20:4a:a8:00:90:b9:
                    23:11:4e:ab:89:72:2e:66:68:9a:49:8a:82:4d:61:
                    ff:08:9c:65:4d:fc:63:92:15:cf:9b:f3:ad:57:76:
                    16:2f:f3:e1:ed:61:3d:7c:9d:0b:48:34:1e:3a:33:
                    8a:31:fe:41:88:f6:36:f8:35:b2:64:80:17:53:0a:
                    3b:3b:ab:8d:97:5b:bc:e9:f0:7f:8c:c7:26:70:2e:
                    df:4a:79:cd:30:96:d1:6d:f9:7f:d9:64:99:da:9d:
                    70:8e:20:1e:e5:cc:95:b1:0d:53:bf:7a:9e:64:48:
                    6e:5f:8c:e3:12:2d:96:76:8f:b6:b5:e3:6f:b2:cb:
                    a7:1f:08:12:ce:80:3c:ce:a7:96:f9:07:0a:6a:72:
                    71:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1F:B2:5D:D0:DB:F5:0F:81:26:BD:70:C4:B6:E1:EF:1F:FA:5F:9C
            X509v3 Authority Key Identifier:
                keyid:C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37352e3132382e302f32302d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d1:a0:84:6d:68:83:ab:b0:16:92:76:fc:cb:74:31:a1:1b:fe:
         b6:8b:52:05:36:b3:62:59:c4:09:54:91:52:01:0e:e8:42:12:
         1b:ad:62:3e:c4:a6:a7:ab:15:fa:e4:a4:fd:d6:81:e4:c8:c5:
         57:cf:17:89:38:7b:cd:4f:be:54:e5:8f:6b:25:44:41:1b:2f:
         28:ab:b5:0c:ab:de:0d:51:00:0d:e8:ce:b1:1a:5b:97:7b:35:
         dc:4b:17:49:d5:42:20:1b:47:f4:e2:63:55:40:9d:01:8c:30:
         6e:72:cb:e2:bc:8f:9d:10:d6:89:59:86:3a:37:82:33:03:b2:
         1b:6e:77:24:07:93:9d:54:77:1a:dd:29:2b:21:2c:d0:82:13:
         f3:19:c0:14:fa:f2:f1:a4:e1:05:13:70:39:70:8a:c4:bb:4e:
         85:e3:1e:11:be:ca:09:d1:b5:54:03:35:4b:ac:56:bc:12:0e:
         9d:bb:82:f3:53:e3:5f:9d:dd:d8:a6:0d:91:95:0b:31:51:8b:
         6c:73:d7:79:da:98:67:52:5f:44:16:3d:cf:3f:d4:ba:ee:d5:
         a1:a5:75:05:d0:3d:41:ca:5e:27:df:78:9f:21:83:20:0b:bc:
         2f:0e:ae:f0:e4:ba:76:7d:4a:ab:25:1c:6c:8e:e9:15:1f:03:
         2b:42:19:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:15 2025 by rpki-client