Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/3137372e33392e3130342e302f32322d3234203d3e20323638323030.roa
File:                     3137372e33392e3130342e302f32322d3234203d3e20323638323030.roa (raw, json)
Hash identifier:          tYmZqlt3Aste8xbk+MjlrYWkaJ5LCljIjL27j9wCkGU=
Subject key identifier:   F1:08:D4:D0:D3:BB:DD:3B:10:25:F2:6D:6B:DD:A8:3C:3C:D3:34:87
Certificate issuer:       /CN=83C1DD6482FD32CE6CB494B03457BD659437962E
Certificate serial:       18A5CABF562EB6488347C65F1316CDD587D17664
Authority key identifier: 83:C1:DD:64:82:FD:32:CE:6C:B4:94:B0:34:57:BD:65:94:37:96:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C1DD6482FD32CE6CB494B03457BD659437962E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/3137372e33392e3130342e302f32322d3234203d3e20323638323030.roa
Signing time:             Wed 05 Mar 2025 19:05:57 +0000
ROA not before:           Wed 05 Mar 2025 19:00:57 +0000
ROA not after:            Wed 04 Mar 2026 19:05:57 +0000
asID:                     268200
IP address blocks:        177.39.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/83C1DD6482FD32CE6CB494B03457BD659437962E.crl
                          rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/83C1DD6482FD32CE6CB494B03457BD659437962E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C1DD6482FD32CE6CB494B03457BD659437962E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 17:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a5:ca:bf:56:2e:b6:48:83:47:c6:5f:13:16:cd:d5:87:d1:76:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83C1DD6482FD32CE6CB494B03457BD659437962E
        Validity
            Not Before: Mar  5 19:00:57 2025 GMT
            Not After : Mar  4 19:05:57 2026 GMT
        Subject: CN=F108D4D0D3BBDD3B1025F26D6BDDA83C3CD33487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e9:15:b7:50:bc:1e:f2:66:3e:94:c2:ed:1a:
                    4b:7d:c9:3f:fa:b0:18:34:48:7c:8d:62:6b:e4:6e:
                    03:00:21:f5:86:37:20:be:58:56:9d:3a:c9:4c:03:
                    e6:9f:2e:96:9e:97:3b:58:a9:ec:ce:cf:25:9c:53:
                    2c:76:60:2b:f2:b4:e3:1a:90:ac:c7:a4:4b:24:6e:
                    64:c5:91:83:22:09:75:df:eb:16:55:18:5c:55:e4:
                    2c:1f:88:b6:49:f0:27:7f:94:bf:17:4f:2c:9b:7d:
                    51:c5:a1:6a:9f:0e:55:ba:64:5f:a9:98:a1:2d:2a:
                    86:eb:8c:20:f8:b0:90:b4:c3:79:95:2a:b2:9c:bd:
                    9b:18:da:20:93:82:ae:dd:ec:25:2a:ab:7d:1b:d6:
                    5f:c8:25:79:b1:58:23:31:27:58:91:9e:b3:25:e0:
                    f8:e5:b8:e0:31:c8:70:e1:9b:5e:56:57:a4:23:dd:
                    64:7d:94:ec:c0:c8:7e:04:55:06:2f:72:73:19:42:
                    40:d1:f7:67:13:fa:b9:87:7b:29:75:aa:07:9c:c8:
                    64:d3:50:e8:2b:e7:5a:35:d2:bf:a4:d1:bf:48:59:
                    4c:c8:b2:7d:aa:1f:a0:15:5d:7a:de:8b:7f:73:5f:
                    21:5f:4e:a2:17:2a:70:9e:9e:b0:bf:a7:bf:2e:b5:
                    16:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:08:D4:D0:D3:BB:DD:3B:10:25:F2:6D:6B:DD:A8:3C:3C:D3:34:87
            X509v3 Authority Key Identifier:
                keyid:83:C1:DD:64:82:FD:32:CE:6C:B4:94:B0:34:57:BD:65:94:37:96:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/83C1DD6482FD32CE6CB494B03457BD659437962E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C1DD6482FD32CE6CB494B03457BD659437962E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/3137372e33392e3130342e302f32322d3234203d3e20323638323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:e7:14:25:c5:5d:66:60:7c:9a:4c:e6:11:73:7d:e1:a0:fc:
         76:d9:54:e4:1e:59:ec:d5:ec:8b:82:fd:02:f2:ca:3a:ee:51:
         5a:bb:a3:04:7f:a0:45:e6:71:2d:27:95:bd:03:e2:3c:96:42:
         5a:89:62:dd:47:d8:92:80:93:c6:a6:12:c8:2e:23:25:bb:cb:
         5c:0c:6c:7e:7f:cc:a9:65:9a:8b:b3:00:72:96:29:d3:72:d1:
         13:eb:61:64:dc:bb:e3:28:46:0d:f9:37:39:24:7b:d2:87:99:
         a4:49:c6:9b:b7:d5:24:93:25:bb:5c:f9:24:9d:4b:5e:d2:a0:
         95:1f:fa:92:89:98:ba:13:56:3f:d4:97:ff:56:d5:10:fe:d7:
         3d:14:99:94:bd:42:d6:a7:71:44:d6:9b:96:27:f6:4a:a2:74:
         6f:8c:fe:cd:21:a8:54:5e:a8:a4:c0:e1:13:d9:7e:6a:20:11:
         bb:51:20:6b:f3:1e:86:84:51:65:02:48:3b:6f:01:72:f9:29:
         7b:dd:43:1b:b3:0e:29:1d:8e:85:16:16:49:e3:21:73:4c:36:
         48:30:85:30:30:08:2e:d5:66:f8:7d:3c:cd:14:1c:27:a4:c4:
         51:41:dd:5e:a8:ac:c7:84:49:2e:71:04:94:d3:ed:cd:38:ff:
         b5:6c:64:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:39:09 2025 by rpki-client