Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130322e302f32332d3233203d3e20323633333437.roa
File:                     3137372e32332e3130322e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          3/qXLxkfwAY2fQv20VDMtf3pfY1ReZZVHfZ3FcoeOtk=
Subject key identifier:   ED:DD:87:0D:26:B2:DF:20:60:83:B0:22:7C:A2:CE:52:2E:83:7B:E4
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       38060C1C066064CFCC4FBFB74A6A92C56DD37A9A
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130322e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 06 Mar 2025 18:28:49 +0000
ROA not before:           Thu 06 Mar 2025 18:23:49 +0000
ROA not after:            Thu 05 Mar 2026 18:28:49 +0000
asID:                     263347
IP address blocks:        177.23.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 21:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:06:0c:1c:06:60:64:cf:cc:4f:bf:b7:4a:6a:92:c5:6d:d3:7a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Mar  6 18:23:49 2025 GMT
            Not After : Mar  5 18:28:49 2026 GMT
        Subject: CN=EDDD870D26B2DF206083B0227CA2CE522E837BE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:01:04:f5:71:41:fd:0c:d3:d1:3b:57:40:5f:
                    11:95:81:1a:57:b9:cb:18:13:0a:50:ba:c7:99:d5:
                    67:df:2f:54:9f:3a:c4:2a:7a:7a:db:33:6f:c0:03:
                    c4:d2:b0:f1:6f:15:b4:be:3f:32:4a:de:8f:5d:fa:
                    3d:18:cb:82:9e:23:30:f9:13:d6:8d:09:f1:27:a1:
                    a4:28:b7:1f:00:0c:b4:52:95:ec:e4:ba:24:f8:c7:
                    02:cf:76:ab:50:6d:f7:a9:1d:3d:b6:90:6f:7b:2a:
                    0e:ce:d7:a2:aa:1c:d3:6d:62:eb:2f:fe:da:c1:f6:
                    7c:0b:ab:b7:31:df:d5:19:87:a0:ed:e3:13:cc:e0:
                    a5:80:13:62:f8:44:4d:c0:e5:da:ca:09:6b:d8:40:
                    67:b4:84:86:0c:78:0c:0d:0d:2a:fb:ba:96:f3:c9:
                    46:af:4f:69:13:0d:99:d7:1d:f4:c6:8d:52:ab:7e:
                    78:75:3c:40:28:06:de:8b:11:3b:5a:55:db:cd:6e:
                    78:df:6e:c6:a1:c4:93:82:36:a0:63:ab:76:f6:79:
                    76:d8:c6:9e:b9:77:33:4b:3d:03:b7:c0:96:cf:d5:
                    49:ef:5c:0e:d9:d6:54:2b:7a:ee:60:f1:75:a0:2d:
                    b9:5f:d6:e0:af:b7:cf:e2:93:20:01:b5:2f:66:73:
                    09:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DD:87:0D:26:B2:DF:20:60:83:B0:22:7C:A2:CE:52:2E:83:7B:E4
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130322e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:bb:e0:f6:e8:0b:e4:7e:fd:56:e3:b5:c8:ca:7a:57:6c:fe:
         8e:62:11:cd:f0:b1:c0:5a:ad:52:74:93:92:05:fd:95:38:e9:
         71:3d:f0:40:2c:b4:82:e7:ef:64:7a:2b:ea:58:c3:7b:6e:50:
         b2:3e:aa:71:2f:0f:c0:6a:36:26:e1:a3:ed:3e:9c:41:5c:45:
         54:c0:39:3c:e4:43:b9:19:73:b8:24:36:70:d0:97:e1:25:0c:
         cd:50:2c:a2:a4:db:d8:cf:5b:3b:8d:db:94:26:b0:7a:3d:14:
         6e:1b:26:4d:da:79:1f:f2:6e:0f:9e:94:e9:d7:de:ac:fd:33:
         81:e7:4e:c4:5e:68:91:e1:83:fc:bd:18:eb:8d:e6:9e:46:e9:
         ba:f9:06:ba:3e:2e:5e:0f:0a:d8:f9:c6:5a:e6:b1:87:2a:6d:
         17:b3:03:3f:26:e9:40:ee:9b:f0:51:f1:5b:16:7a:cf:b2:64:
         b3:0c:5a:c8:04:05:7c:86:0f:c7:4b:e5:09:72:03:e7:01:53:
         61:3c:40:6c:a3:8f:a7:f4:d2:08:97:5f:5d:0c:99:96:d2:4c:
         05:fb:2c:da:5a:ba:83:13:74:26:2f:8e:6e:70:46:b4:11:a7:
         b1:eb:dc:22:25:2c:2c:1d:48:b3:62:d1:d7:56:d4:d9:fe:2a:
         1d:33:56:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:52:01 2025 by rpki-client