Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/3230312e37372e38302e302f32302d3230203d3e203238363436.roa
File:                     3230312e37372e38302e302f32302d3230203d3e203238363436.roa (raw, json)
Hash identifier:          +lzqD0HfUyQs9j4fiswKUCmgK6zHSfR0XgQkQhk3m2k=
Subject key identifier:   26:3B:D0:7A:78:F0:50:28:68:E0:51:46:B3:BC:F1:6B:CC:2F:AB:54
Certificate issuer:       /CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
Certificate serial:       35F2118EBE524E502AB7077B2105C91A86C0A132
Authority key identifier: 8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/3230312e37372e38302e302f32302d3230203d3e203238363436.roa
Signing time:             Thu 06 Mar 2025 11:33:11 +0000
ROA not before:           Thu 06 Mar 2025 11:28:11 +0000
ROA not after:            Thu 05 Mar 2026 11:33:11 +0000
asID:                     28646
IP address blocks:        201.77.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl
                          rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 17:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f2:11:8e:be:52:4e:50:2a:b7:07:7b:21:05:c9:1a:86:c0:a1:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
        Validity
            Not Before: Mar  6 11:28:11 2025 GMT
            Not After : Mar  5 11:33:11 2026 GMT
        Subject: CN=263BD07A78F0502868E05146B3BCF16BCC2FAB54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:c1:19:30:23:63:ae:74:48:d9:46:39:df:
                    15:1e:e7:a5:df:e2:0f:c2:65:79:0d:4a:7e:76:58:
                    ef:bf:64:7c:be:7d:f2:64:40:31:ae:48:52:1f:f6:
                    4c:fd:ba:9f:36:3b:0b:51:28:c9:ee:a1:f4:67:8b:
                    2b:5c:db:af:9a:4c:1b:53:76:14:cd:c8:5e:9f:c3:
                    72:27:8e:8a:3c:d3:77:53:75:f2:30:36:b0:9e:26:
                    b7:bb:ae:7d:98:ff:9b:6d:e9:5f:0f:4c:79:f8:d3:
                    80:fc:47:b6:7e:a8:85:2c:b1:dc:0a:c6:e6:60:8e:
                    fa:42:e3:47:ea:3c:2c:e4:2e:97:85:de:30:2c:50:
                    aa:df:ee:01:25:7f:62:cf:16:b4:b9:5b:f8:1b:ae:
                    95:7a:8b:51:a4:72:67:f6:48:1e:0c:2d:90:4e:d9:
                    0f:ff:8d:7f:53:a3:6f:a8:ee:6f:9d:03:b3:52:d2:
                    f9:e4:b6:fb:ac:8a:74:64:2b:34:75:62:99:01:81:
                    75:a9:8b:4e:b9:4a:68:c2:ea:bb:94:db:45:53:f3:
                    c2:0a:62:c8:8b:f3:6d:e1:8d:dc:8f:c6:eb:ff:88:
                    da:59:27:e2:d5:c5:93:0c:8c:68:d4:cc:e7:f6:91:
                    ec:0f:d3:87:cc:ba:4f:86:66:3d:af:82:94:41:8c:
                    8e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3B:D0:7A:78:F0:50:28:68:E0:51:46:B3:BC:F1:6B:CC:2F:AB:54
            X509v3 Authority Key Identifier:
                keyid:8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/3230312e37372e38302e302f32302d3230203d3e203238363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:00:32:86:37:22:6b:89:03:ea:ee:95:5a:cc:2e:7e:de:69:
         8e:e2:1b:c8:9f:26:a7:35:08:68:c0:18:18:80:a7:48:2e:f5:
         2e:68:65:35:d6:7e:9f:a1:88:99:38:d8:2d:bb:0f:db:22:45:
         d7:7a:20:6f:fe:32:51:36:b7:3f:93:a3:7d:b1:aa:e6:2a:eb:
         d5:db:c2:8d:7d:5a:f1:8e:c0:6c:3e:2c:c2:31:51:ab:da:31:
         4b:51:d2:cf:c1:2d:4f:b9:52:cc:a8:77:c1:de:bb:a2:57:86:
         c7:1d:86:ec:d3:bc:f8:68:9c:7f:b2:c8:0e:a7:8a:02:fa:7b:
         9a:7e:a5:90:e1:3f:2b:b4:27:39:4e:1e:da:dd:9a:cd:d8:71:
         c6:27:f0:f5:ef:4e:78:9b:a0:0b:49:e5:ec:c5:1d:e9:2d:39:
         8a:0e:85:e4:0e:e7:2d:fd:7b:11:6b:f8:b6:04:f3:ca:84:37:
         7a:a0:38:f8:4f:da:fe:b2:9c:8c:f4:5a:51:2c:09:4b:3d:9f:
         28:28:e6:5e:84:ee:a9:24:ee:30:a1:b4:d4:eb:ab:e7:b1:b8:
         5c:db:04:d9:07:f0:5e:56:80:99:97:8c:e0:61:12:9f:07:19:
         2a:d7:59:8b:5d:37:a2:39:f4:2e:b4:46:59:0a:e6:2e:55:39:
         47:db:ad:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:44:48 2025 by rpki-client