Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/3137372e32332e3130342e302f32322d3332203d3e203532393037.roa
File:                     3137372e32332e3130342e302f32322d3332203d3e203532393037.roa (raw, json)
Hash identifier:          TT80HnR8RJGRbi6rzGlIhGjkzzHeLAplso3xMyz2jng=
Subject key identifier:   8B:AA:6A:39:49:F0:67:A7:F0:C1:9B:25:88:75:CB:2C:3C:95:31:16
Certificate issuer:       /CN=8547D0C1A84725BCC8A05B725C22293DAC420C79
Certificate serial:       5E4E24A7955D0BE9CB44EC3C4A3289A613BD8351
Authority key identifier: 85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/3137372e32332e3130342e302f32322d3332203d3e203532393037.roa
Signing time:             Thu 06 Mar 2025 03:59:16 +0000
ROA not before:           Thu 06 Mar 2025 03:54:16 +0000
ROA not after:            Thu 05 Mar 2026 03:59:16 +0000
asID:                     52907
IP address blocks:        177.23.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.crl
                          rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4e:24:a7:95:5d:0b:e9:cb:44:ec:3c:4a:32:89:a6:13:bd:83:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8547D0C1A84725BCC8A05B725C22293DAC420C79
        Validity
            Not Before: Mar  6 03:54:16 2025 GMT
            Not After : Mar  5 03:59:16 2026 GMT
        Subject: CN=8BAA6A3949F067A7F0C19B258875CB2C3C953116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d1:ac:d5:8d:a4:92:41:7c:52:8a:ea:29:18:
                    9e:8a:f9:2f:4a:4e:04:59:2a:ad:cc:78:65:4f:e8:
                    06:76:cb:fa:e8:25:0a:63:c7:94:7d:25:d6:39:f9:
                    b8:52:48:0f:dd:45:ef:e9:e5:6a:b5:d0:72:65:46:
                    23:ae:c0:a4:bf:cd:34:71:81:cc:80:ad:b1:5a:8f:
                    87:02:ee:7a:74:f9:b0:5d:d0:1c:49:fc:7d:d2:4a:
                    f6:6f:13:a6:71:6b:f0:70:eb:09:1a:d4:ec:cd:2a:
                    a7:02:43:58:dc:31:86:9c:7c:21:8a:13:be:13:19:
                    bb:b1:6f:17:d1:ac:ae:2d:15:84:8c:b4:13:53:b2:
                    58:a1:e7:90:7b:ff:61:46:e0:b6:6e:cf:a4:84:5a:
                    99:81:67:bb:1b:c7:e5:85:6d:01:6b:74:20:52:38:
                    42:2a:0e:29:e3:a8:2b:dd:f2:9b:f6:ee:7d:b0:95:
                    a5:69:27:05:3d:e2:13:45:b8:33:a7:64:61:b9:cd:
                    8e:9c:3a:27:27:ee:32:19:a5:05:fa:6f:33:5a:32:
                    f1:c0:12:77:f6:fb:6c:f6:66:fb:63:ce:7a:2f:e0:
                    b2:4d:24:07:b4:97:9b:9a:9b:21:98:86:6f:0f:49:
                    9f:0d:dd:4d:c6:e6:2f:1a:cc:c7:21:ad:f7:5b:00:
                    a4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AA:6A:39:49:F0:67:A7:F0:C1:9B:25:88:75:CB:2C:3C:95:31:16
            X509v3 Authority Key Identifier:
                keyid:85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/3137372e32332e3130342e302f32322d3332203d3e203532393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:e2:1f:68:15:7b:b2:51:a2:33:54:0d:eb:d5:27:05:54:f9:
         66:f8:8f:9f:d3:11:dc:11:d7:3d:12:03:90:6c:3a:a2:82:5b:
         1d:98:78:82:eb:73:70:7f:50:f9:76:15:ec:91:2c:d7:89:61:
         81:98:91:2b:ff:5a:d9:4d:73:f7:7d:00:73:79:c1:90:5e:e1:
         27:a7:32:ec:b6:ed:c0:c8:6e:3c:44:b9:25:38:51:a0:48:68:
         49:72:05:a2:87:bf:a2:fb:85:2a:4f:b8:5e:23:8f:bf:b4:96:
         89:ab:18:0c:47:0f:2e:c0:95:b8:41:4b:27:4d:48:47:d6:76:
         de:11:a8:25:4f:2c:7a:3a:26:12:ed:48:fc:4c:02:80:a0:29:
         a3:d5:5d:be:cc:33:ba:f1:c8:85:73:54:d0:70:0d:12:09:cf:
         51:0d:a0:2c:6b:c8:f5:8c:41:ef:3a:97:6f:d1:4c:28:42:42:
         30:f4:d0:16:15:0d:9c:4f:63:d4:bf:24:b0:b2:5c:5c:cb:0c:
         e9:bf:a8:18:b5:ae:47:06:82:ba:01:7c:1d:da:40:a0:78:5e:
         35:81:46:c8:88:0f:38:e7:6f:e1:aa:4d:af:f9:47:f4:21:55:
         54:56:2a:29:e2:b4:f4:65:18:43:4c:a3:86:4b:c0:4d:61:2f:
         dd:97:91:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:50:22 2025 by rpki-client