Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137372e3132362e302e302f32342d3332203d3e203232333831.roa
File:                     3137372e3132362e302e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          63fUq4V+jHAJV9F5lEeY2cd768p70uoBFfWpmgi2hsg=
Subject key identifier:   D4:30:53:8A:05:E7:BD:67:BB:27:6C:33:0A:5F:A8:4B:43:A7:9D:B8
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       4494184B7CB4E74D79916CB88B73626EB2AB0716
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137372e3132362e302e302f32342d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:09:52 +0000
ROA not before:           Fri 07 Mar 2025 19:04:52 +0000
ROA not after:            Fri 06 Mar 2026 19:09:52 +0000
asID:                     22381
IP address blocks:        177.126.0.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 10:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:94:18:4b:7c:b4:e7:4d:79:91:6c:b8:8b:73:62:6e:b2:ab:07:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:04:52 2025 GMT
            Not After : Mar  6 19:09:52 2026 GMT
        Subject: CN=D430538A05E7BD67BB276C330A5FA84B43A79DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b0:b0:d6:64:fb:e8:d9:53:47:c9:8a:f5:64:
                    84:fc:83:5d:dd:87:eb:67:f9:c9:f3:54:89:c6:47:
                    9d:97:40:ac:88:80:ba:a3:db:aa:f2:d1:7d:60:85:
                    a6:7d:53:56:5b:dd:16:9e:7c:c4:02:da:7d:df:24:
                    0e:aa:bf:7c:9c:f4:f4:89:e1:fd:fd:bf:c7:90:40:
                    58:79:de:9d:48:67:ab:51:64:d0:bc:a2:8a:cc:4f:
                    c0:fa:e1:61:34:9e:64:67:6f:35:09:65:8b:d9:1e:
                    6d:6e:c0:85:2b:ad:88:7a:4f:4f:93:6f:b8:8d:ef:
                    b6:de:66:dd:49:8d:8e:28:35:6b:f7:88:3f:a3:2d:
                    9e:67:29:f0:1e:7e:ee:ea:1f:9e:24:b4:2b:70:22:
                    29:21:2b:c0:52:5c:1a:e0:3d:95:48:43:9e:64:0d:
                    36:e9:0d:1e:bd:f4:30:6f:41:bf:4d:4a:3a:9a:e5:
                    48:7b:c3:95:22:d3:e7:b0:38:e4:78:33:cd:1d:a5:
                    5e:8d:7a:9d:6c:4d:a9:87:aa:e0:17:54:6e:8d:1a:
                    cf:32:44:8a:a3:12:7b:29:98:ea:c8:e1:df:4c:69:
                    d6:41:30:6a:7c:85:54:58:7a:af:2f:f5:b1:9a:7b:
                    fe:a7:58:f9:15:28:fd:ae:bb:9c:32:f2:42:15:fa:
                    17:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:30:53:8A:05:E7:BD:67:BB:27:6C:33:0A:5F:A8:4B:43:A7:9D:B8
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137372e3132362e302e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:9c:90:e7:11:48:4d:69:56:7b:e8:a3:98:94:8e:f7:8c:c0:
         d4:50:1a:13:58:77:d6:5b:6f:ec:81:42:6f:d3:44:fd:57:7a:
         44:71:5b:e0:9d:c6:9a:2c:5d:10:2b:cf:f2:b5:7a:57:9e:ad:
         7a:4a:db:a6:b4:40:9f:0c:77:c7:7d:70:bb:48:31:a6:3d:03:
         06:16:fc:57:e8:49:f4:a9:33:0d:18:c0:58:ed:e4:1f:ee:0e:
         d7:59:9c:94:2e:02:fd:41:c9:65:28:5c:78:f3:da:e1:1e:7b:
         03:46:44:12:1d:27:fb:2e:8e:1d:fd:a4:68:88:fc:42:9a:10:
         23:65:4a:37:47:96:c2:18:b2:f1:a8:c6:79:53:de:83:fe:81:
         e2:6e:96:04:82:01:39:1c:f9:a2:c4:21:92:d5:be:31:41:49:
         97:53:7c:f1:de:5f:24:a0:10:b8:8b:b0:d3:c6:30:b7:e2:f2:
         54:40:da:f4:6f:5b:45:7a:cf:db:ba:a2:47:55:71:ca:50:c2:
         a9:59:f1:69:dc:7a:c1:96:68:51:4a:a6:e7:84:1d:ff:bb:2a:
         de:53:30:a4:7f:9e:c9:6e:e3:2b:47:69:49:17:42:e4:6a:b4:
         ff:d0:4d:f7:02:e9:20:67:84:9f:de:19:33:d1:cb:58:48:9e:
         d2:1d:f1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:34:36 2025 by rpki-client