Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137372e3132362e372e302f32342d3332203d3e203232333831.roa
File:                     3137372e3132362e372e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          qI6r3auWtFC3pF8zHljvFtd9yReUD99oUZAXfBm2xio=
Subject key identifier:   D1:FB:4C:06:9F:10:67:60:C1:8D:80:57:54:6E:53:61:C1:9D:A1:40
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       42056A7CF5C1908E337D7BC69020A5C9C01723C7
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137372e3132362e372e302f32342d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:09:26 +0000
ROA not before:           Fri 07 Mar 2025 19:04:26 +0000
ROA not after:            Fri 06 Mar 2026 19:09:26 +0000
asID:                     22381
IP address blocks:        177.126.7.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 10:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:05:6a:7c:f5:c1:90:8e:33:7d:7b:c6:90:20:a5:c9:c0:17:23:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:04:26 2025 GMT
            Not After : Mar  6 19:09:26 2026 GMT
        Subject: CN=D1FB4C069F106760C18D8057546E5361C19DA140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:78:17:31:bc:26:68:58:5f:5f:1f:43:a0:
                    75:c4:0c:a4:a8:d5:be:3c:a0:51:d6:d8:5a:d6:8a:
                    a8:59:e8:f9:78:24:b3:f2:9a:d6:3d:ca:f7:09:88:
                    f7:1c:b5:43:86:5c:c0:ed:4e:10:35:25:3e:69:af:
                    6f:ae:f1:c0:5b:22:c2:1e:ec:8c:83:e9:41:0f:bf:
                    a1:de:9a:95:aa:dc:81:07:00:4d:d7:c0:f9:b8:0d:
                    46:c8:cc:4f:f9:f3:c7:bd:b7:2d:9c:89:6a:56:c6:
                    96:ef:8f:bd:0f:85:e6:2c:d5:8b:fb:f7:37:4d:ac:
                    03:01:5d:cb:b6:99:73:47:f1:f4:a0:a5:f0:8f:bf:
                    e6:bb:07:ed:e6:3b:03:72:33:4c:ec:ae:bc:5b:56:
                    86:be:af:40:83:2e:de:b6:e3:d3:fd:fb:90:d9:d4:
                    ba:48:c2:12:0d:05:bd:a1:41:5a:6e:7e:b6:e6:32:
                    40:7e:d7:23:20:5c:54:59:46:48:20:98:61:8a:d4:
                    9b:3d:5f:e6:91:a0:db:db:ca:5f:0a:55:69:5d:d7:
                    ae:c7:6f:fd:f9:b2:35:58:ce:51:28:bd:15:88:98:
                    29:47:2c:03:6b:2a:3e:62:5a:31:db:f1:e6:fc:2c:
                    b1:04:3a:7c:ad:92:3e:52:2e:57:36:61:33:d7:9b:
                    2c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FB:4C:06:9F:10:67:60:C1:8D:80:57:54:6E:53:61:C1:9D:A1:40
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137372e3132362e372e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:cd:b2:7c:5e:ed:40:de:e3:04:d6:df:5c:7f:0e:9f:1b:96:
         0d:40:fd:b6:da:96:4d:89:e7:a6:5f:11:9c:45:1e:36:09:e9:
         a8:52:6b:94:0b:43:64:e9:5e:77:60:d6:d9:b8:4e:13:1d:9e:
         13:1a:5a:6e:39:79:20:ba:be:f2:82:47:35:56:2b:4e:8c:f2:
         6b:6b:63:f8:00:c9:01:71:c5:d9:ef:c1:07:39:17:34:8f:a5:
         5a:1b:c9:60:f6:37:cf:c9:67:12:d3:c2:8f:a4:da:99:dc:5f:
         64:79:7c:ac:9e:fb:57:8a:2a:b5:ae:8c:be:a2:99:7b:d0:f7:
         af:e1:0b:68:35:f9:4d:d6:18:12:ff:9d:3e:31:00:28:be:35:
         bd:f4:95:21:da:7a:e1:ae:62:66:ba:c9:ba:52:0c:09:24:25:
         f8:00:af:90:49:df:c1:2e:24:a3:23:51:38:56:01:33:f7:4d:
         77:48:9d:b3:97:93:41:be:f1:3b:3e:36:66:ec:fb:93:70:2d:
         6b:73:1f:c4:9e:93:03:19:ab:b9:68:84:78:1e:1e:a3:c0:33:
         76:8b:b8:3b:b4:2d:a9:1e:b0:5b:e6:48:47:d7:aa:bb:6b:75:
         7e:36:6c:10:b7:bf:c6:96:47:59:a2:16:2a:75:ce:bf:f8:a9:
         80:3b:9c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:33:36 2025 by rpki-client