Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e3130302e302f32332d3233203d3e20323633363038.roa
File:                     3137372e3133362e3130302e302f32332d3233203d3e20323633363038.roa (raw, json)
Hash identifier:          mJYhO8UbHL4vujh+xHOxESDaU9/9DKh2wU2sbZ8P7yQ=
Subject key identifier:   A7:AC:15:A5:3E:50:B9:8E:A3:F3:D3:FC:8C:FE:E2:A6:41:A1:E2:EA
Certificate issuer:       /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial:       0B2B8B5299B496EB03D43AE4D0986F547CB07D26
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e3130302e302f32332d3233203d3e20323633363038.roa
Signing time:             Mon 23 Dec 2024 13:19:17 +0000
ROA not before:           Mon 23 Dec 2024 13:14:17 +0000
ROA not after:            Mon 22 Dec 2025 13:19:17 +0000
asID:                     263608
IP address blocks:        177.136.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl
                          rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 23:08:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2b:8b:52:99:b4:96:eb:03:d4:3a:e4:d0:98:6f:54:7c:b0:7d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
        Validity
            Not Before: Dec 23 13:14:17 2024 GMT
            Not After : Dec 22 13:19:17 2025 GMT
        Subject: CN=A7AC15A53E50B98EA3F3D3FC8CFEE2A641A1E2EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:66:bd:db:10:21:3a:29:b5:0d:07:56:19:
                    9d:d6:f0:9c:98:9c:55:e5:ef:80:f7:fe:c0:f9:7b:
                    82:51:13:5c:97:a7:e4:37:9a:69:80:17:4c:48:e3:
                    10:19:b9:9f:52:53:b3:78:2e:86:84:6d:ed:a0:f3:
                    bb:4b:06:b0:82:2c:5f:f9:1a:5b:b9:ad:bc:8f:6c:
                    4f:41:b8:c3:64:a7:a8:e3:60:d4:a7:28:10:83:9b:
                    b3:33:a3:6c:90:46:65:14:a8:9c:6d:30:4f:59:9c:
                    70:11:13:61:0a:7c:4e:cf:26:0b:ee:5f:a1:3f:87:
                    d7:74:de:cc:f7:4a:51:f0:bc:a2:12:52:9c:ed:44:
                    fd:cf:61:59:41:e0:8d:66:f8:5c:ed:f4:26:a3:d8:
                    92:f2:53:db:89:44:3e:75:46:66:c9:28:2a:5a:62:
                    10:b6:3e:91:ae:df:8c:30:ee:3a:94:8d:6c:74:c6:
                    e9:9a:78:b2:49:69:e3:04:e4:77:7c:ea:52:85:71:
                    52:b4:e7:25:95:d7:90:1f:86:87:d5:2c:b1:0c:81:
                    52:d3:99:48:12:68:5d:4f:a7:38:a9:28:93:55:4d:
                    f0:15:2a:fc:15:0d:ad:56:50:54:5b:37:31:f5:f8:
                    26:6d:96:ad:cb:ac:5f:5c:19:34:03:67:bf:dd:03:
                    9e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AC:15:A5:3E:50:B9:8E:A3:F3:D3:FC:8C:FE:E2:A6:41:A1:E2:EA
            X509v3 Authority Key Identifier:
                keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e3130302e302f32332d3233203d3e20323633363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:ec:1b:dd:47:f5:2f:74:1f:a5:2e:fa:d7:9f:c4:de:04:29:
         0e:a7:97:5f:f8:27:a9:86:5a:0e:52:2d:e5:b9:76:a6:00:83:
         78:01:fe:63:40:04:a0:95:49:aa:df:83:92:74:22:e8:5a:e8:
         59:b9:c1:93:a4:5d:c3:79:44:06:26:7a:05:2a:81:5b:5b:47:
         b4:f8:8e:73:32:0a:bc:da:1e:50:d4:b2:22:48:b5:04:f7:bc:
         23:bb:c2:16:4a:e8:c6:17:f0:99:46:8a:87:75:74:ff:4e:81:
         b2:91:6e:28:a6:36:93:25:92:0d:44:ab:80:fe:16:df:67:ab:
         e8:90:75:e3:53:fb:2a:d2:e3:b9:4a:25:ef:6c:e5:72:4b:8d:
         3f:cc:ed:6d:18:23:30:01:18:e6:58:34:31:2e:35:fa:17:5e:
         3f:1a:54:93:27:0e:2a:1c:c6:18:ff:96:df:c8:60:8d:46:68:
         08:8e:c1:e3:7f:3b:98:e3:9e:1b:79:b1:e9:74:17:df:cc:6f:
         53:39:30:aa:9c:74:20:b2:6e:72:b3:c2:8f:7d:b6:c0:09:00:
         06:48:28:c7:51:4f:6d:f5:d1:be:eb:65:00:6d:d8:17:af:cb:
         9a:a5:e7:d8:a8:0a:a3:90:ba:13:26:eb:4c:1c:63:43:ce:12:
         d5:58:f1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:32:32 2025 by rpki-client