Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138382e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3138382e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          NbvNVnAmsg7twLmDPcDYjNk6MlP2oCLMfc4tdGmjk9U=
Subject key identifier:   86:B9:65:9D:BC:E9:A1:05:80:A4:E5:B9:54:D3:94:32:A9:26:9E:D2
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       1C439CCABDE7A0C704DBA84D900F8F725AF647D5
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138382e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 02 Dec 2024 04:42:33 +0000
ROA not before:           Mon 02 Dec 2024 04:37:33 +0000
ROA not after:            Mon 01 Dec 2025 04:42:33 +0000
asID:                     53038
IP address blocks:        177.154.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl
                          rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:43:9c:ca:bd:e7:a0:c7:04:db:a8:4d:90:0f:8f:72:5a:f6:47:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Dec  2 04:37:33 2024 GMT
            Not After : Dec  1 04:42:33 2025 GMT
        Subject: CN=86B9659DBCE9A10580A4E5B954D39432A9269ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:02:b0:b4:d7:b2:4c:53:23:67:5e:a7:ed:2d:
                    8a:fb:1a:02:63:25:3c:62:50:9c:40:d2:4f:e8:fa:
                    8c:d9:48:9e:04:b6:5b:55:ae:9e:09:b6:a2:e5:54:
                    b4:46:05:0e:f3:23:59:4c:c4:bf:c3:e7:4d:52:55:
                    59:a6:09:7c:10:f2:48:b4:9d:77:35:7e:b1:3d:d6:
                    bd:57:cc:04:e6:52:fa:9f:ae:fd:7d:0d:b8:8a:bc:
                    ae:b2:51:a1:b4:f1:91:6c:ac:14:1f:37:15:34:b2:
                    c0:de:b9:60:37:84:7e:68:72:81:69:55:0d:48:3b:
                    26:a2:16:8d:12:29:26:91:3d:17:2f:7a:92:97:cd:
                    ac:9f:5d:5c:cd:65:09:b4:75:53:52:9a:f8:14:2e:
                    64:27:03:2a:b4:a4:66:8e:f5:dd:43:00:fa:aa:97:
                    2e:0f:e7:01:a0:80:96:e9:47:80:94:5c:8c:49:3b:
                    fc:db:ee:cd:3b:cc:04:04:40:76:d6:ba:17:96:3a:
                    45:49:f7:f0:d6:f4:f4:21:ec:90:04:63:16:3b:ed:
                    57:e5:ca:26:5a:2c:cc:50:d4:ea:bf:05:7c:20:75:
                    11:4c:6d:f3:51:7a:b4:22:8a:17:f2:e6:77:f0:c3:
                    b8:a7:c9:79:7d:b5:fb:49:8c:48:57:f4:84:b7:e8:
                    1d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B9:65:9D:BC:E9:A1:05:80:A4:E5:B9:54:D3:94:32:A9:26:9E:D2
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138382e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:ec:cc:3a:26:0e:9a:fa:f8:dd:21:54:f7:ae:c0:9b:dc:94:
         23:e4:72:20:03:4b:95:c1:08:4c:6a:98:e0:ff:bd:34:1a:cb:
         10:5a:ed:f3:45:db:c0:a7:ed:5c:93:d0:f1:75:40:4c:c6:38:
         02:ff:29:81:19:33:18:a4:b4:34:02:65:25:d9:6e:5c:9a:97:
         94:fe:71:da:92:e8:f1:cb:ca:3d:9d:4c:65:3f:b4:81:17:c8:
         f7:d2:54:5c:ce:6a:bc:9b:ae:79:6b:83:39:e9:95:04:24:7d:
         2b:e7:ff:5f:1d:01:64:3f:58:00:bb:d4:fc:ca:57:7b:a0:d0:
         f4:c2:76:49:81:63:af:48:15:34:b0:18:7c:83:53:7b:d9:1b:
         58:da:05:7d:e0:0d:ca:de:84:c8:1f:9b:4a:49:f7:69:fe:63:
         62:32:3e:e6:b9:29:b9:43:3e:25:05:24:42:cd:3e:3d:e7:29:
         ff:60:9b:e2:4c:ba:59:52:c2:79:b0:02:d7:b8:fd:02:e3:1d:
         39:de:77:23:b1:20:9f:c3:01:4b:2d:cd:e9:f5:d8:82:ff:e1:
         ff:a0:f2:c6:d5:e1:d2:d3:3a:ea:14:9d:6a:ba:14:62:9c:e0:
         ca:5a:8e:76:9a:fa:3e:27:79:31:07:48:f4:95:d7:d7:b8:62:
         ab:8d:11:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:15:11 2025 by rpki-client