Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37322e302f32342d3234203d3e203532393737.roa
File:                     3137372e33392e37322e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          82HyQYvjkdCbBLkRbI3O59qLOuYqBuLBpdHYZQbbb7w=
Subject key identifier:   8A:EE:D4:32:14:52:A5:AD:8F:CA:52:D0:2D:F8:81:C5:B9:B8:7E:78
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       1870442A17DD25F1735481A34419061C8AAAD154
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37322e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:05 +0000
ROA not before:           Wed 05 Mar 2025 18:55:05 +0000
ROA not after:            Wed 04 Mar 2026 19:00:05 +0000
asID:                     52977
IP address blocks:        177.39.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 06:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:70:44:2a:17:dd:25:f1:73:54:81:a3:44:19:06:1c:8a:aa:d1:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:05 2025 GMT
            Not After : Mar  4 19:00:05 2026 GMT
        Subject: CN=8AEED4321452A5AD8FCA52D02DF881C5B9B87E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5d:1f:05:a9:6b:bf:73:04:09:b7:ac:81:30:
                    64:e9:78:bc:6e:8c:1f:c0:72:81:d5:7f:25:5b:a0:
                    10:77:6e:0b:5e:9e:72:97:91:78:cc:2c:ee:48:82:
                    21:34:9d:91:73:f8:9c:61:ea:80:8b:75:77:0c:52:
                    8f:56:04:95:24:8b:ff:d0:3e:27:91:61:e9:ee:d7:
                    7d:0d:29:61:b8:69:4d:d6:c9:d0:8e:0c:b5:b3:69:
                    85:49:03:8e:95:7a:ac:38:2f:6b:ca:e9:ca:8f:c2:
                    fd:b5:39:03:fe:01:25:f1:17:d2:75:50:11:73:f4:
                    59:fb:dd:99:ac:23:29:4e:81:4e:fd:c0:6c:99:a1:
                    ca:fd:e7:e4:c9:24:d9:51:85:6e:4b:fc:4b:8c:0c:
                    3f:71:1b:1b:af:39:3c:2a:81:ad:03:d5:5c:97:2e:
                    8d:d7:bb:1c:dd:02:dd:e8:ba:27:1c:67:9e:16:b9:
                    ff:1c:5f:44:c3:b2:91:7c:df:c6:25:85:c7:06:de:
                    37:48:32:d4:a3:2d:6c:fd:27:2a:f0:c5:ff:23:d8:
                    ba:1a:94:c3:14:23:97:53:a5:e5:9f:60:3c:06:0a:
                    95:d7:e6:39:b5:b9:f8:8b:41:90:bc:2b:94:09:f7:
                    f3:da:93:61:9b:94:3c:15:57:35:b4:4c:41:87:dd:
                    a6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EE:D4:32:14:52:A5:AD:8F:CA:52:D0:2D:F8:81:C5:B9:B8:7E:78
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37322e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:56:ca:a5:f9:c7:18:e2:cf:4d:d8:bc:8d:09:98:3e:2d:ff:
         fa:93:11:48:09:b5:47:6a:00:4d:43:a4:e6:ea:07:7e:12:68:
         44:79:2b:e3:e7:27:26:3d:b3:8a:ae:11:67:f9:f5:8f:94:ff:
         04:4c:23:5b:9a:0f:5e:77:73:f7:fd:4a:d9:a6:1c:6a:08:e8:
         5c:cf:f1:3a:30:2e:5d:0f:71:65:72:83:49:16:48:2f:45:22:
         e8:82:f2:5d:b9:3d:60:f8:0f:f0:d7:1f:a4:d7:46:a7:67:2c:
         65:b0:79:ae:03:da:87:ad:ae:56:79:3f:29:3a:b9:8b:67:13:
         43:7a:71:c2:de:a5:ac:03:3b:d1:3d:35:21:83:2e:84:cb:0b:
         c1:78:cc:f8:3e:fb:93:9e:1c:08:f7:4f:f9:d4:c5:1b:a2:e6:
         d1:89:a8:5f:d5:83:bc:8a:8b:da:69:29:e3:14:01:9a:1f:3a:
         3c:a1:56:19:b9:e7:6a:51:f6:d8:11:30:93:e6:ef:76:75:f4:
         36:fd:b4:23:d0:1d:b3:a8:ba:38:2f:dd:ec:d0:ac:7d:bc:24:
         a3:b6:7b:0e:50:36:69:dc:dc:a6:63:2d:a0:a2:5a:8b:a0:11:
         d6:02:98:92:99:24:e9:3f:aa:0e:2a:13:f9:e3:e2:4c:b0:4d:
         b3:b9:3c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:56 2025 by rpki-client