Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3137372e3230302e34382e302f32302d3234203d3e203532373831.roa
File:                     3137372e3230302e34382e302f32302d3234203d3e203532373831.roa (raw, json)
Hash identifier:          IEvgQ6L0XT+jLQC33PvdvpzPJLPwVzeL4fYk1shZFKk=
Subject key identifier:   62:B4:A0:76:9C:5A:74:07:86:06:B5:BB:ED:14:F1:A1:DA:B7:9B:E9
Certificate issuer:       /CN=3A546F3625A8CE1F69122E8BD80769CC991FC593
Certificate serial:       2266689403B562FEED55F3C700D2299EEDFBD4AA
Authority key identifier: 3A:54:6F:36:25:A8:CE:1F:69:12:2E:8B:D8:07:69:CC:99:1F:C5:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A546F3625A8CE1F69122E8BD80769CC991FC593.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3137372e3230302e34382e302f32302d3234203d3e203532373831.roa
Signing time:             Thu 09 May 2024 18:21:33 +0000
ROA not before:           Thu 09 May 2024 18:16:33 +0000
ROA not after:            Thu 08 May 2025 18:21:33 +0000
asID:                     52781
IP address blocks:        177.200.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.crl
                          rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A546F3625A8CE1F69122E8BD80769CC991FC593.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 01:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:66:68:94:03:b5:62:fe:ed:55:f3:c7:00:d2:29:9e:ed:fb:d4:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A546F3625A8CE1F69122E8BD80769CC991FC593
        Validity
            Not Before: May  9 18:16:33 2024 GMT
            Not After : May  8 18:21:33 2025 GMT
        Subject: CN=62B4A0769C5A74078606B5BBED14F1A1DAB79BE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:73:68:83:66:4d:89:3c:e9:e9:dd:6c:b9:22:
                    64:25:3a:b9:02:26:6c:25:0f:d4:a9:ff:61:f4:ab:
                    b1:df:17:93:43:9c:a8:16:b1:ce:77:c5:04:47:b0:
                    c8:5d:fd:75:30:98:e1:b8:e6:9d:93:74:f5:60:d1:
                    5d:87:48:3f:d5:3f:c1:ed:9f:72:25:33:3c:df:03:
                    72:e6:8a:70:65:15:81:2c:45:93:a2:54:8c:51:cd:
                    7d:fd:8e:ac:33:81:ae:f2:91:fb:c5:31:f3:87:a9:
                    28:4b:f9:8a:6b:13:5c:9f:28:e0:f6:1f:50:b6:22:
                    96:2f:49:e3:d1:b2:70:39:aa:e4:ee:ca:98:f4:ec:
                    5f:26:e9:6e:64:50:dd:f9:be:c4:84:da:fc:1f:02:
                    5b:5f:50:18:77:ee:79:af:05:ba:cb:0f:61:56:03:
                    8b:19:4b:3f:91:a2:4b:9d:c6:9d:54:11:e3:f0:03:
                    77:15:83:0f:c0:8f:47:b2:44:ca:8f:f3:ef:12:ae:
                    4c:0c:ce:6f:39:53:cb:5d:05:1a:91:f8:7c:8a:77:
                    80:90:96:c6:4d:b6:da:bc:69:47:b5:b2:af:0d:08:
                    fe:a1:55:ba:f3:0a:fb:05:45:b9:10:74:c5:da:88:
                    6a:8e:bb:bb:36:51:9e:d6:4f:63:d5:ae:07:61:b7:
                    39:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B4:A0:76:9C:5A:74:07:86:06:B5:BB:ED:14:F1:A1:DA:B7:9B:E9
            X509v3 Authority Key Identifier:
                keyid:3A:54:6F:36:25:A8:CE:1F:69:12:2E:8B:D8:07:69:CC:99:1F:C5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A546F3625A8CE1F69122E8BD80769CC991FC593.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3137372e3230302e34382e302f32302d3234203d3e203532373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:28:5a:68:eb:4f:65:4a:89:32:20:9a:af:1a:da:db:e3:f0:
         80:3d:10:45:41:08:b5:d5:ff:d1:4e:93:04:03:21:a9:51:22:
         c6:e1:f3:6e:3e:5d:47:98:0f:c2:18:7c:64:18:0f:65:25:11:
         98:fd:21:f1:0a:13:7a:61:82:82:41:08:c0:7f:84:da:e6:50:
         be:14:ea:00:26:fb:7f:5e:2f:06:88:68:78:0a:83:04:08:ca:
         d1:47:c2:b3:21:67:79:65:4d:c5:ad:66:75:a2:8e:73:12:d3:
         8a:cc:c1:8a:ba:53:fe:f6:0b:f8:37:9c:fb:c7:3a:71:cd:7d:
         fa:02:38:d5:48:35:be:ea:bb:a3:84:6a:e5:8b:bf:0d:71:4e:
         8b:31:b8:7d:44:8d:45:bb:b9:f1:a7:f7:32:95:94:3c:4d:50:
         c2:de:ee:84:6a:b6:e8:0e:a1:c2:53:f4:cc:bf:47:f3:fb:a3:
         f5:d3:d6:8c:ce:fa:c9:23:e5:c6:05:b5:09:e4:24:0a:2c:00:
         9f:87:88:be:45:55:7a:57:50:d1:75:a4:5e:83:33:ee:98:d0:
         f8:2e:29:d4:a2:e9:3d:1e:79:2e:47:80:73:fb:33:02:88:59:
         3f:3c:68:2b:8a:a2:1a:cc:3c:ab:6f:76:60:09:f4:b7:0b:c9:
         fa:56:42:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:10 2025 by rpki-client