Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/3137372e3132392e36362e302f32332d3234203d3e20323632333839.roa
File:                     3137372e3132392e36362e302f32332d3234203d3e20323632333839.roa (raw, json)
Hash identifier:          YGWYRLXvPbJzdz3kczKSlvd2VxATHHwmN+1PRF0Sufk=
Subject key identifier:   63:F5:0C:EE:FC:60:65:F9:89:AF:B5:FF:A4:33:6B:F5:C7:91:CD:E5
Certificate issuer:       /CN=0D544ED42C6259C03F729BAE35330B8BC76BC251
Certificate serial:       28200720F2CF5E14ABB6D0447CD55F74E9C43AFB
Authority key identifier: 0D:54:4E:D4:2C:62:59:C0:3F:72:9B:AE:35:33:0B:8B:C7:6B:C2:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/3137372e3132392e36362e302f32332d3234203d3e20323632333839.roa
Signing time:             Mon 04 Nov 2024 22:51:13 +0000
ROA not before:           Mon 04 Nov 2024 22:46:13 +0000
ROA not after:            Mon 03 Nov 2025 22:51:13 +0000
asID:                     262389
IP address blocks:        177.129.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.crl
                          rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 16:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:20:07:20:f2:cf:5e:14:ab:b6:d0:44:7c:d5:5f:74:e9:c4:3a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D544ED42C6259C03F729BAE35330B8BC76BC251
        Validity
            Not Before: Nov  4 22:46:13 2024 GMT
            Not After : Nov  3 22:51:13 2025 GMT
        Subject: CN=63F50CEEFC6065F989AFB5FFA4336BF5C791CDE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:75:ef:8b:0b:f0:cd:ac:03:df:d8:b6:b3:e7:
                    b9:4f:c4:cb:b5:84:8c:83:4b:4d:1a:75:70:6f:bf:
                    87:f5:9a:cc:3a:33:2f:44:f2:6d:15:d9:51:a8:e9:
                    ac:db:08:be:ff:0a:f9:e5:a1:dd:04:88:58:fa:ec:
                    31:76:7a:06:91:33:96:45:95:72:1f:6b:bc:72:80:
                    c9:8f:0a:7a:90:cb:c9:dc:22:e0:72:5f:7e:37:35:
                    63:28:9e:4f:12:37:a3:0f:b5:3d:bc:17:53:b8:78:
                    47:07:e8:7c:b1:a1:32:1c:31:19:98:32:b5:74:f2:
                    61:64:c9:c1:73:b1:bf:11:72:b3:23:fd:c9:8d:57:
                    6f:6c:5e:58:ba:8a:e8:8e:e3:93:bb:79:70:4c:f1:
                    4c:d3:4b:36:9b:ba:87:0c:5a:d0:d7:0a:96:eb:77:
                    0e:86:ff:7b:e6:c2:b5:97:8f:c6:88:c7:00:aa:25:
                    43:0f:33:f7:77:82:94:5e:b0:4e:8d:17:23:96:1f:
                    b3:51:34:6d:f3:e0:ef:10:10:c8:3e:c8:17:e1:ff:
                    e2:c2:77:db:b1:df:82:7c:5f:b8:d5:73:1a:6c:18:
                    ba:a1:66:60:36:34:5d:a0:7c:a9:ce:17:9b:86:ff:
                    ba:08:36:0b:fb:d5:71:3b:6a:2a:b5:5d:2d:1c:69:
                    eb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F5:0C:EE:FC:60:65:F9:89:AF:B5:FF:A4:33:6B:F5:C7:91:CD:E5
            X509v3 Authority Key Identifier:
                keyid:0D:54:4E:D4:2C:62:59:C0:3F:72:9B:AE:35:33:0B:8B:C7:6B:C2:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/3137372e3132392e36362e302f32332d3234203d3e20323632333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:3a:0e:09:f1:6d:4b:48:cd:f0:53:d7:9c:f8:4a:35:1d:3f:
         94:22:fd:6d:1d:97:55:f5:f7:80:4b:dc:e0:0c:e7:b9:d6:12:
         b3:01:81:18:2b:a5:68:68:8c:70:ef:b8:b9:18:45:47:01:b2:
         cb:43:4d:35:69:fb:a6:d2:89:46:98:aa:b9:5d:8e:ca:d7:f3:
         98:33:a4:47:61:af:2d:f6:f0:26:12:f0:3b:b4:4a:7c:9e:7d:
         7f:7c:f4:04:6a:fe:9b:3d:08:33:1a:c3:8c:1c:03:7a:98:92:
         ff:a5:f9:d7:50:cc:4f:8a:8c:ee:94:3a:e8:cc:ce:63:1b:b8:
         50:17:a1:7e:7d:c0:cc:98:67:22:60:79:d2:a3:8d:b4:3c:05:
         5f:44:b4:c0:5c:7b:b0:11:41:a1:47:17:e7:b6:fd:89:a9:18:
         82:b9:42:62:d6:04:6f:68:80:c5:30:87:17:d3:29:74:c2:1c:
         6f:03:fb:2c:1d:22:90:c6:7d:f9:ed:ae:0c:1c:2d:2e:18:41:
         87:29:a3:bd:41:fc:29:6e:9d:30:87:a1:b7:78:ee:06:b1:7e:
         5e:bd:05:f7:b8:6b:5e:01:ee:ab:bc:7f:20:8e:93:d6:bf:e4:
         9c:b2:30:3e:69:44:2e:84:28:0b:f1:3b:45:6c:06:1d:52:24:
         f5:26:4f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:30:32 2025 by rpki-client