Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/3137372e32332e3131322e302f32312d3332203d3e20323632383933.roa
File:                     3137372e32332e3131322e302f32312d3332203d3e20323632383933.roa (raw, json)
Hash identifier:          Bu1MVFMYDwJUYjOOZnl5dUgL6HyFcnXLfZNEOwMidU0=
Subject key identifier:   03:BE:90:C8:0D:25:A6:EE:97:D1:61:2F:28:4F:D3:47:6F:05:41:2D
Certificate issuer:       /CN=99B35081E0645635AD4D8BE70E34F035910FB764
Certificate serial:       15A3FEBB33354403512D0A15903823A79E58B146
Authority key identifier: 99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/3137372e32332e3131322e302f32312d3332203d3e20323632383933.roa
Signing time:             Fri 07 Mar 2025 05:20:25 +0000
ROA not before:           Fri 07 Mar 2025 05:15:25 +0000
ROA not after:            Fri 06 Mar 2026 05:20:25 +0000
asID:                     262893
IP address blocks:        177.23.112.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.crl
                          rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 21:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a3:fe:bb:33:35:44:03:51:2d:0a:15:90:38:23:a7:9e:58:b1:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99B35081E0645635AD4D8BE70E34F035910FB764
        Validity
            Not Before: Mar  7 05:15:25 2025 GMT
            Not After : Mar  6 05:20:25 2026 GMT
        Subject: CN=03BE90C80D25A6EE97D1612F284FD3476F05412D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:63:b0:a5:ab:04:44:96:48:31:94:e9:1a:32:
                    bc:cb:c9:22:71:7e:7d:47:cf:a7:5a:25:a0:f9:06:
                    fc:09:29:e9:5a:8c:8e:2c:4c:8a:82:81:2b:62:cf:
                    e6:e1:67:9c:72:6e:f3:e7:4a:71:f1:1c:c8:db:ba:
                    59:af:f3:5b:88:e3:dd:62:03:2d:51:de:ba:e2:3e:
                    04:1c:61:f2:be:fe:fd:16:d8:50:44:62:86:ad:d6:
                    d9:50:dd:98:27:81:56:75:42:4d:0e:f4:c4:1a:fa:
                    77:c7:16:fe:fb:7b:6e:2a:60:d1:6f:6c:ae:51:5b:
                    cc:3c:84:11:79:a1:c6:6e:57:49:c1:1f:f0:43:41:
                    16:3b:c5:15:fa:e1:bd:4c:67:42:92:da:2a:18:b3:
                    09:f0:37:3e:89:cb:ea:03:76:70:8c:6e:6d:e7:d9:
                    6c:1d:cd:ce:12:46:48:3d:44:b5:44:ef:d9:2f:e3:
                    73:0f:c6:29:76:36:a0:53:c5:43:af:97:f8:90:88:
                    62:47:19:d2:2e:4d:a3:e9:a1:e0:24:8b:25:e0:75:
                    6e:55:39:c9:ea:72:68:4b:2f:21:b2:c6:6b:34:6b:
                    27:d6:5f:66:6e:4a:03:a5:e8:e0:94:8f:b8:a6:2e:
                    b4:b6:79:52:f3:12:fe:ec:87:6f:f3:ee:44:5f:d6:
                    26:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BE:90:C8:0D:25:A6:EE:97:D1:61:2F:28:4F:D3:47:6F:05:41:2D
            X509v3 Authority Key Identifier:
                keyid:99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/3137372e32332e3131322e302f32312d3332203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:f0:f5:38:b9:9d:24:21:1f:43:d2:4e:18:f1:81:b9:a2:7c:
         87:5f:2f:13:27:01:a3:dd:96:d2:98:a3:68:1c:b4:96:e5:60:
         16:8a:ae:91:e5:50:76:f5:fd:71:5f:65:ff:21:79:b9:a6:d5:
         00:eb:a8:73:9f:1d:01:23:db:e8:ae:1a:64:69:76:08:90:92:
         b5:74:fc:c8:d0:54:10:80:8f:e6:6b:c9:5d:18:4e:82:33:ee:
         b6:bc:30:bd:3e:1b:c8:3f:a1:fa:81:bd:99:40:34:ec:9e:ff:
         23:c1:2f:d3:5c:b4:a6:78:40:df:7b:78:09:6d:d5:da:bc:97:
         ec:96:15:bb:78:5b:13:20:e2:0d:80:ff:8f:2b:4e:a7:d6:88:
         26:75:1a:c2:13:ea:89:6e:9a:19:e4:c1:61:7b:10:ef:bf:14:
         0d:32:11:70:8f:6f:e3:ca:11:f0:4e:dd:d2:68:e2:c0:a2:01:
         82:d8:16:ac:99:07:b4:bb:45:69:86:3a:cc:d2:09:b2:0c:74:
         34:40:06:6f:17:ab:c3:51:2d:03:32:bc:9b:30:97:99:17:88:
         6f:82:e1:32:04:27:34:d4:12:20:67:50:b9:08:03:93:eb:a4:
         20:ba:57:1c:1f:f9:25:31:2b:5a:b2:b0:1f:99:ea:2e:cd:32:
         20:9c:c2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:46:04 2025 by rpki-client