Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/3137372e3130312e33322e302f32302d3234203d3e20323632363036.roa
File:                     3137372e3130312e33322e302f32302d3234203d3e20323632363036.roa (raw, json)
Hash identifier:          omAm5Oa/yOSOoCDAgW/mmCGYWWWjDo8y7KW2sdYyHHE=
Subject key identifier:   46:A5:30:F2:16:A8:03:22:EC:E8:25:84:75:64:31:8C:81:83:D0:E0
Certificate issuer:       /CN=C9F71779FCAA18544B4D3820D10E4E4416FDAF38
Certificate serial:       25F1B98B6057DF512604F555116095F5C8963603
Authority key identifier: C9:F7:17:79:FC:AA:18:54:4B:4D:38:20:D1:0E:4E:44:16:FD:AF:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F71779FCAA18544B4D3820D10E4E4416FDAF38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/3137372e3130312e33322e302f32302d3234203d3e20323632363036.roa
Signing time:             Fri 21 Mar 2025 15:53:29 +0000
ROA not before:           Fri 21 Mar 2025 15:48:29 +0000
ROA not after:            Fri 20 Mar 2026 15:53:29 +0000
asID:                     262606
IP address blocks:        177.101.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/C9F71779FCAA18544B4D3820D10E4E4416FDAF38.crl
                          rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/C9F71779FCAA18544B4D3820D10E4E4416FDAF38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F71779FCAA18544B4D3820D10E4E4416FDAF38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 02:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f1:b9:8b:60:57:df:51:26:04:f5:55:11:60:95:f5:c8:96:36:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9F71779FCAA18544B4D3820D10E4E4416FDAF38
        Validity
            Not Before: Mar 21 15:48:29 2025 GMT
            Not After : Mar 20 15:53:29 2026 GMT
        Subject: CN=46A530F216A80322ECE825847564318C8183D0E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:94:27:ba:1c:97:d3:37:28:6d:d1:0b:cb:c5:
                    73:04:7b:51:ba:06:ec:41:c7:0c:7f:99:c5:04:02:
                    53:f8:f6:1e:03:d4:cb:07:ac:f4:fe:32:6d:50:d8:
                    01:81:fb:7a:01:63:f0:52:f4:e3:ff:4c:b4:a1:f9:
                    63:df:39:3b:2b:29:64:a6:19:b8:c4:77:24:4d:62:
                    ff:ef:fa:5c:08:6d:66:af:96:75:93:86:94:47:f7:
                    de:ea:41:58:4b:d9:be:05:b3:cf:52:12:a7:3f:fc:
                    52:ad:ad:71:65:e0:24:fb:3c:8f:d5:5b:6e:96:dd:
                    54:6b:8e:51:56:f0:1d:3f:9a:55:e0:74:fc:0c:71:
                    dd:20:88:f5:f2:3a:7e:a7:d4:4d:44:c3:af:95:b0:
                    2c:3d:6f:71:60:0d:50:1d:1e:31:c1:d3:cd:de:fb:
                    41:05:71:73:cb:38:51:dc:f9:9f:e2:95:57:fa:d8:
                    b0:fc:46:fc:54:55:e4:26:11:1e:a5:e2:ac:2b:a3:
                    87:d3:fc:e8:9c:bc:8a:76:04:4b:97:7b:c1:26:80:
                    9e:da:e5:e3:b6:cc:6a:4a:89:48:b0:f5:98:99:46:
                    46:64:84:14:88:9d:cb:cc:83:bb:26:41:63:63:60:
                    5c:ea:b3:68:8a:5b:32:57:8f:b4:c0:2e:9c:ad:e9:
                    d2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A5:30:F2:16:A8:03:22:EC:E8:25:84:75:64:31:8C:81:83:D0:E0
            X509v3 Authority Key Identifier:
                keyid:C9:F7:17:79:FC:AA:18:54:4B:4D:38:20:D1:0E:4E:44:16:FD:AF:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/C9F71779FCAA18544B4D3820D10E4E4416FDAF38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F71779FCAA18544B4D3820D10E4E4416FDAF38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/3137372e3130312e33322e302f32302d3234203d3e20323632363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:4e:ca:1a:e8:fd:72:cb:85:53:80:95:cb:ff:1f:36:29:42:
         a2:c0:a7:27:cd:8e:14:1a:8a:80:a3:02:d8:b6:9f:5c:41:52:
         99:f1:df:d8:fa:dc:f0:93:d1:be:eb:90:01:68:90:c0:42:56:
         bf:97:02:d1:51:1e:38:48:b5:5e:99:a4:11:27:b4:01:02:2b:
         35:db:5e:e0:de:77:ef:c7:f2:1a:1f:f6:b4:d7:57:ab:ff:c3:
         1b:d2:5d:9c:5d:a0:73:7f:7f:61:99:a5:07:77:88:ef:40:58:
         f5:6b:6f:63:ed:22:be:1a:92:eb:95:e7:54:b3:ac:56:5a:ee:
         7b:97:f5:26:d8:ad:c5:59:f7:17:4d:31:49:42:c7:41:85:6f:
         50:e1:86:7f:6c:1a:92:b1:9a:ed:0d:c1:ec:3d:6f:c0:6c:ba:
         33:37:40:6d:f3:b8:a3:41:66:3f:5d:27:af:b0:20:e6:d4:a5:
         5d:d7:54:b1:a6:80:48:a5:3e:08:f1:e7:08:38:73:7f:f9:99:
         da:1d:51:ae:7e:20:80:51:4b:6b:2e:7d:08:19:a3:7d:ed:77:
         52:62:d0:1d:ff:c4:31:22:be:17:35:60:35:86:8d:0e:b2:79:
         f5:68:97:22:40:c5:9a:18:52:da:05:e7:0e:92:d1:0e:06:cb:
         fb:98:9e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:46:59 2025 by rpki-client