Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e34342e3138382e302f32332d3234203d3e203533313733.roa
File:                     3137372e34342e3138382e302f32332d3234203d3e203533313733.roa (raw, json)
Hash identifier:          rVqSM3k13/WGyQ+lSYSv9oY1En0usozDa8MBKkhywmA=
Subject key identifier:   1B:1F:7B:D4:55:BD:E0:9B:47:7B:F1:23:ED:1F:BD:22:A0:29:01:49
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       730C18ACE908F9108D60B436E1B96D12A9E411D9
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e34342e3138382e302f32332d3234203d3e203533313733.roa
Signing time:             Thu 06 Mar 2025 02:41:56 +0000
ROA not before:           Thu 06 Mar 2025 02:36:56 +0000
ROA not after:            Thu 05 Mar 2026 02:41:56 +0000
asID:                     53173
IP address blocks:        177.44.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0c:18:ac:e9:08:f9:10:8d:60:b4:36:e1:b9:6d:12:a9:e4:11:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:56 2025 GMT
            Not After : Mar  5 02:41:56 2026 GMT
        Subject: CN=1B1F7BD455BDE09B477BF123ED1FBD22A0290149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:76:9e:55:a8:3c:93:af:a8:5e:aa:e6:01:
                    7a:82:31:a3:32:43:71:7c:8b:4c:b0:72:db:68:0d:
                    c0:5a:1e:c6:f6:28:82:98:33:a8:22:f2:13:fb:51:
                    d0:0d:b0:7f:9e:00:d6:48:9a:82:15:8b:3c:79:6c:
                    af:97:c1:dc:60:2a:08:2d:df:8e:be:55:51:5b:bb:
                    41:c5:47:69:30:54:01:4f:7c:19:63:ec:d5:5f:15:
                    e2:80:a9:8d:a2:5d:a8:6b:ed:32:3c:47:6a:84:49:
                    4b:bf:a4:8a:57:46:5b:d8:45:2d:30:04:32:be:9c:
                    15:ed:28:fb:f2:0e:b5:06:5e:23:3e:0e:e6:e0:24:
                    5e:6b:4e:4f:38:e2:ba:7a:37:6d:de:06:4e:8d:11:
                    2e:8d:52:83:36:c8:eb:79:1f:f0:88:01:26:93:53:
                    2b:83:f0:09:47:1a:f4:38:ee:27:3c:8b:e8:06:0c:
                    36:62:2c:3f:e8:28:99:da:0a:0d:f2:a4:4f:c2:f4:
                    b7:2a:5c:25:cf:fa:ca:48:35:a0:5b:b8:0c:9b:55:
                    d7:20:8e:08:c2:57:da:bc:52:b7:3f:22:8c:7e:48:
                    a7:3a:b2:e7:c6:92:4e:7d:4f:c2:40:d4:39:88:fe:
                    5e:14:c1:c9:c1:c4:8e:cd:70:d6:50:8b:8d:d7:7a:
                    fb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1F:7B:D4:55:BD:E0:9B:47:7B:F1:23:ED:1F:BD:22:A0:29:01:49
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e34342e3138382e302f32332d3234203d3e203533313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:e3:fd:f5:20:e5:cb:08:de:33:5c:8b:b0:72:6f:0b:30:30:
         be:93:0a:93:45:5d:3d:72:c7:ef:2d:1d:a0:2f:3b:0a:e8:74:
         09:4b:fa:e5:04:7b:ab:b0:46:67:70:2d:14:38:0a:26:11:33:
         b0:b8:51:94:54:0f:7c:7f:2d:e3:35:12:52:83:1b:df:57:b7:
         c4:6a:48:f5:6e:22:b5:10:cd:14:88:a0:a9:98:9b:48:e8:b4:
         e1:64:2c:90:9c:a5:18:38:33:73:1c:48:23:3c:f7:3b:31:3b:
         3d:7c:c9:7b:a3:8f:94:f1:22:46:97:a9:da:f1:aa:99:3f:62:
         d0:55:b2:6c:fb:5d:68:09:e7:eb:61:07:b9:ee:ae:43:e9:81:
         d1:cf:db:91:6c:06:83:fa:b6:e8:e5:1f:fc:ec:17:f7:33:ae:
         7e:b9:9a:45:38:a8:fb:3f:f5:aa:72:f8:39:21:72:aa:25:e5:
         52:14:97:5c:14:fd:e3:08:6c:3e:23:22:bc:c3:5e:89:2b:40:
         b4:e5:2e:62:81:09:fc:c9:9b:4b:1b:22:65:8e:af:76:37:c8:
         c5:72:c7:09:b5:8a:36:6a:f2:42:84:1e:f0:f7:8b:8d:f7:99:
         25:65:ee:92:9d:71:98:52:9c:a9:47:fb:47:4f:67:fb:02:63:
         aa:de:c6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:11:09 2025 by rpki-client