Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3137372e3230302e36342e302f32302d3332203d3e203532373833.roa
File:                     3137372e3230302e36342e302f32302d3332203d3e203532373833.roa (raw, json)
Hash identifier:          6OBiD/8DlENQaZjx/MvA5MAEVExrvubewYLsYMeOnMM=
Subject key identifier:   7A:9A:6D:07:65:E9:C2:18:E8:B7:5A:63:B2:43:48:98:CB:85:4F:D2
Certificate issuer:       /CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
Certificate serial:       149A3C3835932234AB00692CB5D1F4735553586F
Authority key identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3137372e3230302e36342e302f32302d3332203d3e203532373833.roa
Signing time:             Thu 06 Mar 2025 22:51:14 +0000
ROA not before:           Thu 06 Mar 2025 22:46:14 +0000
ROA not after:            Thu 05 Mar 2026 22:51:14 +0000
asID:                     52783
IP address blocks:        177.200.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl
                          rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 10:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9a:3c:38:35:93:22:34:ab:00:69:2c:b5:d1:f4:73:55:53:58:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
        Validity
            Not Before: Mar  6 22:46:14 2025 GMT
            Not After : Mar  5 22:51:14 2026 GMT
        Subject: CN=7A9A6D0765E9C218E8B75A63B2434898CB854FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:6c:f5:72:9b:88:ed:3e:9e:8c:c8:0e:d8:
                    d5:cb:ed:c4:f9:ee:e4:cf:ff:5b:78:7d:a8:7e:30:
                    0b:42:0b:95:d4:ba:47:26:81:a8:44:33:cc:df:44:
                    f3:56:57:51:92:28:6c:3e:08:9c:5a:d1:1d:8c:71:
                    15:59:09:8c:58:f5:f0:86:44:75:a0:74:15:3f:8f:
                    4d:4e:b0:bf:5f:8b:46:1a:20:fc:2c:21:e2:48:67:
                    05:10:0e:0d:47:4e:d6:7e:0e:33:e3:42:c1:3f:fc:
                    ff:00:19:e3:57:bc:5f:94:3e:df:09:d1:52:82:2d:
                    e0:cb:16:b1:0e:96:aa:a4:37:c4:78:c0:d4:6b:bf:
                    94:7b:6f:94:84:59:d1:78:66:d6:c7:cd:87:06:00:
                    74:34:ca:bf:65:6f:58:88:8d:1c:a0:ee:08:a5:71:
                    34:f1:16:13:0f:1a:05:7d:f8:37:4d:ea:4c:ff:be:
                    80:5f:e1:6a:0d:83:8f:47:90:7e:94:a4:0c:e4:dd:
                    a6:e8:02:58:62:7f:4f:4a:fc:34:19:f7:47:eb:5a:
                    cd:1b:e6:da:13:36:54:41:02:74:98:50:7c:ca:13:
                    56:b6:91:ed:17:63:df:aa:fe:c4:42:b1:75:aa:ca:
                    51:f9:2b:0b:92:16:f4:db:13:b6:ea:74:c5:bb:ff:
                    60:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9A:6D:07:65:E9:C2:18:E8:B7:5A:63:B2:43:48:98:CB:85:4F:D2
            X509v3 Authority Key Identifier:
                keyid:3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3137372e3230302e36342e302f32302d3332203d3e203532373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:55:08:9c:cd:9a:5e:a5:2d:31:e6:b8:76:45:62:c3:2f:cc:
         f2:c9:10:c1:3e:ab:05:15:5b:c6:6b:ce:18:7b:1c:10:fb:24:
         59:6c:85:7e:9f:50:96:ba:ea:0b:9e:48:09:6c:b8:26:8d:8e:
         4f:cf:71:31:e9:fd:44:67:5a:9e:a3:9b:de:b7:06:86:1f:fd:
         b9:3e:16:6a:0c:8d:01:46:77:7d:01:b5:4d:42:58:32:79:a9:
         e8:86:23:fa:9c:d8:4f:40:f3:bd:0d:f5:be:f6:b7:db:00:bc:
         5c:f1:c3:2c:f5:bb:35:f3:3c:92:c4:f6:49:bb:3b:ca:1b:7b:
         d7:53:fb:0e:0c:c0:9e:12:43:f9:ce:0b:5e:99:04:ca:d0:1c:
         c0:05:3c:c1:ec:2a:94:af:b8:8c:ee:2c:6e:10:86:1e:92:0b:
         42:13:ea:35:b9:e6:1e:3c:cd:61:ed:94:79:37:a1:c6:87:49:
         97:48:d6:e7:65:9e:db:3f:48:78:60:22:cf:4d:fb:3b:65:df:
         37:08:6d:7f:d0:04:6b:89:2b:61:5b:c4:50:3c:f1:fb:86:cc:
         2a:4d:01:dd:da:6d:8c:78:24:69:2b:95:56:c2:2a:b3:3f:94:
         f3:1a:86:ce:d2:75:fe:64:24:b2:16:e2:03:ef:8f:0f:e8:3c:
         ae:c3:84:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:32:24 2025 by rpki-client