Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137372e31302e3132312e302f32342d3234203d3e203533323336.roa
File:                     3137372e31302e3132312e302f32342d3234203d3e203533323336.roa (raw, json)
Hash identifier:          C0fW/9qU32xBBdpeVnglP5znjYRdU4LTJVDpdHpUMcE=
Subject key identifier:   6F:A6:D4:0A:15:A1:19:2C:1F:AE:4D:68:3C:23:0E:60:73:18:32:A5
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       68BDEDC141AE7E96266320EDF4025EEC0FF8805B
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137372e31302e3132312e302f32342d3234203d3e203533323336.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     53236
IP address blocks:        177.10.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bd:ed:c1:41:ae:7e:96:26:63:20:ed:f4:02:5e:ec:0f:f8:80:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=3082010A028201010097925E72D682461E674571BDC497188690FF4BF9319830FB28E2B1C43040CC837FDCBD9DE58E49176FE89466CD4F9B4C1825C95EB07AA442217B806009C7BC0F83023DB39FBFEA3C6FC7C577D9BAB13D3EB1C53A00E699056222FDD272BE5B8B837763D50C9ED0596A9B2237027525ADFB97582E8197C51641673F69BD57AD403975BC96EECC78EE5CAFD168B634EEEEEF6E2F5F6076D53D9DBB7F6E2081E10CD362E6BB9FFB6DA2D665A183DA4EFDEEAD8CA6B4A318BF529AF802164C12A73DDF5A078722158DAF46B96A4D7FA78CEEEBB114A8095D141D112710A397DB10A490F924D963DBB0A1CEA7C511FDDABB378E0E0EC2F859D2E5DF95EE8BD47A85270203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:92:5e:72:d6:82:46:1e:67:45:71:bd:c4:97:
                    18:86:90:ff:4b:f9:31:98:30:fb:28:e2:b1:c4:30:
                    40:cc:83:7f:dc:bd:9d:e5:8e:49:17:6f:e8:94:66:
                    cd:4f:9b:4c:18:25:c9:5e:b0:7a:a4:42:21:7b:80:
                    60:09:c7:bc:0f:83:02:3d:b3:9f:bf:ea:3c:6f:c7:
                    c5:77:d9:ba:b1:3d:3e:b1:c5:3a:00:e6:99:05:62:
                    22:fd:d2:72:be:5b:8b:83:77:63:d5:0c:9e:d0:59:
                    6a:9b:22:37:02:75:25:ad:fb:97:58:2e:81:97:c5:
                    16:41:67:3f:69:bd:57:ad:40:39:75:bc:96:ee:cc:
                    78:ee:5c:af:d1:68:b6:34:ee:ee:ef:6e:2f:5f:60:
                    76:d5:3d:9d:bb:7f:6e:20:81:e1:0c:d3:62:e6:bb:
                    9f:fb:6d:a2:d6:65:a1:83:da:4e:fd:ee:ad:8c:a6:
                    b4:a3:18:bf:52:9a:f8:02:16:4c:12:a7:3d:df:5a:
                    07:87:22:15:8d:af:46:b9:6a:4d:7f:a7:8c:ee:eb:
                    b1:14:a8:09:5d:14:1d:11:27:10:a3:97:db:10:a4:
                    90:f9:24:d9:63:db:b0:a1:ce:a7:c5:11:fd:da:bb:
                    37:8e:0e:0e:c2:f8:59:d2:e5:df:95:ee:8b:d4:7a:
                    85:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A6:D4:0A:15:A1:19:2C:1F:AE:4D:68:3C:23:0E:60:73:18:32:A5
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137372e31302e3132312e302f32342d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:3d:23:d8:07:a7:ee:ac:25:38:d0:df:fc:a0:eb:4d:0a:c0:
         e6:09:38:cd:ee:2d:66:d2:5d:38:7a:47:c5:34:0b:79:66:d9:
         b8:41:65:79:2a:5a:fd:37:c2:7c:9a:20:12:b9:43:d3:69:ea:
         1b:89:f7:11:37:5a:a4:31:3b:dc:da:75:10:52:2a:af:a8:45:
         e7:b8:16:86:15:d6:47:b9:08:0c:51:61:a2:d9:9b:a6:a9:4f:
         48:fa:ef:99:52:bc:4f:6e:3a:dc:5f:88:41:4a:4b:7d:c2:ea:
         f0:74:72:f5:f2:38:54:30:70:ed:99:f8:10:9f:68:76:1e:ce:
         0d:f0:47:a4:97:ec:80:5d:4e:61:72:fe:42:1a:10:eb:14:9a:
         17:15:62:9a:a0:d6:46:13:83:e5:0b:b0:a4:76:7b:cb:b1:be:
         f4:cf:63:d0:9d:bf:22:81:3b:4a:cd:e9:17:98:97:6a:40:53:
         e2:37:59:8c:b4:72:6c:41:34:ed:75:b4:69:6f:ae:c2:c3:dc:
         e3:79:59:e1:b4:38:4b:82:6a:cd:c8:7d:1e:ab:f8:75:0a:7e:
         34:45:5d:e7:27:d9:40:7b:79:63:99:cf:ab:16:1f:00:02:90:
         06:46:5c:b0:4b:6d:57:ac:4b:48:9e:d5:fc:26:c9:dd:2a:0a:
         95:82:c7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:26:18 2025 by rpki-client