Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3137392e39372e36342e302f32312d3234203d3e20323632373937.roa
File:                     3137392e39372e36342e302f32312d3234203d3e20323632373937.roa (raw, json)
Hash identifier:          DZM7SmDPO6CA9MqqX5pBLNe/fVFvTXteAOEPXxUDbjg=
Subject key identifier:   25:5D:3D:EB:F3:E8:D2:79:20:D3:E7:7F:D4:6D:63:F8:03:5C:1F:D1
Certificate issuer:       /CN=A48C5704DA7C590E4B5966889452F8EDAEBAB1A8
Certificate serial:       358C2EB09CF53DF19A4045A4170F1838B05F58E5
Authority key identifier: A4:8C:57:04:DA:7C:59:0E:4B:59:66:88:94:52:F8:ED:AE:BA:B1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A48C5704DA7C590E4B5966889452F8EDAEBAB1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3137392e39372e36342e302f32312d3234203d3e20323632373937.roa
Signing time:             Mon 13 Jan 2025 14:08:32 +0000
ROA not before:           Mon 13 Jan 2025 14:03:32 +0000
ROA not after:            Mon 12 Jan 2026 14:08:32 +0000
asID:                     262797
IP address blocks:        179.97.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/A48C5704DA7C590E4B5966889452F8EDAEBAB1A8.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/A48C5704DA7C590E4B5966889452F8EDAEBAB1A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A48C5704DA7C590E4B5966889452F8EDAEBAB1A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 15:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8c:2e:b0:9c:f5:3d:f1:9a:40:45:a4:17:0f:18:38:b0:5f:58:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48C5704DA7C590E4B5966889452F8EDAEBAB1A8
        Validity
            Not Before: Jan 13 14:03:32 2025 GMT
            Not After : Jan 12 14:08:32 2026 GMT
        Subject: CN=255D3DEBF3E8D27920D3E77FD46D63F8035C1FD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c2:e9:0c:62:57:23:ea:3d:53:d5:e1:55:61:
                    ed:15:14:19:08:5e:e1:d1:64:62:2a:be:ae:bb:3b:
                    60:de:77:4b:88:bc:03:fb:6d:bd:db:cb:ea:7d:2f:
                    70:b6:dc:4e:c2:14:0f:3b:63:8a:f4:0f:29:3e:bf:
                    d1:53:c3:7e:04:d1:0f:07:d9:39:5b:4e:77:64:2c:
                    75:1e:36:9a:6a:fe:7a:f6:76:08:74:80:b1:35:a3:
                    22:6c:5d:d8:90:ff:1a:b8:e4:b0:19:4a:e6:98:97:
                    51:de:09:a2:c5:46:14:61:83:0e:d4:b6:7d:6b:3d:
                    23:85:2e:38:16:90:87:22:c3:b2:f7:6a:c5:3c:1e:
                    78:d3:00:81:d9:da:33:23:2c:bc:85:b2:6b:85:41:
                    3b:1a:4e:3c:95:ad:29:fc:6a:68:7c:63:2e:ce:d5:
                    86:5b:a0:18:f6:fc:75:51:31:f0:5b:34:f5:71:0e:
                    56:bd:9b:3c:a8:f8:01:73:e6:3e:5e:3d:32:fb:a3:
                    f7:d8:60:ad:c0:1d:83:bb:91:1f:54:f4:cc:97:71:
                    a1:09:6b:10:0f:75:4c:cc:18:4d:04:b6:17:34:1a:
                    e5:06:87:e1:dd:d3:3e:37:5e:6f:e7:0a:33:e3:14:
                    0d:21:b3:cc:70:0e:74:bc:7a:55:d5:a1:9d:be:9a:
                    e5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5D:3D:EB:F3:E8:D2:79:20:D3:E7:7F:D4:6D:63:F8:03:5C:1F:D1
            X509v3 Authority Key Identifier:
                keyid:A4:8C:57:04:DA:7C:59:0E:4B:59:66:88:94:52:F8:ED:AE:BA:B1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/A48C5704DA7C590E4B5966889452F8EDAEBAB1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A48C5704DA7C590E4B5966889452F8EDAEBAB1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3137392e39372e36342e302f32312d3234203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c7:84:73:b2:dc:5e:e9:5a:d3:a9:94:5f:24:c9:ca:6a:0a:92:
         2f:69:4c:ae:89:6d:71:ed:f9:bd:75:8b:de:58:ed:2e:b3:be:
         ba:7f:11:cf:5b:9b:1d:d1:69:c9:e6:43:4f:43:f6:d1:d5:5f:
         47:5c:45:da:78:89:08:88:86:0b:1f:13:1d:e1:76:76:bd:fa:
         c8:45:48:a9:3b:4e:5e:28:7e:4a:72:c1:b3:df:8b:81:cc:c0:
         f8:ba:d0:2b:33:01:ac:b9:39:a1:39:54:3f:d7:8d:f8:7a:61:
         17:42:96:f0:00:ca:43:05:78:e8:96:ba:7b:f9:c7:9b:7c:ea:
         02:39:d6:0f:f5:f8:ca:63:6a:24:14:6e:5e:71:6c:58:f1:a8:
         0c:01:e3:70:84:34:01:8f:d7:99:9e:1d:93:24:5c:c5:ae:d8:
         7d:88:ac:84:fb:2d:9d:df:ab:83:e6:86:8a:ab:39:6f:14:d2:
         8d:d2:a1:65:c4:89:16:55:41:6e:21:17:fd:dd:83:13:8e:6a:
         3e:46:6d:6f:b7:2a:d4:e8:e8:70:e0:6e:c9:36:94:90:5b:db:
         ac:57:bc:99:96:e6:11:49:22:11:f6:5f:da:31:01:54:ff:d4:
         77:79:c4:ef:ef:de:d4:45:c6:ea:e3:fe:fd:98:23:e6:84:3b:
         88:9b:ab:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:38:06 2025 by rpki-client