Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136352e302f32342d3234203d3e203532373433.roa
File:                     3137372e38352e3136352e302f32342d3234203d3e203532373433.roa (raw, json)
Hash identifier:          79YrqQF0IndROrk+cfePatBDpYvG+DokRE6q0LebRRs=
Subject key identifier:   CC:CD:2F:ED:0C:CA:B1:43:96:44:F9:FD:64:F7:3B:F0:7B:EF:7F:1E
Certificate issuer:       /CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
Certificate serial:       1269D426EEEDC7DB3DC4F7653ED920D775454F43
Authority key identifier: B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136352e302f32342d3234203d3e203532373433.roa
Signing time:             Thu 06 Mar 2025 14:05:23 +0000
ROA not before:           Thu 06 Mar 2025 14:00:23 +0000
ROA not after:            Thu 05 Mar 2026 14:05:23 +0000
asID:                     52743
IP address blocks:        177.85.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl
                          rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 19:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:69:d4:26:ee:ed:c7:db:3d:c4:f7:65:3e:d9:20:d7:75:45:4f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
        Validity
            Not Before: Mar  6 14:00:23 2025 GMT
            Not After : Mar  5 14:05:23 2026 GMT
        Subject: CN=CCCD2FED0CCAB1439644F9FD64F73BF07BEF7F1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:89:8a:db:8b:63:1f:4c:a0:e6:1d:a3:02:
                    39:07:8b:e7:66:3d:8e:b2:fa:6a:9c:17:e3:73:d8:
                    2a:45:bb:1c:e3:11:47:31:57:98:65:ae:c6:ac:15:
                    7a:70:65:49:c2:7c:0a:ef:48:85:78:a9:e9:90:49:
                    8d:36:09:5b:42:57:40:1e:b3:0e:30:15:f3:c2:9c:
                    85:35:4f:e9:62:c7:ef:4f:10:f8:9d:4a:e9:8c:f1:
                    dc:7e:88:4b:69:55:d1:fb:dc:4f:b9:32:9e:dd:61:
                    f0:e5:d0:1c:ec:8a:db:43:90:f7:d4:52:25:e5:ce:
                    fa:c0:08:fb:c9:13:07:31:79:83:c8:1c:9d:8c:b8:
                    3f:12:70:4f:8a:c8:bd:5a:fa:00:66:e3:0f:8f:83:
                    54:96:3c:42:3a:a4:93:7a:d9:c4:98:cd:c1:8d:b2:
                    43:1c:3e:41:85:18:98:36:c1:63:9a:e0:6a:cc:9b:
                    65:c8:5c:53:ae:2f:de:95:90:9a:63:44:30:b9:a6:
                    46:a4:ac:c7:8b:20:7c:e9:2c:ee:5b:32:22:c2:03:
                    50:fb:49:c5:14:a7:ad:2f:09:c4:ea:0e:92:71:1f:
                    15:a2:49:6f:a9:61:43:84:dc:21:60:3e:79:86:ec:
                    77:7e:29:a2:08:b8:3c:71:27:c6:15:dc:8a:86:d8:
                    69:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CD:2F:ED:0C:CA:B1:43:96:44:F9:FD:64:F7:3B:F0:7B:EF:7F:1E
            X509v3 Authority Key Identifier:
                keyid:B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136352e302f32342d3234203d3e203532373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:d0:9f:40:0b:c0:91:29:fb:0d:33:26:62:a4:a3:b2:6b:20:
         6b:e6:bd:70:85:9d:7f:fb:66:18:f0:06:b5:76:d7:da:0f:2d:
         9f:27:70:f9:ea:73:b2:aa:ca:56:bd:52:eb:da:c6:93:d6:ad:
         a2:0f:27:75:da:05:55:2a:57:2b:dd:82:02:ff:a9:6a:dd:93:
         f6:cc:62:1c:1f:17:3a:2e:28:da:ae:a4:5e:94:57:dc:d3:0f:
         e1:74:a9:09:3a:65:19:2b:3d:d0:64:4b:f7:32:b2:11:30:da:
         d7:9c:70:04:1f:53:9c:50:ce:dd:d3:18:a2:fd:22:b9:1f:00:
         89:19:f6:ed:b9:b8:3d:50:63:bb:42:96:03:a5:44:c7:50:3f:
         db:35:f1:ed:ce:69:9b:ec:03:5a:ab:b0:6a:2d:fa:57:41:d4:
         f8:d4:bf:6d:87:91:38:32:eb:db:f8:f3:b8:15:ef:13:8d:2d:
         38:ef:77:67:c8:b4:95:40:a7:f9:6b:42:85:a1:6b:e6:f3:79:
         00:10:85:ea:64:d3:67:21:b7:e9:34:a1:25:8a:aa:79:f3:15:
         72:9a:58:fc:7c:f0:67:b3:e3:da:3e:33:da:0e:62:81:97:f4:
         af:21:32:bb:54:52:9f:f9:0e:33:8a:ce:b7:59:8c:72:44:d8:
         64:1e:42:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:27:33 2025 by rpki-client