Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136362e302f32332d3233203d3e203532373433.roa
File:                     3137372e38352e3136362e302f32332d3233203d3e203532373433.roa (raw, json)
Hash identifier:          9Em0FD++Jb7iPbuHi9g4Eapqpd4aKkp2CQyjnM/Ml0k=
Subject key identifier:   F4:EC:9C:A7:BA:71:90:0E:14:E3:B2:8E:88:20:53:59:24:39:94:9C
Certificate issuer:       /CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
Certificate serial:       6B075D8ABF5EB27D36BEF660F74F47B47AB1D6A2
Authority key identifier: B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136362e302f32332d3233203d3e203532373433.roa
Signing time:             Thu 06 Mar 2025 14:05:25 +0000
ROA not before:           Thu 06 Mar 2025 14:00:25 +0000
ROA not after:            Thu 05 Mar 2026 14:05:25 +0000
asID:                     52743
IP address blocks:        177.85.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl
                          rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 19:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:07:5d:8a:bf:5e:b2:7d:36:be:f6:60:f7:4f:47:b4:7a:b1:d6:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
        Validity
            Not Before: Mar  6 14:00:25 2025 GMT
            Not After : Mar  5 14:05:25 2026 GMT
        Subject: CN=F4EC9CA7BA71900E14E3B28E882053592439949C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:83:6e:67:f6:65:4c:32:12:87:b9:9a:97:
                    5b:e9:9a:ef:fb:1a:df:2e:ec:0f:b2:71:d3:b5:a3:
                    a0:ec:f0:5c:d4:31:30:88:16:63:1c:b5:21:e0:17:
                    dd:1e:49:8a:60:0c:ed:82:9b:f5:3f:a0:5c:a6:7e:
                    f2:47:2c:68:02:cf:ca:dd:02:df:c2:50:87:2c:27:
                    ba:b7:40:a5:87:1c:76:25:46:8f:c4:fa:ef:19:bd:
                    f8:cf:9e:75:75:d7:14:94:bc:8b:bf:0f:9a:fc:46:
                    a6:ce:96:a5:f0:3c:ac:15:5a:89:4f:ef:cb:e9:54:
                    1d:d6:06:92:22:be:57:29:2b:9f:0b:4e:00:ce:c3:
                    b7:c6:31:87:2b:9c:c5:08:5d:7e:bc:97:2c:f1:3f:
                    b3:3e:6b:c7:1a:f1:c0:60:b6:08:30:7d:17:23:d1:
                    47:20:b1:9b:f8:dd:34:d6:2c:aa:87:53:2d:80:8e:
                    66:9f:20:64:58:1a:af:e1:8f:e7:55:4a:2b:3e:52:
                    e2:a3:4c:36:2b:2b:cc:08:03:cc:dc:d0:5d:2f:ca:
                    cb:5a:c9:64:09:f9:07:bc:38:52:18:9f:b4:74:13:
                    b2:bc:ad:57:c0:96:29:9a:f5:52:6d:09:ec:20:57:
                    90:dc:7b:90:ee:58:b0:e0:90:96:de:01:f1:07:eb:
                    5d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EC:9C:A7:BA:71:90:0E:14:E3:B2:8E:88:20:53:59:24:39:94:9C
            X509v3 Authority Key Identifier:
                keyid:B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136362e302f32332d3233203d3e203532373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:92:69:b7:3a:60:7d:d1:8b:59:da:6f:08:03:cc:d7:e8:1a:
         a7:01:ff:f1:e6:d5:cb:fc:f4:6d:b4:ae:78:f8:8d:18:e6:f2:
         59:40:f4:5f:7d:ee:ad:76:b1:b3:b3:69:8c:2b:3c:a6:bd:61:
         33:82:57:e3:06:a2:e3:28:76:29:36:ed:30:03:5d:4a:d8:d7:
         32:ad:50:1a:c9:36:22:d3:89:19:cf:b9:51:2d:65:5d:7c:b3:
         a2:f0:0e:40:d4:9a:fd:4e:6d:c6:e9:b0:38:da:59:67:a0:11:
         4a:40:a0:67:07:76:92:18:b6:37:11:8b:41:89:69:2d:dd:6c:
         9e:7b:c3:ac:50:a3:a8:fb:b9:c8:5a:18:04:51:98:56:ce:93:
         fe:b8:b7:fa:e8:8a:c2:48:d8:f8:19:c4:c8:5f:78:fc:3c:ff:
         77:fa:47:7a:26:81:71:3b:44:e1:e5:62:09:93:bc:fc:e1:6b:
         39:37:53:ad:28:e8:61:09:32:e8:ad:c3:05:4c:91:05:ff:26:
         c9:58:53:2e:0c:16:92:b2:f8:38:45:06:e3:d5:22:4e:8d:ad:
         e9:cd:be:7c:9e:ed:ff:15:d3:ff:a2:7b:d4:14:02:f2:b9:56:
         b4:94:66:2d:f6:9d:34:f0:a9:90:de:4e:37:2d:b3:4e:d5:2a:
         53:aa:e4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:25:04 2025 by rpki-client