Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3136382e302f32312d3231203d3e203532363133.roa
File:                     3137372e3132352e3136382e302f32312d3231203d3e203532363133.roa (raw, json)
Hash identifier:          ERiJ3GSGFSC/wTzF5fgdmy9v9+UQltWmirjXHalDINo=
Subject key identifier:   03:C9:1A:90:54:23:48:59:05:01:B4:14:60:36:AB:F2:C2:24:4E:C0
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       4DC25247E1EE5417A7F172004A45EA762A2F4FB4
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3136382e302f32312d3231203d3e203532363133.roa
Signing time:             Thu 06 Mar 2025 09:42:20 +0000
ROA not before:           Thu 06 Mar 2025 09:37:20 +0000
ROA not after:            Thu 05 Mar 2026 09:42:20 +0000
asID:                     52613
IP address blocks:        177.125.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c2:52:47:e1:ee:54:17:a7:f1:72:00:4a:45:ea:76:2a:2f:4f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Mar  6 09:37:20 2025 GMT
            Not After : Mar  5 09:42:20 2026 GMT
        Subject: CN=03C91A90542348590501B4146036ABF2C2244EC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7d:87:4c:90:fb:e8:5e:bb:24:c1:15:58:c7:
                    14:5b:67:18:a5:39:c8:81:30:db:9c:c4:66:6e:a5:
                    0a:46:88:ed:8a:ec:7a:11:03:8e:9e:99:a9:55:ad:
                    a6:3c:45:5b:ab:59:e5:2f:46:48:30:96:e0:37:8f:
                    37:ff:fe:03:ea:7e:a1:d7:96:42:0f:44:1d:17:b4:
                    dc:d2:58:99:1f:28:3f:be:76:24:c9:04:37:4c:fe:
                    1a:b8:f2:56:3d:66:57:4e:94:81:89:23:b8:7d:a5:
                    d9:b4:c2:08:ee:ec:87:67:79:c4:b0:91:5c:a3:ee:
                    f7:aa:ab:f8:19:9b:b6:ea:22:2f:90:81:56:a7:67:
                    ce:24:4f:78:02:d5:95:37:fe:90:4c:3a:78:e3:2c:
                    b0:7a:6a:37:1f:4b:6e:2b:5a:a0:6c:55:fc:3e:d2:
                    61:9d:36:ed:96:bc:be:43:f3:f3:0b:35:98:2a:c6:
                    df:a2:d8:e9:43:57:00:b1:ff:cb:04:47:82:d1:3b:
                    3c:55:8a:3f:f4:1d:f4:f8:45:bc:07:1c:56:48:4d:
                    d9:ce:02:35:45:13:af:e4:12:d6:79:62:bb:e1:5d:
                    8e:ae:2d:5d:d3:b0:2d:a1:57:47:ed:65:50:fc:af:
                    56:f1:31:38:74:a4:6f:ce:b5:77:d4:62:98:be:23:
                    ee:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C9:1A:90:54:23:48:59:05:01:B4:14:60:36:AB:F2:C2:24:4E:C0
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3136382e302f32312d3231203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         73:4d:2c:f2:ac:0c:8d:2f:96:4f:a2:41:08:99:d4:c2:36:cb:
         0a:74:64:56:d0:cd:a8:83:2e:21:7b:e4:fb:3c:b5:4d:8b:fc:
         b3:96:42:0e:9f:7b:bb:29:d1:7d:81:de:23:4d:23:1f:58:f3:
         34:d4:54:6b:17:8c:9e:da:c4:12:9f:81:aa:10:9a:e6:90:96:
         6d:4c:2c:bd:29:35:d1:c5:17:99:bc:e0:f0:8f:3e:46:fd:f7:
         48:fc:e9:e0:71:ca:23:c3:bc:ac:b0:3c:5a:11:dd:06:63:85:
         15:39:e1:67:df:43:ba:9c:65:4a:cf:a9:76:23:3a:78:0b:d8:
         d8:4d:f1:2b:ba:0b:b3:06:d1:5d:0a:fc:6d:20:36:39:84:16:
         8b:6f:77:12:63:aa:c6:34:dc:42:1b:f6:ac:eb:d6:c0:67:65:
         c6:45:3f:e1:78:53:09:00:ca:10:b1:20:54:1a:63:67:9d:d2:
         b0:79:dc:38:6a:84:8c:be:d5:31:12:89:87:d8:94:51:5f:66:
         72:38:6c:be:7c:4a:f8:0d:aa:51:7e:b6:b8:46:9c:cd:de:a1:
         1e:60:7f:8c:6a:59:32:76:43:6e:e9:61:7c:34:70:85:84:af:
         72:6d:a1:54:e2:a5:6b:dc:03:bb:73:67:e8:2d:05:3f:9b:83:
         80:9c:72:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:01 2025 by rpki-client