Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137342e302f32332d3233203d3e203532363133.roa
File:                     3137372e3132352e3137342e302f32332d3233203d3e203532363133.roa (raw, json)
Hash identifier:          B0Gleh5icGi4+wPD78+5ue9or5TLisJr50jm5pzdMRo=
Subject key identifier:   73:7C:E6:63:F3:52:54:B6:FA:98:EE:C7:DA:AC:70:25:DB:E7:CC:97
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       16986CB8DAF90212C720296092152796FF9362C1
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137342e302f32332d3233203d3e203532363133.roa
Signing time:             Thu 06 Mar 2025 09:42:18 +0000
ROA not before:           Thu 06 Mar 2025 09:37:18 +0000
ROA not after:            Thu 05 Mar 2026 09:42:18 +0000
asID:                     52613
IP address blocks:        177.125.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:98:6c:b8:da:f9:02:12:c7:20:29:60:92:15:27:96:ff:93:62:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Mar  6 09:37:18 2025 GMT
            Not After : Mar  5 09:42:18 2026 GMT
        Subject: CN=737CE663F35254B6FA98EEC7DAAC7025DBE7CC97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:d6:2b:31:05:59:d1:5d:09:4e:bf:b4:92:
                    b6:58:6a:60:85:01:21:3d:58:2e:70:28:98:ed:85:
                    23:6a:3d:00:28:63:9f:ef:c7:fc:33:d4:65:c1:bb:
                    2a:fc:a8:6d:d1:72:eb:63:b4:6a:38:4e:e6:5d:12:
                    63:4b:fa:e5:99:b6:3c:3a:46:9f:d5:97:6d:19:2b:
                    66:e0:73:b9:0e:70:23:b5:d0:c9:18:9b:88:2a:b8:
                    e6:19:72:d3:a3:8c:6e:a6:72:a5:5a:5e:e6:2c:b8:
                    8d:5c:80:a6:e5:87:46:55:07:20:5f:d4:a4:a5:ee:
                    8b:d8:70:eb:4f:a7:5d:b9:da:fc:61:8f:53:89:8b:
                    1e:a3:52:2f:79:c5:c1:a2:d0:f3:be:00:62:9f:02:
                    dc:d3:ac:61:3c:c2:ab:de:a3:9d:b3:dd:97:07:45:
                    d7:54:73:bc:ac:8a:3d:e7:02:ff:22:ad:01:83:fb:
                    58:32:d3:61:6f:0a:75:d8:58:6b:ed:a5:92:11:35:
                    43:45:56:72:ec:0b:95:bb:8e:56:be:0b:95:cd:60:
                    17:3b:10:fe:8e:b7:fd:0b:5f:16:7d:6a:c7:30:47:
                    1f:89:8b:55:dd:c7:3e:7e:35:ec:64:f4:35:57:90:
                    eb:1a:db:75:98:bd:65:e8:da:61:23:a1:6f:6f:a9:
                    f1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7C:E6:63:F3:52:54:B6:FA:98:EE:C7:DA:AC:70:25:DB:E7:CC:97
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137342e302f32332d3233203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:78:a6:80:5a:b1:96:ab:08:12:d2:75:12:53:5d:4c:85:f8:
         e6:88:29:e4:3b:bb:38:ac:87:e5:1c:c4:d0:89:77:53:94:7c:
         fe:89:7c:99:f7:81:f8:ce:ad:94:e1:00:8e:c3:fa:ae:26:3f:
         48:3a:55:20:a7:48:0f:be:d2:af:1a:75:64:f2:3a:c6:c3:c1:
         f5:1a:62:c2:2b:d4:05:37:2d:e5:b3:40:67:a6:cf:a8:8d:d8:
         9e:b8:40:d0:05:64:0a:f3:72:f6:10:cb:1a:47:0f:6d:9c:1b:
         11:44:bf:0b:42:a4:43:48:36:ff:5c:49:98:a8:d3:44:97:8a:
         5c:8c:1e:f3:52:75:1f:f6:09:60:30:26:87:44:7e:63:b6:c2:
         e4:a7:b9:ee:83:e2:d3:11:2e:e9:1e:1c:76:59:75:11:b1:cd:
         20:e8:ef:31:76:dd:72:69:cf:17:5f:3a:dc:c4:3a:9b:c4:f5:
         ee:18:2b:09:f4:b9:58:18:86:bf:c8:60:79:58:a4:f6:f8:ba:
         61:37:ad:03:68:8c:8c:b6:e8:37:e8:e5:f3:0d:d3:2f:7a:03:
         cd:83:7f:b7:de:d7:35:de:2b:99:88:02:69:76:a7:e5:1b:05:
         b3:bd:dd:29:61:a3:b8:28:6b:c1:c1:e3:8d:52:23:3e:a3:d3:
         76:e6:94:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:53:26 2025 by rpki-client