Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/3137372e38372e34342e302f32322d3234203d3e203532353839.roa
File:                     3137372e38372e34342e302f32322d3234203d3e203532353839.roa (raw, json)
Hash identifier:          U1bU2vymA1trGo0kqdj5LljKi5zORYlms1D3T/ome8k=
Subject key identifier:   22:60:18:6B:3A:1A:CE:27:C1:74:BB:55:B5:B4:CA:5C:93:4A:18:F8
Certificate issuer:       /CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B
Certificate serial:       02BCC11482F59890C2FE438BAE6838974C235475
Authority key identifier: 2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/3137372e38372e34342e302f32322d3234203d3e203532353839.roa
Signing time:             Thu 06 Mar 2025 12:52:21 +0000
ROA not before:           Thu 06 Mar 2025 12:47:21 +0000
ROA not after:            Thu 05 Mar 2026 12:52:21 +0000
asID:                     52589
IP address blocks:        177.87.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl
                          rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 19:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bc:c1:14:82:f5:98:90:c2:fe:43:8b:ae:68:38:97:4c:23:54:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B
        Validity
            Not Before: Mar  6 12:47:21 2025 GMT
            Not After : Mar  5 12:52:21 2026 GMT
        Subject: CN=2260186B3A1ACE27C174BB55B5B4CA5C934A18F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:02:2a:b0:1d:46:41:d8:8f:92:04:07:7e:
                    b5:05:ad:57:47:b0:3d:3b:d5:70:f9:60:8b:24:61:
                    27:96:0e:ce:18:32:1d:54:62:6f:25:1c:93:29:d8:
                    af:d6:d5:b5:48:dc:b6:04:81:32:c3:95:c9:a6:28:
                    83:3d:be:f8:f6:af:a0:67:e2:54:c2:0b:cc:e0:8e:
                    51:4a:c1:91:89:5a:a6:ee:4d:c1:a4:b3:94:21:8d:
                    44:75:dd:c2:bd:7a:b0:e9:76:9b:fb:a1:8d:53:d9:
                    a3:d3:98:4c:5c:ab:61:b5:60:9b:1b:69:c7:a3:51:
                    c2:d2:8b:a6:d9:39:77:d5:1f:8c:85:61:e2:67:47:
                    9b:28:2c:40:b1:4b:01:d7:e5:91:e2:84:f0:58:5c:
                    d5:14:f2:12:33:e2:35:e2:5b:0a:12:93:d0:87:f4:
                    77:06:a4:53:8b:6f:ae:00:aa:2b:c6:34:b5:27:56:
                    75:99:40:04:7c:46:eb:01:48:73:03:56:8b:31:31:
                    92:a5:fc:d1:12:30:20:c1:28:3f:88:d1:bf:d8:c0:
                    0a:2b:83:2d:be:77:11:a1:f0:ec:18:c1:14:3a:3e:
                    91:f7:09:6d:23:7c:a3:51:52:c2:88:8a:93:ad:71:
                    53:e9:79:de:ed:3f:83:bb:87:98:14:68:7a:a8:8a:
                    19:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:60:18:6B:3A:1A:CE:27:C1:74:BB:55:B5:B4:CA:5C:93:4A:18:F8
            X509v3 Authority Key Identifier:
                keyid:2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/3137372e38372e34342e302f32322d3234203d3e203532353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:9e:ac:60:3d:59:1b:03:19:86:c7:28:73:57:d4:60:ae:a8:
         f8:8b:fd:d5:a6:43:ce:78:41:41:2f:78:1d:ea:8a:df:ad:c1:
         db:cf:9b:af:99:8f:62:9c:cd:c2:5f:dd:2d:4b:65:fb:b1:4a:
         85:5c:8d:83:7e:3b:99:38:15:a2:e7:58:aa:a5:7b:ea:2d:a1:
         51:f5:78:c8:f1:0e:c7:a4:67:65:cc:ca:0d:51:7f:93:9d:15:
         c7:38:dd:bf:37:34:13:9e:9e:0f:e4:00:7a:48:b1:cd:c5:d4:
         61:2b:1a:26:6f:d5:7d:99:8a:eb:26:0d:d2:0e:1a:c1:4e:ce:
         fa:bd:f2:fb:b3:c6:9f:0c:32:5b:2a:ee:d5:db:39:26:a4:92:
         c3:87:13:30:22:10:b3:72:cc:d1:6e:84:f7:50:85:76:96:9a:
         8b:e0:fe:9c:7c:8c:f6:d9:65:f5:40:6e:23:b0:4a:9e:0c:0b:
         84:70:b4:28:c8:4e:71:60:05:cc:b3:bc:5b:1d:bf:e4:08:95:
         fe:7f:99:dd:4f:51:f3:a0:32:8e:c3:bc:2a:4f:91:e3:ae:81:
         19:9e:b4:ae:1c:76:ea:93:e8:bf:bb:cd:ce:65:bd:e0:aa:96:
         59:6a:54:b4:ae:9b:2c:8d:e1:9b:12:34:7d:9b:6f:6a:bd:9b:
         c7:9d:6a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:33:07 2025 by rpki-client