Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32342d3234203d3e203532373732.roa
File:                     3137372e33392e3135362e302f32342d3234203d3e203532373732.roa (raw, json)
Hash identifier:          pCC7G293J1T2+Cvw3ZkWBug99YsDwQRv47C5GkVt78g=
Subject key identifier:   59:81:F1:8D:62:0B:D9:CA:7D:D1:C9:88:EA:3F:94:46:9F:DB:1B:98
Certificate issuer:       /CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
Certificate serial:       43A155FE7145B6245988CD99AD921AB3FAF2AEB5
Authority key identifier: 32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32342d3234203d3e203532373732.roa
Signing time:             Fri 14 Feb 2025 17:47:42 +0000
ROA not before:           Fri 14 Feb 2025 17:42:42 +0000
ROA not after:            Fri 13 Feb 2026 17:47:42 +0000
asID:                     52772
IP address blocks:        177.39.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 01:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a1:55:fe:71:45:b6:24:59:88:cd:99:ad:92:1a:b3:fa:f2:ae:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
        Validity
            Not Before: Feb 14 17:42:42 2025 GMT
            Not After : Feb 13 17:47:42 2026 GMT
        Subject: CN=5981F18D620BD9CA7DD1C988EA3F94469FDB1B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b7:45:38:9f:31:31:4f:14:70:df:28:c4:13:
                    7d:fe:4d:98:bc:14:41:1f:35:9a:de:15:39:2a:2b:
                    6b:cb:a6:41:55:2e:9f:e5:b7:c0:14:73:be:b5:ac:
                    d9:a3:3b:83:be:9a:c6:9d:a4:8c:84:95:0c:17:3b:
                    fa:e0:23:bf:7e:80:eb:8c:e7:8f:1f:c6:51:09:af:
                    af:3b:c2:5b:4f:2d:73:bc:57:14:c5:56:e8:41:a1:
                    2a:fb:4d:55:e4:cb:93:d9:e1:69:c0:ec:d8:5b:5e:
                    99:c3:c9:03:da:fb:89:dc:ce:b3:75:e5:b9:11:81:
                    1d:c1:ed:18:14:d2:0c:e5:85:7d:0d:92:d1:9b:02:
                    48:fb:de:41:64:b7:b7:d4:bf:f9:49:3e:68:10:03:
                    70:f4:da:37:a9:cd:3a:7f:07:bc:b2:5c:22:41:47:
                    e0:92:27:6d:88:1e:24:f6:fb:82:71:65:d6:b5:29:
                    e6:fa:c7:d7:4f:0f:c8:09:42:d0:fb:f2:f7:20:5e:
                    68:e1:f6:db:19:b7:9e:38:bc:34:16:66:ae:27:21:
                    73:e3:42:f9:a3:9a:34:c9:9c:bf:29:8b:04:4b:ab:
                    e5:b0:18:0c:b0:a7:ca:c6:aa:53:8d:41:94:eb:55:
                    55:53:92:cc:db:48:7f:af:57:9d:71:2a:7e:b4:ad:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:81:F1:8D:62:0B:D9:CA:7D:D1:C9:88:EA:3F:94:46:9F:DB:1B:98
            X509v3 Authority Key Identifier:
                keyid:32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32342d3234203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:f5:38:bc:81:e7:56:64:fb:33:00:00:af:ba:13:43:2e:24:
         62:fc:ab:c2:db:08:7b:a7:09:8b:b7:09:42:ca:dd:64:81:f5:
         a4:e8:92:79:09:38:67:64:70:66:5b:c5:54:dc:af:75:46:ac:
         07:ef:f3:04:3e:a4:95:76:19:19:da:4b:1c:f8:f1:0f:11:28:
         e8:f8:49:51:40:e3:29:b2:c8:8a:2d:34:29:9c:bc:b0:df:89:
         04:e7:99:b0:2b:ba:60:83:bd:88:dc:ec:f0:d5:42:38:f4:bc:
         62:ce:3b:2e:a3:39:b1:36:3d:34:99:2d:1c:18:f0:d3:db:cb:
         c3:f2:d6:b0:90:32:27:0a:10:85:ba:19:b6:91:1f:81:6c:c6:
         95:de:e6:32:8d:08:56:c4:73:c1:d5:c5:af:fb:d9:d1:9e:17:
         d2:0b:2a:51:60:66:8d:c0:de:5e:57:24:a3:17:cf:c5:2f:18:
         12:59:a5:da:31:65:65:e6:84:b4:45:bd:c8:9a:6e:a4:46:95:
         1d:50:5e:15:c5:7b:3d:13:b5:2a:e8:83:d4:52:38:73:ed:49:
         8a:a6:91:55:4d:cc:ad:8d:60:3f:99:b3:61:27:bc:c6:55:63:
         15:4b:86:fa:99:4f:35:16:44:4f:33:bb:4f:45:8b:8d:55:f7:
         46:2c:22:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:32:28 2025 by rpki-client