Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135372e302f32342d3234203d3e203532373732.roa
File:                     3137372e33392e3135372e302f32342d3234203d3e203532373732.roa (raw, json)
Hash identifier:          z3V/vqW7o/N4VkqzSouazOAAPOHoqekHdLa5Tp2lmO8=
Subject key identifier:   03:13:CF:7E:8D:CC:BF:80:A0:29:08:34:06:42:5F:6F:0E:0D:4D:EA
Certificate issuer:       /CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
Certificate serial:       336C22011D2EB3CBE4B37438413EFD0384F6E946
Authority key identifier: 32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135372e302f32342d3234203d3e203532373732.roa
Signing time:             Fri 14 Feb 2025 17:47:43 +0000
ROA not before:           Fri 14 Feb 2025 17:42:43 +0000
ROA not after:            Fri 13 Feb 2026 17:47:43 +0000
asID:                     52772
IP address blocks:        177.39.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 01:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:6c:22:01:1d:2e:b3:cb:e4:b3:74:38:41:3e:fd:03:84:f6:e9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
        Validity
            Not Before: Feb 14 17:42:43 2025 GMT
            Not After : Feb 13 17:47:43 2026 GMT
        Subject: CN=0313CF7E8DCCBF80A029083406425F6F0E0D4DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:79:f8:3f:66:db:6c:72:85:c1:36:8b:ca:
                    55:f5:b8:9d:31:7d:bd:da:76:3b:5f:25:43:42:6c:
                    56:6e:54:03:1b:ab:da:3a:15:14:aa:8e:1c:5d:ab:
                    0b:ed:f8:c4:d9:40:76:ff:25:b9:4c:87:16:f9:0f:
                    f0:99:2c:40:c1:d8:60:80:a8:74:51:4f:cb:e5:aa:
                    0c:45:9a:5c:73:e1:67:94:bf:e7:fa:f3:45:b3:63:
                    99:56:39:8a:f9:05:cf:30:6d:44:ab:bc:71:ea:6a:
                    3b:91:a3:18:a3:0a:48:b4:74:95:84:f0:58:80:eb:
                    d9:1d:2d:40:31:b9:aa:a0:8a:e7:34:e7:20:50:b1:
                    e2:9b:9a:08:36:48:94:a2:1c:e9:11:ba:15:79:0a:
                    74:17:14:40:f8:56:cc:59:5d:83:6c:d6:52:6f:d8:
                    f0:d2:9c:9c:40:b5:32:f6:0d:b2:16:b9:28:bd:5b:
                    37:07:dc:51:9d:cc:b6:c9:73:f0:85:a2:af:cf:09:
                    90:ba:50:8d:92:b8:1c:54:60:92:0d:7b:1e:1f:f4:
                    c5:95:97:5f:45:de:1e:04:1b:05:42:a7:5a:58:9a:
                    54:39:f1:97:d8:16:a9:3e:a5:69:8d:b5:73:48:a1:
                    dc:cd:b8:1b:1d:2d:01:76:1a:c7:69:94:cd:a1:23:
                    04:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:13:CF:7E:8D:CC:BF:80:A0:29:08:34:06:42:5F:6F:0E:0D:4D:EA
            X509v3 Authority Key Identifier:
                keyid:32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135372e302f32342d3234203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:20:0d:e4:c5:ed:f9:9e:bc:15:d6:cd:93:52:8f:7c:39:f0:
         57:94:5a:51:ae:76:e1:ff:31:71:6a:16:82:b6:a0:c6:26:f7:
         7a:60:a8:16:48:3f:5d:d5:bb:03:37:7f:b8:9f:35:12:6f:bd:
         79:1c:c4:c3:47:c4:bb:2f:50:a0:ca:67:e4:3e:02:d2:6f:36:
         5b:b9:98:6c:6e:c3:14:42:77:63:1f:65:09:c4:2e:e0:59:0b:
         86:2b:1e:38:1a:47:13:0e:66:66:d9:e2:a1:46:3e:19:bc:06:
         ba:ea:74:44:8c:f7:53:b3:4b:11:f0:09:26:5a:e0:97:ce:0d:
         8c:d5:fb:9f:a3:ee:9f:dc:f7:92:9f:46:6e:22:25:d2:f4:c0:
         3f:8e:43:84:c0:bb:86:1e:58:5a:aa:53:f1:8d:90:bf:16:f6:
         9c:cf:01:8d:0a:40:c0:b9:84:61:fc:d3:97:0e:2a:77:8a:65:
         1f:3c:9f:87:13:40:8f:00:74:37:87:65:09:9d:8a:14:81:00:
         4a:ae:82:70:6d:dc:76:d4:46:f6:6c:26:2d:11:d1:3a:48:b3:
         e9:2b:50:56:a6:45:4c:dd:9a:92:d4:07:56:1d:d3:0e:f5:bd:
         1e:3b:56:77:4f:33:ed:4c:29:7a:0a:b4:77:49:2f:d6:34:32:
         40:84:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:36:23 2025 by rpki-client