Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135392e302f32342d3234203d3e203532373732.roa
File:                     3137372e33392e3135392e302f32342d3234203d3e203532373732.roa (raw, json)
Hash identifier:          3yHikU2vrZOdIdzD7gesyY/gkrRzidDWWCYOIyEB9ZI=
Subject key identifier:   C9:78:32:C1:31:E8:D4:EE:B7:B7:E8:D6:E1:41:D3:27:5C:A9:00:14
Certificate issuer:       /CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
Certificate serial:       0354E8CF39971D9F43319FCEB86098145819ECF2
Authority key identifier: 32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135392e302f32342d3234203d3e203532373732.roa
Signing time:             Fri 14 Feb 2025 17:47:48 +0000
ROA not before:           Fri 14 Feb 2025 17:42:48 +0000
ROA not after:            Fri 13 Feb 2026 17:47:48 +0000
asID:                     52772
IP address blocks:        177.39.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 08:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:54:e8:cf:39:97:1d:9f:43:31:9f:ce:b8:60:98:14:58:19:ec:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
        Validity
            Not Before: Feb 14 17:42:48 2025 GMT
            Not After : Feb 13 17:47:48 2026 GMT
        Subject: CN=C97832C131E8D4EEB7B7E8D6E141D3275CA90014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2d:3e:1a:e4:f6:39:5f:59:e8:8d:d3:60:28:
                    47:13:94:68:ef:ed:01:35:12:2e:93:91:85:4b:d3:
                    0c:e2:8d:da:e4:e1:1c:52:f9:12:36:34:53:73:82:
                    a5:b7:7c:42:d2:62:07:08:b4:b3:30:df:34:6a:25:
                    28:08:3e:4d:9f:df:64:fe:3f:d7:66:ea:c6:de:33:
                    d5:1e:2e:3b:73:f5:da:15:60:01:55:c3:a5:ff:df:
                    7c:66:bf:f7:7a:f1:37:46:c5:8e:17:eb:d7:92:d2:
                    12:5c:01:72:2c:e4:a1:9c:dd:74:c2:f6:7d:f7:e6:
                    91:4e:87:de:3b:fb:07:e7:f7:ca:dc:ee:97:d1:0e:
                    6b:97:3c:6a:4f:a9:45:ef:63:89:d7:94:04:c3:87:
                    98:98:f7:f5:91:e6:0d:3b:ab:b1:28:83:07:95:c6:
                    f9:fc:74:df:8e:6e:3f:1f:4b:c3:12:79:aa:0e:5f:
                    36:a0:2f:a9:a6:58:3f:b4:5a:11:db:70:5f:59:ac:
                    d9:86:fc:14:52:09:50:32:78:45:ae:d8:de:05:05:
                    e5:80:f4:1d:ae:bb:ec:2c:7d:db:f4:46:22:28:79:
                    70:cc:40:1c:f2:6c:a4:cc:8b:2f:f7:b3:dc:1f:19:
                    8e:9a:da:0b:20:e9:53:0b:e6:3d:9d:ea:44:4a:68:
                    a0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:78:32:C1:31:E8:D4:EE:B7:B7:E8:D6:E1:41:D3:27:5C:A9:00:14
            X509v3 Authority Key Identifier:
                keyid:32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135392e302f32342d3234203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:55:9c:a9:b2:f4:1e:28:a1:80:54:d1:69:f5:6d:cc:ab:52:
         e6:eb:48:49:70:74:38:e1:4f:48:90:24:98:1e:da:81:c5:87:
         a9:39:73:2e:fa:27:58:56:84:62:43:04:30:42:66:44:97:3f:
         35:59:b9:bc:61:b5:7c:8b:b1:f9:a5:45:41:7b:4e:e3:3e:4d:
         48:fc:39:57:39:c7:77:21:b4:80:c7:35:3f:5d:58:64:a1:ac:
         61:59:de:07:c4:93:aa:db:3f:a2:1f:a6:f3:9b:d8:0b:3d:d4:
         b8:18:13:9b:fc:fe:9d:14:49:96:e9:31:e0:57:f0:2e:66:a2:
         47:33:ee:dd:f0:1d:a9:8f:03:76:19:f3:7d:38:29:7e:60:13:
         ea:2a:b7:6b:26:a3:0a:50:9d:3c:7d:1f:ec:cd:ac:42:79:0b:
         86:f0:42:25:d1:ee:88:1a:48:e8:78:b4:62:08:a6:17:c1:e5:
         74:cb:30:7f:27:1e:20:ba:d4:09:e6:46:e0:f2:f4:79:b3:86:
         ed:92:c4:12:3b:25:fb:24:0c:2a:b6:ba:b0:c7:9d:8a:1f:b3:
         c7:05:d0:a5:15:07:a4:c1:ad:c7:4c:c1:f1:4f:f7:86:e5:94:
         4b:29:5d:5a:df:54:d2:e4:5c:4a:54:53:b9:47:15:8b:53:1e:
         cc:62:4b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:06 2025 by rpki-client