Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3133372e302f32342d3330203d3e203238313838.roa
File:                     3137372e31322e3133372e302f32342d3330203d3e203238313838.roa (raw, json)
Hash identifier:          7R4b8QMzWNRkAzBMAFxzmwxlCte6RgAxHcj1TdGgpmQ=
Subject key identifier:   C0:96:2D:1F:EB:6F:92:1D:88:8B:E6:D4:04:47:AA:77:49:C5:DE:96
Certificate issuer:       /CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Certificate serial:       5566E3F1D8BA7EC1F39DB67E0FB3061E90514B5F
Authority key identifier: E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3133372e302f32342d3330203d3e203238313838.roa
Signing time:             Wed 05 Feb 2025 22:57:52 +0000
ROA not before:           Wed 05 Feb 2025 22:52:52 +0000
ROA not after:            Wed 04 Feb 2026 22:57:52 +0000
asID:                     28188
IP address blocks:        177.12.137.0/24 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl
                          rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 13:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:66:e3:f1:d8:ba:7e:c1:f3:9d:b6:7e:0f:b3:06:1e:90:51:4b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
        Validity
            Not Before: Feb  5 22:52:52 2025 GMT
            Not After : Feb  4 22:57:52 2026 GMT
        Subject: CN=C0962D1FEB6F921D888BE6D40447AA7749C5DE96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:59:67:23:8f:1e:42:8e:a3:c3:ea:82:57:
                    cd:f3:0b:9e:55:e4:13:9b:ce:50:a3:68:2f:11:21:
                    ba:f9:41:29:55:0f:68:97:b9:6a:02:44:f5:c7:4f:
                    38:d8:c4:98:9c:a0:c8:03:30:a1:97:f1:75:7b:3a:
                    6b:ae:d4:18:4b:2c:e6:c3:81:94:d3:a6:ed:3c:ca:
                    f9:2c:09:42:3e:c9:25:b7:78:13:d6:ce:e9:bc:d8:
                    1e:ce:a8:34:59:54:9f:46:bf:1e:04:f2:19:36:2f:
                    7a:ce:4c:c6:55:93:18:67:cf:6d:ca:ca:0a:3f:61:
                    23:c9:29:72:76:0c:de:e8:80:74:19:56:a0:58:ae:
                    cd:06:43:b5:9d:0c:44:b9:a4:07:70:23:79:6c:4e:
                    e0:a1:eb:64:e4:cd:6a:0a:46:9b:37:74:d1:8e:05:
                    e3:95:7a:b0:c0:6f:6e:3e:fe:3c:a2:81:be:4f:1a:
                    ed:5e:d3:f4:f7:18:b9:b8:05:aa:5c:c0:b1:a9:48:
                    0f:2c:7a:88:bc:2b:66:41:4b:54:3d:9c:c0:7c:0d:
                    cd:2c:07:f7:e4:c4:ec:dc:4b:f3:90:f9:a1:ac:1b:
                    4c:06:da:0b:05:8e:c0:92:8d:98:35:3d:dc:68:85:
                    b7:7d:9e:01:7c:49:b2:10:f3:9f:26:03:fc:b1:f9:
                    28:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:96:2D:1F:EB:6F:92:1D:88:8B:E6:D4:04:47:AA:77:49:C5:DE:96
            X509v3 Authority Key Identifier:
                keyid:E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3133372e302f32342d3330203d3e203238313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:f1:fc:40:5d:55:38:bf:d3:f0:79:52:3a:85:7d:be:86:83:
         9f:44:28:1f:f9:25:a2:b7:7d:f8:e1:47:ad:12:51:11:5e:42:
         87:14:00:8b:bf:cd:ab:fa:e8:e1:af:9f:f3:94:ab:16:e3:44:
         00:43:90:13:93:34:c5:d9:1f:5f:6e:15:2a:19:a8:45:e6:4a:
         25:6d:3e:7d:a9:79:ff:b6:88:a1:c9:44:f6:b4:a1:69:ae:5a:
         f8:17:29:a9:07:9f:06:48:12:97:a2:34:2c:3a:53:ec:4d:17:
         04:f8:40:62:b1:77:61:cb:99:03:80:51:5c:4a:bd:ec:67:1d:
         ec:94:60:f2:f1:f9:a2:fb:51:9b:4f:e7:b2:d7:1b:41:0c:23:
         0d:06:02:1c:19:50:1a:44:1a:c9:91:21:38:45:56:48:4f:6e:
         55:ee:31:6e:f5:b6:5d:5e:3f:13:bf:e0:6e:5b:14:53:67:d2:
         86:de:7d:01:8c:3d:62:69:22:a5:8b:29:cd:6d:17:30:ad:22:
         37:50:aa:57:b5:37:47:4c:ef:54:02:71:b8:dd:08:92:7a:51:
         a0:87:3d:8d:2d:61:8a:fb:39:58:f8:ed:c9:db:00:85:3b:b8:
         4a:1f:d5:f7:7a:2e:7d:44:50:9c:05:01:c0:a9:16:5a:05:e6:
         e3:3c:b9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:46:13 2025 by rpki-client