Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137372e38342e3139322e302f32342d3234203d3e203533313037.roa
File:                     3137372e38342e3139322e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier:          T1oUped69N5V58iauSu54jc9D9+rNJez4WtTYIMtf88=
Subject key identifier:   0D:2E:A3:13:2B:DB:A1:DB:45:F9:15:6D:BD:0F:98:F5:A1:E6:6E:FE
Certificate issuer:       /CN=231C01A4C21B4CA32569E7A61F40CB611354C269
Certificate serial:       5E2A87D07471D5FDBFEEA04ACE281A15503AA3E2
Authority key identifier: 23:1C:01:A4:C2:1B:4C:A3:25:69:E7:A6:1F:40:CB:61:13:54:C2:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137372e38342e3139322e302f32342d3234203d3e203533313037.roa
Signing time:             Tue 11 Mar 2025 16:09:50 +0000
ROA not before:           Tue 11 Mar 2025 16:04:50 +0000
ROA not after:            Tue 10 Mar 2026 16:09:50 +0000
asID:                     53107
IP address blocks:        177.84.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/231C01A4C21B4CA32569E7A61F40CB611354C269.crl
                          rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/231C01A4C21B4CA32569E7A61F40CB611354C269.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2a:87:d0:74:71:d5:fd:bf:ee:a0:4a:ce:28:1a:15:50:3a:a3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231C01A4C21B4CA32569E7A61F40CB611354C269
        Validity
            Not Before: Mar 11 16:04:50 2025 GMT
            Not After : Mar 10 16:09:50 2026 GMT
        Subject: CN=0D2EA3132BDBA1DB45F9156DBD0F98F5A1E66EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:52:d3:b9:43:33:77:27:a0:9c:d9:dd:16:
                    c7:f8:a7:cd:3c:9f:09:c7:9a:b8:ea:18:ce:24:b3:
                    7a:f8:3e:a2:dd:c3:0c:b8:7d:73:f7:dc:7c:d2:d4:
                    58:1c:03:d5:b3:c1:9c:48:af:ae:d1:3b:ea:1a:c9:
                    16:ce:c4:dc:fc:56:51:a1:83:4b:76:58:8a:98:a6:
                    fa:f3:60:cd:a2:4a:47:54:c0:f7:1f:5d:89:ca:e1:
                    8d:f0:20:7d:7c:ff:a1:12:b2:68:d1:e9:7e:db:91:
                    ba:6d:aa:94:bd:e3:e1:89:d9:5a:fd:05:2d:5d:d1:
                    40:c6:62:0c:cc:16:13:14:3d:c4:d9:3c:c7:d9:61:
                    ff:76:7a:37:2a:e2:b8:08:2f:46:1f:85:12:8a:32:
                    37:0a:c4:7b:8c:fd:f4:cd:71:62:94:59:e1:b2:fc:
                    e6:37:92:c9:ce:78:d0:a9:91:85:fc:44:6c:0b:27:
                    6c:72:09:c0:12:82:f6:e2:c5:18:8a:13:7e:83:70:
                    45:3a:92:a8:2a:15:94:62:79:e6:11:c4:db:2c:ca:
                    51:e9:48:f8:35:d7:51:e5:45:cf:62:a1:d3:70:06:
                    f2:ed:2e:81:1f:0d:57:43:b4:0d:dd:d3:20:5c:95:
                    2f:28:a8:f6:57:8c:9a:a6:47:fc:cd:2c:2f:56:99:
                    0d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2E:A3:13:2B:DB:A1:DB:45:F9:15:6D:BD:0F:98:F5:A1:E6:6E:FE
            X509v3 Authority Key Identifier:
                keyid:23:1C:01:A4:C2:1B:4C:A3:25:69:E7:A6:1F:40:CB:61:13:54:C2:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/231C01A4C21B4CA32569E7A61F40CB611354C269.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137372e38342e3139322e302f32342d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:c9:0c:32:fd:fb:9c:9b:26:5f:49:50:41:db:80:ee:0c:7d:
         13:41:34:f4:05:d7:13:b9:ae:ec:76:c2:08:09:51:d0:07:97:
         49:6d:cb:b2:b1:00:72:5a:93:f9:24:f2:a1:b6:9f:06:65:f7:
         a9:f0:63:f7:5d:4a:39:57:b5:30:29:22:34:bd:5d:3f:1b:6e:
         b2:de:1b:18:b9:3d:87:15:b0:d7:52:ba:5a:c4:b2:31:f9:30:
         75:66:a4:46:34:13:e2:22:53:4f:b2:88:34:f5:95:9e:31:ed:
         f9:c1:44:75:21:6e:0c:f6:f8:8d:c8:a3:f5:2f:e0:53:ef:39:
         d7:ad:20:61:66:ad:09:52:0e:78:95:d0:80:aa:a8:ab:8e:a7:
         11:14:97:8d:ec:d1:68:48:61:0d:46:a6:39:38:bf:04:16:d8:
         74:2a:cd:8b:7d:86:a3:04:24:a6:83:d4:5b:15:cb:8f:2d:95:
         4f:35:f6:5d:82:58:4f:05:b1:7f:99:e9:77:bf:4c:2b:c7:15:
         f9:13:15:3f:46:ec:2c:7a:9a:40:ad:75:6f:d9:15:d1:1e:33:
         d9:6f:ad:58:46:ce:bf:ba:b3:eb:76:6b:bf:61:57:42:d3:81:
         b7:73:98:82:17:f7:8f:3d:45:bd:a3:c1:a9:2a:4c:de:0e:56:
         66:b0:c3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:46 2025 by rpki-client