Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137372e38342e3139362e302f32322d3234203d3e20323632353930.roa
File:                     3137372e38342e3139362e302f32322d3234203d3e20323632353930.roa (raw, json)
Hash identifier:          OT+0wHq9GUym/9a3oyZl/ZyAEuH25hujUY3z0s1jaiA=
Subject key identifier:   70:1E:1D:60:02:D8:A5:06:E5:80:71:45:56:1C:B3:5D:14:A2:6E:B6
Certificate issuer:       /CN=231C01A4C21B4CA32569E7A61F40CB611354C269
Certificate serial:       29F4DCD1002669AE55189BEBD568CEA42E32E36D
Authority key identifier: 23:1C:01:A4:C2:1B:4C:A3:25:69:E7:A6:1F:40:CB:61:13:54:C2:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137372e38342e3139362e302f32322d3234203d3e20323632353930.roa
Signing time:             Tue 11 Mar 2025 16:26:32 +0000
ROA not before:           Tue 11 Mar 2025 16:21:32 +0000
ROA not after:            Tue 10 Mar 2026 16:26:32 +0000
asID:                     262590
IP address blocks:        177.84.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/231C01A4C21B4CA32569E7A61F40CB611354C269.crl
                          rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/231C01A4C21B4CA32569E7A61F40CB611354C269.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 19:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f4:dc:d1:00:26:69:ae:55:18:9b:eb:d5:68:ce:a4:2e:32:e3:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231C01A4C21B4CA32569E7A61F40CB611354C269
        Validity
            Not Before: Mar 11 16:21:32 2025 GMT
            Not After : Mar 10 16:26:32 2026 GMT
        Subject: CN=701E1D6002D8A506E5807145561CB35D14A26EB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:47:fd:81:6c:28:df:bf:1a:78:1e:45:a1:4c:
                    5a:0f:d3:4e:66:66:a5:60:58:a2:f2:92:79:f8:e2:
                    36:5f:50:f4:ec:74:1c:b9:de:c4:61:29:6e:87:0e:
                    e4:f2:47:7d:65:b6:19:33:74:38:c3:2e:42:89:4d:
                    5d:a7:de:72:5b:0d:97:be:96:e0:7f:fe:cf:c4:58:
                    24:04:8f:84:e4:65:77:e4:f1:c0:6f:ce:b5:35:ce:
                    05:84:ae:ac:02:02:a8:5d:0c:80:d7:ad:70:74:66:
                    45:b7:23:86:2d:92:cc:93:04:1d:10:e5:a9:a0:c2:
                    d2:5f:b1:92:6b:61:21:7d:05:49:e3:1b:d6:7a:55:
                    a4:7b:83:10:18:02:a1:45:75:8d:ec:8f:5a:cf:f5:
                    2b:b5:8c:4b:24:2e:8d:a1:da:03:9f:3a:9b:08:d8:
                    9b:6b:c2:67:e5:e4:6c:63:52:5a:2e:5d:49:89:14:
                    f1:eb:11:ff:26:3c:fa:0c:ab:71:17:54:83:c7:e5:
                    27:f5:77:34:cc:1d:dd:7d:b5:2b:7f:2e:89:79:5e:
                    61:13:13:6d:b7:11:ee:37:16:5f:d5:eb:9f:30:95:
                    61:74:6b:bc:c6:63:8b:aa:fa:af:dc:aa:5c:3a:3a:
                    9c:e1:a3:77:a4:e0:dd:b0:13:eb:28:a7:f7:41:3d:
                    97:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1E:1D:60:02:D8:A5:06:E5:80:71:45:56:1C:B3:5D:14:A2:6E:B6
            X509v3 Authority Key Identifier:
                keyid:23:1C:01:A4:C2:1B:4C:A3:25:69:E7:A6:1F:40:CB:61:13:54:C2:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/231C01A4C21B4CA32569E7A61F40CB611354C269.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137372e38342e3139362e302f32322d3234203d3e20323632353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:14:6b:20:ba:77:6f:79:02:ac:43:3c:70:22:02:03:18:4d:
         b5:8b:f8:fe:e3:57:46:0b:d9:5b:2b:87:33:1e:a2:65:a0:fd:
         3f:b3:cc:3a:07:16:45:16:17:e4:fc:59:2b:8f:c8:63:7a:18:
         08:89:f3:90:2d:d7:9a:ab:b5:47:5e:86:57:9e:60:49:b0:bb:
         c9:82:5f:b4:f0:67:56:fd:e3:8b:2b:f9:01:91:c4:b2:37:94:
         56:a3:48:f7:a4:a0:e5:6d:be:d9:05:9e:a8:8b:d0:42:c6:20:
         41:cf:bc:fb:62:92:4a:af:14:6e:35:c6:49:0a:e8:da:e1:99:
         5a:44:ee:62:af:3a:d4:ca:98:16:5c:84:87:64:72:51:a8:ec:
         a7:7e:8d:8b:48:7b:99:04:df:cc:8e:45:ad:3b:b9:9e:36:2f:
         ed:c0:cb:46:a5:b8:22:ae:dd:85:1e:d6:e6:a8:cc:e0:59:73:
         e3:a4:39:9f:39:52:c1:c3:76:e2:af:e7:be:53:16:15:bc:2c:
         49:16:ac:e3:36:0d:00:c9:50:11:b3:c8:4e:5d:1b:9f:e2:cb:
         f9:73:4a:a6:29:cf:81:3c:10:85:11:f5:29:28:78:d4:41:45:
         2a:13:97:73:bb:71:ba:00:ed:93:c7:0b:ea:e9:e8:3d:c4:6e:
         7e:bc:43:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:30:35 2025 by rpki-client