Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3137372e3133362e38302e302f32322d3332203d3e20323632353839.roa
File:                     3137372e3133362e38302e302f32322d3332203d3e20323632353839.roa (raw, json)
Hash identifier:          D9uxwQHDTQVgWjHhWZFUrCVO9t6CRxjHM5YN4FVUtkU=
Subject key identifier:   C3:A5:79:B7:CB:0A:06:38:46:4F:B6:A5:17:57:98:AE:93:3E:9E:FC
Certificate issuer:       /CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
Certificate serial:       22FADFE9C41A6AE510CF4E790C9AB1C548CA4037
Authority key identifier: C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3137372e3133362e38302e302f32322d3332203d3e20323632353839.roa
Signing time:             Fri 07 Mar 2025 19:56:10 +0000
ROA not before:           Fri 07 Mar 2025 19:51:10 +0000
ROA not after:            Fri 06 Mar 2026 19:56:10 +0000
asID:                     262589
IP address blocks:        177.136.80.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 16:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fa:df:e9:c4:1a:6a:e5:10:cf:4e:79:0c:9a:b1:c5:48:ca:40:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
        Validity
            Not Before: Mar  7 19:51:10 2025 GMT
            Not After : Mar  6 19:56:10 2026 GMT
        Subject: CN=C3A579B7CB0A0638464FB6A5175798AE933E9EFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7a:5a:da:dc:e4:00:6a:4e:0a:a3:25:9d:53:
                    16:6c:e7:ea:1d:6f:35:7d:75:06:38:1b:f2:70:81:
                    05:34:6c:e0:88:dc:c4:43:f7:29:32:4e:11:9b:3c:
                    b6:30:25:3e:d8:27:bd:51:df:fe:e6:90:47:07:34:
                    33:f1:eb:15:2b:b7:35:ca:c5:29:4b:ed:1c:e8:64:
                    0d:7b:f8:b2:d1:ac:7b:6f:f1:46:03:60:92:01:69:
                    dd:22:98:06:f1:f5:c9:a9:6c:c8:94:38:81:9b:4c:
                    0e:81:26:94:58:10:09:e4:b7:c8:12:86:75:4d:cb:
                    43:bb:11:83:f9:1d:73:4f:ee:8a:a8:72:96:2b:0e:
                    a0:3b:a9:c1:6c:d5:5c:36:d8:d6:52:c1:69:3a:2e:
                    01:67:24:1e:51:f9:6f:18:42:3d:68:3a:63:4c:21:
                    2b:27:bf:07:6d:85:e8:2c:16:2c:73:a0:dc:c9:48:
                    54:5a:37:ec:50:84:e7:28:d7:de:77:62:be:d8:d9:
                    7b:48:84:78:02:8c:cf:e1:f9:2d:62:0c:c7:a1:ed:
                    06:da:00:de:98:72:f3:0c:74:48:ce:ad:e6:a8:87:
                    91:da:ac:25:62:1d:b6:1c:97:12:fc:70:c0:d3:f7:
                    7f:cd:a2:8f:35:70:ce:59:43:d9:16:42:ce:e1:aa:
                    31:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A5:79:B7:CB:0A:06:38:46:4F:B6:A5:17:57:98:AE:93:3E:9E:FC
            X509v3 Authority Key Identifier:
                keyid:C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3137372e3133362e38302e302f32322d3332203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:8c:b6:13:03:4d:d9:15:61:b8:44:a3:38:60:df:16:17:3c:
         56:d8:ae:ac:57:2d:f8:2c:63:e7:7d:25:12:84:58:da:75:d1:
         83:8d:09:51:f0:cd:bb:aa:57:41:32:60:7c:4e:f6:da:13:24:
         ef:83:a2:5a:04:6a:36:25:3d:89:d8:6c:8d:ac:bb:4c:e7:c4:
         40:74:40:68:d4:d9:36:6f:9e:34:53:33:84:9f:cb:ee:d3:e1:
         f9:16:a8:ae:b4:6c:a9:62:1e:e9:1a:7e:30:3c:e5:9e:19:5d:
         2d:98:e3:03:a6:fc:4d:85:8b:b5:85:c0:ac:1e:df:94:7d:ee:
         2a:ee:c5:f7:d2:71:b6:f4:21:31:51:c8:21:ce:41:7c:f7:e2:
         26:36:02:19:f6:2f:46:17:e7:84:6c:c7:0c:4f:9e:79:d9:23:
         ea:da:7e:54:14:48:2e:8f:53:a0:4d:56:ab:33:73:ea:62:cf:
         9f:4c:7e:d5:c6:c7:c0:cf:53:e4:a0:f2:19:d5:37:8c:06:ef:
         37:23:31:96:8f:85:1c:70:85:14:42:b7:f9:ea:ac:99:2e:f1:
         6e:67:b2:4f:26:7c:8a:ee:a7:cf:f9:ee:da:14:44:e0:b5:14:
         cc:9c:9a:1d:5d:5b:26:67:b0:29:53:42:f6:8d:40:f7:e1:a9:
         89:26:93:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:22 2025 by rpki-client