Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3137372e38342e3136302e302f32312d3332203d3e203232333831.roa
File:                     3137372e38342e3136302e302f32312d3332203d3e203232333831.roa (raw, json)
Hash identifier:          kU0A+yagDSZ76W8EDK0hw3yVYlLfR+9aMmdvo1rypas=
Subject key identifier:   EE:CD:44:C5:97:5A:F9:E7:34:C0:66:0F:0E:A3:A0:5F:96:F1:9B:26
Certificate issuer:       /CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
Certificate serial:       07609234F257AED6B3BF7944840221D1F5D1BF48
Authority key identifier: C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3137372e38342e3136302e302f32312d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:58:19 +0000
ROA not before:           Fri 07 Mar 2025 19:53:19 +0000
ROA not after:            Fri 06 Mar 2026 19:58:19 +0000
asID:                     22381
IP address blocks:        177.84.160.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 09:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:60:92:34:f2:57:ae:d6:b3:bf:79:44:84:02:21:d1:f5:d1:bf:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
        Validity
            Not Before: Mar  7 19:53:19 2025 GMT
            Not After : Mar  6 19:58:19 2026 GMT
        Subject: CN=EECD44C5975AF9E734C0660F0EA3A05F96F19B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:bc:5e:73:f8:1e:43:e1:f8:e7:ef:07:c6:13:
                    fb:09:cc:eb:9d:9f:c4:e2:d0:33:0c:fa:9f:67:d5:
                    c9:7b:2e:72:8c:cb:57:0d:ec:98:fc:a7:77:ee:e9:
                    2e:1a:92:6c:05:e0:4c:70:37:f1:07:82:e7:af:f5:
                    d0:91:8d:73:a9:b6:c8:af:ce:99:05:cc:f5:14:2c:
                    a4:ac:94:ba:21:6d:ef:e1:f1:cb:4e:4c:ae:c0:f6:
                    f6:96:21:3d:c5:36:43:80:0a:62:86:1e:40:d9:59:
                    22:52:eb:35:76:53:62:e1:c5:d7:3b:a3:d2:9d:83:
                    ac:b4:f5:8a:58:a4:68:ba:8e:94:95:5a:17:73:d8:
                    75:06:66:e4:6d:cf:e2:45:b5:c5:1c:04:19:4f:c5:
                    46:ae:f4:24:eb:e7:c2:3c:6e:d8:6e:16:a1:1c:bb:
                    d7:31:2d:47:77:50:66:04:17:b2:bf:a4:58:fe:cc:
                    cd:d8:10:eb:3d:f9:13:c3:17:e1:26:f8:c3:d0:42:
                    62:1b:f8:e2:01:2f:98:85:8d:1b:65:1e:4a:82:81:
                    93:27:38:d6:a9:e3:e6:fa:2b:42:ad:53:d9:dd:72:
                    47:11:fd:86:f6:57:b1:db:d3:23:c8:0b:b8:06:6f:
                    96:be:ab:6f:9e:32:b1:4c:8a:f1:62:4f:eb:14:55:
                    22:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CD:44:C5:97:5A:F9:E7:34:C0:66:0F:0E:A3:A0:5F:96:F1:9B:26
            X509v3 Authority Key Identifier:
                keyid:C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3137372e38342e3136302e302f32312d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:90:1c:15:d2:b7:57:06:d8:64:9e:65:6b:46:19:56:bf:ad:
         bf:c6:22:b9:cf:01:4e:34:2d:e1:a2:75:7b:da:fc:5a:c3:9c:
         cc:00:8c:65:09:a7:e8:44:0d:96:20:ee:1b:2e:95:0b:ed:35:
         b0:e0:30:df:b3:c0:bf:25:52:c7:55:08:38:3c:ab:98:bf:d3:
         9e:90:d7:d6:0d:c1:17:21:64:52:18:4a:57:22:87:f0:e6:0c:
         0d:4c:33:ad:f5:28:3f:89:d4:d0:ed:f0:9e:6f:88:47:1c:88:
         46:4d:35:32:cc:fe:ce:1a:9a:86:77:92:70:51:44:0c:7a:bc:
         9c:88:e5:d0:05:e6:11:a1:b6:67:d3:2c:fb:87:84:29:27:76:
         42:a0:1d:68:e8:4c:1c:f8:a0:6e:e2:74:d2:c2:1c:d7:59:81:
         a2:7f:37:3d:ed:b5:fe:17:fb:b4:24:ff:01:4c:22:a3:fb:8c:
         23:fb:1d:70:c1:49:c8:f1:2c:40:3c:06:25:a8:97:0a:60:a4:
         2c:8b:12:3c:cc:68:f4:56:04:99:6c:f1:19:41:7a:a8:10:24:
         62:9b:26:5f:91:f8:be:d7:c4:b2:88:c1:cf:35:93:35:5f:a1:
         01:7f:16:5b:0e:38:3a:f7:d0:ba:38:5f:91:5a:60:bd:8e:f3:
         d1:1a:78:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:42:57 2025 by rpki-client