Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135332e302f32342d3234203d3e20323633343537.roa
File:                     3137372e3139302e3135332e302f32342d3234203d3e20323633343537.roa (raw, json)
Hash identifier:          6GRBUAp2v6ILaljMfJjt0B1ZRqVzBHKEb7Jsbi4nT3w=
Subject key identifier:   5C:59:F5:34:98:E1:B8:58:BC:D7:21:67:82:BC:DA:E3:55:8D:7E:FD
Certificate issuer:       /CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
Certificate serial:       3AE131F3A467E4F2D7E7C5352FAC62F580362420
Authority key identifier: D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135332e302f32342d3234203d3e20323633343537.roa
Signing time:             Thu 06 Mar 2025 08:46:47 +0000
ROA not before:           Thu 06 Mar 2025 08:41:47 +0000
ROA not after:            Thu 05 Mar 2026 08:46:47 +0000
asID:                     263457
IP address blocks:        177.190.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl
                          rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 23:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e1:31:f3:a4:67:e4:f2:d7:e7:c5:35:2f:ac:62:f5:80:36:24:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
        Validity
            Not Before: Mar  6 08:41:47 2025 GMT
            Not After : Mar  5 08:46:47 2026 GMT
        Subject: CN=5C59F53498E1B858BCD7216782BCDAE3558D7EFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c4:7f:6a:a3:93:21:b9:0f:e9:de:53:73:8f:
                    24:01:e3:53:00:ed:d4:5f:89:9e:43:f1:e8:58:32:
                    07:09:82:dc:b6:5f:d0:26:8c:8b:28:f7:b5:01:5d:
                    98:0a:73:58:fb:ff:1e:d0:ca:f1:2d:37:6f:19:18:
                    c8:37:88:e5:8f:53:89:2e:90:55:35:e8:83:39:c2:
                    50:21:37:68:6e:9c:5e:ec:a3:f2:d8:8b:94:ea:5f:
                    ed:67:26:e7:d2:a0:60:c8:59:43:87:cb:74:f0:34:
                    7b:7a:c6:c1:28:c5:19:f0:09:37:87:bd:95:cc:c3:
                    c1:4f:7a:ec:f7:22:0a:a4:fa:a2:4f:7e:b5:1a:07:
                    d9:79:53:c6:05:fe:86:8e:b8:0e:d5:be:57:5c:b0:
                    22:d7:76:5c:26:5c:2a:bc:b4:21:15:9e:6f:c3:26:
                    cf:6e:40:c3:07:0a:d3:22:ab:22:39:8f:17:f8:1a:
                    41:57:13:e3:f0:c7:bd:77:39:a3:86:cb:4d:7a:cd:
                    f0:c5:c0:d8:fd:38:a6:92:23:43:d9:a2:be:a8:6d:
                    7f:69:fa:b1:46:a4:21:f3:23:99:07:a9:1c:e7:f6:
                    b7:87:89:ff:a2:3d:15:f6:19:ef:93:08:3d:00:53:
                    e4:61:f4:2e:e2:90:03:0f:9a:92:e7:61:5f:5d:1a:
                    d9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:59:F5:34:98:E1:B8:58:BC:D7:21:67:82:BC:DA:E3:55:8D:7E:FD
            X509v3 Authority Key Identifier:
                keyid:D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135332e302f32342d3234203d3e20323633343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:9e:86:59:be:e8:d1:38:63:22:bf:e5:3e:98:00:35:93:8b:
         f3:09:5c:3e:58:f2:b3:59:5d:03:50:e3:a6:36:59:0f:de:43:
         24:fe:e4:70:f9:6f:88:0f:97:62:32:3a:fc:73:91:58:d2:90:
         e6:c5:b1:37:ce:1b:e2:e2:50:89:63:8e:c3:e7:de:32:b4:fe:
         99:30:70:33:09:df:e6:e2:24:6b:82:34:51:29:23:23:a8:74:
         fd:13:3b:53:62:2c:9c:c2:2d:84:0f:a3:1a:cc:d6:1d:27:5a:
         52:fb:a5:00:7b:a7:e3:f4:c0:6b:ca:a8:5d:7d:b7:da:a8:f4:
         19:f6:30:17:43:84:81:a8:3d:2f:0d:54:43:bc:6b:2c:e2:45:
         1e:25:9e:1a:7b:74:6b:3a:35:05:8e:8d:96:0a:7e:4c:a8:27:
         04:77:a1:56:d2:95:56:4f:f8:40:b3:e6:3c:1b:82:96:cf:fa:
         d5:09:1b:0d:5d:e5:0f:19:3a:c4:69:cc:3a:ff:ec:61:1d:12:
         56:12:7d:3e:62:d8:ec:48:fb:5c:92:f6:79:77:6a:41:f0:43:
         f2:c0:73:d2:89:3a:28:79:e7:39:a8:00:af:04:bc:74:5c:20:
         66:73:af:57:5f:8f:d3:f2:cc:91:7c:a0:a9:7f:2d:c5:23:d4:
         cf:51:71:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:28:59 2025 by rpki-client