Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135372e302f32342d3234203d3e20323633343537.roa
File:                     3137372e3139302e3135372e302f32342d3234203d3e20323633343537.roa (raw, json)
Hash identifier:          uK8wgZ4yvGd08Kukijly+3zJN/o619tfoYIigLOdWQQ=
Subject key identifier:   ED:07:47:4B:DA:BD:9F:EE:FC:80:F5:B5:14:79:C9:4D:10:CE:E9:A6
Certificate issuer:       /CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
Certificate serial:       6D18FA463655F1AA385EE8DD10F846F919106B72
Authority key identifier: D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135372e302f32342d3234203d3e20323633343537.roa
Signing time:             Thu 06 Mar 2025 08:46:48 +0000
ROA not before:           Thu 06 Mar 2025 08:41:48 +0000
ROA not after:            Thu 05 Mar 2026 08:46:48 +0000
asID:                     263457
IP address blocks:        177.190.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl
                          rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 23:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:18:fa:46:36:55:f1:aa:38:5e:e8:dd:10:f8:46:f9:19:10:6b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
        Validity
            Not Before: Mar  6 08:41:48 2025 GMT
            Not After : Mar  5 08:46:48 2026 GMT
        Subject: CN=ED07474BDABD9FEEFC80F5B51479C94D10CEE9A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c0:91:f3:4d:7d:ad:96:0d:b9:39:45:ec:92:
                    21:ad:17:45:99:18:03:22:90:7f:31:bd:13:16:1e:
                    69:59:6a:b0:93:d1:e0:5c:b2:e0:f2:1c:ef:ad:f1:
                    10:4f:8e:cb:a2:f2:cb:98:0c:0a:66:50:e9:e9:8e:
                    cf:a3:6a:38:3d:96:26:28:bc:98:ae:3d:7c:f7:38:
                    48:e3:99:38:5d:91:24:8c:eb:1f:59:38:2f:a3:6f:
                    67:27:7e:76:92:b9:ab:a9:b7:48:b4:5c:dd:98:78:
                    73:d8:05:d2:63:e3:64:82:d8:2e:d2:70:0a:59:95:
                    85:dc:fe:b1:d3:81:a3:94:8f:ab:23:11:b1:96:8f:
                    c0:87:bb:53:62:4a:22:fd:39:7a:64:f8:92:6f:1e:
                    ee:b9:be:a6:8a:5c:6b:9b:8a:e0:06:fc:6a:f4:f9:
                    be:53:9e:f3:fc:c5:6f:4c:98:b4:69:0c:d5:a3:b9:
                    1e:fa:57:a1:05:bc:ab:a5:1b:db:03:69:a1:21:75:
                    d4:f8:2d:d7:77:a8:6b:9a:71:b6:f2:26:ad:69:17:
                    d7:a7:8c:69:bb:27:71:11:b3:e7:d1:2d:a4:55:52:
                    ee:b4:e3:03:f4:e2:3c:a3:9d:e0:ed:7c:b4:77:a3:
                    ea:d3:bf:ca:71:ca:0d:aa:27:c2:22:8f:1e:56:b9:
                    a0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:07:47:4B:DA:BD:9F:EE:FC:80:F5:B5:14:79:C9:4D:10:CE:E9:A6
            X509v3 Authority Key Identifier:
                keyid:D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135372e302f32342d3234203d3e20323633343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:c5:7c:07:48:51:99:80:58:f6:51:e0:67:a3:58:6f:8b:b4:
         24:56:3c:d5:ab:c2:3e:02:af:91:0f:ea:e6:5c:81:9d:58:ff:
         de:9b:b9:6a:01:1a:12:28:41:26:dd:2f:c3:34:0d:99:a9:bb:
         60:dd:33:64:5b:b2:4b:43:a9:d9:4f:80:ad:0f:6b:22:fe:8d:
         e4:1c:a7:0b:df:5d:b9:33:0b:89:10:93:88:c2:8f:c9:41:59:
         43:e8:9c:85:f2:a2:69:87:60:a3:72:ff:34:d6:97:47:60:bb:
         52:79:dd:a6:a7:5f:a3:4b:1a:fc:01:7a:e6:ac:58:cb:e5:4c:
         9f:67:14:bf:f2:3e:87:57:cc:ba:5b:65:11:51:c7:40:3b:da:
         d7:09:a1:27:f1:d6:a0:a7:d3:2e:bf:56:34:95:58:62:38:3a:
         c2:f7:c6:ee:47:63:71:e8:b3:be:a6:ae:19:53:07:fa:c4:06:
         40:59:fe:39:40:9a:1c:de:a5:75:53:a8:b0:93:ad:51:07:ea:
         fc:f7:7f:e4:06:c6:c4:f8:3a:dc:36:11:51:f5:1b:91:9b:07:
         3e:ce:89:e5:f2:9b:3f:fd:d5:28:46:56:f7:07:c4:e7:e4:71:
         0b:5e:59:70:1b:ba:aa:e9:63:cd:33:61:ea:64:28:f5:47:ad:
         e8:ee:b0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:24:50 2025 by rpki-client