Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/3137372e3130372e39362e302f32302d3234203d3e20323632333233.roa
File:                     3137372e3130372e39362e302f32302d3234203d3e20323632333233.roa (raw, json)
Hash identifier:          9E6v7aUkq5OYcAg9Fdv9phUVgTC569p8vpyft33QfSM=
Subject key identifier:   D9:67:BB:97:CE:72:AE:A1:6D:28:C5:AC:5A:84:8C:32:D9:B4:F3:C5
Certificate issuer:       /CN=BF6A5837C3F4344BD78A072E1B9834FDE6824283
Certificate serial:       3975EFAB9505F941BC52B26E00740C0E6D633E83
Authority key identifier: BF:6A:58:37:C3:F4:34:4B:D7:8A:07:2E:1B:98:34:FD:E6:82:42:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/3137372e3130372e39362e302f32302d3234203d3e20323632333233.roa
Signing time:             Thu 06 Mar 2025 09:19:45 +0000
ROA not before:           Thu 06 Mar 2025 09:14:45 +0000
ROA not after:            Thu 05 Mar 2026 09:19:45 +0000
asID:                     262323
IP address blocks:        177.107.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.crl
                          rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 05:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:75:ef:ab:95:05:f9:41:bc:52:b2:6e:00:74:0c:0e:6d:63:3e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF6A5837C3F4344BD78A072E1B9834FDE6824283
        Validity
            Not Before: Mar  6 09:14:45 2025 GMT
            Not After : Mar  5 09:19:45 2026 GMT
        Subject: CN=D967BB97CE72AEA16D28C5AC5A848C32D9B4F3C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:84:40:40:7a:1b:e7:80:61:7d:c2:87:00:
                    ad:02:63:2a:7e:68:b7:33:07:f4:20:0c:c1:3e:91:
                    9f:18:7c:e7:87:e4:2e:ed:15:7e:b5:df:4a:48:4f:
                    63:de:23:b2:f1:d2:ce:e3:93:a2:fd:f2:ec:a6:5b:
                    7b:f9:fb:32:be:84:1c:dc:b4:c4:6c:8b:26:ee:37:
                    2f:86:fb:ef:47:30:9f:6d:f0:02:39:de:75:30:8b:
                    dd:02:ec:4e:4d:63:54:fe:83:c0:70:ff:d2:fb:3f:
                    55:ff:3f:d3:00:e5:1a:0e:e9:29:f1:da:6d:94:9d:
                    a3:0d:de:96:9b:9a:40:c2:d7:ef:3a:9a:dd:42:01:
                    6d:66:8e:20:2b:f9:25:6e:21:b7:e3:27:2c:f9:53:
                    17:57:06:9b:f8:73:ea:9d:a9:8a:66:00:f8:fd:de:
                    79:a0:84:56:b8:5b:e8:65:50:a9:ce:66:2f:db:d5:
                    5d:13:dd:89:f6:e3:ba:19:ee:6e:e2:60:5d:d0:73:
                    0e:93:89:54:0a:9d:03:d5:fd:f3:e8:66:3d:d5:26:
                    1b:65:47:02:f9:3a:f1:c7:df:6c:b4:f2:91:5d:60:
                    c6:02:a5:ab:db:0e:31:9d:60:07:c6:3e:06:79:44:
                    42:52:2a:7f:d1:ef:8d:46:30:38:8a:a2:2b:b4:21:
                    85:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:67:BB:97:CE:72:AE:A1:6D:28:C5:AC:5A:84:8C:32:D9:B4:F3:C5
            X509v3 Authority Key Identifier:
                keyid:BF:6A:58:37:C3:F4:34:4B:D7:8A:07:2E:1B:98:34:FD:E6:82:42:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/3137372e3130372e39362e302f32302d3234203d3e20323632333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cb:79:db:47:c6:f2:de:bb:3d:73:df:ab:40:38:85:9a:e8:83:
         f4:82:94:e7:82:8b:0d:46:e1:46:30:61:e8:f3:47:40:60:6c:
         95:3a:93:41:c1:06:5b:88:fa:cd:16:24:7e:1c:d7:16:70:2c:
         37:0b:15:29:5e:eb:56:3c:8c:d5:08:ae:fb:d3:a4:9d:f5:8e:
         c7:19:55:44:d1:b0:d6:14:8e:73:96:45:be:59:dd:51:58:26:
         8c:37:00:ac:02:30:c4:5f:55:e7:aa:88:3c:b3:12:6d:0d:e7:
         d1:96:45:db:f9:70:f7:6d:c8:84:d1:2b:26:e4:ed:86:d2:59:
         f5:2f:4e:4d:90:90:c3:81:16:8f:35:1a:61:3b:4e:30:9c:d1:
         7a:79:2d:98:4f:09:f3:1a:2a:a4:e1:bc:1c:d7:e9:81:ff:49:
         27:28:94:8f:9f:01:04:21:f7:c6:8a:ea:c3:8a:31:44:95:0e:
         eb:a7:f8:0b:0e:b2:22:31:90:2d:35:59:ac:79:b7:6b:96:22:
         b0:00:4a:6a:58:25:0b:20:b6:e8:f9:2c:ab:d2:c1:43:f3:9a:
         d6:97:fd:4d:3d:dd:fe:77:b7:7c:96:22:60:c4:87:bc:d0:01:
         fb:c4:6d:6b:49:9f:13:e0:87:a8:8e:db:1c:30:ca:6c:49:dc:
         fd:fe:63:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:18:19 2025 by rpki-client