Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/3137372e33392e3139362e302f32322d3332203d3e203532373734.roa
File:                     3137372e33392e3139362e302f32322d3332203d3e203532373734.roa (raw, json)
Hash identifier:          lPenBCTEDInEIGMuOmXOW2rMuvderXaoC65kjfljrmU=
Subject key identifier:   6A:49:F7:D4:49:72:6D:4E:89:EE:C1:4F:75:41:4F:56:6D:2C:C0:11
Certificate issuer:       /CN=B11FBF12F47198D00F06548FAD77699192D03229
Certificate serial:       165D998E8745BFB4295A9AE26FE6C753C2CE0B82
Authority key identifier: B1:1F:BF:12:F4:71:98:D0:0F:06:54:8F:AD:77:69:91:92:D0:32:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11FBF12F47198D00F06548FAD77699192D03229.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/3137372e33392e3139362e302f32322d3332203d3e203532373734.roa
Signing time:             Mon 31 Mar 2025 18:15:31 +0000
ROA not before:           Mon 31 Mar 2025 18:10:31 +0000
ROA not after:            Mon 30 Mar 2026 18:15:31 +0000
asID:                     52774
IP address blocks:        177.39.196.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/B11FBF12F47198D00F06548FAD77699192D03229.crl
                          rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/B11FBF12F47198D00F06548FAD77699192D03229.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11FBF12F47198D00F06548FAD77699192D03229.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 09:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5d:99:8e:87:45:bf:b4:29:5a:9a:e2:6f:e6:c7:53:c2:ce:0b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11FBF12F47198D00F06548FAD77699192D03229
        Validity
            Not Before: Mar 31 18:10:31 2025 GMT
            Not After : Mar 30 18:15:31 2026 GMT
        Subject: CN=6A49F7D449726D4E89EEC14F75414F566D2CC011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:6e:6e:c3:34:a6:f3:da:ea:16:31:0a:6d:
                    27:ef:aa:ae:b7:d0:45:f7:3b:61:21:3a:33:23:51:
                    fc:a3:6e:7b:9b:2c:92:f5:21:f1:4a:8b:ba:23:fd:
                    a4:c6:37:0a:d0:a4:b2:7b:ea:1d:9d:94:48:d1:1e:
                    71:2f:12:7f:c4:8f:06:82:ba:92:3f:b0:e4:5d:87:
                    14:31:21:91:17:97:90:8f:70:d0:ce:ae:f8:5f:78:
                    d1:4f:d6:d2:d1:84:85:e7:40:0e:e8:97:c9:8f:3b:
                    01:e2:61:68:12:37:9b:eb:96:cd:51:f0:e2:49:64:
                    a4:ff:a6:b7:fc:8d:e0:a4:6f:1c:9e:40:4d:c5:00:
                    82:91:ec:62:a8:e1:33:64:8b:45:dd:d5:d0:39:d2:
                    48:6b:80:7f:86:a8:5b:0c:9b:e3:2c:2b:a2:c0:30:
                    42:49:3f:2d:83:a8:c8:bc:58:ae:43:b3:e2:9c:44:
                    59:5a:ba:86:e0:28:99:fd:cc:2e:a9:36:3c:de:53:
                    f7:6b:ea:04:3c:9b:96:db:90:e7:db:bd:36:bb:9b:
                    99:be:e5:c9:d2:f4:c4:96:19:1d:94:8d:2e:2c:cd:
                    bf:ad:ef:d5:33:5b:3c:26:0e:95:03:95:49:25:67:
                    d8:cb:65:38:26:55:79:ee:e9:6e:10:4b:26:43:59:
                    64:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:49:F7:D4:49:72:6D:4E:89:EE:C1:4F:75:41:4F:56:6D:2C:C0:11
            X509v3 Authority Key Identifier:
                keyid:B1:1F:BF:12:F4:71:98:D0:0F:06:54:8F:AD:77:69:91:92:D0:32:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/B11FBF12F47198D00F06548FAD77699192D03229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11FBF12F47198D00F06548FAD77699192D03229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/3137372e33392e3139362e302f32322d3332203d3e203532373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:58:1e:25:fc:39:a3:8b:bc:a2:eb:1c:c4:c5:4e:ea:f0:b6:
         c0:e8:f0:8e:df:b9:00:ea:da:17:56:db:c6:13:5d:fd:64:8f:
         6a:ad:0e:29:4c:0d:ab:83:b0:03:81:3c:49:74:a7:9c:99:a2:
         9c:d9:20:dc:db:b4:90:9c:be:ac:11:a0:b2:3b:de:2e:fa:4f:
         ad:28:73:ee:24:55:cc:6e:bb:59:27:ba:d1:20:1d:19:4f:b2:
         78:cc:bc:03:c0:53:91:35:03:83:ee:8c:37:35:78:7c:d3:6f:
         bf:f8:61:31:dd:8d:94:e0:bc:42:ae:50:67:6b:9b:1b:c0:78:
         62:66:ef:c3:0b:e9:28:8f:9c:46:93:75:55:24:6f:cb:4b:66:
         91:ea:1e:e2:7a:7f:84:12:ef:27:36:2e:ab:90:7f:c0:cf:ca:
         7b:39:d7:55:04:d9:37:df:73:e8:b9:aa:d7:fb:37:ff:ca:5f:
         3f:36:6a:2b:bd:91:22:42:e4:16:dd:b3:cd:d1:17:0e:36:f1:
         db:52:3e:04:08:85:2d:e4:91:5d:2b:5b:fd:ff:dd:0e:30:77:
         a1:6b:20:06:ff:6c:de:6b:2f:cf:c6:e3:5a:e8:b6:46:2d:16:
         50:c0:de:db:0c:2b:8f:ac:10:b1:a1:84:46:01:98:b5:74:23:
         0d:0b:00:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:46:57 2025 by rpki-client