Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234302e302f32322d3232203d3e20323632343738.roa
File:                     3137372e34372e3234302e302f32322d3232203d3e20323632343738.roa (raw, json)
Hash identifier:          kEjT34t1OGKbhnW45pE5xkjzUBh1RFPFL8VCqVDDUYI=
Subject key identifier:   DA:AF:F5:AF:B6:26:70:E3:36:DE:D7:CE:3B:42:0E:FE:55:F9:42:2B
Certificate issuer:       /CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
Certificate serial:       3D07F0E1D60A62B011429523DF355622C37B79A4
Authority key identifier: 2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234302e302f32322d3232203d3e20323632343738.roa
Signing time:             Sat 15 Feb 2025 15:43:17 +0000
ROA not before:           Sat 15 Feb 2025 15:38:17 +0000
ROA not after:            Sat 14 Feb 2026 15:43:17 +0000
asID:                     262478
IP address blocks:        177.47.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl
                          rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 16:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:07:f0:e1:d6:0a:62:b0:11:42:95:23:df:35:56:22:c3:7b:79:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
        Validity
            Not Before: Feb 15 15:38:17 2025 GMT
            Not After : Feb 14 15:43:17 2026 GMT
        Subject: CN=DAAFF5AFB62670E336DED7CE3B420EFE55F9422B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d2:b8:c8:b0:14:c0:ef:ec:92:60:cb:a2:8d:
                    08:aa:6e:a2:eb:de:82:54:c3:50:61:b6:76:01:3e:
                    05:2a:13:e8:b2:9d:98:c3:37:4c:94:71:ef:01:c1:
                    f4:da:ff:46:3f:0a:eb:de:15:60:14:d5:a6:af:59:
                    d8:d4:e2:b4:8b:dd:4d:b0:8d:0b:31:a6:84:0e:da:
                    d2:88:43:8d:b8:9e:b3:c8:98:47:5d:5d:2d:5b:ec:
                    32:5a:b4:56:67:6d:e0:b1:c7:10:cd:35:50:93:3b:
                    bb:16:22:c3:10:fc:9b:19:8a:54:e0:3a:32:56:94:
                    71:93:22:ad:a0:3f:67:08:27:da:a3:88:80:84:89:
                    72:eb:ac:cc:c5:cb:ee:df:c8:be:66:45:50:8c:48:
                    42:a6:e8:d4:c2:73:d1:4e:fe:21:c1:73:1b:54:df:
                    4b:29:a2:ba:8b:cd:dd:40:f8:49:87:ee:23:fa:11:
                    96:21:49:2a:89:93:8f:5d:0f:3f:2a:8d:6d:63:64:
                    8d:83:f7:83:be:11:ef:38:20:7e:59:0b:12:b5:ed:
                    4c:db:7c:6d:37:b1:e2:9a:29:14:e7:05:0c:78:a9:
                    29:a1:f8:13:3d:16:ae:e4:d4:c8:72:44:aa:ff:ee:
                    e0:bc:db:a0:47:6a:f1:95:44:b0:2a:8a:f0:48:7a:
                    ef:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AF:F5:AF:B6:26:70:E3:36:DE:D7:CE:3B:42:0E:FE:55:F9:42:2B
            X509v3 Authority Key Identifier:
                keyid:2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234302e302f32322d3232203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:77:84:db:99:7d:c6:1f:4c:3a:36:9d:cd:04:e3:d8:7b:8d:
         97:ec:02:1a:e8:95:03:78:f4:1f:2b:8e:d4:e2:01:2b:b9:bc:
         44:93:5a:8a:08:b5:22:da:ce:c4:31:82:41:e6:3e:b6:41:4f:
         d5:54:2e:59:80:5d:d2:4c:43:fd:c7:ab:33:d5:3d:58:57:51:
         5f:32:14:39:60:ce:f7:04:c1:2e:6a:9d:a3:11:db:78:a8:49:
         2e:1b:7b:c0:1c:12:ed:87:66:9a:51:3d:e6:fe:03:b1:a4:90:
         af:7f:a0:3d:0d:fd:9e:aa:0e:51:91:e8:2d:e0:d4:49:45:09:
         ea:c4:fa:4b:e6:1a:28:b2:0e:3f:25:19:6b:5e:11:ee:f5:11:
         7d:a2:36:17:91:ef:ff:a5:8f:8b:ce:4a:57:20:de:64:af:d2:
         9a:bc:35:92:bc:09:e0:bf:78:b5:dc:9d:a6:e4:4e:10:0f:65:
         6c:3c:c2:2f:2d:7b:12:8d:08:b4:6c:0d:27:44:e4:9a:e3:8a:
         5e:15:cf:5d:8b:92:43:07:e3:ab:bb:59:60:42:d3:05:00:37:
         98:ea:aa:c5:61:1f:73:ee:67:c9:7f:48:33:11:52:7d:15:f6:
         3c:9d:27:0d:db:4a:c9:b6:3e:e7:1f:60:45:27:6e:9f:a4:7b:
         04:4b:4e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:40:43 2025 by rpki-client