Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137372e38372e3131322e302f32312d3234203d3e20323632333031.roa
File:                     3137372e38372e3131322e302f32312d3234203d3e20323632333031.roa (raw, json)
Hash identifier:          kfx/5Sb0y7RslO7SPOoDqtEKKXJVb2yfvjg173nfDXQ=
Subject key identifier:   CF:84:E8:9F:93:2B:B7:4E:F5:58:D5:6F:70:4E:60:05:FB:A9:B4:CE
Certificate issuer:       /CN=E30CAFF45780AC90434C232E196752E3283B9BD2
Certificate serial:       2156BFBBCFC4763F553C9E047E232CE778E29F82
Authority key identifier: E3:0C:AF:F4:57:80:AC:90:43:4C:23:2E:19:67:52:E3:28:3B:9B:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137372e38372e3131322e302f32312d3234203d3e20323632333031.roa
Signing time:             Thu 06 Mar 2025 07:33:13 +0000
ROA not before:           Thu 06 Mar 2025 07:28:13 +0000
ROA not after:            Thu 05 Mar 2026 07:33:13 +0000
asID:                     262301
IP address blocks:        177.87.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 22:24:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:56:bf:bb:cf:c4:76:3f:55:3c:9e:04:7e:23:2c:e7:78:e2:9f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E30CAFF45780AC90434C232E196752E3283B9BD2
        Validity
            Not Before: Mar  6 07:28:13 2025 GMT
            Not After : Mar  5 07:33:13 2026 GMT
        Subject: CN=CF84E89F932BB74EF558D56F704E6005FBA9B4CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:66:80:58:c4:b3:7e:20:e0:63:98:20:d7:49:
                    47:ac:e0:d6:21:7e:69:16:49:8c:a1:6b:33:a0:42:
                    10:da:07:b3:0d:b7:7c:aa:79:64:de:db:f4:c6:95:
                    73:cc:cf:ac:ed:d3:05:af:63:83:f9:69:3a:bb:c9:
                    ab:0b:72:c6:cb:64:d8:48:b0:bf:79:ac:7c:88:62:
                    89:84:61:b8:91:9f:55:b7:d4:d2:f9:25:32:e9:90:
                    de:cb:80:aa:2d:2c:27:92:60:ec:fa:6f:cc:42:fb:
                    80:5b:6a:09:a6:b3:ea:13:ee:77:a6:68:49:b0:59:
                    22:34:1b:fd:15:6a:e4:50:76:84:31:87:f4:93:3b:
                    4a:b0:d8:6f:bf:e5:03:8b:ee:5e:5a:72:79:bd:d5:
                    77:31:b3:11:8d:80:01:93:f3:8a:6e:7e:17:8d:9d:
                    44:14:0b:0e:8e:ef:93:a6:4d:40:74:aa:a4:4e:50:
                    fd:e3:55:09:e3:af:84:f3:b7:f9:e6:65:cd:07:96:
                    23:2f:d6:dd:94:f4:bc:5d:c6:89:e3:7c:93:29:86:
                    18:f2:44:04:08:57:dd:03:f2:e7:0b:53:c3:fd:f9:
                    e1:01:70:c7:77:fd:f7:80:eb:55:a8:fa:ef:81:55:
                    33:36:9b:36:f2:c4:22:0d:6e:10:14:56:fe:93:77:
                    0b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:84:E8:9F:93:2B:B7:4E:F5:58:D5:6F:70:4E:60:05:FB:A9:B4:CE
            X509v3 Authority Key Identifier:
                keyid:E3:0C:AF:F4:57:80:AC:90:43:4C:23:2E:19:67:52:E3:28:3B:9B:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137372e38372e3131322e302f32312d3234203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:1d:d4:e4:27:90:08:29:9a:73:0c:00:4f:a4:0d:d8:ec:21:
         47:f5:74:d0:b8:9a:3a:70:7f:53:8b:10:85:0e:3b:49:12:18:
         d2:6e:5e:1a:fb:53:49:54:ca:0e:ef:7c:e3:a4:01:4a:e7:16:
         1e:36:0d:c4:66:fa:05:1f:6c:e0:2d:f0:bd:ec:0a:34:f5:22:
         f4:80:2a:a3:f6:c7:8f:63:e7:38:e3:29:25:c1:ae:8d:74:18:
         00:1d:11:73:27:52:92:a9:78:7e:98:ae:60:01:ee:80:c2:bf:
         3a:58:43:59:1a:e3:f9:21:94:86:34:82:6d:fe:0e:20:7b:31:
         bb:33:05:34:78:4d:ae:0e:bc:20:a3:85:eb:0d:19:c9:c2:22:
         3c:c6:33:29:41:12:01:e2:12:49:0d:87:56:23:5b:6a:94:38:
         25:0e:5a:ae:3b:c9:13:0f:2a:35:36:c5:12:be:49:89:28:17:
         f6:a3:10:00:d2:09:24:ab:0a:28:fd:ef:77:51:7e:77:01:42:
         95:e6:be:67:2d:ec:e1:6b:8e:4e:34:0f:87:b5:f8:5e:1a:d1:
         89:84:b5:60:34:b0:b0:67:15:77:54:2d:b4:ea:62:14:b8:df:
         2a:33:da:97:87:bd:78:08:97:11:da:4b:48:04:0a:a5:bb:62:
         d7:7e:65:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:21:12 2025 by rpki-client