Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3137372e33362e3137362e302f32302d3234203d3e203533303632.roa
File:                     3137372e33362e3137362e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          Kcib9VcPDQ0oFrEHeYrsCZwKKH3MRKQpl/Fbt+lZc94=
Subject key identifier:   58:EB:36:3B:4F:F7:A1:2A:E3:F6:EC:0D:F0:C4:67:63:57:AF:98:DF
Certificate issuer:       /CN=F8410D54252926C3AE5A91AFD3992AC828829031
Certificate serial:       7836ED98BFA3CF3BE52EE472A8A4CEF8BCDAEA1B
Authority key identifier: F8:41:0D:54:25:29:26:C3:AE:5A:91:AF:D3:99:2A:C8:28:82:90:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3137372e33362e3137362e302f32302d3234203d3e203533303632.roa
Signing time:             Mon 07 Apr 2025 18:10:08 +0000
ROA not before:           Mon 07 Apr 2025 18:05:08 +0000
ROA not after:            Mon 06 Apr 2026 18:10:08 +0000
asID:                     53062
IP address blocks:        177.36.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.crl
                          rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 09:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:36:ed:98:bf:a3:cf:3b:e5:2e:e4:72:a8:a4:ce:f8:bc:da:ea:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8410D54252926C3AE5A91AFD3992AC828829031
        Validity
            Not Before: Apr  7 18:05:08 2025 GMT
            Not After : Apr  6 18:10:08 2026 GMT
        Subject: CN=58EB363B4FF7A12AE3F6EC0DF0C4676357AF98DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c9:93:20:fb:41:c1:9d:e8:b0:b1:7e:ee:bb:
                    5b:4f:e2:b3:1e:df:ba:e2:60:b9:a7:71:44:65:e8:
                    44:c2:8c:83:32:c7:5f:00:29:56:12:b2:7e:8e:90:
                    30:f4:f0:1e:78:65:24:d5:1a:cb:c9:54:8a:a8:14:
                    4d:f0:66:bd:aa:47:b0:97:bd:0d:ef:57:63:af:c9:
                    7b:05:40:9e:f8:f8:e6:cb:41:eb:40:ba:a3:70:6e:
                    f3:d2:2f:9d:9a:81:45:76:5a:a3:a1:e9:20:7e:a2:
                    c0:72:57:3a:e2:2a:f6:81:96:78:45:eb:08:b3:1e:
                    69:4d:8c:56:9f:ff:b4:89:d4:85:d6:a2:34:77:da:
                    06:c8:e1:cd:5a:be:88:d7:8c:2f:ae:79:d8:f9:90:
                    f8:3e:39:1a:d4:34:81:f1:66:97:c4:e4:27:4d:75:
                    b2:27:4a:11:23:79:ce:01:a3:15:62:7f:c9:b2:c3:
                    a4:e6:fe:6b:ae:7a:9c:1c:8d:7e:ff:eb:2a:06:4c:
                    44:7e:dc:22:5d:3d:40:7d:f8:76:b9:06:02:54:67:
                    20:cc:56:cf:a9:78:6d:2a:f1:e7:b4:a0:5e:34:c7:
                    ed:18:25:35:4c:51:3a:66:9a:b1:0b:e3:e4:a0:3f:
                    1b:0d:17:59:ec:b6:05:b3:2a:cc:ad:d5:1f:f1:1c:
                    5b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EB:36:3B:4F:F7:A1:2A:E3:F6:EC:0D:F0:C4:67:63:57:AF:98:DF
            X509v3 Authority Key Identifier:
                keyid:F8:41:0D:54:25:29:26:C3:AE:5A:91:AF:D3:99:2A:C8:28:82:90:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3137372e33362e3137362e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:29:ae:e3:dd:39:d8:7d:5f:c9:5b:cb:ad:4c:ef:36:9d:72:
         95:ea:06:4c:0b:f5:c4:36:65:4e:c3:d5:f1:a8:40:03:36:dd:
         c0:ea:fe:de:a5:ca:73:be:7f:68:ff:f5:fe:ca:fc:46:53:95:
         a0:6b:fb:79:f6:e5:1a:0a:71:f8:9e:ff:6e:f7:09:73:26:da:
         43:92:94:b3:48:5d:07:11:b8:9b:06:e4:9f:b3:4f:10:05:a5:
         f7:96:da:b0:58:14:f0:c4:77:a4:b9:0d:e6:30:27:76:4c:f9:
         2b:a9:1f:8e:70:36:f3:dc:a0:59:91:f8:31:e9:a4:a3:8e:7e:
         e2:26:8c:bf:87:81:31:fe:e5:bf:a8:f3:37:e8:02:56:19:ec:
         9e:56:33:9c:82:8b:2e:a5:44:ac:7e:72:18:62:e6:2b:86:80:
         c5:54:d4:f9:68:3a:a1:47:53:c2:46:98:a0:04:2f:0d:35:99:
         55:5f:da:37:86:3b:1f:e7:1a:3b:ab:88:40:65:f0:41:7b:75:
         4e:b8:bc:0f:1e:20:da:a1:c4:6d:98:b4:17:aa:89:92:ed:22:
         85:93:54:22:52:e0:de:3f:ef:5e:bc:a8:ef:39:99:e8:a4:a1:
         27:d3:02:f1:c3:46:a0:79:5d:80:dc:d1:20:78:12:4b:68:33:
         1d:71:2b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:26:01 2025 by rpki-client