Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/3137372e3133312e31362e302f32302d3234203d3e20323632333738.roa
File:                     3137372e3133312e31362e302f32302d3234203d3e20323632333738.roa (raw, json)
Hash identifier:          PXQTmLulGaAerdMBIJ4tCjTk1fRvsLCu2/6TDmXiy7U=
Subject key identifier:   5D:3F:A9:81:E8:93:3A:89:13:8F:34:59:E2:BA:DD:D5:48:F7:74:52
Certificate issuer:       /CN=12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA
Certificate serial:       60884CBA095A8055B199915B8EE0BE21BF22F3F3
Authority key identifier: 12:C3:FE:B9:DE:C6:17:6E:E5:95:2F:85:CA:F7:A4:4B:3F:63:F3:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/3137372e3133312e31362e302f32302d3234203d3e20323632333738.roa
Signing time:             Thu 06 Mar 2025 20:06:07 +0000
ROA not before:           Thu 06 Mar 2025 20:01:07 +0000
ROA not after:            Thu 05 Mar 2026 20:06:07 +0000
asID:                     262378
IP address blocks:        177.131.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.crl
                          rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:88:4c:ba:09:5a:80:55:b1:99:91:5b:8e:e0:be:21:bf:22:f3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA
        Validity
            Not Before: Mar  6 20:01:07 2025 GMT
            Not After : Mar  5 20:06:07 2026 GMT
        Subject: CN=5D3FA981E8933A89138F3459E2BADDD548F77452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:bf:7a:ff:3c:27:f5:b1:79:fd:84:93:75:
                    46:19:ba:05:37:b6:57:3a:a6:3f:0e:cb:56:38:35:
                    61:57:17:bd:8a:d2:25:22:b9:f2:dd:da:76:9a:18:
                    19:19:31:4e:56:27:82:85:f9:46:aa:0f:a6:95:51:
                    6d:87:9f:48:10:0f:04:9f:79:c0:f5:2a:00:3d:89:
                    47:04:c9:cd:c8:10:18:72:ee:83:18:d7:6b:58:49:
                    3e:39:ba:ae:54:9a:bb:fb:31:fd:38:d5:3e:b8:ee:
                    6c:29:c1:77:ef:82:35:7e:89:b8:d4:d0:6d:28:65:
                    74:07:ad:65:d5:05:50:d5:cc:83:6c:45:c3:8c:e5:
                    90:90:d8:60:4a:c4:9c:f2:6d:cf:84:36:d2:24:f7:
                    37:2f:ba:f8:d4:c8:e1:1e:7c:3e:1a:94:53:bd:76:
                    a3:2e:d9:94:77:67:7c:fa:b2:f6:1f:e6:f2:58:30:
                    a8:04:8c:e4:fb:d7:9e:59:91:43:6f:6a:f1:6c:6d:
                    90:fd:a1:18:cc:08:75:5b:c3:2e:b8:f4:40:0a:ef:
                    8f:2f:63:77:53:82:6c:7d:95:96:52:11:e3:f4:98:
                    34:32:03:3e:5e:24:c9:e2:02:5e:9f:32:83:18:5e:
                    c7:86:e3:87:38:95:06:33:e1:60:af:53:cc:98:ff:
                    4e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3F:A9:81:E8:93:3A:89:13:8F:34:59:E2:BA:DD:D5:48:F7:74:52
            X509v3 Authority Key Identifier:
                keyid:12:C3:FE:B9:DE:C6:17:6E:E5:95:2F:85:CA:F7:A4:4B:3F:63:F3:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/3137372e3133312e31362e302f32302d3234203d3e20323632333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:64:d3:d2:c5:75:81:4c:cc:be:01:6f:18:db:99:78:87:d5:
         54:62:53:be:55:c5:60:77:9e:e4:26:e6:41:fa:e1:c2:01:e9:
         58:d2:34:6c:45:52:5c:df:6c:64:e8:36:8c:3a:2b:47:f8:04:
         dc:9f:6e:a3:99:8b:8b:77:d7:12:1b:eb:9b:da:c3:4e:4f:fe:
         72:55:57:de:2e:e7:44:ec:7b:7e:6d:25:4e:34:1f:5f:22:04:
         14:e3:90:7e:ea:46:ec:07:22:d0:0d:a0:1b:e2:7c:bd:b1:d1:
         78:b2:4d:9b:8e:c7:3f:bb:07:db:c4:ac:e4:25:57:b3:da:75:
         16:a7:96:3f:59:86:cf:a2:b7:f2:03:44:e4:ba:92:4f:65:4c:
         75:da:e7:47:e5:cb:e9:18:2c:b0:78:17:1d:4c:ad:94:b2:11:
         25:fd:fe:8c:50:be:c7:bb:da:65:23:fa:86:3e:3a:0b:12:ac:
         6d:e6:fb:9a:c1:74:73:ef:cc:aa:4d:3c:77:53:ce:c3:5a:6c:
         1c:84:df:74:f3:52:4a:ea:bd:bb:8f:a9:45:d3:bb:46:65:eb:
         80:db:55:4a:41:f3:3e:ef:27:5a:f3:a2:03:9a:5a:d3:4c:76:
         25:6d:81:fa:65:47:9b:ef:df:53:7e:92:ac:61:ce:3e:68:48:
         fe:d1:cd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:52 2025 by rpki-client