Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/3137372e31312e3137362e302f32312d3332203d3e203532393531.roa
File:                     3137372e31312e3137362e302f32312d3332203d3e203532393531.roa (raw, json)
Hash identifier:          rg4bw7wHiUa1F4WTShh4g9deEl9z2tJ1H+5UaFxXUsE=
Subject key identifier:   D0:07:AE:C0:25:E5:70:59:3F:2C:67:E8:A0:B1:C4:39:08:7D:6F:59
Certificate issuer:       /CN=00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC
Certificate serial:       2DC647416A0ACF16A59F0F47906B3AFC33EE9FFE
Authority key identifier: 00:BB:B3:56:86:5E:E3:E5:E7:33:9D:4D:63:3A:DE:63:B5:EA:6A:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/3137372e31312e3137362e302f32312d3332203d3e203532393531.roa
Signing time:             Thu 06 Mar 2025 07:00:12 +0000
ROA not before:           Thu 06 Mar 2025 06:55:12 +0000
ROA not after:            Thu 05 Mar 2026 07:00:12 +0000
asID:                     52951
IP address blocks:        177.11.176.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.crl
                          rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c6:47:41:6a:0a:cf:16:a5:9f:0f:47:90:6b:3a:fc:33:ee:9f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC
        Validity
            Not Before: Mar  6 06:55:12 2025 GMT
            Not After : Mar  5 07:00:12 2026 GMT
        Subject: CN=D007AEC025E570593F2C67E8A0B1C439087D6F59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1d:23:47:e8:0a:19:e1:ab:49:e8:0b:01:5f:
                    63:02:63:c3:d2:94:be:ee:71:c7:ee:0c:17:83:2b:
                    73:18:b2:aa:9e:f6:bf:e3:08:b0:3c:88:48:b8:39:
                    63:c0:1c:e6:cc:b6:c9:77:0b:34:ac:7d:80:83:b7:
                    67:11:00:88:56:9a:37:dc:91:c8:ea:3c:d6:a5:03:
                    1b:11:f2:53:2b:8d:69:4a:8a:8b:67:ae:eb:b9:96:
                    9d:1a:79:9e:9b:84:1b:27:16:b7:be:26:84:96:03:
                    43:58:7e:7f:f3:04:52:13:c0:36:83:52:ca:3d:dc:
                    5a:ef:19:25:ee:3a:e2:6a:9d:e1:50:2c:c5:bd:56:
                    e6:fa:80:19:7a:87:9d:73:0b:b3:91:8a:61:a2:06:
                    83:e7:ab:18:52:a4:69:d9:3c:f5:cd:84:2d:8b:5c:
                    bc:4b:e5:71:fb:87:28:a4:26:07:f7:8e:7d:44:9b:
                    1e:3e:6e:6e:a4:61:f0:db:3c:6f:17:0d:7c:b0:36:
                    6b:e1:88:57:be:9f:70:fb:34:a9:ec:cb:2c:96:85:
                    a4:1f:ba:b5:94:70:70:5f:5f:15:05:b0:40:c8:80:
                    cb:e7:b5:8e:b8:a3:40:de:20:44:e1:bc:e9:5d:fc:
                    25:8e:2b:a7:f4:a7:15:a9:5e:24:b3:f5:e5:02:86:
                    68:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:07:AE:C0:25:E5:70:59:3F:2C:67:E8:A0:B1:C4:39:08:7D:6F:59
            X509v3 Authority Key Identifier:
                keyid:00:BB:B3:56:86:5E:E3:E5:E7:33:9D:4D:63:3A:DE:63:B5:EA:6A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/3137372e31312e3137362e302f32312d3332203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:4c:4d:a0:a0:3b:ab:12:28:db:61:4f:6d:e7:cb:71:08:38:
         35:31:c3:d9:d3:c0:d5:6a:57:06:48:c6:95:92:99:10:4a:35:
         f5:49:7d:a8:61:15:40:6f:84:bf:3a:59:cb:d2:4d:af:5f:95:
         c8:b7:2a:40:d8:44:b6:27:f9:49:43:1d:84:42:97:6a:35:d9:
         2e:3a:66:db:de:9c:21:45:27:35:91:fc:eb:e3:37:56:25:8a:
         02:11:ad:c0:f5:eb:e1:b2:c2:b0:0d:c1:06:73:b0:d3:ff:b5:
         b0:67:90:bd:88:e9:80:5c:6b:9b:ac:85:2b:11:b5:ea:34:92:
         a7:f3:13:e7:4b:7d:ff:27:6b:7f:b9:e7:4a:ea:81:81:97:ef:
         e5:dd:b4:48:db:49:6f:1e:cd:c5:40:d7:4b:a0:9e:d9:71:28:
         f2:1a:7d:1e:96:6a:c2:6f:bd:8c:45:24:f3:00:ea:47:93:d0:
         34:91:97:43:30:74:86:22:7b:1f:9e:90:1d:98:e0:80:ae:a6:
         0b:41:a8:40:5f:32:45:92:87:8d:7f:93:a1:f0:ff:ae:8f:ce:
         e8:62:41:bd:50:b7:84:b5:b3:36:71:ba:c7:61:52:f6:45:c4:
         71:77:db:4a:c8:7f:56:da:a4:db:16:9f:f7:56:86:77:94:8b:
         c5:56:c0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:29 2025 by rpki-client