Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137372e31312e302e302f32312d3231203d3e203532393632.roa
File:                     3137372e31312e302e302f32312d3231203d3e203532393632.roa (raw, json)
Hash identifier:          1UZmWnPXl0FfJV7d4pS1vW8so5XCl4uedJf3YUev3U0=
Subject key identifier:   B1:EB:14:B7:16:F9:7E:FB:2E:D1:D4:C3:57:52:33:97:58:93:1D:51
Certificate issuer:       /CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
Certificate serial:       01E7D1EB2FF997E524A5FA859A296502ED363C6E
Authority key identifier: 5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137372e31312e302e302f32312d3231203d3e203532393632.roa
Signing time:             Wed 19 Mar 2025 15:17:55 +0000
ROA not before:           Wed 19 Mar 2025 15:12:55 +0000
ROA not after:            Wed 18 Mar 2026 15:17:55 +0000
asID:                     52962
IP address blocks:        177.11.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl
                          rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e7:d1:eb:2f:f9:97:e5:24:a5:fa:85:9a:29:65:02:ed:36:3c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
        Validity
            Not Before: Mar 19 15:12:55 2025 GMT
            Not After : Mar 18 15:17:55 2026 GMT
        Subject: CN=B1EB14B716F97EFB2ED1D4C35752339758931D51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:e6:88:59:10:a9:52:4e:b5:38:be:8a:7b:
                    8f:0f:77:fc:76:a1:1d:50:fb:3e:82:d7:24:b6:44:
                    fb:49:ef:c1:18:27:f1:0f:c5:fd:51:83:4b:ce:a7:
                    ca:c6:a3:ed:64:4d:0e:53:70:bd:6a:43:2f:f3:a2:
                    40:eb:39:45:0e:69:8a:87:6e:bc:69:b6:a4:df:20:
                    f4:2a:51:5d:60:d0:82:47:e4:fe:16:be:d0:fe:25:
                    ad:4e:d1:dd:72:48:93:93:35:71:02:b5:06:8b:81:
                    82:22:b9:68:9b:95:9e:fa:10:0e:ba:74:00:73:e8:
                    aa:aa:03:e4:80:4c:a1:9b:71:e4:2d:ad:15:3c:27:
                    3d:b2:eb:41:f2:3c:bb:03:82:aa:4d:99:a6:2e:44:
                    03:50:12:18:6b:00:2d:9a:19:dc:cc:df:26:eb:d4:
                    ba:d3:13:c0:7f:a2:f6:6c:79:9c:86:a4:a8:30:4b:
                    32:ae:16:9f:6e:a2:16:32:b2:b1:f0:f3:62:e5:cc:
                    32:2d:4c:ba:5b:c7:90:59:00:c0:a8:9f:37:a7:ec:
                    c6:bf:ee:ab:ca:d7:12:ef:0e:d8:8c:37:06:a4:b2:
                    b7:11:ce:c5:e2:68:bf:4f:80:6d:75:ce:a8:f6:37:
                    42:fc:12:56:71:6a:36:36:9d:33:e8:6d:a9:0c:25:
                    eb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EB:14:B7:16:F9:7E:FB:2E:D1:D4:C3:57:52:33:97:58:93:1D:51
            X509v3 Authority Key Identifier:
                keyid:5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137372e31312e302e302f32312d3231203d3e203532393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0b:c8:ba:50:ac:22:57:22:34:67:49:a9:8f:d5:26:58:ce:f3:
         3e:2b:74:28:41:ee:f4:42:64:40:e7:74:4c:3a:33:7a:ef:be:
         e8:00:5b:0e:67:a7:b3:0f:e5:4c:bc:b7:04:ab:e2:e8:90:e3:
         0e:2a:54:e6:43:e1:41:ef:68:e5:4f:07:e2:27:22:6e:8d:8c:
         2c:50:08:26:d0:1d:f3:d3:b6:dc:54:c7:bb:9e:93:89:f9:28:
         8b:e3:14:16:ec:fc:9c:62:ba:8e:f2:3c:b7:7c:d8:90:a5:6f:
         6e:82:96:19:96:9a:c7:f5:57:e8:1a:c6:eb:e6:ec:0d:9f:43:
         79:1a:e8:a7:22:22:85:67:38:d8:ae:57:51:b0:d3:9e:7f:40:
         0d:be:fe:f0:77:34:b3:ea:50:61:2a:ca:6c:55:1f:14:d8:7c:
         f1:e0:db:a1:68:f1:d1:d7:9d:d2:9b:96:eb:7c:34:b0:23:a6:
         8a:5e:0a:38:8d:a4:ba:ab:07:8f:db:ce:fc:1c:80:fc:84:41:
         5b:ee:cf:a8:9a:e1:0a:f6:9c:7b:36:47:04:77:3a:85:4a:e6:
         53:f8:26:91:67:92:92:20:6d:f8:b0:60:c7:45:ec:d1:d1:9d:
         ca:1f:1f:ed:0a:8b:91:8a:6c:b4:27:99:4b:6a:74:69:66:b0:
         ab:78:14:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:43 2025 by rpki-client