Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3137372e3133372e31362e302f32342d3234203d3e203533323235.roa
File:                     3137372e3133372e31362e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          rFlgrMRGEGL7/VyAtB5TrkpRMl7dIOCpOqpFebKe8GQ=
Subject key identifier:   3A:8E:A2:98:32:A0:D6:5A:4A:6B:78:50:FF:2F:D5:76:C4:95:C0:58
Certificate issuer:       /CN=767F272B321E8F16F6202C66AA9057CC10E66ECA
Certificate serial:       48CFD3D1140FD1755B488EC23772B94EB1960A78
Authority key identifier: 76:7F:27:2B:32:1E:8F:16:F6:20:2C:66:AA:90:57:CC:10:E6:6E:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3137372e3133372e31362e302f32342d3234203d3e203533323235.roa
Signing time:             Fri 21 Feb 2025 13:55:42 +0000
ROA not before:           Fri 21 Feb 2025 13:50:42 +0000
ROA not after:            Fri 20 Feb 2026 13:55:42 +0000
asID:                     53225
IP address blocks:        177.137.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 21:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:cf:d3:d1:14:0f:d1:75:5b:48:8e:c2:37:72:b9:4e:b1:96:0a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767F272B321E8F16F6202C66AA9057CC10E66ECA
        Validity
            Not Before: Feb 21 13:50:42 2025 GMT
            Not After : Feb 20 13:55:42 2026 GMT
        Subject: CN=3A8EA29832A0D65A4A6B7850FF2FD576C495C058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8f:2c:0c:dd:c7:b1:cc:ab:29:f9:fc:b3:7a:
                    65:18:9b:ae:8a:17:48:16:c0:ff:ae:62:07:ea:19:
                    25:f3:ad:cc:98:e6:47:2f:eb:17:f9:c3:d6:8e:1f:
                    4b:66:c7:c7:a5:8e:0c:e3:71:96:da:82:93:59:95:
                    4b:a2:6e:61:70:c0:d2:5d:06:81:5b:51:79:69:db:
                    56:c5:e7:76:49:28:03:03:ab:ea:86:35:96:9b:3f:
                    c0:f4:21:01:c3:03:07:5b:3a:e2:99:39:2d:a4:65:
                    10:21:aa:55:11:1e:e3:16:44:92:48:23:79:f6:19:
                    e1:ac:68:f4:db:ad:33:6d:c3:07:dd:4d:d2:04:43:
                    ff:7e:eb:10:e9:1f:f1:a6:0b:18:6b:ae:b6:58:4c:
                    ca:0d:0d:13:2b:14:72:27:07:21:16:b7:46:0b:35:
                    06:a4:05:24:10:67:92:92:08:a2:23:56:26:d4:dc:
                    39:ba:0e:2d:bf:46:d8:e7:a1:86:6e:38:a6:56:fb:
                    b6:24:b9:71:8d:65:43:d1:0f:8e:bd:82:e5:0d:1c:
                    e3:8f:a7:e7:31:14:94:b3:e1:8a:36:63:72:04:d7:
                    86:59:6f:66:bb:11:98:69:66:5a:89:78:fa:2a:90:
                    47:c8:6b:57:13:7a:cd:6c:72:73:10:bf:80:0b:90:
                    cf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8E:A2:98:32:A0:D6:5A:4A:6B:78:50:FF:2F:D5:76:C4:95:C0:58
            X509v3 Authority Key Identifier:
                keyid:76:7F:27:2B:32:1E:8F:16:F6:20:2C:66:AA:90:57:CC:10:E6:6E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3137372e3133372e31362e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:74:0d:c0:28:83:44:c4:de:4b:7f:b7:3f:e8:86:0d:1c:62:
         c9:13:d9:42:3a:88:bf:75:4d:32:87:55:15:4b:37:64:c5:7b:
         c1:2a:5d:b8:93:f1:19:df:2e:b0:e7:28:c6:53:13:90:65:23:
         2d:88:57:f5:12:4a:ae:01:18:5b:b5:52:7c:a7:e1:c8:da:52:
         d8:91:22:95:a1:91:ac:80:46:c4:f6:91:7b:27:ed:0c:38:d0:
         97:a5:4c:2f:34:5e:df:ab:c6:7d:a3:b3:b4:4c:e4:cd:9c:a1:
         e3:fa:01:e0:86:7c:00:e4:b8:95:aa:41:49:af:19:6b:60:fa:
         56:82:f6:98:04:72:ff:58:54:35:77:04:f4:68:95:1c:1c:2a:
         99:bb:66:20:0c:e3:18:cc:54:da:1a:f2:44:c7:f5:40:79:23:
         01:2a:21:27:58:d5:cc:01:c6:42:be:66:e3:f0:3a:22:e4:ac:
         60:5b:e8:4c:e3:37:46:1d:3b:ca:ce:42:5c:7e:00:66:7c:78:
         1b:be:ae:4f:ee:be:79:7d:9f:55:10:02:22:74:25:86:59:1c:
         2e:a9:3c:ee:20:2a:47:e6:d6:08:30:14:8f:c8:3e:86:a6:4c:
         e5:29:43:b3:a4:f0:4f:02:ad:fd:0b:be:6e:78:6d:90:11:3f:
         9b:7b:ad:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:19:15 2025 by rpki-client