Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3137372e3133372e31372e302f32342d3234203d3e203533323235.roa
File:                     3137372e3133372e31372e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          jazhC0RhXHJNEFUCf9I+JfJeNkN0dCnmg4bh+EwyJTQ=
Subject key identifier:   B8:DC:60:C6:F3:E3:C2:4B:91:42:E8:DB:B6:F0:3C:46:47:72:ED:C8
Certificate issuer:       /CN=767F272B321E8F16F6202C66AA9057CC10E66ECA
Certificate serial:       2C9EBA2C81B64C441AF406221C7C94C8BFA243AF
Authority key identifier: 76:7F:27:2B:32:1E:8F:16:F6:20:2C:66:AA:90:57:CC:10:E6:6E:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3137372e3133372e31372e302f32342d3234203d3e203533323235.roa
Signing time:             Fri 21 Feb 2025 13:55:48 +0000
ROA not before:           Fri 21 Feb 2025 13:50:48 +0000
ROA not after:            Fri 20 Feb 2026 13:55:48 +0000
asID:                     53225
IP address blocks:        177.137.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 21:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9e:ba:2c:81:b6:4c:44:1a:f4:06:22:1c:7c:94:c8:bf:a2:43:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767F272B321E8F16F6202C66AA9057CC10E66ECA
        Validity
            Not Before: Feb 21 13:50:48 2025 GMT
            Not After : Feb 20 13:55:48 2026 GMT
        Subject: CN=B8DC60C6F3E3C24B9142E8DBB6F03C464772EDC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0f:0b:c1:b6:a4:c9:cf:bc:1a:3c:e2:f8:0b:
                    73:74:2d:67:27:01:cc:cb:7d:1b:dd:fc:9c:24:10:
                    a6:0f:93:ab:82:d5:e6:8d:64:ef:cf:ce:66:66:53:
                    f2:62:2d:14:c8:4a:be:11:86:f4:82:f1:ae:94:42:
                    1c:a3:b6:cf:d1:48:ba:f9:49:06:2c:ff:90:d8:bf:
                    d7:4b:4e:b6:90:27:a8:75:ea:e7:9b:3f:97:35:0a:
                    21:9c:88:ad:53:4d:91:4e:3b:87:84:6a:3c:23:a7:
                    ee:fd:0a:1b:22:93:31:f6:cf:70:f4:21:6d:53:6b:
                    fa:5d:6c:86:40:d7:f9:04:93:d5:ae:72:d2:a4:57:
                    d3:0f:44:23:1a:f8:e6:b0:50:30:ec:8c:3e:41:49:
                    23:26:de:0d:cd:27:25:12:07:97:e7:69:dc:f8:51:
                    e5:18:5a:e8:3f:5a:a7:4f:76:d6:6b:0a:33:8c:e4:
                    99:29:d2:17:8e:ca:0b:c0:f3:a8:d3:97:86:59:15:
                    48:a4:9d:ba:0a:b8:f5:58:45:ad:f8:c4:22:c5:ab:
                    78:bd:85:ac:07:1f:57:10:0e:77:07:2b:6e:f4:91:
                    5a:a6:cf:6a:10:91:45:da:db:ce:78:83:e6:e8:62:
                    4e:3a:f5:74:8a:e9:74:13:b8:b7:ae:6a:d5:c5:d2:
                    02:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DC:60:C6:F3:E3:C2:4B:91:42:E8:DB:B6:F0:3C:46:47:72:ED:C8
            X509v3 Authority Key Identifier:
                keyid:76:7F:27:2B:32:1E:8F:16:F6:20:2C:66:AA:90:57:CC:10:E6:6E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3137372e3133372e31372e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:00:70:e5:15:04:e4:87:7c:bb:a7:85:99:02:dc:3a:c5:a3:
         60:d3:91:39:f9:07:f8:2d:89:d2:56:5a:21:90:e8:fe:f2:9b:
         98:d2:86:9a:dd:b5:07:a0:02:88:f1:ae:86:c6:9d:74:3e:e7:
         e1:d8:35:41:56:5c:17:78:78:d5:0a:53:12:0c:69:8d:d7:91:
         71:bd:dc:00:55:68:20:96:cd:d9:f2:34:d3:8f:7d:5c:66:18:
         fd:0b:e1:f4:6d:f3:f1:44:5b:9f:02:35:e4:ac:01:b3:65:1a:
         6f:ff:a4:37:06:02:51:da:f2:4a:d8:c7:5b:5c:0b:62:55:96:
         2b:6d:12:a6:9c:de:37:df:37:2e:bb:65:55:3e:53:60:89:87:
         66:c0:5b:78:92:dc:91:60:ed:7c:ed:c6:6a:2b:5c:97:f0:4f:
         02:2b:f0:ce:08:15:8f:f8:9e:67:64:35:5b:23:db:52:e6:dd:
         00:92:99:0b:3c:df:cb:c2:61:20:d7:60:3c:1a:bb:04:e9:eb:
         37:7b:cf:a9:6f:9b:d2:e4:29:4c:7c:34:96:04:3a:fc:7a:db:
         b0:c6:eb:07:48:5a:84:7d:8f:7f:07:3e:fe:e6:23:b3:18:8b:
         68:bb:42:ba:aa:a2:7e:e0:85:e4:22:1c:14:13:34:2a:77:e9:
         0a:9a:07:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:16:50 2025 by rpki-client