Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3137372e3133372e31382e302f32342d3234203d3e203533323235.roa
File:                     3137372e3133372e31382e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          Fvh1Ba59sTvh0mR789rH1TsDJ873DpwaFNl9Y4LJ7MU=
Subject key identifier:   F0:44:D4:94:1F:0C:95:86:1E:45:27:17:17:14:3A:EB:F2:22:C1:C4
Certificate issuer:       /CN=767F272B321E8F16F6202C66AA9057CC10E66ECA
Certificate serial:       5866E407A0838614B67A21CF623446AF93DC51D8
Authority key identifier: 76:7F:27:2B:32:1E:8F:16:F6:20:2C:66:AA:90:57:CC:10:E6:6E:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3137372e3133372e31382e302f32342d3234203d3e203533323235.roa
Signing time:             Fri 21 Feb 2025 13:54:29 +0000
ROA not before:           Fri 21 Feb 2025 13:49:29 +0000
ROA not after:            Fri 20 Feb 2026 13:54:29 +0000
asID:                     53225
IP address blocks:        177.137.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 21:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:66:e4:07:a0:83:86:14:b6:7a:21:cf:62:34:46:af:93:dc:51:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767F272B321E8F16F6202C66AA9057CC10E66ECA
        Validity
            Not Before: Feb 21 13:49:29 2025 GMT
            Not After : Feb 20 13:54:29 2026 GMT
        Subject: CN=F044D4941F0C95861E45271717143AEBF222C1C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ed:61:5c:f8:c2:28:a2:78:29:61:b9:8c:d0:
                    2a:0d:a6:13:09:e4:eb:d5:d4:ef:cb:42:f5:60:4f:
                    1c:5e:3f:d0:d3:4f:dc:28:e0:4d:5e:08:04:51:12:
                    ce:4d:c9:29:fd:a8:96:c5:e2:9c:06:4c:bd:43:9e:
                    bc:94:ce:91:57:55:45:1a:73:29:83:6f:52:8d:ad:
                    f7:90:6a:54:60:d9:f3:e2:57:de:0b:37:74:87:42:
                    5a:31:06:93:92:7b:8f:44:ef:f2:f6:ec:5f:f4:bf:
                    2a:c3:b0:bd:7f:81:69:7e:1e:dc:48:c8:5f:55:71:
                    ac:5a:b2:22:79:7f:76:90:72:e2:f8:07:26:44:8a:
                    91:44:e9:a8:71:fe:aa:6e:0b:cd:22:bb:c8:b6:60:
                    7a:71:e4:cc:07:f2:22:59:97:37:6c:16:29:ae:55:
                    c3:cc:d8:09:83:b8:cd:de:3d:13:18:c3:fa:10:cf:
                    56:a5:47:8e:bf:43:70:20:1c:13:18:f8:33:40:e9:
                    67:c7:a3:06:74:c3:96:84:56:6a:20:12:9f:05:da:
                    5f:8d:bd:23:0d:37:db:4f:c3:59:80:07:c1:cf:9c:
                    f0:dd:6f:0b:7b:09:db:ac:3c:ed:e9:e5:1f:8f:8a:
                    8c:59:2e:e2:97:70:13:a4:da:5d:4e:92:da:f9:32:
                    9a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:44:D4:94:1F:0C:95:86:1E:45:27:17:17:14:3A:EB:F2:22:C1:C4
            X509v3 Authority Key Identifier:
                keyid:76:7F:27:2B:32:1E:8F:16:F6:20:2C:66:AA:90:57:CC:10:E6:6E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3137372e3133372e31382e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:e0:ac:ee:36:35:30:71:d9:6a:df:ce:79:39:f1:80:80:fe:
         2a:7c:27:f7:c8:84:3b:23:41:6c:c2:6e:53:5e:d5:12:43:b0:
         ac:ba:1d:a6:75:4e:99:82:41:d4:dd:10:04:ec:76:c4:c1:47:
         65:0d:fd:e8:44:af:7d:73:4b:3c:b0:97:bf:b5:d8:7b:d0:89:
         45:09:3f:c7:7f:48:89:99:47:82:8e:59:85:31:e9:92:3a:ed:
         f4:b3:30:92:ef:f1:3b:1f:f3:46:0e:15:87:e9:9a:e6:8a:74:
         ac:1a:f4:9c:59:de:29:e8:4a:9d:66:93:5b:4a:e7:67:1d:89:
         53:ef:28:2d:4e:9f:19:8f:eb:ca:0c:0b:38:83:9f:05:a0:ed:
         23:d6:9f:05:e7:2c:ba:e5:f1:1c:53:09:80:15:94:ba:83:5c:
         b0:fd:c2:7c:b4:e1:2e:d3:1f:f0:b1:d1:a8:e9:28:b4:80:16:
         36:86:11:a6:1b:55:d6:f8:ec:50:96:93:dc:ed:8c:ca:da:3d:
         65:a5:49:fd:9a:c1:cb:07:1d:75:80:5f:f4:b2:c9:a9:b4:2f:
         08:14:c4:95:67:02:c5:53:5b:16:83:e6:30:18:73:16:03:31:
         21:f2:9d:90:a1:7d:42:be:cc:c3:d4:5c:3c:75:cb:59:a1:da:
         81:27:e1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:19:15 2025 by rpki-client