Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3137372e3133372e32362e302f32342d3234203d3e203533323235.roa
File:                     3137372e3133372e32362e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          ACLAM0ZJZlaPSADdVQ5c73DF7eV1XrNqvsgIcIEFe0k=
Subject key identifier:   99:92:18:39:2A:BB:6F:EE:8F:EF:FB:89:3E:7D:DD:3B:62:5C:A8:53
Certificate issuer:       /CN=767F272B321E8F16F6202C66AA9057CC10E66ECA
Certificate serial:       1570C274237863A4627D6C3D1C0E5BD2714F5107
Authority key identifier: 76:7F:27:2B:32:1E:8F:16:F6:20:2C:66:AA:90:57:CC:10:E6:6E:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3137372e3133372e32362e302f32342d3234203d3e203533323235.roa
Signing time:             Fri 21 Feb 2025 13:56:39 +0000
ROA not before:           Fri 21 Feb 2025 13:51:39 +0000
ROA not after:            Fri 20 Feb 2026 13:56:39 +0000
asID:                     53225
IP address blocks:        177.137.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 21:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:70:c2:74:23:78:63:a4:62:7d:6c:3d:1c:0e:5b:d2:71:4f:51:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767F272B321E8F16F6202C66AA9057CC10E66ECA
        Validity
            Not Before: Feb 21 13:51:39 2025 GMT
            Not After : Feb 20 13:56:39 2026 GMT
        Subject: CN=999218392ABB6FEE8FEFFB893E7DDD3B625CA853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f7:12:da:ba:32:60:6b:46:80:c0:b3:bd:6a:
                    81:00:79:76:c0:91:37:a9:0a:18:9c:5f:1c:2f:4b:
                    6b:15:bf:05:84:2a:ca:06:37:e7:26:81:12:dd:24:
                    40:10:08:58:f9:29:61:f1:94:b4:e9:45:44:b1:d3:
                    24:76:98:80:c8:4a:68:ef:4c:f1:94:ff:11:e7:7b:
                    8b:b7:40:b5:70:5a:ee:78:e8:4b:4e:96:02:a1:07:
                    0f:02:ce:23:ea:ba:76:ef:71:d5:d7:d0:c5:c6:62:
                    89:74:9f:93:45:e4:b7:0e:58:bc:f2:54:32:e4:5b:
                    ec:f0:0b:2f:68:c2:92:05:87:a9:0c:dd:0b:4a:96:
                    8b:86:51:68:f3:f4:d5:ab:04:e7:01:c8:a9:89:e0:
                    b4:64:19:d6:d5:c2:7b:33:b9:ac:39:76:4d:14:c8:
                    2c:5c:90:b6:69:7c:25:b9:fa:53:05:bd:d4:11:28:
                    ce:e5:b1:b3:37:13:a4:68:07:07:a5:bf:07:06:36:
                    5f:03:81:01:09:0d:3a:f7:cd:4e:1d:d2:d6:3a:37:
                    45:4e:9f:65:21:ef:56:f9:9b:3a:45:82:2f:92:00:
                    28:34:ff:d0:55:15:76:4b:36:23:cb:38:5d:6a:36:
                    fe:75:1a:e0:4d:d4:35:4e:2f:70:d8:b7:05:c3:f3:
                    36:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:92:18:39:2A:BB:6F:EE:8F:EF:FB:89:3E:7D:DD:3B:62:5C:A8:53
            X509v3 Authority Key Identifier:
                keyid:76:7F:27:2B:32:1E:8F:16:F6:20:2C:66:AA:90:57:CC:10:E6:6E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3137372e3133372e32362e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:b7:04:e5:7e:36:c8:e7:9b:35:ac:51:1a:47:67:ec:d4:50:
         a7:cc:8f:46:c8:25:c3:4d:74:ee:93:f2:8d:7e:df:e0:d4:66:
         15:34:d5:48:fb:57:d4:14:86:b9:e3:8b:a0:a4:09:fb:ae:2a:
         62:89:07:b5:59:9b:72:92:4e:ab:46:8c:31:51:6b:57:15:37:
         6f:9f:9b:ff:51:cc:fa:39:6b:56:28:86:a3:52:ec:d5:af:c7:
         7e:4f:c3:84:9f:dc:ea:c8:b0:f8:5d:cd:9d:77:c3:97:b8:b9:
         94:fa:08:c1:e2:93:44:01:78:c3:88:9f:55:1d:10:a8:b2:36:
         d8:46:ed:14:a8:98:a7:08:10:0a:32:1e:f0:4b:ee:4b:75:61:
         1c:1d:b8:49:a4:8c:41:62:4c:f4:c1:8e:37:b4:22:85:f0:44:
         22:83:b6:6f:30:6e:b6:e2:5e:c6:1f:aa:02:d7:92:ed:df:5f:
         c9:87:2f:24:54:38:ab:db:6c:2c:75:ed:ca:29:34:4e:4a:b6:
         cc:30:41:85:f0:69:ad:32:9f:62:7a:fd:d6:84:07:ab:6c:e6:
         d0:d5:bd:ac:d4:db:44:67:b4:17:ba:ee:dd:be:30:c5:95:08:
         30:be:a7:02:8e:91:31:77:b1:48:4e:50:fb:cc:0d:2d:bf:c6:
         0c:b0:ae:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:19:12 2025 by rpki-client