Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/3137372e3133372e3137362e302f32302d3234203d3e203533313633.roa
File:                     3137372e3133372e3137362e302f32302d3234203d3e203533313633.roa (raw, json)
Hash identifier:          8LQ1dgzvynTBD/pGJssMbvz4NrsjrlS5dsbgTBe/XR8=
Subject key identifier:   25:78:F1:3E:E0:A8:71:0B:2D:BE:51:AE:30:55:98:6F:09:B7:99:65
Certificate issuer:       /CN=AA6BDBA8A7988C3948AEF17A952458519A026B8E
Certificate serial:       6275DB11A0DC8F8D10B32545D4CE0810BD180C04
Authority key identifier: AA:6B:DB:A8:A7:98:8C:39:48:AE:F1:7A:95:24:58:51:9A:02:6B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6BDBA8A7988C3948AEF17A952458519A026B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/3137372e3133372e3137362e302f32302d3234203d3e203533313633.roa
Signing time:             Wed 22 Jan 2025 13:20:45 +0000
ROA not before:           Wed 22 Jan 2025 13:15:45 +0000
ROA not after:            Wed 21 Jan 2026 13:20:45 +0000
asID:                     53163
IP address blocks:        177.137.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.crl
                          rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6BDBA8A7988C3948AEF17A952458519A026B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 17:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:75:db:11:a0:dc:8f:8d:10:b3:25:45:d4:ce:08:10:bd:18:0c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA6BDBA8A7988C3948AEF17A952458519A026B8E
        Validity
            Not Before: Jan 22 13:15:45 2025 GMT
            Not After : Jan 21 13:20:45 2026 GMT
        Subject: CN=2578F13EE0A8710B2DBE51AE3055986F09B79965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:50:8b:60:e8:5f:57:e2:79:58:52:e9:c9:32:
                    9c:27:13:6b:aa:e2:64:dd:a5:60:6d:45:c6:d3:0d:
                    af:12:f3:6d:bd:1b:21:6b:91:f7:5d:41:00:cf:d4:
                    b8:04:04:6b:f8:a8:40:f2:01:aa:6c:4a:4a:f4:25:
                    4e:0d:83:08:05:5c:2a:87:9c:56:55:37:75:0e:fb:
                    5d:6e:bd:55:79:a0:ca:40:6b:1f:95:e2:aa:e4:22:
                    a5:11:49:19:a7:84:51:01:9f:16:ee:f6:44:85:a8:
                    e5:e8:c8:66:33:e9:19:d2:4a:e9:28:35:fe:ea:c8:
                    8b:ce:d3:24:8f:96:ca:16:78:cd:71:91:ec:02:c0:
                    cc:19:bb:4a:74:c2:2e:62:e7:26:9d:c9:92:d5:6a:
                    f6:c1:76:9a:c6:68:7e:15:35:37:3c:76:e0:02:d0:
                    23:ae:4a:4a:f4:3a:60:cb:2f:f7:12:34:59:66:5b:
                    ac:9e:b1:7c:f5:b5:57:59:a6:ec:2b:fd:f9:0a:b3:
                    1c:4f:51:b2:be:d3:e2:23:1a:12:a2:37:3f:f7:0c:
                    bf:80:b2:d2:00:b3:98:92:96:dd:c7:6a:48:ab:35:
                    f0:ff:dc:57:d1:5e:45:e4:a4:3f:93:dc:cc:3c:a1:
                    ce:2f:0e:6f:af:2f:24:bd:5c:a0:d9:79:c7:e8:02:
                    4a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:78:F1:3E:E0:A8:71:0B:2D:BE:51:AE:30:55:98:6F:09:B7:99:65
            X509v3 Authority Key Identifier:
                keyid:AA:6B:DB:A8:A7:98:8C:39:48:AE:F1:7A:95:24:58:51:9A:02:6B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6BDBA8A7988C3948AEF17A952458519A026B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/3137372e3133372e3137362e302f32302d3234203d3e203533313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:a6:bf:51:ea:b7:4a:5e:09:08:cd:1c:08:37:e2:92:e0:ca:
         ee:43:eb:c1:8c:59:51:6b:5f:45:e7:44:9c:d2:36:f6:52:e0:
         6d:ac:ba:89:6a:55:6f:05:01:9d:10:98:e0:a5:18:b6:ba:43:
         34:08:df:dd:3f:2c:bb:6a:b3:d6:48:97:28:94:a6:0b:69:20:
         29:3c:bf:c6:9e:ab:1b:96:a7:a7:6d:51:d8:80:4a:d5:37:f2:
         e5:49:44:4a:2e:93:db:36:f0:25:1d:f3:82:52:e1:5f:1f:61:
         69:3a:62:9a:99:f0:60:2f:16:db:d7:11:d2:6a:d7:11:af:29:
         d2:79:9a:fb:dd:fa:40:a6:11:54:d0:92:62:c3:18:0b:a6:17:
         50:35:56:75:03:fa:18:8c:46:5f:4e:f2:93:57:91:52:78:6e:
         29:81:0c:92:12:77:8f:a7:4d:aa:96:1e:97:68:32:44:87:1b:
         20:1e:9e:2b:4f:f4:7a:14:3c:17:40:d2:1e:64:d8:d7:7a:f4:
         d3:38:27:5a:93:d0:ce:8d:35:b8:3a:b4:39:ab:48:7c:d9:59:
         81:83:53:6d:39:df:de:9e:d2:f6:f8:d4:3c:d1:8a:2f:91:92:
         e3:97:5a:02:c9:4e:8e:84:47:8f:73:7a:89:e7:51:5b:c3:e9:
         24:fb:e9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:11 2025 by rpki-client