Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/3137372e38362e38302e302f32312d3234203d3e20323632363235.roa
File:                     3137372e38362e38302e302f32312d3234203d3e20323632363235.roa (raw, json)
Hash identifier:          zQVxC1jiVsbmN4tfb7O2mDK9EVDfTyJJN++Bffn3MWY=
Subject key identifier:   C7:86:A8:3C:64:80:4B:4D:59:1F:68:AE:9D:30:25:54:8C:AA:1A:E2
Certificate issuer:       /CN=F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C
Certificate serial:       04FED00E4DA69E3FB02A703CBEC21091DDFF5FB6
Authority key identifier: F0:90:C1:B1:E7:CE:0D:D0:BC:17:FD:70:96:B3:9B:80:E8:B2:53:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/3137372e38362e38302e302f32312d3234203d3e20323632363235.roa
Signing time:             Mon 20 Jan 2025 17:19:46 +0000
ROA not before:           Mon 20 Jan 2025 17:14:46 +0000
ROA not after:            Mon 19 Jan 2026 17:19:46 +0000
asID:                     262625
IP address blocks:        177.86.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.crl
                          rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fe:d0:0e:4d:a6:9e:3f:b0:2a:70:3c:be:c2:10:91:dd:ff:5f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C
        Validity
            Not Before: Jan 20 17:14:46 2025 GMT
            Not After : Jan 19 17:19:46 2026 GMT
        Subject: CN=C786A83C64804B4D591F68AE9D3025548CAA1AE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:7a:0b:82:bc:ec:94:63:01:77:20:57:b5:
                    b0:62:73:08:9f:25:6f:f8:bf:a6:c0:81:60:14:37:
                    83:94:10:83:e2:5f:18:18:a6:c4:d2:8b:66:b7:5e:
                    0c:e5:43:fc:39:34:87:7e:6d:07:48:2f:d6:07:e8:
                    0c:10:58:76:77:f0:59:9b:4e:0d:8e:8b:74:13:57:
                    36:c8:6d:53:c6:02:51:5b:4f:c2:9f:85:5d:7a:73:
                    40:e6:9f:1c:3f:eb:8b:92:27:47:f3:3e:26:5a:08:
                    c6:01:3f:3f:aa:e2:f2:39:f8:d0:aa:00:dc:4b:be:
                    a9:3d:90:94:73:b1:33:5d:90:e3:ef:22:38:eb:0e:
                    68:f2:14:7d:62:0f:da:7e:cb:11:45:a2:6f:c3:2a:
                    33:6f:7c:0d:98:7e:5a:c5:6b:63:84:4d:9b:9d:91:
                    bb:2e:8d:be:e9:b8:21:2a:e1:8a:04:9b:f7:7b:18:
                    5e:77:01:47:e8:ac:88:47:ec:a0:9a:54:27:77:e3:
                    f3:01:75:40:1d:30:29:c2:c3:87:b0:67:dc:85:9d:
                    d8:2f:98:97:45:0a:65:88:c7:16:e7:8c:b8:1b:bd:
                    d6:a5:44:d5:72:e0:a8:62:62:8c:64:d7:3f:2b:4c:
                    ec:7d:0d:2e:89:3f:3b:c3:e5:1b:c7:11:50:b3:1b:
                    bf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:86:A8:3C:64:80:4B:4D:59:1F:68:AE:9D:30:25:54:8C:AA:1A:E2
            X509v3 Authority Key Identifier:
                keyid:F0:90:C1:B1:E7:CE:0D:D0:BC:17:FD:70:96:B3:9B:80:E8:B2:53:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/3137372e38362e38302e302f32312d3234203d3e20323632363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:f9:13:14:cc:1d:b4:00:50:06:00:f6:68:58:37:6a:d5:ec:
         31:d5:31:ff:5a:60:fe:c2:91:90:01:29:bd:7c:bb:93:40:3e:
         9d:61:ef:aa:e3:bf:1c:f3:32:61:5f:1a:88:41:ff:7b:1a:f1:
         7a:c6:77:6f:12:aa:a9:b5:c3:76:bc:96:c7:2e:98:6a:44:c1:
         4f:25:a7:28:dd:57:b0:80:37:7f:fa:be:8c:74:ca:07:bc:fb:
         1a:69:c4:eb:4d:ca:4b:08:88:df:7a:60:2d:a2:45:cf:57:60:
         2f:68:32:cc:76:89:e9:15:4c:ef:82:3f:6a:97:7f:38:27:c4:
         a8:f7:ef:dc:21:74:71:7f:69:08:4d:2b:2e:ae:04:92:e6:3f:
         96:92:e2:3e:7e:b3:f8:5e:3e:0e:6d:14:af:99:89:06:44:9e:
         06:7a:59:29:bf:79:ff:6b:93:80:f8:7b:53:3c:09:b0:ea:38:
         b5:b2:9e:2d:0d:1c:6f:98:4c:43:0b:c1:c3:92:f1:7d:ac:ed:
         ec:ae:23:20:99:ad:9d:0c:ef:bd:99:00:cb:b8:2b:a7:f1:d1:
         4b:cd:c1:e4:a0:3c:ef:be:65:d8:d6:ee:72:45:83:d3:1b:40:
         69:8d:2a:90:0c:e9:5d:f7:dc:24:42:54:bc:39:a1:60:2c:90:
         e6:7e:68:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:37:51 2025 by rpki-client