Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137372e3135332e302e302f31362d3332203d3e203237373135.roa
File:                     3137372e3135332e302e302f31362d3332203d3e203237373135.roa (raw, json)
Hash identifier:          gNI9dEhZxZYo0zExf/O2GoVaFb+dlqOHhTdHxUQGNqw=
Subject key identifier:   71:E0:C0:D1:E0:F3:7B:58:2C:F7:12:8D:1E:81:03:E6:CA:F7:A2:6F
Certificate issuer:       /CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
Certificate serial:       38F1ABBB4F764BB8978865989FA6695509E0379F
Authority key identifier: F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137372e3135332e302e302f31362d3332203d3e203237373135.roa
Signing time:             Thu 06 Mar 2025 01:31:13 +0000
ROA not before:           Thu 06 Mar 2025 01:26:13 +0000
ROA not after:            Thu 05 Mar 2026 01:31:13 +0000
asID:                     27715
IP address blocks:        177.153.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl
                          rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 13:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f1:ab:bb:4f:76:4b:b8:97:88:65:98:9f:a6:69:55:09:e0:37:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
        Validity
            Not Before: Mar  6 01:26:13 2025 GMT
            Not After : Mar  5 01:31:13 2026 GMT
        Subject: CN=71E0C0D1E0F37B582CF7128D1E8103E6CAF7A26F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fe:15:77:50:3b:40:7c:35:0f:2a:42:8c:af:
                    37:42:60:9e:72:f0:16:56:b1:41:ea:19:c3:e2:6e:
                    71:38:00:99:4b:a9:7e:64:66:78:fd:18:d4:e2:d3:
                    56:79:0c:aa:e4:83:c9:a8:c4:71:8f:c2:ab:c8:1f:
                    e2:b5:6b:8e:56:55:bd:f5:66:0a:17:0f:30:1d:84:
                    85:64:3a:89:22:1d:56:8d:02:97:10:f7:f9:4a:13:
                    5f:38:e5:e4:42:92:ac:0f:8d:37:7a:4f:b2:54:7d:
                    6c:73:68:2b:6b:42:5e:68:3c:67:f3:ca:67:ca:ef:
                    00:02:60:1e:c5:d7:90:0a:49:07:08:a9:d1:59:86:
                    ae:81:db:3e:9f:d5:21:51:46:8f:0d:3f:59:69:22:
                    b4:a3:f8:1b:02:80:e3:55:33:9f:0f:30:d9:84:36:
                    ef:78:32:65:21:e2:81:71:ca:6c:9a:88:03:75:f8:
                    19:25:00:34:7b:4e:95:17:44:14:fc:c7:cc:47:24:
                    7e:77:65:db:a7:d5:a1:05:66:17:9c:03:0a:8b:a7:
                    55:52:fa:7e:3a:dd:fc:68:fa:06:29:fa:a6:d2:57:
                    05:56:a1:1f:84:e4:d1:0a:50:4b:62:52:a8:e6:3e:
                    96:1b:8a:17:a7:8d:30:3e:69:ee:aa:33:ca:44:ef:
                    53:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E0:C0:D1:E0:F3:7B:58:2C:F7:12:8D:1E:81:03:E6:CA:F7:A2:6F
            X509v3 Authority Key Identifier:
                keyid:F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137372e3135332e302e302f31362d3332203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.153.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         89:17:79:7c:db:75:b6:f2:71:78:32:62:bb:f8:40:d5:e3:84:
         13:7a:87:7b:12:86:03:4b:1c:d5:c6:22:cd:36:12:86:fb:ce:
         85:9e:31:a7:4b:d7:fc:bf:b6:6a:85:3b:f4:71:02:47:26:27:
         3f:aa:0c:e7:1a:a1:ac:98:52:14:f1:9c:61:ea:69:2c:94:0f:
         81:11:45:56:2e:4e:be:a2:a6:a5:9c:37:d1:df:e1:b8:ea:d1:
         ba:a8:04:05:02:64:b2:b1:8c:cd:7e:f8:25:c9:3a:31:c9:3c:
         64:10:23:d9:82:49:cc:bf:6e:4f:00:43:ef:f8:6f:f1:91:de:
         4e:8d:67:cc:44:d5:f1:81:cf:26:b6:7a:d7:d7:6c:be:40:52:
         a0:19:62:d7:79:dc:91:b8:6f:bc:1c:65:46:50:8d:aa:20:30:
         2f:07:98:d6:10:78:80:ce:2d:3b:9b:14:51:e5:95:41:36:2b:
         5f:d2:47:71:38:7b:1e:5f:3b:ec:17:47:6c:4e:37:0d:71:e0:
         5c:59:ad:40:bb:78:ba:6d:b6:85:64:de:39:01:10:1c:9d:0a:
         0e:0e:b3:b5:31:e7:5d:de:20:00:bd:33:78:7f:bc:48:4f:92:
         2b:46:d4:d8:20:de:6f:2e:e8:f1:47:88:36:f5:60:89:30:05:
         8b:c5:63:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:08 2025 by rpki-client