Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32382e302f32342d3234203d3e20323730353934.roa
File:                     3137372e33372e32382e302f32342d3234203d3e20323730353934.roa (raw, json)
Hash identifier:          EmWje+arIFTV7gO7Z/KIu2yxqAhGMRVeT3C7Qk900tY=
Subject key identifier:   97:3E:7E:75:D5:32:2B:EF:91:70:45:D0:2D:08:F4:8D:80:16:7A:95
Certificate issuer:       /CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
Certificate serial:       4AB9F21695E80FCD175E5690FE343838A4225022
Authority key identifier: 10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32382e302f32342d3234203d3e20323730353934.roa
Signing time:             Wed 05 Mar 2025 20:59:46 +0000
ROA not before:           Wed 05 Mar 2025 20:54:46 +0000
ROA not after:            Wed 04 Mar 2026 20:59:46 +0000
asID:                     270594
IP address blocks:        177.37.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl
                          rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 12:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b9:f2:16:95:e8:0f:cd:17:5e:56:90:fe:34:38:38:a4:22:50:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
        Validity
            Not Before: Mar  5 20:54:46 2025 GMT
            Not After : Mar  4 20:59:46 2026 GMT
        Subject: CN=973E7E75D5322BEF917045D02D08F48D80167A95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c6:94:d5:e8:f1:37:b9:e2:64:32:42:52:89:
                    47:19:a3:79:68:aa:e6:c0:88:d0:ee:76:a4:7b:bf:
                    b7:db:69:55:71:90:7c:31:f1:e4:77:ad:da:de:48:
                    cf:84:b2:e0:10:4d:3f:d7:47:c7:90:ce:8c:f3:2f:
                    c9:20:a5:a5:54:54:95:f2:5d:c3:19:df:27:7f:c7:
                    5f:2d:cd:c0:15:c5:6f:01:27:09:85:50:44:f5:7e:
                    28:d7:72:a9:f8:33:b1:bd:f1:c8:c8:60:dc:d5:f9:
                    d2:7d:54:ec:38:a3:ed:50:a2:cf:2c:e8:0d:94:1a:
                    d3:23:62:79:06:89:8b:06:d6:3f:0c:42:58:04:7c:
                    d9:3b:84:e1:d0:b9:f0:88:14:fc:7b:47:ca:60:5f:
                    d5:f5:57:e9:95:d2:f4:f3:40:38:7a:3d:e8:99:a6:
                    f0:89:cb:eb:4a:64:70:81:cb:d9:81:da:64:1d:28:
                    7f:b6:8a:e4:ef:11:79:e6:f2:07:b8:1c:de:c5:ce:
                    4a:c4:f2:a5:2d:f2:d0:c9:a6:c9:64:ec:ca:59:46:
                    68:7c:2f:a2:e9:76:21:da:3d:12:42:a0:b2:a5:a6:
                    7e:42:b7:40:3a:73:0c:bf:60:fa:75:18:93:3f:a0:
                    ae:8c:1e:ce:5b:1c:58:69:62:e4:1e:61:bb:86:14:
                    4b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3E:7E:75:D5:32:2B:EF:91:70:45:D0:2D:08:F4:8D:80:16:7A:95
            X509v3 Authority Key Identifier:
                keyid:10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32382e302f32342d3234203d3e20323730353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:fa:92:e0:c5:a3:06:7d:ac:2e:3d:91:65:12:39:31:df:4f:
         a8:84:39:17:1e:8b:1f:ed:53:c3:86:fe:55:0e:77:fa:6a:2a:
         50:09:a5:51:a6:e6:6b:a2:d3:ce:66:2f:f7:41:07:fd:65:81:
         b6:f2:d3:eb:f1:48:45:4e:89:1b:b6:e4:07:dc:bc:4d:51:25:
         7b:8e:6e:37:d9:de:f0:77:e0:52:88:c6:5b:93:15:47:6b:c8:
         c4:14:1b:13:90:e1:8e:67:ef:4a:2d:38:cf:75:01:36:6a:7c:
         ee:1d:60:39:a6:76:c6:40:2e:f1:e1:62:ef:70:64:5d:61:34:
         85:cd:d9:07:52:d0:94:bf:82:dc:48:3a:3b:bb:79:66:1f:39:
         06:4d:21:90:f7:42:8e:11:ba:1e:d4:94:82:78:cb:de:cb:fd:
         61:b2:9c:82:f4:64:84:32:a1:c1:b3:63:1f:b5:22:52:73:d0:
         36:4f:27:5d:dd:74:72:61:9e:95:12:90:ac:0c:58:6b:64:76:
         cf:f4:a2:17:44:ec:fd:5b:cb:86:b0:aa:20:17:e2:f0:2c:21:
         21:e0:9c:ae:62:5d:1e:0f:43:a4:05:94:03:aa:44:60:31:7b:
         7b:bc:4e:e9:8b:94:6d:e2:21:40:29:fa:45:a1:62:b6:62:66:
         91:67:78:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:49:22 2025 by rpki-client