Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232362e302f32342d3234203d3e20323632363136.roa
File:                     3137372e38352e3232362e302f32342d3234203d3e20323632363136.roa (raw, json)
Hash identifier:          f46Y7Xx3rwHpp7+eQYuWahRFV13zA/snTRvvMST32xw=
Subject key identifier:   39:F0:73:9C:D0:1E:3F:12:31:03:0B:51:3A:CF:9A:D7:30:AD:49:6E
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       6EC87A9803F98090F4A9238C77D2FD58D6E744D3
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232362e302f32342d3234203d3e20323632363136.roa
Signing time:             Thu 06 Mar 2025 05:00:18 +0000
ROA not before:           Thu 06 Mar 2025 04:55:18 +0000
ROA not after:            Thu 05 Mar 2026 05:00:18 +0000
asID:                     262616
IP address blocks:        177.85.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c8:7a:98:03:f9:80:90:f4:a9:23:8c:77:d2:fd:58:d6:e7:44:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Mar  6 04:55:18 2025 GMT
            Not After : Mar  5 05:00:18 2026 GMT
        Subject: CN=39F0739CD01E3F1231030B513ACF9AD730AD496E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:c6:8b:2c:a8:22:3e:42:89:a1:c2:c6:cc:
                    5d:d5:17:83:27:2e:c2:50:3f:97:de:db:5f:76:e3:
                    1c:ab:c7:e8:55:fc:a1:d0:54:a8:3b:0a:d1:4f:c9:
                    e5:2d:57:54:63:42:fa:2c:d9:1d:1d:aa:40:ce:cd:
                    ee:79:d8:fd:7d:8c:47:21:b8:98:e9:8d:f3:56:9a:
                    7f:33:78:89:37:46:8b:ed:aa:48:2d:37:0f:18:36:
                    2f:02:ec:1e:9f:50:59:bd:fc:c1:78:d1:20:3a:b6:
                    f3:ad:76:d6:32:0b:38:f4:4d:57:64:d4:c8:81:d7:
                    2a:bb:b7:7f:5c:27:06:3c:0d:4a:86:82:10:3f:4a:
                    4a:ed:1c:1a:41:82:d8:00:97:cf:47:f0:70:1d:db:
                    42:9d:79:ea:e1:42:64:22:e2:cf:f8:ba:4b:d1:ae:
                    bd:de:8a:bb:ed:e0:b0:3f:f2:b4:54:1c:03:87:ff:
                    8e:46:ac:4b:3a:80:1e:09:21:30:39:42:8e:13:c4:
                    46:9f:54:8d:fd:59:e1:ef:8f:f2:23:00:48:6f:44:
                    9c:d7:34:09:99:79:d0:8b:0d:49:c3:63:ec:fb:d6:
                    0c:66:81:f6:a6:12:8b:1d:63:ca:6a:2a:dd:9e:21:
                    af:6b:e8:6d:d8:4e:86:a1:2b:5f:cd:24:8a:2e:a6:
                    90:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F0:73:9C:D0:1E:3F:12:31:03:0B:51:3A:CF:9A:D7:30:AD:49:6E
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232362e302f32342d3234203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:03:8c:50:03:91:09:f4:64:3a:4e:36:2e:d3:46:e9:a6:2e:
         3d:d1:bf:f0:38:0f:ab:12:6e:67:02:6c:f6:69:c3:35:17:e1:
         92:4d:34:0c:f0:d4:5b:79:05:f0:58:66:76:a6:a4:79:c3:e6:
         c4:59:ed:57:4a:fc:e6:01:8e:ba:0c:63:2f:f0:72:b0:53:4d:
         75:7b:e6:4c:ae:63:91:f7:da:59:4c:ef:16:8b:59:6a:c7:38:
         11:60:71:6d:9a:6e:af:3a:4d:8b:67:09:4e:b5:8d:e2:e6:a6:
         5e:b9:da:15:b4:2a:10:b6:a9:8e:0b:55:3d:b9:aa:f5:2c:f2:
         89:1a:fa:26:93:5a:78:b3:91:8d:78:d8:56:15:00:e6:36:8a:
         00:b0:51:66:d2:ad:19:a2:6d:13:4e:3f:c5:4a:06:08:1c:76:
         f4:cb:27:bd:fa:0c:67:8b:ae:94:ea:41:23:9f:72:73:c6:ab:
         0d:c0:29:71:f0:e6:4c:da:fa:2d:5b:3e:74:7a:42:7e:04:b7:
         d2:36:7f:cc:e5:8a:e7:30:7b:db:08:2c:1e:94:dc:a7:bc:20:
         61:ec:92:2f:59:63:19:71:93:54:b5:87:f1:d9:77:af:44:d4:
         29:f3:af:3a:b6:d5:56:2c:c0:ef:98:c2:55:51:65:86:f5:5a:
         e5:90:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:29:57 2025 by rpki-client