Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232372e302f32342d3234203d3e20323632363136.roa
File:                     3137372e38352e3232372e302f32342d3234203d3e20323632363136.roa (raw, json)
Hash identifier:          1O69MUXrV94QmnyOoW6Kuti6Hwwh9klXsunzGaa3e/I=
Subject key identifier:   99:1C:BA:F2:A6:98:72:9D:28:32:12:12:93:CC:D0:4B:DA:1C:4E:14
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       78A5CF3BF5EE126EC6891D195587C9CD36807691
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232372e302f32342d3234203d3e20323632363136.roa
Signing time:             Thu 06 Mar 2025 05:00:17 +0000
ROA not before:           Thu 06 Mar 2025 04:55:17 +0000
ROA not after:            Thu 05 Mar 2026 05:00:17 +0000
asID:                     262616
IP address blocks:        177.85.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a5:cf:3b:f5:ee:12:6e:c6:89:1d:19:55:87:c9:cd:36:80:76:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Mar  6 04:55:17 2025 GMT
            Not After : Mar  5 05:00:17 2026 GMT
        Subject: CN=991CBAF2A698729D2832121293CCD04BDA1C4E14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:e1:54:79:f2:4a:42:62:8f:c4:8c:00:f2:
                    74:44:ab:79:4d:1f:eb:c3:7d:a1:84:c7:b2:16:f0:
                    0c:5e:f4:7e:76:08:91:37:3f:4f:05:57:cd:cf:04:
                    ae:8f:2c:ac:60:21:8a:d5:45:19:cd:72:f8:95:41:
                    ed:6a:af:1a:dd:c6:ac:75:cf:a3:0e:ca:f0:da:68:
                    5c:03:81:57:d3:d0:b3:44:a4:ca:ff:86:c1:11:e5:
                    15:b6:36:6f:62:70:df:75:bc:a0:84:3b:5e:fe:a0:
                    6d:ce:de:b6:fa:f9:53:1d:35:48:92:e8:90:6a:49:
                    18:54:5e:ea:b2:89:fd:7c:2e:06:ac:fd:12:ee:52:
                    a2:d0:4d:69:e0:c9:de:ca:4a:71:3b:e7:17:7a:9b:
                    f6:c8:ee:73:f8:39:17:01:2d:1f:5f:9b:1f:29:9f:
                    88:25:5b:b0:9c:4d:ca:16:ce:3f:15:1a:61:4e:2e:
                    c4:87:02:a6:07:cb:1b:8d:9a:51:30:cb:66:75:72:
                    08:b1:e5:47:ab:92:6c:6b:52:29:24:47:ae:49:8a:
                    f8:c9:ee:8a:11:86:fb:6b:bf:af:fa:b6:cf:49:e2:
                    2f:c8:ea:a3:85:93:01:e1:ce:99:30:ba:ea:cb:01:
                    12:bf:c3:9e:2a:5d:04:20:a0:df:08:ec:61:85:86:
                    ee:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1C:BA:F2:A6:98:72:9D:28:32:12:12:93:CC:D0:4B:DA:1C:4E:14
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232372e302f32342d3234203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:7b:fc:9b:a9:3a:b0:0e:86:0f:f7:99:52:80:84:26:74:65:
         15:35:38:a4:7b:50:2e:8f:6c:e1:d5:c8:f9:96:92:4e:fb:76:
         9e:1c:f4:cb:59:0a:59:c0:d9:80:18:0e:6e:27:62:be:11:e7:
         3a:c4:b6:6d:e4:ad:cc:aa:63:81:b4:51:e2:75:96:bc:06:f2:
         c9:9e:96:4a:51:98:6a:bb:00:c4:68:63:98:77:41:b0:f5:35:
         44:8f:a7:12:bf:af:fb:a0:b7:4b:86:97:24:fc:e9:58:2e:e6:
         ae:1e:60:ba:2c:6a:01:c9:b8:65:74:98:c5:85:17:23:ee:c9:
         05:a7:3d:fa:89:b0:56:e6:02:36:5a:2f:af:ea:f7:81:50:93:
         c9:f2:0a:ad:8d:81:47:b1:9a:b7:f1:82:9e:01:fc:58:cb:bf:
         1e:c7:76:f2:38:d0:db:42:98:59:de:6e:9d:fb:17:d3:1b:1d:
         80:76:15:df:e3:8a:95:06:85:61:c2:27:e8:70:52:57:1d:e8:
         0d:c0:dd:c1:b5:14:9f:5c:9c:ef:d4:12:c5:55:90:bb:1e:fc:
         61:2d:82:a8:e1:29:19:9c:5c:aa:2d:a2:52:54:04:00:4a:0c:
         af:0c:fe:d6:07:54:82:a3:b5:7d:31:0e:b6:5f:ef:dc:35:b5:
         e3:2f:0c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:02:33 2025 by rpki-client