Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3137372e3132362e3231382e302f32342d3234203d3e20323633353232.roa
File:                     3137372e3132362e3231382e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          Qd5mu3KtzoAk6I9pY8zpQLganG4TpVExww7gGd/pIbk=
Subject key identifier:   84:F0:27:FE:0B:40:9A:94:78:6B:6D:E4:D9:88:61:F2:F1:0D:21:A5
Certificate issuer:       /CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
Certificate serial:       367E9B92F5C2123F4E5E31A19298749F948F4F82
Authority key identifier: AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3137372e3132362e3231382e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 06 Mar 2025 16:16:34 +0000
ROA not before:           Thu 06 Mar 2025 16:11:34 +0000
ROA not after:            Thu 05 Mar 2026 16:16:34 +0000
asID:                     263522
IP address blocks:        177.126.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl
                          rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 10:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7e:9b:92:f5:c2:12:3f:4e:5e:31:a1:92:98:74:9f:94:8f:4f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
        Validity
            Not Before: Mar  6 16:11:34 2025 GMT
            Not After : Mar  5 16:16:34 2026 GMT
        Subject: CN=84F027FE0B409A94786B6DE4D98861F2F10D21A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:12:75:82:4f:47:19:c9:d7:20:1a:29:75:44:
                    ab:85:87:8f:5d:1d:d3:69:86:34:15:32:5d:b9:a1:
                    eb:c2:f4:d7:71:e7:8e:42:85:a1:47:75:0e:dd:ec:
                    83:a6:a5:58:fd:09:e3:0d:d5:ee:74:ac:34:b0:e5:
                    70:cb:9c:1a:84:00:66:48:6f:db:3d:5a:96:6b:c3:
                    f4:b2:d3:92:c6:4e:c7:9a:f9:e6:86:b8:e3:ab:ed:
                    bb:6e:7c:dc:57:b7:78:93:f5:f3:d4:22:1d:af:71:
                    ec:c4:89:aa:1d:b1:e0:5f:15:ee:28:74:13:ea:db:
                    39:89:a3:27:50:3d:43:5f:90:00:5c:b1:7c:37:ee:
                    de:77:8d:a4:69:d2:67:d8:8c:42:77:81:c4:f4:13:
                    68:ac:6b:b5:33:7b:79:05:f2:ff:50:fc:50:f2:93:
                    b8:4b:58:46:a6:89:64:83:14:2b:88:72:b6:11:18:
                    e3:cc:42:86:91:c8:98:6f:d8:d2:50:2f:c3:e6:55:
                    17:e1:cc:a6:fd:a1:6a:70:58:e9:f0:41:15:13:4d:
                    80:7c:ee:bb:6c:2d:2a:52:b0:6a:e0:dd:4e:ee:3d:
                    08:c7:f7:a5:dc:e7:58:54:8f:ab:5e:a3:9a:8e:ac:
                    46:c4:d1:ac:f4:cf:21:b9:f5:76:76:e4:fb:33:0f:
                    0e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F0:27:FE:0B:40:9A:94:78:6B:6D:E4:D9:88:61:F2:F1:0D:21:A5
            X509v3 Authority Key Identifier:
                keyid:AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3137372e3132362e3231382e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:d8:09:3f:54:97:b7:1d:39:09:ad:4d:75:7f:ba:2f:9f:4d:
         25:de:06:c4:dd:07:6f:01:e6:39:9c:08:41:89:22:ca:f3:d9:
         ab:be:be:30:48:29:78:ff:07:b0:78:1a:de:9a:25:b3:5a:a4:
         30:cc:90:da:a4:84:b4:44:7c:c1:57:89:53:44:c3:ec:54:da:
         5b:7f:7e:4a:31:73:1e:6d:bb:91:69:4e:ce:98:15:f7:cd:0c:
         f0:e9:86:4f:6b:9f:af:b1:3d:6f:70:be:18:b6:5c:ec:1a:4e:
         44:a3:bf:47:2a:a6:69:0a:1b:1e:de:e0:18:5b:33:a8:9f:d2:
         4e:5c:2b:ab:46:7f:69:d9:81:6f:6d:7f:9c:bc:9c:67:ec:53:
         df:17:7f:74:c2:d3:23:d2:d9:00:0e:25:b8:46:74:b2:4f:7a:
         5c:ce:57:db:a2:bd:f0:0c:30:39:f7:b5:47:78:fc:f0:89:c7:
         55:b7:26:c0:70:d0:dc:80:df:58:30:34:a5:39:3b:e9:1c:f9:
         95:70:dc:66:b4:a5:3b:5e:5f:40:43:11:2a:db:24:22:48:a1:
         cf:8b:44:a7:0e:55:72:1d:fa:80:cd:f4:e3:c1:de:2b:a7:14:
         6a:26:42:4d:10:3f:38:79:09:9b:12:28:06:1a:7c:de:44:a4:
         78:eb:da:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:40:21 2025 by rpki-client