Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e36382e302f32342d3234203d3e20323634343936.roa
File:                     3137372e35352e36382e302f32342d3234203d3e20323634343936.roa (raw, json)
Hash identifier:          p9p1UTSGFfQw4jPFA5KeM1NPwbGOU9oHPMtWnBNAvNE=
Subject key identifier:   84:47:24:0E:96:3C:7A:C2:17:EB:BE:FA:79:67:09:15:82:75:8A:D2
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       0D1CBE0188FE69B73204B6F522475F0BDFB6C7C4
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e36382e302f32342d3234203d3e20323634343936.roa
Signing time:             Wed 26 Feb 2025 16:39:05 +0000
ROA not before:           Wed 26 Feb 2025 16:34:05 +0000
ROA not after:            Wed 25 Feb 2026 16:39:05 +0000
asID:                     264496
IP address blocks:        177.55.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 19:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1c:be:01:88:fe:69:b7:32:04:b6:f5:22:47:5f:0b:df:b6:c7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Feb 26 16:34:05 2025 GMT
            Not After : Feb 25 16:39:05 2026 GMT
        Subject: CN=8447240E963C7AC217EBBEFA7967091582758AD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:47:e5:11:8b:52:6d:81:f6:ea:52:53:b4:
                    64:9f:13:ce:b2:a5:86:59:c5:8e:a5:f7:fe:04:38:
                    0e:22:1d:2a:27:3c:24:ba:ff:ea:1c:a2:ce:5a:e4:
                    8b:a4:8d:1c:8d:6b:6e:ca:cd:3f:e0:c2:c2:6f:b9:
                    1f:e0:0f:9b:a2:4b:22:f3:4b:5d:00:2c:7d:f0:dc:
                    2f:8a:57:64:a2:fb:4f:a7:e8:ee:99:f2:b5:eb:39:
                    db:41:dc:a4:f7:5f:7d:cf:6b:da:17:f9:71:72:24:
                    d2:aa:97:24:d9:8f:c7:a5:0d:68:23:73:16:65:c3:
                    62:67:14:d9:2d:0d:ce:1e:27:99:be:0c:3a:2c:a2:
                    b3:4b:e2:90:3a:05:fb:a6:57:49:81:ca:b1:78:76:
                    9f:23:dd:43:ef:44:c1:81:d9:78:7b:87:21:01:dd:
                    98:17:b7:8b:07:28:77:f9:14:09:84:99:b6:95:92:
                    1d:92:f1:bf:48:5c:f5:63:1c:b9:6d:a3:ba:85:fa:
                    5f:da:4c:44:2a:cf:9b:31:cb:ba:c4:82:30:ec:cf:
                    f1:fd:95:64:76:83:8a:6b:f3:58:15:6e:7a:9f:e4:
                    20:9c:c5:27:d3:9c:07:b7:54:5a:ec:ae:b2:01:85:
                    29:19:39:57:71:ba:d0:97:b8:85:f6:09:3a:d4:fd:
                    c5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:47:24:0E:96:3C:7A:C2:17:EB:BE:FA:79:67:09:15:82:75:8A:D2
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e36382e302f32342d3234203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:81:b4:0e:62:5f:f7:13:08:33:98:59:5d:f0:2b:77:d6:c1:
         91:4e:61:0d:ee:6c:7f:e3:c3:d5:d4:00:3a:50:a5:4f:5c:ff:
         8d:62:92:0c:ae:2a:df:d1:72:09:5c:ae:60:37:7e:61:de:9e:
         a1:1f:c6:24:a4:17:d0:8c:36:7f:95:aa:c5:24:31:ee:25:28:
         d7:45:d3:b0:50:90:01:23:c8:62:d5:77:4c:54:a9:f1:08:80:
         ef:ca:df:84:1d:05:8a:0c:1c:3e:6c:1c:90:bb:ee:87:55:6b:
         2a:10:1b:35:fa:55:79:22:a5:4c:ea:87:89:2a:7b:99:2c:73:
         61:18:7a:a8:14:ce:89:e6:a5:0d:f7:c1:7e:5f:1f:58:76:fb:
         a9:3e:15:c2:80:0f:3f:72:fb:5c:20:70:f1:af:00:58:a1:db:
         e9:5a:ee:72:31:8f:e1:42:46:dd:5f:b6:26:d5:c0:4e:fc:e4:
         68:25:dc:28:dd:80:77:18:5c:df:d4:fe:bb:a2:d6:d2:f1:e4:
         69:2f:9b:2f:9f:48:7f:72:35:07:48:5a:78:61:e3:3f:33:e2:
         fe:6c:41:e0:28:b7:6f:ad:6d:4c:30:8a:96:79:30:3f:1f:0a:
         59:a6:4f:ec:97:22:51:94:6a:76:30:75:92:e9:70:1d:1c:c3:
         a7:aa:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:12 2025 by rpki-client