Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa
File:                     3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa (raw, json)
Hash identifier:          0yz5B0vFU4y+5bFNlnsgvOAMOkwGTpRZj0IDhhUzrRA=
Subject key identifier:   30:F0:13:1D:B8:64:98:8D:9E:B1:F7:B6:09:2C:6A:B0:00:82:4D:C9
Certificate issuer:       /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial:       18D99BD9919CE48BB90030136B92BE69964B1D15
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa
Signing time:             Thu 06 Mar 2025 14:53:30 +0000
ROA not before:           Thu 06 Mar 2025 14:48:30 +0000
ROA not after:            Thu 05 Mar 2026 14:53:30 +0000
asID:                     53029
IP address blocks:        177.129.116.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
                          rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 17:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d9:9b:d9:91:9c:e4:8b:b9:00:30:13:6b:92:be:69:96:4b:1d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
        Validity
            Not Before: Mar  6 14:48:30 2025 GMT
            Not After : Mar  5 14:53:30 2026 GMT
        Subject: CN=30F0131DB864988D9EB1F7B6092C6AB000824DC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a2:c1:26:1b:08:09:3b:1c:5b:6c:ad:cf:8f:
                    69:84:52:9b:52:34:95:5e:9a:1e:5e:5d:62:86:c3:
                    32:36:e0:bc:79:c0:19:08:74:e1:30:9a:c4:b3:40:
                    6b:9e:39:5c:91:7c:6a:b6:4c:a5:6f:fa:c9:ec:76:
                    20:77:c0:4e:dc:58:52:84:a6:fa:05:9c:0f:b8:bf:
                    5f:17:31:85:21:52:01:e2:41:16:f2:f7:84:a0:46:
                    19:20:1b:3f:ad:b5:51:e2:f6:bf:3c:bc:7f:2d:7e:
                    db:50:42:41:e8:62:29:f9:67:6b:59:5d:67:c1:0e:
                    fd:a0:08:cc:61:51:68:22:d8:92:31:89:a4:99:83:
                    75:45:2e:5b:10:54:0b:f4:d2:a5:a5:2c:83:8e:e7:
                    bb:3f:64:51:60:3a:c2:fc:0e:d7:b9:e9:5d:a2:92:
                    54:2a:a6:1a:06:4f:62:2b:88:e2:ee:fe:1f:fc:62:
                    95:58:e2:02:fe:32:2a:a7:98:0a:4a:39:2c:e1:28:
                    db:a0:72:2a:40:a9:0d:c3:05:0f:55:52:8a:5c:c2:
                    5d:b5:fa:33:25:e2:60:f1:52:45:1b:1e:22:c8:31:
                    39:c1:36:59:5f:1e:72:3a:05:83:7e:74:6f:0a:9e:
                    38:eb:dc:7a:53:df:d9:02:e3:eb:34:58:43:12:e3:
                    e2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F0:13:1D:B8:64:98:8D:9E:B1:F7:B6:09:2C:6A:B0:00:82:4D:C9
            X509v3 Authority Key Identifier:
                keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:9d:33:69:0e:e4:3a:bf:5e:a4:63:bf:31:35:02:15:2a:c0:
         46:77:02:b0:37:03:ee:75:27:a3:c2:a4:5c:a5:73:fe:c5:07:
         9d:7d:9d:c8:6b:c0:df:41:8e:77:77:37:fe:10:0d:3f:c2:c6:
         75:e3:ac:dd:48:87:93:58:00:f8:56:3a:9c:52:78:f8:d5:9a:
         dd:46:05:40:9d:5b:42:43:47:af:13:e5:6b:9f:2f:dd:6a:05:
         62:d1:ca:d2:8e:20:f6:57:f9:ab:a1:6e:59:98:7c:95:70:9d:
         98:a4:3d:6e:20:e7:1c:22:40:f1:29:88:f3:1f:e6:6e:42:5e:
         6a:a6:81:0f:13:15:74:8c:68:94:16:87:a1:25:fb:42:14:e2:
         25:84:47:59:12:84:d7:63:2b:0b:84:8a:1b:a1:fb:3a:ab:38:
         0b:13:97:28:20:0c:5c:13:e2:37:66:d3:53:be:17:78:ad:4b:
         7f:d0:73:10:c0:2c:56:12:b8:25:b8:27:46:cf:97:b2:39:16:
         19:53:8d:2d:9d:62:45:12:e2:5b:42:70:a2:2f:a0:02:4d:97:
         3a:82:0a:74:96:42:32:54:3c:79:96:a5:cb:56:5c:8b:13:08:
         59:7b:8a:08:66:7d:9f:a1:ca:38:1f:7b:f8:66:31:2f:a8:4b:
         24:4a:45:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:33:20 2025 by rpki-client