Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39372e302f32342d3234203d3e20323632383735.roa
File:                     3137372e31312e39372e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          d76IxXMo9CoMHHUKK16tltGyMRe0Apewh777CXHoSWA=
Subject key identifier:   0E:25:6B:48:14:EC:A7:83:B4:37:01:9B:4A:8F:11:1C:8D:27:21:B6
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       09E44C4AB8A6957A8DAA54E7E84F0B0B7B79384D
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39372e302f32342d3234203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 12:55:13 +0000
ROA not before:           Thu 02 Jan 2025 12:50:13 +0000
ROA not after:            Thu 01 Jan 2026 12:55:13 +0000
asID:                     262875
IP address blocks:        177.11.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 07:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e4:4c:4a:b8:a6:95:7a:8d:aa:54:e7:e8:4f:0b:0b:7b:79:38:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 12:50:13 2025 GMT
            Not After : Jan  1 12:55:13 2026 GMT
        Subject: CN=0E256B4814ECA783B437019B4A8F111C8D2721B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:a4:a0:5e:f8:a1:72:3e:a0:be:f6:53:9e:
                    48:94:48:33:cf:b0:c2:f5:43:52:f0:c3:e3:9a:05:
                    af:7b:a3:96:a2:b8:60:56:df:3e:be:0a:a2:b2:c2:
                    1a:56:c8:6e:d4:1b:53:1f:24:cb:c9:b6:d0:a3:b2:
                    5b:97:46:27:e4:34:66:41:dc:c3:39:1b:cd:09:f0:
                    d2:8e:68:41:14:e3:7c:c8:62:9d:6c:32:1c:be:e8:
                    b1:55:2d:fe:f6:51:8b:87:6a:83:c2:8c:2b:ce:8f:
                    fc:b1:33:c8:01:fe:82:05:d7:f2:a6:49:b8:29:ff:
                    17:ac:c8:d6:7d:36:49:6c:a8:11:8a:1e:d2:a6:5d:
                    3a:d2:79:c1:f4:15:12:20:30:9d:a9:63:25:d2:95:
                    e5:2e:30:8c:95:cc:af:c7:36:d0:66:8a:4f:4d:80:
                    51:e4:6d:73:f2:b8:e1:86:be:ca:06:6b:33:fb:76:
                    e6:30:17:9f:ad:63:1c:7e:02:2b:8b:26:f2:f1:06:
                    ed:b6:c7:53:0e:00:18:3f:88:62:4a:08:6e:9f:91:
                    59:03:3f:9f:50:79:57:86:e0:f8:ce:25:23:0b:ed:
                    a6:ab:69:f0:ba:ff:8b:9d:66:15:8b:71:ba:ab:c9:
                    8f:bf:e6:5b:5e:d9:f5:1b:55:24:d5:f2:7c:d2:c9:
                    20:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:25:6B:48:14:EC:A7:83:B4:37:01:9B:4A:8F:11:1C:8D:27:21:B6
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39372e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:bb:e7:c0:94:ad:8b:3c:97:5a:34:4f:26:b4:e5:30:2d:13:
         43:29:17:7a:80:64:85:4a:81:67:83:67:66:13:0b:5d:ea:1a:
         60:83:70:d8:12:42:f0:ca:ed:ef:cc:d2:ff:61:17:36:89:eb:
         13:57:85:54:3a:08:0e:c9:50:a8:23:8c:37:50:8d:d9:48:8c:
         ef:41:d4:15:6d:76:f2:4e:85:2e:03:f2:2c:d9:ba:ae:e0:c5:
         09:a2:55:ef:fb:49:50:cc:9e:f7:66:f1:6c:99:6a:04:74:f4:
         bf:29:dd:61:d2:d1:30:bb:a5:ce:c5:ec:cd:28:5b:1c:9f:89:
         76:34:72:1d:0d:2d:b0:e8:f3:c9:7b:d8:44:98:5a:a6:f1:a3:
         ba:46:fe:18:0a:06:77:72:5f:d2:8a:22:c1:8e:e4:0a:57:f9:
         e1:c1:f5:41:8c:05:0b:ed:9e:e6:3d:14:63:b0:7a:f8:5c:13:
         c6:0e:65:d6:d2:33:d9:a3:df:b8:17:ef:83:1e:84:d9:54:ba:
         14:8d:5c:4f:f7:1f:19:02:c5:f4:6d:f3:34:38:d9:4f:7f:c7:
         f3:73:fe:bb:f6:c8:7b:f4:c8:65:8c:f1:55:8d:ce:a6:0a:6a:
         06:5e:fb:db:05:57:a7:8b:65:18:8d:de:da:98:43:2a:d5:2e:
         19:f6:0e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:45:30 2025 by rpki-client