Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3137372e38342e3135362e302f32322d3234203d3e20323633353531.roa
File:                     3137372e38342e3135362e302f32322d3234203d3e20323633353531.roa (raw, json)
Hash identifier:          hOarYccXAAG/SirinUShOfvyMPiIxns5fD4Nagfcr+E=
Subject key identifier:   A0:13:1D:7D:57:12:ED:03:E2:19:9F:03:31:BB:A2:BF:E8:86:B7:7A
Certificate issuer:       /CN=3D10000E40C545C40D0B40A419954E6B6B94E80F
Certificate serial:       30C0B8800504C8B678D0F10382399CF8EB63A9FF
Authority key identifier: 3D:10:00:0E:40:C5:45:C4:0D:0B:40:A4:19:95:4E:6B:6B:94:E8:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3137372e38342e3135362e302f32322d3234203d3e20323633353531.roa
Signing time:             Mon 07 Apr 2025 20:25:51 +0000
ROA not before:           Mon 07 Apr 2025 20:20:51 +0000
ROA not after:            Mon 06 Apr 2026 20:25:51 +0000
asID:                     263551
IP address blocks:        177.84.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.crl
                          rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 07:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c0:b8:80:05:04:c8:b6:78:d0:f1:03:82:39:9c:f8:eb:63:a9:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D10000E40C545C40D0B40A419954E6B6B94E80F
        Validity
            Not Before: Apr  7 20:20:51 2025 GMT
            Not After : Apr  6 20:25:51 2026 GMT
        Subject: CN=A0131D7D5712ED03E2199F0331BBA2BFE886B77A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:b5:af:0b:ea:eb:ff:1d:03:8b:72:1e:a1:
                    84:17:2e:d8:a6:dc:09:d7:f8:fb:f5:6b:34:6a:2e:
                    38:b1:aa:1d:5d:a5:6d:f8:fc:8d:4e:27:8c:ee:d6:
                    11:28:df:09:bc:d2:74:ef:06:0c:84:1e:89:7e:af:
                    87:af:35:5d:39:8d:66:bf:4a:a2:1e:24:a0:91:43:
                    b1:c3:4f:42:7c:43:08:9e:ae:4b:e8:2b:73:81:da:
                    d6:ca:cc:5e:73:f9:d3:f4:eb:43:6d:cd:42:54:09:
                    e2:cc:00:ef:eb:52:e0:64:57:fb:33:61:0b:69:66:
                    9d:03:1c:1d:be:a4:c1:8f:6f:17:26:d8:f9:df:d7:
                    2b:c3:8b:bf:16:ed:fc:55:fc:20:67:f4:1b:5e:49:
                    fa:65:05:5d:00:e3:53:91:00:cf:43:72:bd:72:5f:
                    61:07:4f:99:8c:cb:91:b0:22:52:ab:11:95:33:8b:
                    b2:b0:c4:d3:db:24:8a:b1:f3:e6:59:4a:f7:86:b1:
                    ec:67:3b:76:0e:cc:77:97:a5:9d:67:44:55:0c:e2:
                    15:55:96:ed:3b:cf:d0:8f:88:db:99:78:ca:5f:c5:
                    8e:b2:5c:92:cd:4d:05:6b:c3:54:ad:f2:4e:d0:0c:
                    e0:fe:c2:01:87:9d:aa:48:2a:62:0f:83:4a:62:4d:
                    de:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:13:1D:7D:57:12:ED:03:E2:19:9F:03:31:BB:A2:BF:E8:86:B7:7A
            X509v3 Authority Key Identifier:
                keyid:3D:10:00:0E:40:C5:45:C4:0D:0B:40:A4:19:95:4E:6B:6B:94:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3137372e38342e3135362e302f32322d3234203d3e20323633353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:28:d2:17:56:4e:3f:3b:b5:46:73:21:03:9d:0d:c8:e2:d7:
         69:66:76:55:9d:34:84:4a:a0:11:4b:af:4f:35:a7:2b:60:8f:
         06:09:ff:82:01:45:ce:94:3e:c6:29:8b:5e:f8:de:03:8a:d6:
         80:81:ed:58:2b:42:7e:14:e0:9f:51:f4:f8:89:ab:e3:ce:f4:
         92:15:e4:f5:97:a1:1e:4a:a2:f7:a2:ff:7b:f9:f4:a5:18:43:
         aa:a6:fe:8b:37:40:1a:fe:93:f1:66:20:e5:90:6a:7c:ef:83:
         8d:29:77:13:13:59:ff:99:54:ab:8f:2f:0f:bd:0e:2d:a3:a3:
         2f:b1:26:ea:17:37:ad:cc:16:a6:df:0c:1f:0c:68:ab:2c:5e:
         f3:e7:80:78:9a:21:4c:bb:c8:82:aa:3f:b0:d0:c2:b2:a3:6e:
         f0:5b:b6:fe:6e:a0:de:d4:49:36:eb:75:1e:10:a7:59:c0:f5:
         51:6e:e3:a0:c4:d0:b0:90:17:71:d9:63:91:e5:5c:50:1f:6b:
         e0:cc:13:44:23:6c:d6:ca:7d:55:13:7c:74:c2:c2:f0:93:87:
         bb:a3:67:36:07:83:e2:11:18:97:0e:a4:db:c9:44:aa:e1:cc:
         ef:13:4b:0e:8c:ee:71:eb:49:41:66:27:2d:93:1d:48:8f:f3:
         b2:7e:4a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:45:16 2025 by rpki-client