Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/3137372e36362e3234302e302f32312d3234203d3e203533303035.roa
File:                     3137372e36362e3234302e302f32312d3234203d3e203533303035.roa (raw, json)
Hash identifier:          NQwJug/YGIZs96L/gCZH4tyt40UpZQS2z9xnEzFXm4Y=
Subject key identifier:   4A:89:1E:10:D5:4D:E3:6E:41:F2:1D:46:AF:02:EE:82:D7:1E:CD:43
Certificate issuer:       /CN=E77FFE037CEF76A2021361C120C5E3DD2783824C
Certificate serial:       66EB392C3CC1A7B2E66E2CB70FCFDAEC152DF37F
Authority key identifier: E7:7F:FE:03:7C:EF:76:A2:02:13:61:C1:20:C5:E3:DD:27:83:82:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/3137372e36362e3234302e302f32312d3234203d3e203533303035.roa
Signing time:             Thu 06 Mar 2025 05:20:40 +0000
ROA not before:           Thu 06 Mar 2025 05:15:40 +0000
ROA not after:            Thu 05 Mar 2026 05:20:40 +0000
asID:                     53005
IP address blocks:        177.66.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.crl
                          rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 13:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:eb:39:2c:3c:c1:a7:b2:e6:6e:2c:b7:0f:cf:da:ec:15:2d:f3:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E77FFE037CEF76A2021361C120C5E3DD2783824C
        Validity
            Not Before: Mar  6 05:15:40 2025 GMT
            Not After : Mar  5 05:20:40 2026 GMT
        Subject: CN=4A891E10D54DE36E41F21D46AF02EE82D71ECD43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:45:04:75:fc:0e:1b:5d:d9:d2:70:01:64:94:
                    5e:fa:77:f9:fb:eb:2b:7d:ee:17:2d:f0:7d:92:fc:
                    32:9f:6f:cd:f1:5c:fb:cf:84:d1:30:3f:f3:13:d8:
                    cd:0a:6a:ab:55:32:77:8e:e0:fe:8c:78:51:35:6d:
                    28:72:7f:e7:a5:d8:42:17:91:18:92:8b:f4:ec:19:
                    0d:1d:3f:ca:fa:a6:9e:80:3a:cc:ea:06:20:40:49:
                    80:b3:d6:a7:cb:ab:d4:34:4f:7e:32:06:cb:30:6e:
                    c8:83:6c:42:76:56:c2:88:59:c3:ed:64:2c:98:56:
                    23:a9:42:3e:c2:03:6e:c3:9f:d8:f1:16:38:15:18:
                    5b:31:de:3b:a5:02:e4:a0:48:58:01:21:5f:f7:85:
                    31:95:07:fb:a4:09:a3:ea:ea:e3:70:93:08:a6:e7:
                    95:27:f9:eb:4c:2b:70:86:b2:4d:8a:8b:ad:1c:f4:
                    da:bc:6a:bb:63:6d:1c:55:01:64:3e:84:ec:fa:ed:
                    1e:b0:1b:f2:04:4a:9f:ee:e1:55:ad:a2:f7:f4:6c:
                    63:d6:db:07:51:0e:2b:fc:ce:df:95:0a:cc:a6:ec:
                    a7:0f:0c:7b:5a:86:07:bf:12:8a:52:55:50:dd:32:
                    39:98:d5:2e:ba:99:d1:9c:62:ab:cb:f2:f2:79:59:
                    b1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:89:1E:10:D5:4D:E3:6E:41:F2:1D:46:AF:02:EE:82:D7:1E:CD:43
            X509v3 Authority Key Identifier:
                keyid:E7:7F:FE:03:7C:EF:76:A2:02:13:61:C1:20:C5:E3:DD:27:83:82:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/3137372e36362e3234302e302f32312d3234203d3e203533303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:95:b0:d7:3e:30:fd:42:0a:cb:9f:42:be:54:57:73:e6:bb:
         bd:0c:18:44:a9:79:30:4a:45:e0:b4:a6:d6:ec:8a:c1:70:a0:
         a3:78:92:bf:31:5c:c9:0a:7f:01:d7:12:0a:15:3f:39:21:68:
         2f:24:92:a5:cc:f4:97:62:9b:61:d9:cb:fa:66:1b:ee:32:e3:
         14:4f:d6:fe:96:d0:42:09:8f:d3:d2:15:72:50:89:0c:e3:34:
         30:fb:ca:48:03:da:dd:dc:fd:07:d4:c4:dc:41:ba:33:58:8f:
         32:1d:1a:86:c5:57:cb:0a:57:81:54:33:40:69:dc:b8:22:71:
         53:5c:e5:1f:ae:92:ee:fe:f6:9e:01:0f:5e:79:a4:b2:84:ee:
         59:a1:3d:0d:d9:fd:09:e8:28:3c:c4:e7:2a:60:55:68:2c:65:
         45:f5:77:e4:af:6b:91:70:03:f0:d3:bd:0f:b0:63:60:84:a9:
         5a:e9:78:82:de:55:6c:09:34:b8:f1:5c:d8:4f:cc:9e:f7:e4:
         62:3e:f1:5a:57:16:73:b7:ef:13:0d:fd:84:5c:ca:20:2c:de:
         d2:e1:e0:69:1d:c5:46:d8:29:58:00:4a:65:a2:87:47:cf:ab:
         7f:ca:ea:aa:1c:61:6a:7a:69:e2:55:95:cb:9b:d9:f9:85:a8:
         03:d6:86:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:55:37 2025 by rpki-client