Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137372e32332e3235322e302f32322d3234203d3e203631363231.roa
File:                     3137372e32332e3235322e302f32322d3234203d3e203631363231.roa (raw, json)
Hash identifier:          kxvZke4aP8NZ/UnrDJiQMB6TYBxNv0GwfQbncjZseIY=
Subject key identifier:   88:2A:25:9C:54:72:D3:EA:1F:19:AE:0E:64:EA:3E:A8:7A:66:6C:A3
Certificate issuer:       /CN=F350A9A60C94593716E8BF7D10666C1777A7789E
Certificate serial:       3CF1F975AC0E255B154F8C5211D8B153455388DF
Authority key identifier: F3:50:A9:A6:0C:94:59:37:16:E8:BF:7D:10:66:6C:17:77:A7:78:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137372e32332e3235322e302f32322d3234203d3e203631363231.roa
Signing time:             Wed 22 Jan 2025 01:25:21 +0000
ROA not before:           Wed 22 Jan 2025 01:20:21 +0000
ROA not after:            Wed 21 Jan 2026 01:25:21 +0000
asID:                     61621
IP address blocks:        177.23.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.crl
                          rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 20:55:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f1:f9:75:ac:0e:25:5b:15:4f:8c:52:11:d8:b1:53:45:53:88:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F350A9A60C94593716E8BF7D10666C1777A7789E
        Validity
            Not Before: Jan 22 01:20:21 2025 GMT
            Not After : Jan 21 01:25:21 2026 GMT
        Subject: CN=882A259C5472D3EA1F19AE0E64EA3EA87A666CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:f3:9d:84:2f:bf:7a:62:6b:cd:30:b4:ee:
                    4b:e0:26:c0:68:1f:c0:4d:87:2c:50:24:38:7b:a8:
                    7f:40:66:08:ab:73:ac:0e:f0:67:4f:27:f3:b9:1b:
                    e5:d9:92:15:5f:ef:a7:b4:43:34:c8:54:b0:53:b3:
                    4a:ca:d1:60:cb:fc:85:0f:27:e9:16:21:8c:c1:2d:
                    97:59:ad:73:39:f3:3a:53:27:d6:ca:1f:52:6d:16:
                    e1:dd:b5:84:73:74:4c:50:b0:f4:8d:66:2c:4b:94:
                    e3:07:44:37:bc:e6:9c:e1:58:b1:79:2f:2f:19:3a:
                    50:27:91:02:35:4d:38:4a:5e:8b:53:6b:8c:b2:3b:
                    bc:31:12:7b:57:0d:6f:b6:1d:be:d8:5a:b2:60:3a:
                    6c:41:55:7b:75:67:60:8b:a6:af:10:07:48:05:58:
                    70:b3:ae:d9:cd:6c:45:c2:d2:3e:80:d9:f7:d4:2a:
                    a9:10:6b:e8:1b:e8:2a:72:58:12:3d:7a:8a:8c:df:
                    14:e8:78:4f:14:4f:1e:38:07:95:21:05:c4:9e:a7:
                    a8:1e:fd:89:59:02:de:b3:50:cb:91:8e:9b:9b:a6:
                    f3:89:71:30:96:16:f8:7f:49:f4:47:61:73:10:77:
                    8b:ac:02:63:84:64:72:16:62:15:f3:77:7c:61:0c:
                    b8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2A:25:9C:54:72:D3:EA:1F:19:AE:0E:64:EA:3E:A8:7A:66:6C:A3
            X509v3 Authority Key Identifier:
                keyid:F3:50:A9:A6:0C:94:59:37:16:E8:BF:7D:10:66:6C:17:77:A7:78:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137372e32332e3235322e302f32322d3234203d3e203631363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:56:85:0e:a0:9f:28:d9:4a:40:37:4c:32:49:1e:fc:29:5d:
         e2:5a:2b:17:3f:24:a5:dd:d1:ac:58:aa:0e:44:91:a5:0f:43:
         ca:86:77:36:8b:83:57:00:ea:dc:45:29:66:3a:88:94:e1:e2:
         c3:30:cd:bb:61:7f:e0:85:5d:81:d2:68:20:c4:b2:bc:00:7d:
         c7:43:6e:6e:70:3b:f2:ac:a3:b0:e6:1f:3e:80:42:ff:75:12:
         98:16:7e:3a:4a:ec:39:6f:49:35:e5:7f:70:5e:69:bf:e5:a3:
         64:05:61:45:22:62:d5:e7:d1:0c:e1:75:55:5d:ef:b5:ac:9b:
         0e:e7:40:6b:90:7e:73:ab:eb:7a:36:df:fd:03:ae:96:b3:65:
         96:af:eb:d2:3b:b9:da:59:48:ef:01:50:e0:d7:8a:4d:a0:ed:
         72:23:fe:dd:c5:17:c2:f5:85:3c:df:89:4f:21:ef:6b:00:24:
         04:ba:77:c1:58:86:ce:13:e8:8e:20:62:dc:c1:bd:4e:5b:4d:
         24:80:98:ce:97:d0:06:fb:97:c7:c5:78:3f:0a:4b:bd:7c:0b:
         ef:1b:4b:f8:98:8f:50:d0:d4:a3:96:fd:28:b1:f9:bd:2e:07:
         d1:01:8a:76:c3:b4:d0:fd:f3:04:6f:c1:30:c8:d3:f3:be:f3:
         b4:6f:be:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:12:52 2025 by rpki-client