Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e382e3135322e302f32322d3332203d3e20323632373733.roa
File:                     3137372e382e3135322e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          +pVTi3IYSAD/h5bf9hWouWuZwINrhc0lAqKUmn0F6y4=
Subject key identifier:   08:1E:E0:A3:40:1D:9E:BF:11:2F:F3:12:E2:74:5B:04:22:91:7A:91
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       0A19DC33B0D881331BB7ADD3810100D0CB89C565
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e382e3135322e302f32322d3332203d3e20323632373733.roa
Signing time:             Wed 27 Nov 2024 13:43:47 +0000
ROA not before:           Wed 27 Nov 2024 13:38:47 +0000
ROA not after:            Wed 26 Nov 2025 13:43:47 +0000
asID:                     262773
IP address blocks:        177.8.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 22:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:19:dc:33:b0:d8:81:33:1b:b7:ad:d3:81:01:00:d0:cb:89:c5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Nov 27 13:38:47 2024 GMT
            Not After : Nov 26 13:43:47 2025 GMT
        Subject: CN=081EE0A3401D9EBF112FF312E2745B0422917A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:77:91:02:55:05:1d:32:12:14:7f:44:05:99:
                    99:13:75:92:51:6b:16:e9:c5:e0:63:6c:d6:54:bb:
                    54:2c:cf:9b:a7:da:d3:06:a6:07:5d:f1:a6:6f:71:
                    04:20:14:0b:1a:55:6c:38:d8:28:3b:5e:2c:40:10:
                    1a:07:79:66:5b:94:d2:ed:e4:8e:c5:c8:b9:8f:a1:
                    0e:a2:a8:63:d8:fc:7e:6e:d1:0f:75:a6:15:17:bf:
                    58:fb:1f:b2:da:74:de:55:3e:6c:bb:73:bf:a3:69:
                    e2:61:54:8e:2b:31:48:c6:a4:54:3b:2d:27:ba:ca:
                    f9:0d:2b:85:ac:99:1e:c3:79:ab:c0:ee:41:cb:dc:
                    ac:13:87:48:31:db:91:93:bd:f3:c0:22:3e:91:7c:
                    79:b3:f5:46:e4:cd:02:96:aa:bd:8e:db:41:0b:6a:
                    17:61:15:2b:0a:8e:3f:e1:68:62:33:3a:6a:6e:8d:
                    6d:28:ae:b0:53:a0:33:02:fe:fd:2e:ce:5c:8a:c4:
                    53:5a:26:44:ac:b5:77:50:21:ba:83:fb:09:51:ad:
                    f0:1c:3f:be:26:93:88:ec:64:f4:71:b0:68:c0:86:
                    ea:0e:51:cb:d5:48:e9:a9:42:2b:7b:f8:ee:4a:e6:
                    4b:67:0c:1a:a5:80:87:2b:cb:4d:67:b1:9a:7e:ea:
                    2d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1E:E0:A3:40:1D:9E:BF:11:2F:F3:12:E2:74:5B:04:22:91:7A:91
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e382e3135322e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:bb:e1:bf:b3:24:5f:f7:ff:20:33:e3:2f:1e:b6:a5:65:36:
         15:25:2c:a0:72:84:a7:91:a0:9c:06:96:bb:61:59:1f:f1:75:
         b9:b9:07:a9:22:16:94:a7:c2:18:32:ca:13:2a:dc:3d:c5:b6:
         07:28:1a:d2:15:f8:c0:b0:0f:85:4c:bc:57:27:98:ec:a7:d1:
         c2:e4:af:3c:d0:c1:73:b2:b4:93:35:e3:c0:1d:95:9a:82:dd:
         e6:e5:64:44:42:a7:24:b4:59:de:54:f5:c7:2a:92:b1:7b:0f:
         54:ce:2b:79:6f:da:4b:98:48:03:7a:ef:10:1e:c3:4b:4e:63:
         a8:df:c8:38:ba:83:42:2e:65:01:24:7d:e2:88:63:5f:fa:f2:
         27:36:8b:de:18:ab:a8:73:10:0b:c0:2d:16:d1:f2:4f:54:87:
         dc:a1:95:2d:88:c0:c5:d2:a9:fe:5c:ce:b2:cd:ad:b1:9b:07:
         3b:79:0f:68:32:97:b8:a9:85:b5:94:ed:f4:9c:da:2d:6e:92:
         00:bc:9a:47:e6:a9:46:6f:13:cb:44:72:1c:cb:e1:87:0e:ed:
         09:fa:e5:82:83:d2:06:bf:b6:60:82:b0:ab:90:d7:3f:d9:97:
         71:69:f4:89:2f:d8:8b:c9:ea:7e:33:33:d2:b1:3a:26:79:bc:
         d6:6a:7c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:33:45 2025 by rpki-client