Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e36302e302f32342d3234203d3e203532393330.roa
File:                     3137372e3138352e36302e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          1WXnHFLbiQbrG/YRuNs/gabs29wuxHNReJ8H4wtulGw=
Subject key identifier:   18:32:14:5A:50:EE:26:9F:FB:ED:66:BC:5D:53:BA:C9:1E:55:D0:9F
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       680E1EB1BDE4EDA160C7EA7D5D5F2C2F47591F9C
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e36302e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 17 Jan 2025 16:16:58 +0000
ROA not before:           Fri 17 Jan 2025 16:11:58 +0000
ROA not after:            Fri 16 Jan 2026 16:16:58 +0000
asID:                     52930
IP address blocks:        177.185.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl
                          rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 11:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0e:1e:b1:bd:e4:ed:a1:60:c7:ea:7d:5d:5f:2c:2f:47:59:1f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Jan 17 16:11:58 2025 GMT
            Not After : Jan 16 16:16:58 2026 GMT
        Subject: CN=1832145A50EE269FFBED66BC5D53BAC91E55D09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:26:46:9e:72:16:ca:28:6e:ae:17:b6:58:15:
                    a4:14:6b:ba:c0:44:17:89:00:00:14:64:7c:15:a6:
                    91:6f:05:f3:b4:13:05:ff:b2:a0:8f:d4:cb:73:77:
                    96:8e:28:c9:16:e8:46:34:0c:d1:0d:c7:dd:ec:9b:
                    2b:ca:0b:83:b8:b8:d4:06:82:4d:2c:b7:3d:fe:1a:
                    b3:6d:ab:f8:c8:06:d0:05:14:51:4d:0d:53:92:d4:
                    d1:48:52:72:4e:76:8a:96:32:13:fc:87:a9:78:b5:
                    09:ab:0b:45:cb:a4:f3:8a:f7:dc:0b:aa:5d:8e:7e:
                    9b:27:c9:51:4b:2a:9c:fd:d8:7b:14:3a:33:c3:13:
                    35:1f:a7:ec:f3:6e:7d:39:2f:f0:b4:09:f9:53:28:
                    9a:73:92:9c:a1:73:68:81:d7:dd:ce:c4:1c:69:64:
                    08:93:10:5c:61:23:8f:23:72:fe:26:df:11:5f:26:
                    43:27:63:2c:52:86:1d:af:d7:fc:01:d8:68:ac:c5:
                    60:31:53:51:4b:0e:7f:15:19:96:4c:24:8b:87:4d:
                    0f:24:a5:6c:00:9b:46:f3:3c:21:4f:87:3d:22:fb:
                    d6:22:dc:14:20:f8:75:8d:11:08:8f:2d:86:8e:0d:
                    c8:4d:4e:98:50:f5:31:10:cb:bb:71:03:5b:f3:56:
                    79:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:32:14:5A:50:EE:26:9F:FB:ED:66:BC:5D:53:BA:C9:1E:55:D0:9F
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e36302e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:6e:ba:ce:85:37:50:bc:4c:27:8d:21:fe:c4:87:34:c2:ef:
         ea:7e:a3:da:f9:d5:c6:d9:39:f8:cd:84:4b:c4:49:6d:7a:0e:
         75:06:71:e6:4c:fa:a2:c8:eb:e4:c5:df:b9:17:33:09:9e:5f:
         d6:3a:d3:d4:00:f7:96:f4:50:cf:52:5c:98:61:f3:0c:13:c6:
         36:13:a0:e2:a7:a5:f0:36:cf:8b:f4:30:b4:78:ab:a0:4c:41:
         6c:44:7e:2e:21:52:47:0b:38:c1:e5:b5:ea:c9:04:3d:5a:38:
         b3:7e:10:0c:0f:b5:f5:6e:97:1c:a7:38:10:12:5b:d7:ba:b8:
         6c:4c:27:b1:b2:a6:fe:15:31:0f:88:1f:08:90:11:54:ed:c4:
         56:c3:e0:0e:35:b0:c9:15:0c:c4:15:ff:da:ec:b1:c1:99:64:
         d8:86:25:25:ec:1b:f7:c3:89:01:ee:20:8f:89:35:a5:53:cc:
         f5:5a:d1:16:a6:91:90:cb:75:42:aa:e2:76:6c:ee:b9:90:31:
         f3:7b:eb:c3:05:a1:32:00:ee:d8:fd:2f:36:26:bd:d1:95:6a:
         61:6b:45:61:64:e6:fd:86:c2:ea:d4:29:1f:fd:4b:5f:82:62:
         76:27:71:c7:ba:f0:9d:be:f0:78:bd:4c:49:54:a9:d8:f0:7f:
         69:f1:9b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:43:20 2025 by rpki-client