Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/UB4wBhtiqddoLnXwp4byW51JUK4ypn3TppvizN1SU97/0/3137372e38342e34342e302f32322d3234203d3e20323633353134.roa
File:                     3137372e38342e34342e302f32322d3234203d3e20323633353134.roa (raw, json)
Hash identifier:          L1OXPBARwj8IglWvN6hYyzW47ImRmSywEn6N6ynpSZ8=
Subject key identifier:   8A:6B:C3:B5:F4:55:26:4A:C3:CB:0F:35:2E:57:16:10:21:7C:D3:45
Certificate issuer:       /CN=593735A2ABA6B3848108C26014737D33DED5064B
Certificate serial:       785318C121B392BDFD0AC3BF0A61A8F80E9F5AAB
Authority key identifier: 59:37:35:A2:AB:A6:B3:84:81:08:C2:60:14:73:7D:33:DE:D5:06:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/593735A2ABA6B3848108C26014737D33DED5064B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UB4wBhtiqddoLnXwp4byW51JUK4ypn3TppvizN1SU97/0/3137372e38342e34342e302f32322d3234203d3e20323633353134.roa
Signing time:             Tue 07 Jan 2025 19:33:33 +0000
ROA not before:           Tue 07 Jan 2025 19:28:33 +0000
ROA not after:            Tue 06 Jan 2026 19:33:33 +0000
asID:                     263514
IP address blocks:        177.84.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/UB4wBhtiqddoLnXwp4byW51JUK4ypn3TppvizN1SU97/0/593735A2ABA6B3848108C26014737D33DED5064B.crl
                          rsync://rpki-repo.registro.br/repo/UB4wBhtiqddoLnXwp4byW51JUK4ypn3TppvizN1SU97/0/593735A2ABA6B3848108C26014737D33DED5064B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/593735A2ABA6B3848108C26014737D33DED5064B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:53:18:c1:21:b3:92:bd:fd:0a:c3:bf:0a:61:a8:f8:0e:9f:5a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593735A2ABA6B3848108C26014737D33DED5064B
        Validity
            Not Before: Jan  7 19:28:33 2025 GMT
            Not After : Jan  6 19:33:33 2026 GMT
        Subject: CN=8A6BC3B5F455264AC3CB0F352E571610217CD345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e6:5e:5c:d5:0a:1f:3d:b9:1c:1c:38:87:ab:
                    cd:69:bd:5d:56:28:27:93:cc:19:44:33:24:18:1e:
                    2f:b8:af:45:97:94:6d:2d:08:42:9d:8b:0d:51:31:
                    92:2f:e3:13:1f:d8:cd:9e:62:90:dd:f4:55:b8:7d:
                    79:02:18:a8:64:6b:47:e5:4b:c8:fa:5c:4d:cd:34:
                    42:13:6e:62:94:73:4f:c6:02:a7:5f:1b:b0:22:82:
                    a7:5e:d7:23:b0:d7:88:b0:3a:a6:5b:24:75:b7:f3:
                    c4:cd:99:4f:68:36:22:a4:1d:14:d1:f9:9a:1e:08:
                    33:c9:71:11:07:41:60:91:f4:4e:d1:b8:ca:ac:5f:
                    8a:55:4e:ce:c2:fa:73:0e:15:80:74:e9:f8:70:33:
                    27:13:50:31:c9:5a:24:44:24:a6:99:1f:56:a0:ec:
                    b1:35:08:42:e4:18:15:f1:1a:01:2d:f3:fe:d0:86:
                    bc:44:72:53:78:f6:4c:88:d0:44:a6:2f:f9:98:1a:
                    f7:28:3b:09:4d:e3:0a:cf:d0:62:ea:7e:97:e8:1b:
                    72:68:5e:17:88:29:64:1d:59:16:21:62:87:30:f5:
                    a7:a3:d6:1e:31:fd:24:6b:d2:9e:81:88:e3:c4:e5:
                    f7:3c:16:b1:14:b5:0d:58:f5:fe:8e:1a:44:b8:15:
                    43:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6B:C3:B5:F4:55:26:4A:C3:CB:0F:35:2E:57:16:10:21:7C:D3:45
            X509v3 Authority Key Identifier:
                keyid:59:37:35:A2:AB:A6:B3:84:81:08:C2:60:14:73:7D:33:DE:D5:06:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UB4wBhtiqddoLnXwp4byW51JUK4ypn3TppvizN1SU97/0/593735A2ABA6B3848108C26014737D33DED5064B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/593735A2ABA6B3848108C26014737D33DED5064B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UB4wBhtiqddoLnXwp4byW51JUK4ypn3TppvizN1SU97/0/3137372e38342e34342e302f32322d3234203d3e20323633353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:a8:5a:8d:8c:7e:83:27:45:29:c0:03:18:d8:66:22:27:d3:
         10:ea:7f:e3:0d:e2:11:8b:cc:d8:15:c4:ac:a4:34:58:fc:ea:
         99:be:48:f8:10:61:4d:a8:82:c9:af:2a:97:7e:7f:96:14:1f:
         ba:ff:31:93:bd:5b:93:69:2f:2c:e7:1c:25:2c:65:3b:56:23:
         b2:fa:69:4e:d0:16:08:03:73:50:ee:5a:63:b6:43:b2:50:a0:
         a6:bd:1c:46:33:c2:df:4f:df:49:e5:b7:a4:86:65:07:0e:b7:
         3e:89:db:c5:ef:f2:88:79:3d:e8:a9:6e:57:d2:41:fc:31:b7:
         e2:5c:be:d3:15:4c:95:e8:c9:b9:bf:30:cd:62:29:1d:d7:d7:
         69:9f:5e:ad:b0:93:63:ae:a6:e4:8c:e5:08:d9:10:ab:86:5a:
         8f:6e:70:40:98:b9:dd:d6:cf:d5:94:30:2c:c0:a3:34:03:ae:
         cb:5a:ea:7e:d5:32:dd:3e:80:14:21:f1:1c:89:d6:44:b1:31:
         be:bd:20:a6:1d:f0:92:f4:81:69:94:b7:3a:66:b5:75:74:a3:
         1b:c1:3d:56:38:53:bb:e4:c6:e3:55:b4:3e:3e:b9:50:46:7f:
         17:d9:49:04:d2:2d:ae:64:c4:1e:4c:35:3f:14:b6:8e:eb:c5:
         26:b6:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:47:41 2025 by rpki-client