Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/3137372e3232322e3137362e302f32302d3238203d3e20323633333930.roa
File:                     3137372e3232322e3137362e302f32302d3238203d3e20323633333930.roa (raw, json)
Hash identifier:          4GFQyBeS7HVfTg+bV7Ii5CPqfEp18Qg+PRsen6rJGSQ=
Subject key identifier:   7E:3B:46:B1:30:61:50:CE:73:64:38:F7:39:68:22:73:96:BD:B4:EC
Certificate issuer:       /CN=815CD92DD5F19C6193766831C396FE65A0CF9E73
Certificate serial:       20C05B12EE7519AD8CD30CD10FCE061029E3FFDB
Authority key identifier: 81:5C:D9:2D:D5:F1:9C:61:93:76:68:31:C3:96:FE:65:A0:CF:9E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/815CD92DD5F19C6193766831C396FE65A0CF9E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/3137372e3232322e3137362e302f32302d3238203d3e20323633333930.roa
Signing time:             Wed 08 Jan 2025 20:43:12 +0000
ROA not before:           Wed 08 Jan 2025 20:38:12 +0000
ROA not after:            Wed 07 Jan 2026 20:43:12 +0000
asID:                     263390
IP address blocks:        177.222.176.0/20 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/815CD92DD5F19C6193766831C396FE65A0CF9E73.crl
                          rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/815CD92DD5F19C6193766831C396FE65A0CF9E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/815CD92DD5F19C6193766831C396FE65A0CF9E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 06:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c0:5b:12:ee:75:19:ad:8c:d3:0c:d1:0f:ce:06:10:29:e3:ff:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815CD92DD5F19C6193766831C396FE65A0CF9E73
        Validity
            Not Before: Jan  8 20:38:12 2025 GMT
            Not After : Jan  7 20:43:12 2026 GMT
        Subject: CN=7E3B46B1306150CE736438F73968227396BDB4EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7f:11:c7:13:2e:cb:9c:e2:9c:8d:3c:3f:7d:
                    99:42:66:b9:bd:61:4b:27:48:68:d9:60:74:51:a6:
                    b8:d3:d8:51:29:99:5f:c3:5c:8d:09:29:35:fc:29:
                    87:48:17:2f:0c:6d:9d:05:04:28:62:9a:78:9c:5d:
                    d5:d7:a2:2e:3c:c0:97:14:eb:d5:32:20:be:26:00:
                    4d:c6:dc:58:41:f0:33:ca:e0:fe:22:0c:41:82:9b:
                    8b:45:d8:ff:a4:83:17:27:22:c1:9b:ae:ff:bd:e2:
                    d3:23:8f:6f:80:46:9d:45:67:5b:a6:44:83:85:64:
                    62:06:af:59:b4:92:05:c2:33:a7:cf:c6:10:82:70:
                    1b:be:a8:21:73:3f:25:f9:11:5e:cb:a5:cd:07:65:
                    72:4a:ea:7c:94:ca:83:a8:05:b8:3b:8b:71:1b:36:
                    3a:1c:4c:a8:6b:44:1f:21:3e:b2:cf:a8:73:d6:f7:
                    09:c4:c9:b2:34:11:78:dc:54:f6:27:0e:0b:b7:23:
                    c8:39:3b:25:cc:e3:f1:39:68:a1:9d:23:9b:e7:86:
                    b3:de:0e:dc:19:f0:08:3f:43:68:1e:91:1d:fa:77:
                    d8:b4:e6:f2:e9:bd:7f:a5:28:3d:16:6e:ec:e1:ff:
                    d8:cd:e4:1b:ff:94:f7:dc:fc:c8:ca:d3:0e:41:35:
                    84:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3B:46:B1:30:61:50:CE:73:64:38:F7:39:68:22:73:96:BD:B4:EC
            X509v3 Authority Key Identifier:
                keyid:81:5C:D9:2D:D5:F1:9C:61:93:76:68:31:C3:96:FE:65:A0:CF:9E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/815CD92DD5F19C6193766831C396FE65A0CF9E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/815CD92DD5F19C6193766831C396FE65A0CF9E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/3137372e3232322e3137362e302f32302d3238203d3e20323633333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:be:2c:19:32:74:36:e8:53:00:5a:91:e9:f9:02:00:5c:d3:
         2c:0d:fc:e4:1a:c7:66:9a:24:af:28:f7:d8:ab:33:bb:87:19:
         84:07:61:39:df:42:67:05:b5:d2:8c:06:21:48:a3:de:3b:5f:
         dd:80:30:15:5a:9b:05:00:3b:f2:0d:6f:b1:3b:1d:01:81:fa:
         a1:95:ff:64:a5:a3:07:2c:22:94:ae:fa:92:b1:0f:56:73:da:
         6f:84:3c:d6:6f:b3:9b:95:7e:26:4a:96:be:5a:06:6b:2b:60:
         2a:3a:0e:80:a2:86:2a:6e:13:e5:d9:e3:46:62:1a:48:ff:bb:
         ab:b5:8e:da:66:c0:b8:5b:90:d1:07:60:8c:d9:a5:dc:65:be:
         7a:d1:72:9c:54:2c:61:1e:a1:61:ed:71:0b:ae:3b:7c:b9:2c:
         d9:09:e9:f7:2e:c1:02:e4:36:00:6e:0d:49:4e:46:58:de:7e:
         9b:6a:fd:ac:de:56:6d:60:2c:0d:c0:34:19:18:11:2b:f7:05:
         39:b3:57:26:8b:fa:28:da:6c:8c:34:56:b5:fb:75:bb:7a:75:
         aa:73:4b:ea:e7:12:d0:96:68:84:58:86:48:3e:82:e6:05:fe:
         80:b8:d5:fd:9d:db:11:55:b2:4b:4e:82:1d:4d:5b:02:5b:6e:
         80:b0:f7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 17:22:00 2025 by rpki-client