Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/3137372e3133372e3234382e302f32322d3234203d3e203532373438.roa
File:                     3137372e3133372e3234382e302f32322d3234203d3e203532373438.roa (raw, json)
Hash identifier:          wuCcdAxuMWF3mwJj8yxageVime/aLqmwGtTa+WM3IBM=
Subject key identifier:   B4:CF:83:93:B3:86:1C:95:E8:62:00:DD:00:90:1C:0D:DB:C5:DC:E9
Certificate issuer:       /CN=84A76C454E1EADE3E33056011C14E1F25D7EB27F
Certificate serial:       5710C73C43D5A0FA19955FB9765DD0E1BF0D0B25
Authority key identifier: 84:A7:6C:45:4E:1E:AD:E3:E3:30:56:01:1C:14:E1:F2:5D:7E:B2:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/3137372e3133372e3234382e302f32322d3234203d3e203532373438.roa
Signing time:             Wed 05 Mar 2025 21:59:49 +0000
ROA not before:           Wed 05 Mar 2025 21:54:49 +0000
ROA not after:            Wed 04 Mar 2026 21:59:49 +0000
asID:                     52748
IP address blocks:        177.137.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.crl
                          rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 18:06:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:10:c7:3c:43:d5:a0:fa:19:95:5f:b9:76:5d:d0:e1:bf:0d:0b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84A76C454E1EADE3E33056011C14E1F25D7EB27F
        Validity
            Not Before: Mar  5 21:54:49 2025 GMT
            Not After : Mar  4 21:59:49 2026 GMT
        Subject: CN=B4CF8393B3861C95E86200DD00901C0DDBC5DCE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:85:2c:a4:32:1a:f2:13:d3:bf:8b:6c:bf:bf:
                    78:d5:8a:ec:54:10:3a:9b:5c:a8:11:90:67:10:e0:
                    eb:72:91:98:75:88:79:a1:cb:f1:af:09:9e:6a:ea:
                    6f:59:5f:e0:3b:ee:5d:61:48:02:82:19:54:22:a2:
                    af:bb:9b:08:1f:94:4e:6c:22:55:e6:28:22:45:68:
                    e6:e0:b0:6e:b4:2c:29:b2:42:12:59:20:e1:81:5b:
                    5c:f9:ea:fb:c3:55:23:73:3b:66:97:cb:5d:bd:63:
                    07:d4:88:a2:21:59:16:1d:f1:8c:f9:81:77:6c:f1:
                    a6:d3:a4:5c:23:81:c7:79:ce:84:30:ee:26:62:14:
                    90:31:0d:1c:a1:31:0c:89:ba:74:25:15:bc:b1:31:
                    60:21:ab:51:43:fa:e8:f6:d5:12:28:2f:d5:e1:a3:
                    26:62:6c:f5:c6:b1:91:16:7e:e0:92:20:a9:62:a9:
                    07:23:0a:0d:1b:cd:e6:4a:1e:62:fd:9d:b7:1a:86:
                    f8:3c:f0:c3:58:af:1d:c0:eb:25:45:f2:0a:8e:a9:
                    20:f2:77:13:36:10:52:4c:15:9f:f8:cf:a0:7c:84:
                    fb:75:da:e6:33:39:6e:2c:9a:50:80:68:46:db:4c:
                    d2:ee:dc:96:4d:75:77:46:0c:9a:c5:79:80:e1:e2:
                    3a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CF:83:93:B3:86:1C:95:E8:62:00:DD:00:90:1C:0D:DB:C5:DC:E9
            X509v3 Authority Key Identifier:
                keyid:84:A7:6C:45:4E:1E:AD:E3:E3:30:56:01:1C:14:E1:F2:5D:7E:B2:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/3137372e3133372e3234382e302f32322d3234203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:78:0a:8c:fa:ae:76:65:5d:d4:4e:f2:7c:38:4d:8f:08:53:
         21:36:e7:50:cb:24:7b:a8:51:ee:b4:07:ab:08:a5:0a:4d:d0:
         ab:90:2b:b8:bd:4b:01:58:18:28:8a:c6:e0:17:cf:5c:5b:e3:
         b0:56:bf:e7:d4:f9:44:20:a6:d0:10:5b:ed:33:dd:e0:44:47:
         8e:55:ed:1d:13:00:ab:11:04:62:66:75:82:5e:6b:64:5b:1c:
         72:d4:9a:e5:6b:41:43:fd:20:b5:61:10:fb:62:ec:cd:e2:cc:
         5a:2f:4b:1d:6b:44:dc:25:71:f8:dd:16:3a:45:6c:1b:f6:cf:
         49:b8:22:f1:63:01:bd:e8:b8:a4:39:ac:66:70:63:bf:c8:c0:
         f1:de:a7:72:c9:2d:ae:ed:4a:16:aa:7a:33:21:d8:79:92:ba:
         0c:b3:28:f7:e1:a6:98:61:af:18:74:9c:49:ed:1d:38:c2:9b:
         e3:36:e9:0a:d4:2a:d1:2a:bb:f3:e9:f7:9a:48:09:cd:c8:0f:
         f0:cb:f1:63:0e:41:d9:12:a2:b8:fb:2c:18:00:00:0e:fe:e0:
         af:e4:0e:b6:26:47:72:48:fb:68:84:cc:0e:cc:0e:a7:4a:74:
         d6:eb:39:77:29:85:13:31:2e:cb:89:3b:79:f3:21:21:69:96:
         cf:52:df:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:12:17 2025 by rpki-client