Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/3137372e3135352e36342e302f32312d3231203d3e203532373438.roa
File:                     3137372e3135352e36342e302f32312d3231203d3e203532373438.roa (raw, json)
Hash identifier:          qZ1C9ylD+uM2+pbMFB/3giL4WY3o4Un5aYCzUaXUl4E=
Subject key identifier:   78:8F:48:7C:4D:23:7D:1C:1D:7D:9A:B6:E9:B1:22:FE:E4:80:BE:11
Certificate issuer:       /CN=84A76C454E1EADE3E33056011C14E1F25D7EB27F
Certificate serial:       79043BC9CC1B3AD70B5C76AC8A74AD284544C7D4
Authority key identifier: 84:A7:6C:45:4E:1E:AD:E3:E3:30:56:01:1C:14:E1:F2:5D:7E:B2:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/3137372e3135352e36342e302f32312d3231203d3e203532373438.roa
Signing time:             Wed 09 Apr 2025 14:00:39 +0000
ROA not before:           Wed 09 Apr 2025 13:55:39 +0000
ROA not after:            Wed 08 Apr 2026 14:00:39 +0000
asID:                     52748
IP address blocks:        177.155.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.crl
                          rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 18:06:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:04:3b:c9:cc:1b:3a:d7:0b:5c:76:ac:8a:74:ad:28:45:44:c7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84A76C454E1EADE3E33056011C14E1F25D7EB27F
        Validity
            Not Before: Apr  9 13:55:39 2025 GMT
            Not After : Apr  8 14:00:39 2026 GMT
        Subject: CN=788F487C4D237D1C1D7D9AB6E9B122FEE480BE11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fb:46:1a:77:fa:3f:3d:a2:33:76:d3:e5:d2:
                    03:d3:df:02:ad:a9:66:9a:23:67:a0:ca:de:1f:cd:
                    6f:a7:57:32:3d:31:1f:b7:ac:c7:59:e1:dc:e6:cc:
                    23:2a:68:10:61:53:8f:15:a9:98:14:5f:6f:b0:48:
                    35:e4:f5:45:04:35:26:e2:10:fa:cf:3c:a1:69:44:
                    a2:5a:24:96:dd:47:5f:5d:8b:93:a7:ed:4a:99:5c:
                    cb:aa:6a:82:cb:07:93:3b:eb:18:94:ec:bf:8a:e0:
                    a1:6e:d7:6b:f8:2a:ec:84:de:94:86:23:00:41:ad:
                    1e:1e:8b:a6:75:b2:65:89:3c:53:f7:9d:d2:14:bc:
                    e4:0c:85:cd:05:3b:07:07:1e:2e:59:ba:fd:21:1d:
                    d1:1f:47:f6:bf:e9:e4:4a:fe:f3:e3:38:88:e3:74:
                    db:41:95:33:a8:08:2f:4c:8d:49:da:2e:35:48:93:
                    fd:d8:f7:01:ed:a9:6e:b5:97:53:2a:b1:02:9e:35:
                    29:06:53:a1:02:a8:fd:7c:ae:56:45:b3:53:05:a1:
                    13:a2:ee:a5:0b:0d:92:5f:a6:3f:6f:9b:d4:d8:1d:
                    32:f7:d1:d0:60:77:3d:e9:2f:f2:51:0b:80:da:da:
                    e1:71:8e:fb:40:fc:09:13:50:c1:14:33:ca:03:37:
                    70:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8F:48:7C:4D:23:7D:1C:1D:7D:9A:B6:E9:B1:22:FE:E4:80:BE:11
            X509v3 Authority Key Identifier:
                keyid:84:A7:6C:45:4E:1E:AD:E3:E3:30:56:01:1C:14:E1:F2:5D:7E:B2:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/3137372e3135352e36342e302f32312d3231203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:86:3c:1f:c9:ff:7c:fd:54:45:9b:f1:0c:8b:fa:14:ec:b0:
         16:3a:ef:21:73:f8:72:5b:53:13:54:d0:cb:a4:c1:02:db:65:
         ea:1f:56:47:0d:b0:40:7f:cc:6e:be:37:41:e1:f3:82:fe:14:
         3b:72:b5:4c:f2:d1:3f:42:e6:ac:85:ea:43:60:f6:99:e0:5a:
         74:ae:6e:f7:bd:0b:b4:24:16:6a:b5:b1:68:9a:48:c9:05:da:
         50:de:54:d0:dd:20:78:79:c8:c1:40:ee:8e:0f:6a:6c:97:5c:
         16:94:fc:45:fb:d1:b4:d8:ed:b9:2b:b5:fe:7e:56:0f:be:87:
         3f:83:93:15:26:d3:8b:92:e0:fd:52:ac:fc:50:15:aa:83:00:
         f2:fe:7a:1a:42:83:9f:65:38:a5:78:1b:ae:44:63:ea:70:26:
         b0:53:5e:37:22:d3:de:d5:be:94:f6:8c:e5:b3:2c:7e:59:d8:
         bd:9b:7b:60:89:aa:b5:9e:3b:05:e6:0e:13:0c:53:b9:8a:09:
         ae:b5:d2:d9:96:ba:63:57:03:c2:0a:7d:c4:10:86:9f:91:2c:
         f1:ea:2f:a0:f5:71:68:bb:1e:ea:5f:e1:c8:48:16:ed:a9:a7:
         ab:08:f8:65:78:76:79:cc:74:ba:42:97:db:a6:0a:8f:87:a1:
         08:39:d1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:53:20 2025 by rpki-client