Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/3137372e3135352e37302e302f32332d3234203d3e203532373438.roa
File:                     3137372e3135352e37302e302f32332d3234203d3e203532373438.roa (raw, json)
Hash identifier:          0G5I8e+2Yrhx8SYjlq2yHIws1QV+dd+tAKFBkArKfHg=
Subject key identifier:   77:59:E9:15:F4:EE:8E:ED:49:B1:D9:C8:8E:33:51:C3:CB:20:49:A7
Certificate issuer:       /CN=84A76C454E1EADE3E33056011C14E1F25D7EB27F
Certificate serial:       1A55BB188AFBEDFD1210E1BA7C6E21347F82C82A
Authority key identifier: 84:A7:6C:45:4E:1E:AD:E3:E3:30:56:01:1C:14:E1:F2:5D:7E:B2:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/3137372e3135352e37302e302f32332d3234203d3e203532373438.roa
Signing time:             Wed 05 Mar 2025 21:59:49 +0000
ROA not before:           Wed 05 Mar 2025 21:54:49 +0000
ROA not after:            Wed 04 Mar 2026 21:59:49 +0000
asID:                     52748
IP address blocks:        177.155.70.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.crl
                          rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 18:06:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:55:bb:18:8a:fb:ed:fd:12:10:e1:ba:7c:6e:21:34:7f:82:c8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84A76C454E1EADE3E33056011C14E1F25D7EB27F
        Validity
            Not Before: Mar  5 21:54:49 2025 GMT
            Not After : Mar  4 21:59:49 2026 GMT
        Subject: CN=7759E915F4EE8EED49B1D9C88E3351C3CB2049A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:26:29:d0:c2:86:4f:1d:a3:1d:41:a5:6a:cf:
                    b9:8c:2f:e4:f2:18:d3:0d:c0:e1:5d:15:14:88:b8:
                    fe:aa:21:43:6a:4f:b9:b2:84:13:e0:5b:88:04:6b:
                    34:2b:c0:f3:2d:6e:ad:89:ed:7a:1a:38:c6:b9:f8:
                    8e:24:b1:15:d8:a4:25:aa:ff:26:56:b7:23:9b:91:
                    5e:9d:55:8e:50:a3:dc:3b:b5:92:05:36:4f:1c:5f:
                    56:82:be:17:c5:4c:32:a0:da:36:10:98:e0:52:a1:
                    46:7b:85:7e:93:67:0f:e4:07:2e:b8:94:8c:fe:71:
                    f3:5c:01:e3:6e:29:40:4b:76:13:bd:cc:a5:e1:ad:
                    a3:ab:24:67:3c:8c:b9:23:89:84:69:07:0a:40:9f:
                    4d:ca:74:45:6d:24:85:24:58:d6:82:34:49:3d:3d:
                    de:98:8a:c9:49:86:c3:d6:cc:25:6d:f6:64:05:2c:
                    9f:08:20:46:e7:0e:72:d1:4e:1c:70:02:ce:d1:cb:
                    a3:69:ec:f2:7b:61:5b:56:84:1d:26:79:89:b8:2c:
                    fa:e9:de:3c:fa:39:e3:63:87:15:c9:79:0d:1d:6f:
                    2a:c0:95:39:69:91:70:17:34:f8:3a:e9:b3:b8:6f:
                    01:50:9f:e7:71:a5:38:be:bf:3c:2e:01:cd:05:8e:
                    49:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:59:E9:15:F4:EE:8E:ED:49:B1:D9:C8:8E:33:51:C3:CB:20:49:A7
            X509v3 Authority Key Identifier:
                keyid:84:A7:6C:45:4E:1E:AD:E3:E3:30:56:01:1C:14:E1:F2:5D:7E:B2:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/3137372e3135352e37302e302f32332d3234203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:c6:32:30:59:65:dd:8b:d0:24:52:4a:21:37:10:a4:34:3f:
         ab:cf:f1:86:91:a6:05:f6:4e:f7:f4:40:b2:6f:20:c6:d1:d9:
         a6:52:75:85:4b:64:e9:13:aa:66:cd:d7:0f:a4:52:03:24:21:
         f6:36:f0:9f:fa:68:f3:87:1e:59:12:94:28:2b:6a:a0:b3:02:
         86:18:06:0c:b2:d7:75:7d:b0:07:ac:2a:de:25:a3:70:1b:63:
         ef:b1:8d:ac:a8:e0:a2:5c:2b:8a:7d:2a:29:b5:23:2e:d7:3b:
         49:23:24:d3:43:be:61:1f:67:a4:ba:cf:76:5f:55:f1:39:c0:
         24:bd:10:5e:65:ca:44:39:92:df:23:26:61:fb:eb:24:89:2b:
         7f:84:c4:35:44:a0:41:b9:c2:1b:4a:1c:83:82:4f:97:7e:46:
         ea:fb:4d:94:1d:fe:e2:3b:4f:53:ea:e2:33:ec:5a:66:50:c8:
         3a:32:83:97:39:6e:33:69:a3:ea:48:ef:47:6f:dd:88:2c:20:
         34:e7:dc:cf:23:d7:7b:8f:8c:c1:79:a1:47:91:6b:23:10:91:
         98:e6:2e:49:b9:f0:a5:78:94:de:aa:17:f5:49:6d:1f:4a:57:
         73:d1:be:0f:23:4c:a7:ee:5c:1f:3b:24:89:e7:6a:23:79:ed:
         ff:55:86:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:05:02 2025 by rpki-client