Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/3137372e36362e3234382e302f32312d3332203d3e203532363630.roa
File:                     3137372e36362e3234382e302f32312d3332203d3e203532363630.roa (raw, json)
Hash identifier:          30QSJthbib9KyeyfZtnKK5KttJf+Kera9kSwuAgUjyo=
Subject key identifier:   87:CA:EC:06:FC:93:A2:C6:85:28:52:E0:F3:4B:37:A0:5C:A4:7F:F6
Certificate issuer:       /CN=9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D
Certificate serial:       4B6159EB897DDEB9F9511D8ACFBE63502A8E2D52
Authority key identifier: 9A:3E:45:4B:6B:C1:DD:C0:42:2A:9E:4D:F4:D5:1A:58:7E:17:34:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/3137372e36362e3234382e302f32312d3332203d3e203532363630.roa
Signing time:             Fri 02 May 2025 18:00:21 +0000
ROA not before:           Fri 02 May 2025 17:55:21 +0000
ROA not after:            Fri 01 May 2026 18:00:21 +0000
asID:                     52660
IP address blocks:        177.66.248.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.crl
                          rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 02:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:61:59:eb:89:7d:de:b9:f9:51:1d:8a:cf:be:63:50:2a:8e:2d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D
        Validity
            Not Before: May  2 17:55:21 2025 GMT
            Not After : May  1 18:00:21 2026 GMT
        Subject: CN=87CAEC06FC93A2C6852852E0F34B37A05CA47FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:36:e8:48:3b:31:2e:01:89:b4:46:35:42:a2:
                    b5:c6:61:bd:54:39:39:44:66:c7:ee:06:5e:a4:b4:
                    bc:e2:35:f6:b4:a3:a5:fe:b4:1d:ae:a6:ea:6b:6f:
                    ee:3d:b6:6c:84:40:04:0a:db:1b:26:d2:eb:a5:28:
                    79:a8:49:a6:9b:4f:f4:c7:a4:9f:f7:7a:d3:ae:73:
                    0e:3b:18:5e:57:67:0e:e8:29:7e:5f:77:1b:2a:25:
                    bc:26:3c:5c:67:8e:9c:7c:74:4d:f3:81:a4:88:a1:
                    66:97:29:ab:4e:c6:cd:20:77:cf:47:ea:64:9e:7c:
                    b8:38:87:90:06:10:2e:2f:45:bc:c5:f3:b9:57:75:
                    3d:31:15:3e:33:a7:ea:67:71:24:34:e5:0d:7d:34:
                    1e:c7:41:2b:3d:a4:17:e3:e3:ec:26:e3:f3:8c:8a:
                    d0:a5:8e:98:18:b1:41:ea:fb:52:d6:8e:0a:08:88:
                    63:8e:6c:d0:e7:3c:81:4f:7e:4b:a6:e6:25:82:1d:
                    d6:4f:49:81:63:93:e8:e9:14:c9:d8:6d:2f:df:2e:
                    af:f4:c9:f8:7b:3f:3e:1c:27:bb:ce:f6:7a:b9:e5:
                    a9:05:e9:b8:d8:36:30:77:41:86:5b:a3:6e:41:9a:
                    7c:30:e9:eb:ba:20:09:43:d3:52:44:e4:db:4a:72:
                    8c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CA:EC:06:FC:93:A2:C6:85:28:52:E0:F3:4B:37:A0:5C:A4:7F:F6
            X509v3 Authority Key Identifier:
                keyid:9A:3E:45:4B:6B:C1:DD:C0:42:2A:9E:4D:F4:D5:1A:58:7E:17:34:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/3137372e36362e3234382e302f32312d3332203d3e203532363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         44:e1:72:a1:a6:e7:c0:f3:79:3f:b3:97:ae:a3:39:b2:e9:9d:
         c7:44:04:81:44:b2:7b:75:79:c7:79:22:4b:7c:9e:25:83:4e:
         91:bf:33:11:e6:1e:80:14:5a:b5:58:f8:c7:49:e2:e9:00:5e:
         47:19:77:ab:2a:79:85:d4:44:d8:a2:b4:4f:4e:b9:5c:ac:ef:
         ff:1a:33:c9:b1:0e:26:70:3f:44:d4:2c:64:e1:4b:0e:60:80:
         d0:9e:02:52:ae:d4:81:33:68:83:bb:3d:b9:55:5f:12:51:30:
         3c:9a:52:b4:2c:18:ae:d6:40:4d:b4:b5:13:44:cd:7d:c4:26:
         91:3a:a9:1c:48:50:10:b0:b3:0e:46:17:d0:cb:bd:60:ee:5d:
         5b:80:b7:ca:36:01:a4:63:38:04:5c:06:ed:f7:ed:f3:8e:83:
         07:b5:86:08:cf:1d:d7:a1:b3:1c:93:a3:61:cd:45:b4:18:60:
         57:b7:0c:ce:33:8c:11:17:53:b1:98:c9:ec:87:7f:13:6d:20:
         02:f2:5e:8f:62:cd:ab:85:00:25:34:c1:8c:4f:84:2b:fc:68:
         60:46:73:14:9e:6e:c5:a2:14:33:cf:25:b0:cd:34:27:4f:89:
         57:29:a5:4d:ca:c4:7f:84:de:3f:7c:e9:1a:1f:8c:12:ed:75:
         6d:41:be:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:36:43 2025 by rpki-client