Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32322d3232203d3e203532373732.roa
File:                     3137372e33392e3135362e302f32322d3232203d3e203532373732.roa (raw, json)
Hash identifier:          bC8/pY8x0bcB1rMq3Mm4z3hVX53aa0leqyybkMy3wGc=
Subject key identifier:   D1:F2:B6:4E:5B:43:55:B1:93:95:A2:DF:AF:37:6F:74:C8:EB:2C:C1
Certificate issuer:       /CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
Certificate serial:       08FDB6EA8DFFD0D851BB1C5EB83CB041E89AD322
Authority key identifier: 9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32322d3232203d3e203532373732.roa
Signing time:             Thu 08 May 2025 18:30:36 +0000
ROA not before:           Thu 08 May 2025 18:25:36 +0000
ROA not after:            Thu 07 May 2026 18:30:36 +0000
asID:                     52772
IP address blocks:        177.39.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 16:59:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:fd:b6:ea:8d:ff:d0:d8:51:bb:1c:5e:b8:3c:b0:41:e8:9a:d3:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
        Validity
            Not Before: May  8 18:25:36 2025 GMT
            Not After : May  7 18:30:36 2026 GMT
        Subject: CN=D1F2B64E5B4355B19395A2DFAF376F74C8EB2CC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:47:1f:ca:0d:3d:a3:8f:74:80:4e:56:38:
                    03:14:e8:ab:8e:27:28:5f:b7:27:07:b0:18:04:62:
                    df:c1:40:41:7e:42:e5:9c:ba:76:30:c3:12:b7:26:
                    c1:06:7b:24:6b:42:44:f6:12:89:bf:11:e6:1b:cd:
                    f3:a3:fb:f8:77:29:49:04:11:d3:07:27:05:5d:dd:
                    14:df:ab:86:68:42:76:98:ac:ba:51:59:de:32:e6:
                    f1:26:62:21:7a:85:96:1f:07:37:45:6e:d4:15:6b:
                    ce:5a:d4:7c:47:24:d1:f9:0b:2a:40:c9:16:5d:f1:
                    7f:90:8d:c9:8e:c9:11:c3:6c:30:f5:a0:18:87:fe:
                    43:08:62:62:47:f2:76:22:71:96:27:9a:16:03:d7:
                    f0:e7:c3:60:e7:0c:9a:02:1d:1b:a8:9f:cc:1d:d0:
                    d1:bf:fe:1b:0b:e8:8b:bc:80:63:6a:95:ef:72:14:
                    e7:e7:59:9e:67:e9:1d:23:d8:9f:57:d9:75:25:12:
                    d6:2f:52:27:64:4b:6e:98:e0:4b:a1:46:82:ae:ec:
                    a3:87:8d:28:3b:96:41:b6:1f:64:7a:47:06:37:77:
                    b0:63:77:a0:37:01:ed:ad:20:7e:e5:5b:b0:52:79:
                    2f:a7:9d:3b:a1:b5:ed:ee:80:13:87:48:37:e4:13:
                    e1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F2:B6:4E:5B:43:55:B1:93:95:A2:DF:AF:37:6F:74:C8:EB:2C:C1
            X509v3 Authority Key Identifier:
                keyid:9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32322d3232203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:de:4f:cb:19:71:da:e3:67:87:12:ce:f7:a6:58:86:ff:60:
         0e:d5:2b:85:4c:dc:1c:4e:52:1b:1c:5b:4a:41:a2:04:5a:06:
         c9:e3:bb:a0:d4:f6:88:12:60:17:3d:64:ea:d6:23:db:4a:45:
         ea:20:de:36:0d:f4:26:5e:89:df:dd:52:d2:01:53:48:75:bc:
         a2:c5:5a:a8:2f:cf:bd:4c:88:a3:66:34:0f:7a:2d:16:fb:d3:
         33:0b:2f:b4:19:96:c8:b3:9e:62:f7:d0:7e:59:fc:88:51:bc:
         73:aa:61:41:34:de:67:85:0d:b1:19:d7:ea:2c:07:84:e3:1f:
         53:f5:5f:b0:20:b0:0a:7b:7b:f6:b4:18:0f:ae:77:c6:8a:9b:
         3e:82:61:b9:9a:9c:70:2e:3f:16:51:1a:d5:62:e1:d1:35:97:
         a5:3e:9a:af:6f:db:0d:20:56:99:13:02:72:a6:2d:44:dc:9c:
         9c:d8:df:b1:ae:ba:12:88:2d:c3:cd:72:70:7f:36:b7:90:c6:
         85:6b:64:6b:9e:6a:36:61:98:08:fa:22:65:fc:a0:9a:2f:e5:
         9d:84:b4:ec:55:01:f9:17:3d:5f:5d:0a:2e:f2:d7:4b:b5:72:
         02:1a:bc:03:1a:b7:45:3e:c8:a5:7a:06:a0:c7:0d:7a:94:30:
         f9:ca:51:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:26:17 2025 by rpki-client