Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32332d3233203d3e203532373732.roa
File:                     3137372e33392e3135362e302f32332d3233203d3e203532373732.roa (raw, json)
Hash identifier:          4+85cHj8XlC4uAkSLW0jSqcYASOXKu/BcAHCoIJFE+Y=
Subject key identifier:   69:E0:E2:DD:55:1E:44:F4:4F:E7:27:C4:A1:1D:D7:BF:1D:EF:AF:90
Certificate issuer:       /CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
Certificate serial:       764037E5849C672D7D467D68576A4A856F0F1D6F
Authority key identifier: 9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32332d3233203d3e203532373732.roa
Signing time:             Thu 08 May 2025 18:30:36 +0000
ROA not before:           Thu 08 May 2025 18:25:36 +0000
ROA not after:            Thu 07 May 2026 18:30:36 +0000
asID:                     52772
IP address blocks:        177.39.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 16:59:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:40:37:e5:84:9c:67:2d:7d:46:7d:68:57:6a:4a:85:6f:0f:1d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
        Validity
            Not Before: May  8 18:25:36 2025 GMT
            Not After : May  7 18:30:36 2026 GMT
        Subject: CN=69E0E2DD551E44F44FE727C4A11DD7BF1DEFAF90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e4:8c:0e:5c:ba:cc:96:31:ef:b4:e8:d9:0f:
                    fb:a6:75:d2:c6:da:16:62:5a:3e:ef:ff:c6:1a:35:
                    d8:57:6c:96:c9:77:76:6f:27:89:b8:da:59:d0:f7:
                    ff:07:9d:f5:34:66:ea:41:d3:6e:ed:be:d2:9c:5c:
                    7c:0c:ac:64:fb:71:0e:85:56:b4:b9:17:c3:a5:95:
                    22:ba:40:19:f0:77:05:12:89:8c:18:6f:06:d7:3d:
                    30:1a:62:6b:a3:e5:c1:14:fc:1a:bd:ed:cb:d4:75:
                    53:bd:91:24:33:91:ef:6b:ef:06:9c:7f:52:c1:b9:
                    8d:7d:96:da:0e:f2:f9:07:44:3b:70:dd:d4:43:f5:
                    66:d4:87:61:09:a6:54:56:48:9b:13:ca:ca:e8:ed:
                    6e:e8:83:db:39:3f:e8:dc:5c:e0:23:d3:ca:88:31:
                    9a:f2:87:b5:7e:6b:72:0a:ca:f5:71:2b:79:cc:d2:
                    e1:cc:1e:cc:9a:28:58:d1:a8:ff:07:29:ac:fb:f8:
                    5f:71:39:07:bd:8e:da:6f:16:5c:16:2b:9e:dc:2f:
                    87:f3:dc:ed:90:f1:40:37:73:66:b3:58:6f:73:fa:
                    2e:32:e6:8b:32:a4:99:c8:9a:07:6d:dd:e1:77:04:
                    5a:60:73:cf:b3:39:15:72:10:b3:bb:e6:57:39:a1:
                    ab:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E0:E2:DD:55:1E:44:F4:4F:E7:27:C4:A1:1D:D7:BF:1D:EF:AF:90
            X509v3 Authority Key Identifier:
                keyid:9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32332d3233203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:dc:7a:c2:ec:aa:85:d6:93:2a:f1:e8:1d:cc:91:62:9a:ea:
         ac:d1:4b:86:e9:46:7b:19:3b:f3:23:6b:c9:31:6a:53:4f:f2:
         a2:4a:22:2d:4d:0d:68:68:58:25:21:24:d9:a5:e2:17:6b:08:
         6e:aa:eb:70:49:8d:01:a4:b5:72:c0:a6:8b:38:1f:bb:2d:cf:
         3d:d2:ed:62:8d:0a:2d:32:ca:59:d5:45:7b:21:4f:14:63:44:
         40:17:4d:5a:e8:99:c5:0a:a5:71:1a:d5:bd:04:7e:2b:33:07:
         4f:25:b2:2a:33:98:e4:c1:7d:d5:c8:02:62:1f:51:87:8d:fd:
         96:40:d0:d4:23:dc:18:d1:b1:be:85:33:1c:65:bd:ef:6a:4b:
         dd:18:c6:86:2c:40:ae:42:ff:9a:7d:66:1b:2b:0b:1e:c2:49:
         84:c8:5e:8c:5b:51:0c:eb:36:64:f0:a4:34:d6:2f:6f:1f:63:
         bc:14:43:0f:51:f3:13:8f:f7:1e:4f:54:19:4b:38:57:3a:e9:
         f0:f5:13:4d:ea:5e:d1:bc:7f:e1:d5:7e:63:60:a7:53:be:25:
         fc:fc:8f:52:21:b0:70:df:00:bd:12:ef:da:cf:20:f3:1a:c7:
         ae:0d:fd:d5:41:91:ab:88:97:18:4e:5d:9e:f0:ad:68:c8:dd:
         f4:8a:6b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:07:41 2025 by rpki-client