Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32342d3234203d3e203532373732.roa
File:                     3137372e33392e3135362e302f32342d3234203d3e203532373732.roa (raw, json)
Hash identifier:          LRBpX9SCU+k0n5R/kaO5O2zY6K4c2UvXNvjGyjY7hXc=
Subject key identifier:   15:48:E8:37:4C:7D:09:9C:F7:E7:82:31:0F:7A:6F:9C:EE:F8:21:BE
Certificate issuer:       /CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
Certificate serial:       7E0CC41FBE87D35853A8B2AD627A0B948FC4E6BD
Authority key identifier: 9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32342d3234203d3e203532373732.roa
Signing time:             Thu 08 May 2025 18:30:36 +0000
ROA not before:           Thu 08 May 2025 18:25:36 +0000
ROA not after:            Thu 07 May 2026 18:30:36 +0000
asID:                     52772
IP address blocks:        177.39.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 12:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0c:c4:1f:be:87:d3:58:53:a8:b2:ad:62:7a:0b:94:8f:c4:e6:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
        Validity
            Not Before: May  8 18:25:36 2025 GMT
            Not After : May  7 18:30:36 2026 GMT
        Subject: CN=1548E8374C7D099CF7E782310F7A6F9CEEF821BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:8d:54:ca:9b:4c:19:e3:43:de:b5:14:1d:
                    2d:af:40:cd:20:b1:81:c8:bc:d1:50:2f:cd:fc:74:
                    d1:46:60:d6:d1:05:84:d9:8b:e6:2f:c5:50:6c:e1:
                    1f:db:bb:d3:95:3f:21:d6:c2:ed:df:99:e5:23:b0:
                    0e:5f:73:60:c1:ac:ea:79:cf:c6:08:24:f3:d8:6d:
                    2e:f2:b4:f3:b2:2c:78:a8:ea:61:0d:4e:5d:44:97:
                    06:3d:80:b3:58:9b:9d:2a:b7:7c:2b:05:24:00:ae:
                    b9:68:4d:73:c9:2f:ed:a5:f5:9e:d2:63:a4:f5:8b:
                    d0:ac:6d:53:d3:c1:a5:30:6a:5c:72:f2:69:f6:08:
                    12:47:01:03:ef:94:26:40:aa:d4:68:a7:0c:a8:b7:
                    fd:7f:15:b1:fe:ab:c1:76:45:52:8a:3b:b9:6c:5c:
                    19:dd:2c:1a:24:60:31:d2:90:17:14:1c:6b:3c:91:
                    2d:a6:fe:53:fb:f5:0c:ca:05:93:82:42:07:94:b0:
                    a3:07:ed:4d:6b:d9:29:6f:f1:3d:3e:a1:29:79:5a:
                    dd:8b:6a:06:66:34:f5:6e:a8:83:9b:d8:77:09:b3:
                    61:02:b1:f4:60:e4:90:8e:5f:2b:07:b6:e1:fc:a1:
                    ca:74:9a:f6:29:56:bb:a6:fa:1e:25:ea:59:40:dd:
                    a8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:48:E8:37:4C:7D:09:9C:F7:E7:82:31:0F:7A:6F:9C:EE:F8:21:BE
            X509v3 Authority Key Identifier:
                keyid:9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32342d3234203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:88:b0:c9:aa:13:b4:8e:3d:16:67:28:9f:f9:70:51:99:6f:
         a2:77:dd:cd:f9:bc:0e:98:ff:96:2f:2c:f1:26:15:ee:da:4f:
         48:f4:c5:c0:ea:1e:72:50:f3:aa:c2:50:75:eb:1a:02:ea:3a:
         7a:3a:c3:91:45:21:a5:67:c9:27:53:a1:02:e7:1f:95:15:1a:
         65:58:77:d4:8a:57:96:71:a9:e3:0b:af:e9:1b:34:8c:eb:58:
         d4:89:b1:b5:fe:74:85:f1:a5:eb:9c:72:19:50:e3:ff:47:f3:
         ba:7b:19:dd:27:fe:aa:8f:5e:2d:be:11:66:95:af:e1:da:e2:
         12:54:4d:c3:8a:52:12:a3:1b:26:93:96:b3:93:06:0b:b0:d7:
         2c:d4:f5:94:dc:01:23:f9:48:88:f3:bc:32:19:29:3a:0d:5d:
         9f:8b:64:f3:ff:0a:87:26:ee:39:7a:04:b7:5c:8d:bf:f4:c1:
         56:ec:f6:f7:5e:c0:26:18:0b:a9:5c:1b:b8:ea:93:9f:b6:6f:
         c7:03:7a:ef:30:a9:8b:4c:71:f2:f9:6e:cc:47:63:14:87:bd:
         34:08:15:e0:a0:6d:63:ba:e5:63:c8:9e:42:c9:16:17:4b:b5:
         b9:79:c7:d9:d4:70:1b:c8:04:31:da:73:30:b2:b8:7c:e7:37:
         16:6a:64:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:46:14 2025 by rpki-client