Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135382e302f32332d3233203d3e203532373732.roa
File:                     3137372e33392e3135382e302f32332d3233203d3e203532373732.roa (raw, json)
Hash identifier:          KTn7JU1CzD/sCzL3EZgCHRLOsGhxwJnPoop5g416Jh8=
Subject key identifier:   E7:B6:BB:17:CC:55:DF:34:98:D4:9B:FD:E8:54:92:11:EF:F1:D3:16
Certificate issuer:       /CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
Certificate serial:       29A0DF813DD3E515A726C5803460CA60EE064D78
Authority key identifier: 9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135382e302f32332d3233203d3e203532373732.roa
Signing time:             Thu 08 May 2025 18:30:36 +0000
ROA not before:           Thu 08 May 2025 18:25:36 +0000
ROA not after:            Thu 07 May 2026 18:30:36 +0000
asID:                     52772
IP address blocks:        177.39.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 12:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a0:df:81:3d:d3:e5:15:a7:26:c5:80:34:60:ca:60:ee:06:4d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
        Validity
            Not Before: May  8 18:25:36 2025 GMT
            Not After : May  7 18:30:36 2026 GMT
        Subject: CN=E7B6BB17CC55DF3498D49BFDE8549211EFF1D316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:76:77:3c:5e:5a:cb:2b:16:96:2d:96:ac:
                    9c:6b:31:79:09:8d:db:4e:78:79:b2:5a:b4:dd:41:
                    0b:47:d6:b1:9a:1a:99:04:33:3a:f3:cb:1a:00:b2:
                    ea:b0:12:a2:58:47:4e:70:f4:6a:83:06:9b:7b:1b:
                    70:26:9a:e8:08:ef:29:92:10:56:d2:e5:17:39:60:
                    a3:10:3c:eb:7b:4a:bf:eb:ec:85:62:2e:db:5e:e6:
                    77:b1:76:dc:21:29:d5:ce:28:70:1e:07:5c:c2:a8:
                    bd:da:43:de:76:d1:bf:a1:49:67:5a:fc:2e:cc:38:
                    0b:3a:8c:97:f1:5c:de:43:ac:f6:81:5f:91:2c:f1:
                    23:ce:9d:36:88:fc:e5:a2:0c:21:61:5d:5b:bf:31:
                    5f:8f:86:46:56:3f:43:95:44:65:1c:f5:4e:63:f0:
                    2b:01:36:a5:24:86:3a:27:96:db:82:8c:d0:d1:28:
                    2d:d8:0b:13:d9:0c:f1:d9:26:7f:41:91:1d:4e:06:
                    e9:32:93:7b:6f:bc:a2:81:7b:a7:31:43:6e:8e:c0:
                    a9:fb:fe:4b:41:20:06:e4:4d:b2:b2:72:16:ad:af:
                    64:f5:ba:e8:a0:ed:b3:3d:6d:f7:0b:d0:b9:71:54:
                    ad:14:0b:ee:5b:7c:52:49:c8:35:20:d4:6b:d9:9f:
                    55:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B6:BB:17:CC:55:DF:34:98:D4:9B:FD:E8:54:92:11:EF:F1:D3:16
            X509v3 Authority Key Identifier:
                keyid:9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135382e302f32332d3233203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:8d:a5:5f:44:86:db:ad:3d:52:de:84:ae:9a:c4:39:9f:35:
         1c:05:35:f5:a8:e7:25:dd:7f:7a:6c:f0:31:29:97:76:0f:e6:
         22:dc:d0:3d:c3:1a:54:eb:d4:9e:c2:7d:16:da:2e:ea:7c:a1:
         06:e1:b2:d0:ce:ae:a7:58:8a:ac:56:b6:59:93:12:3d:1e:bd:
         2a:a3:7c:3d:cc:a5:6e:f8:92:f5:b1:fe:48:af:29:ec:58:c0:
         14:89:e2:d7:a7:7b:98:f0:da:42:2d:ad:cc:9a:c9:5d:24:a9:
         ab:d8:79:88:8b:a6:61:7b:5d:18:36:db:6a:46:0c:71:26:a1:
         03:79:f8:cd:47:95:b6:d2:2b:89:ab:c3:8b:f0:70:b1:cc:87:
         a1:be:86:f7:6d:a7:5e:98:30:0f:93:0b:34:7a:34:fe:06:dc:
         f2:2a:09:01:06:08:78:44:9e:a4:71:86:4e:84:0e:3a:7b:48:
         c6:40:9f:21:21:a8:88:e2:71:bb:a4:25:6e:b0:ae:00:0c:f7:
         aa:8f:62:95:67:8e:3e:4f:85:72:f7:f5:e1:59:9e:8e:3a:27:
         94:37:3a:98:d7:c2:c8:ed:d2:ac:36:38:2b:5e:d4:86:c1:9c:
         6d:ce:b5:30:8f:a9:d7:1f:22:97:ce:c8:59:d6:e6:19:41:b6:
         8a:e7:58:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:45:08 2025 by rpki-client