Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3137372e31302e32302e302f32322d3232203d3e203532393136.roa
File:                     3137372e31302e32302e302f32322d3232203d3e203532393136.roa (raw, json)
Hash identifier:          smy51vn5xY+hD44RXEQH1GN3yihMewD/SsPH2SaCpMM=
Subject key identifier:   43:9A:9C:19:CA:FB:F2:B5:A9:D2:43:12:9D:85:84:BE:FA:D1:19:B3
Certificate issuer:       /CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
Certificate serial:       7CD0FA216CB3D6653A51AF9ADC9BEC10BDD006A7
Authority key identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3137372e31302e32302e302f32322d3232203d3e203532393136.roa
Signing time:             Thu 01 May 2025 20:44:44 +0000
ROA not before:           Thu 01 May 2025 20:39:44 +0000
ROA not after:            Thu 30 Apr 2026 20:44:44 +0000
asID:                     52916
IP address blocks:        177.10.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 19:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d0:fa:21:6c:b3:d6:65:3a:51:af:9a:dc:9b:ec:10:bd:d0:06:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
        Validity
            Not Before: May  1 20:39:44 2025 GMT
            Not After : Apr 30 20:44:44 2026 GMT
        Subject: CN=439A9C19CAFBF2B5A9D243129D8584BEFAD119B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:34:6d:ed:9d:c1:54:f3:29:33:a0:69:06:
                    a9:49:28:d1:e9:7a:15:c2:ad:9a:98:85:7b:40:9f:
                    3e:39:a6:e8:21:7e:1e:79:ff:0b:cd:e5:a8:76:62:
                    63:62:ce:19:89:be:3d:83:fd:a6:ff:83:07:30:bf:
                    0f:f3:11:db:aa:be:30:b8:48:c3:66:2f:c0:48:6f:
                    ec:03:53:00:10:3a:47:d4:1c:6f:7d:2e:dd:56:4a:
                    5a:d7:bb:a6:27:b1:52:e8:38:4f:c4:14:63:89:55:
                    94:63:f6:04:d7:7c:53:d1:ff:0c:e1:b6:1f:35:1f:
                    df:9b:67:13:41:79:e4:93:38:bc:f4:53:1c:08:56:
                    1e:35:6b:f2:24:77:1c:76:ed:15:51:98:99:e1:b2:
                    6f:fd:1d:58:fa:82:91:ef:f0:7c:a4:84:5e:d2:77:
                    cb:c6:14:d0:c7:74:b3:26:be:fd:40:f3:5f:6d:72:
                    0e:fe:c9:09:20:90:88:75:bf:a6:e3:7a:23:b3:3d:
                    9f:08:e0:99:c6:ee:b3:be:c8:b3:d5:ba:7d:7d:7b:
                    86:dc:66:e9:66:d1:cc:46:40:53:2a:24:10:3b:38:
                    67:51:03:9a:2c:4f:41:f7:20:20:a3:13:e6:34:7d:
                    8b:b5:ff:fa:54:b8:7f:1b:de:fd:23:b6:ad:6c:b6:
                    88:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9A:9C:19:CA:FB:F2:B5:A9:D2:43:12:9D:85:84:BE:FA:D1:19:B3
            X509v3 Authority Key Identifier:
                keyid:10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3137372e31302e32302e302f32322d3232203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:97:6d:87:82:65:47:00:54:e2:c7:42:45:59:52:6f:b8:e0:
         3d:58:6d:8d:f4:36:53:ff:d5:8b:6e:66:ad:98:b9:70:bc:71:
         6f:42:bd:38:05:2a:7a:ad:27:98:65:9e:29:7e:e7:e4:8a:e3:
         9b:f1:ed:6b:7b:83:4a:80:91:d8:ad:a3:48:a4:a3:c1:7a:1f:
         36:0f:6d:ec:eb:10:10:a5:ce:fd:88:4a:f0:d7:e0:fd:01:a8:
         55:77:90:84:5e:95:cf:af:ee:6f:50:f5:cc:84:5b:68:15:7a:
         8c:46:91:cf:ee:e3:80:cd:ec:70:02:90:e7:d1:e3:03:6a:b7:
         dd:7e:00:ed:d6:98:b4:e3:f8:0b:30:2e:9c:48:aa:99:91:dc:
         97:5c:2d:94:9e:2b:48:3d:d5:3e:b8:0e:6d:d4:d2:12:78:92:
         6e:4c:66:2e:23:ef:ac:5f:76:15:eb:fd:aa:14:69:20:e7:f7:
         63:2a:d4:bc:61:43:6c:8e:cd:90:e5:83:03:f0:8b:8d:8f:ec:
         e6:dc:df:60:cb:90:e0:35:0c:61:ba:45:d2:4e:36:22:a7:f0:
         c6:1d:e9:d7:f0:20:86:3d:eb:d3:48:86:64:4c:4a:24:1d:12:
         83:1c:57:01:d4:05:16:42:f0:3b:85:c8:75:31:a1:a3:6e:fd:
         41:84:d5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:41:45 2025 by rpki-client