Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3137372e37352e3136302e302f32302d3234203d3e203533303632.roa
File:                     3137372e37352e3136302e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          hyQPKMG1ZA+bM3I48Vun/5px1kt2epY6+uHerxS1MPg=
Subject key identifier:   8B:59:8C:5E:81:1B:25:A1:F3:30:61:F1:52:05:68:54:58:39:07:1F
Certificate issuer:       /CN=F8410D54252926C3AE5A91AFD3992AC828829031
Certificate serial:       4E7CBDA19FF23F11343685CE7813721E8AF00609
Authority key identifier: F8:41:0D:54:25:29:26:C3:AE:5A:91:AF:D3:99:2A:C8:28:82:90:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3137372e37352e3136302e302f32302d3234203d3e203533303632.roa
Signing time:             Mon 07 Apr 2025 18:10:07 +0000
ROA not before:           Mon 07 Apr 2025 18:05:07 +0000
ROA not after:            Mon 06 Apr 2026 18:10:07 +0000
asID:                     53062
IP address blocks:        177.75.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.crl
                          rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 07:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:7c:bd:a1:9f:f2:3f:11:34:36:85:ce:78:13:72:1e:8a:f0:06:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8410D54252926C3AE5A91AFD3992AC828829031
        Validity
            Not Before: Apr  7 18:05:07 2025 GMT
            Not After : Apr  6 18:10:07 2026 GMT
        Subject: CN=8B598C5E811B25A1F33061F1520568545839071F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:f0:52:11:ed:1b:ae:de:a2:a6:5f:1d:f3:
                    20:51:87:d8:ca:db:d1:83:90:c5:7e:11:1e:d1:93:
                    a8:1a:5c:5d:77:c0:1a:ea:29:86:44:6b:8d:d1:94:
                    e3:52:c1:65:b7:f8:e9:b5:fd:3d:b9:ad:40:3d:3b:
                    fc:c2:97:28:8a:d7:1b:80:96:aa:95:25:57:b1:32:
                    8b:76:a1:1d:86:07:ac:a5:39:17:08:0c:c5:2b:44:
                    76:cc:8c:77:82:8a:e9:5a:69:dd:cb:41:a4:a0:28:
                    e6:ba:90:e3:51:9e:de:f7:7d:08:a4:91:0a:19:9d:
                    3c:3a:04:4d:f7:8e:11:01:f0:68:fb:19:2d:f9:89:
                    d1:2d:2f:ba:84:4c:74:25:56:49:a2:95:b2:5e:d3:
                    6f:a9:0c:f5:ba:99:12:9d:28:69:ee:b7:31:f8:1d:
                    5f:e0:aa:34:93:8d:fd:77:1e:5e:93:98:ed:5f:d5:
                    99:ea:28:b7:c6:1c:b4:0c:fb:34:17:61:38:99:0e:
                    03:a2:0d:da:0f:cf:f1:e4:d2:11:0e:8d:69:06:0b:
                    47:d4:d5:cd:ab:e8:62:2c:8a:0a:a8:b7:43:3d:6a:
                    4d:ce:7c:21:4e:7b:bf:16:c2:10:d6:d9:86:04:6e:
                    f5:8e:5e:30:da:a3:ec:19:b4:8d:97:45:ee:c3:b1:
                    f0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:59:8C:5E:81:1B:25:A1:F3:30:61:F1:52:05:68:54:58:39:07:1F
            X509v3 Authority Key Identifier:
                keyid:F8:41:0D:54:25:29:26:C3:AE:5A:91:AF:D3:99:2A:C8:28:82:90:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3137372e37352e3136302e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:ae:06:62:21:81:31:cd:83:08:a7:bf:b7:c7:7b:b2:8c:e3:
         bb:52:13:ee:cf:21:ae:76:55:b3:e4:89:3d:e0:0d:47:b6:b1:
         9f:29:4a:5c:e9:00:66:b1:05:58:57:06:0c:14:12:97:48:74:
         d9:bd:ae:3d:30:35:9b:df:c1:fb:4b:32:46:4a:f0:58:9b:a6:
         13:d7:54:a9:9e:05:42:78:d0:39:63:3d:54:54:d5:8c:68:ad:
         7c:ee:9c:70:06:7d:3e:01:9e:e0:ee:70:db:d4:be:98:c2:24:
         e5:ad:11:36:3f:48:01:e3:32:b5:04:81:39:24:4a:0e:15:dc:
         f5:b2:9c:2d:8a:d9:17:62:47:35:28:0c:ec:f1:a5:ff:2f:83:
         26:fb:d0:4a:78:06:c6:1a:66:d7:70:09:77:18:a5:9b:78:d4:
         93:6d:2c:54:6a:23:23:df:d4:5a:45:5a:f0:fb:1d:e0:b3:cd:
         fa:c7:12:48:93:1a:ab:2c:31:fa:b7:5b:27:4b:d2:bb:75:38:
         8f:bf:da:ed:82:45:1d:5f:02:d2:ae:d3:e4:af:90:34:35:bc:
         3f:8a:ed:95:b4:76:d2:e6:e5:64:b5:70:59:bb:87:10:31:c0:
         57:49:9a:7f:ac:86:a4:07:5a:b6:2e:82:a4:41:6c:23:ab:0f:
         fc:b1:f7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:21:08 2025 by rpki-client