Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/3137372e3130372e3231362e302f32312d3234203d3e20313938393439.roa
File:                     3137372e3130372e3231362e302f32312d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          Hdpx0XOO9hxzW6Lw7YrK+9FzXmMIXq54BhTSoIUazjI=
Subject key identifier:   94:82:B7:E5:DD:41:7A:BF:96:78:62:B8:1B:FD:CD:B5:96:22:27:D1
Certificate issuer:       /CN=886EEAC9FB3433BE96A51A9D0154D4663682FF65
Certificate serial:       7DB00603D32A93ADC44DDCC0DC93BB54A8044C2C
Authority key identifier: 88:6E:EA:C9:FB:34:33:BE:96:A5:1A:9D:01:54:D4:66:36:82:FF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/3137372e3130372e3231362e302f32312d3234203d3e20313938393439.roa
Signing time:             Mon 12 May 2025 12:17:14 +0000
ROA not before:           Mon 12 May 2025 12:12:14 +0000
ROA not after:            Mon 11 May 2026 12:17:14 +0000
asID:                     198949
IP address blocks:        177.107.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.crl
                          rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 23:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b0:06:03:d3:2a:93:ad:c4:4d:dc:c0:dc:93:bb:54:a8:04:4c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=886EEAC9FB3433BE96A51A9D0154D4663682FF65
        Validity
            Not Before: May 12 12:12:14 2025 GMT
            Not After : May 11 12:17:14 2026 GMT
        Subject: CN=9482B7E5DD417ABF967862B81BFDCDB5962227D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:83:7f:57:24:76:52:a1:b2:c7:24:df:5d:
                    f3:59:ba:6e:e8:64:63:dd:58:10:fb:6c:47:d4:6e:
                    1a:e5:45:38:44:e6:90:12:5a:6f:c4:28:0d:65:a1:
                    06:33:f3:45:bc:97:24:23:de:ea:b1:9f:e3:94:b4:
                    18:23:05:52:0f:1b:d2:c2:bd:49:49:ea:af:13:48:
                    e7:67:46:41:ed:02:74:52:67:a9:d6:66:5c:83:ab:
                    1e:3c:5f:6a:a0:8f:13:c0:7e:3a:29:3c:e3:11:eb:
                    09:5f:27:f4:99:33:57:82:32:6a:d5:61:68:08:b9:
                    72:48:3f:8d:50:2b:e3:12:c8:d9:27:ce:69:f3:e8:
                    ad:a3:a8:69:d7:ba:eb:82:13:41:60:b1:2d:3f:d3:
                    a4:03:54:88:44:10:2a:63:ed:7f:b2:96:ad:47:25:
                    21:7b:54:94:66:a5:f6:ae:a4:4f:0f:ad:63:eb:b6:
                    c7:f1:3e:83:38:94:c2:b2:3b:bf:42:52:e7:6c:d4:
                    6b:9b:31:ad:91:d9:c5:fe:1f:74:9e:09:6e:64:cb:
                    11:e2:5b:19:af:35:77:ee:fe:6a:53:d2:ba:8d:a3:
                    d2:c4:7e:e1:55:84:19:62:c9:0f:34:24:ae:85:72:
                    07:a3:c6:c5:02:b4:f6:33:bc:bb:1a:35:bb:cb:69:
                    ca:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:82:B7:E5:DD:41:7A:BF:96:78:62:B8:1B:FD:CD:B5:96:22:27:D1
            X509v3 Authority Key Identifier:
                keyid:88:6E:EA:C9:FB:34:33:BE:96:A5:1A:9D:01:54:D4:66:36:82:FF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/3137372e3130372e3231362e302f32312d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a2:1f:43:77:21:78:72:79:a2:52:6d:59:45:25:26:be:1c:2f:
         10:04:fd:56:34:42:01:72:07:2e:84:86:1b:da:55:88:3e:e1:
         fe:74:b3:af:af:2f:e4:8a:34:e9:de:58:ae:92:f4:eb:98:c2:
         89:fe:23:4c:d5:4b:bf:71:98:06:f0:76:93:5a:72:ca:94:de:
         a9:df:b3:57:d0:62:e6:01:bc:35:87:ab:32:f7:6b:24:ac:77:
         31:ec:e4:c3:ec:d0:54:13:60:94:2b:b0:56:92:a9:92:a0:48:
         9c:e6:83:5c:49:b9:13:c5:33:cc:5b:bc:26:8c:bd:6f:74:f3:
         6e:63:bf:49:5d:5e:41:41:3c:ee:0e:86:0c:d2:67:1a:5d:29:
         3c:0b:f1:0a:8d:cc:93:9d:4f:9e:40:4d:de:f9:23:ca:49:4a:
         a2:0a:d4:29:22:35:6f:8b:a2:f9:70:16:be:72:3c:26:c6:a4:
         4b:02:c8:1a:d2:1c:f0:8c:73:e9:fb:9a:e0:11:3b:99:0d:1d:
         e1:34:de:e6:d7:a6:2e:11:17:25:ff:a6:d8:5b:76:ca:bc:d2:
         06:4c:da:8e:00:cb:01:49:df:a2:85:24:e1:2d:72:d1:3f:5f:
         f8:bb:9f:fa:38:c0:8d:fb:a3:6e:70:4b:78:f0:66:9d:85:3a:
         2c:21:40:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:03:28 2025 by rpki-client