Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3137362e302f32302d3230203d3e203532393233.roa
File:                     3137372e3138342e3137362e302f32302d3230203d3e203532393233.roa (raw, json)
Hash identifier:          yr7zUxO2A05FW9pu3TNi14Cp4F2X0N2d8/RJ8ME9jYM=
Subject key identifier:   2D:16:66:DE:3F:6F:F9:D5:08:DD:34:88:95:01:EE:91:D7:6B:97:D2
Certificate issuer:       /CN=E60613C40750D451F206828E45EE1C7D8EC84BAE
Certificate serial:       1C19036C43F9263296867F6A3E521E121A86A668
Authority key identifier: E6:06:13:C4:07:50:D4:51:F2:06:82:8E:45:EE:1C:7D:8E:C8:4B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E60613C40750D451F206828E45EE1C7D8EC84BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3137362e302f32302d3230203d3e203532393233.roa
Signing time:             Fri 02 May 2025 21:25:35 +0000
ROA not before:           Fri 02 May 2025 21:20:35 +0000
ROA not after:            Fri 01 May 2026 21:25:35 +0000
asID:                     52923
IP address blocks:        177.184.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/E60613C40750D451F206828E45EE1C7D8EC84BAE.crl
                          rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/E60613C40750D451F206828E45EE1C7D8EC84BAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E60613C40750D451F206828E45EE1C7D8EC84BAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 16:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:19:03:6c:43:f9:26:32:96:86:7f:6a:3e:52:1e:12:1a:86:a6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E60613C40750D451F206828E45EE1C7D8EC84BAE
        Validity
            Not Before: May  2 21:20:35 2025 GMT
            Not After : May  1 21:25:35 2026 GMT
        Subject: CN=2D1666DE3F6FF9D508DD34889501EE91D76B97D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:d4:42:26:32:0c:9a:7e:2b:a4:81:ee:4b:
                    cf:f6:b3:36:e3:92:c2:4a:7e:57:3e:eb:8a:a8:4e:
                    43:3c:54:f4:a6:b2:0b:63:03:1d:02:89:f7:79:0c:
                    f1:de:12:c9:36:0a:10:84:7a:a3:a4:c2:e8:97:28:
                    b7:2b:a3:4a:76:b2:cd:f5:fc:9e:df:d7:2b:1d:a7:
                    9a:fd:96:19:80:0f:4d:0a:40:34:c4:ef:28:23:32:
                    78:46:52:ed:6b:33:32:a3:2c:b7:e5:ed:81:5a:14:
                    71:c0:b4:5a:3e:ee:9b:07:f0:e5:40:cf:61:42:b9:
                    d9:34:f1:b8:73:01:68:b8:a0:39:b6:b2:2f:eb:2f:
                    ce:c5:6c:ff:9f:a9:6f:8d:5a:af:d4:f8:59:68:13:
                    af:1e:e5:c4:67:6b:69:c9:c7:44:c1:33:f2:0b:f2:
                    48:f3:27:37:bf:1f:bd:b6:8f:e9:53:f1:95:e2:cf:
                    26:32:ed:bf:69:b9:ef:bb:86:56:79:07:9e:25:a9:
                    a5:59:d0:ec:8c:6e:4e:e4:37:30:db:4e:92:3e:90:
                    5e:b7:76:b7:9f:3e:14:cb:6b:90:3a:97:c7:5d:63:
                    15:ee:5e:1c:8d:4a:33:0e:ed:cb:3f:56:b8:e0:c3:
                    53:b9:62:12:c8:69:ae:a0:05:6e:4f:db:fc:e6:4c:
                    39:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:16:66:DE:3F:6F:F9:D5:08:DD:34:88:95:01:EE:91:D7:6B:97:D2
            X509v3 Authority Key Identifier:
                keyid:E6:06:13:C4:07:50:D4:51:F2:06:82:8E:45:EE:1C:7D:8E:C8:4B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/E60613C40750D451F206828E45EE1C7D8EC84BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E60613C40750D451F206828E45EE1C7D8EC84BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3137362e302f32302d3230203d3e203532393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:59:4b:22:3a:1c:42:1d:3e:15:b6:16:ca:c6:ae:2e:f5:04:
         a1:8d:95:be:d6:e5:2f:95:2a:5e:45:fd:2e:95:dc:68:a7:5c:
         2f:bd:07:80:94:95:51:60:f4:17:60:77:53:d8:d9:51:2c:9a:
         cb:20:72:cd:ca:e7:36:fb:86:be:95:42:e4:68:a3:3f:8f:16:
         7a:06:75:32:85:ac:dc:6a:94:ba:b7:0d:7d:6a:4e:f7:c9:59:
         bb:71:15:70:4e:c7:e9:c2:a4:ef:dd:21:7c:11:54:69:b6:d9:
         a3:c6:40:2c:3c:f5:73:16:4b:7c:c0:4a:7d:77:6b:66:22:7a:
         97:84:ef:0e:a5:d2:89:a9:8b:7e:58:41:ae:96:e6:f0:a5:ad:
         47:6b:51:6e:f7:4c:88:3f:8f:96:5b:76:5f:45:a9:30:35:09:
         3a:56:83:20:7d:bf:68:64:a3:fb:2c:2f:f1:b2:d5:3f:a9:2f:
         9d:58:c9:d1:6c:19:a2:df:77:2d:b8:4a:97:76:2e:7f:ab:b6:
         a0:47:ae:f0:0e:af:43:f7:cc:40:de:ec:27:8d:d1:ff:c2:7f:
         d9:13:cd:ed:40:2d:4d:63:80:37:52:88:30:92:cd:00:e2:ac:
         cf:4f:73:54:cd:54:6e:2b:8f:ea:2a:a4:24:8b:be:dc:a5:02:
         43:e7:ce:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:32:50 2025 by rpki-client