Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3137362e302f32332d3233203d3e203532393233.roa
File:                     3137372e3138342e3137362e302f32332d3233203d3e203532393233.roa (raw, json)
Hash identifier:          yYcgMCvKTeynWybRBPYmLe1iuRViCkPzANujrrdgNl4=
Subject key identifier:   CB:9F:A7:74:82:1A:06:EF:30:CF:89:47:20:6A:BD:60:2D:CF:AF:5C
Certificate issuer:       /CN=E60613C40750D451F206828E45EE1C7D8EC84BAE
Certificate serial:       77E36B5D35D2E08E004B83D06A51B662FD90149F
Authority key identifier: E6:06:13:C4:07:50:D4:51:F2:06:82:8E:45:EE:1C:7D:8E:C8:4B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E60613C40750D451F206828E45EE1C7D8EC84BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3137362e302f32332d3233203d3e203532393233.roa
Signing time:             Fri 02 May 2025 21:25:33 +0000
ROA not before:           Fri 02 May 2025 21:20:33 +0000
ROA not after:            Fri 01 May 2026 21:25:33 +0000
asID:                     52923
IP address blocks:        177.184.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/E60613C40750D451F206828E45EE1C7D8EC84BAE.crl
                          rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/E60613C40750D451F206828E45EE1C7D8EC84BAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E60613C40750D451F206828E45EE1C7D8EC84BAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 16:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e3:6b:5d:35:d2:e0:8e:00:4b:83:d0:6a:51:b6:62:fd:90:14:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E60613C40750D451F206828E45EE1C7D8EC84BAE
        Validity
            Not Before: May  2 21:20:33 2025 GMT
            Not After : May  1 21:25:33 2026 GMT
        Subject: CN=CB9FA774821A06EF30CF8947206ABD602DCFAF5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6b:35:a8:2b:29:89:a2:51:25:3b:97:90:8c:
                    a9:f8:16:cb:93:a0:78:de:31:88:d3:97:9a:d3:44:
                    56:5e:c2:3c:b6:5f:ae:4b:a7:42:db:6f:7a:96:11:
                    27:7f:72:65:40:3b:1d:6d:bd:98:a3:87:e1:0b:8b:
                    32:ef:3e:ee:c6:9a:9c:45:ed:05:a6:e2:b6:32:cd:
                    e1:75:5b:53:95:69:4a:20:ef:9a:fb:05:45:72:ad:
                    db:79:47:b0:c6:55:60:cd:cd:73:ad:c3:a3:f1:03:
                    85:5c:4b:0e:50:15:da:9c:27:81:63:8c:30:ac:1d:
                    9c:8c:81:6c:9f:17:f4:78:9d:ef:8b:6c:bd:fa:de:
                    28:e3:ef:6f:fb:72:83:45:77:73:80:18:25:12:3f:
                    8d:3c:c6:c1:6c:0e:70:09:12:13:bd:53:89:3a:8d:
                    1b:1c:d8:95:6a:45:56:46:0c:83:04:f6:41:84:3c:
                    3c:6d:b6:eb:ca:80:50:ce:63:42:14:c3:32:e2:0c:
                    7a:e1:f0:db:bb:e0:17:75:32:09:4c:de:98:2a:b7:
                    48:37:17:4b:10:bd:98:0c:85:81:55:5e:49:29:8f:
                    7f:bd:8b:9b:73:6c:22:a5:e1:4d:69:b3:5e:8a:a9:
                    db:69:86:69:0f:22:f8:bf:94:0f:fe:23:3d:9c:2f:
                    7e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9F:A7:74:82:1A:06:EF:30:CF:89:47:20:6A:BD:60:2D:CF:AF:5C
            X509v3 Authority Key Identifier:
                keyid:E6:06:13:C4:07:50:D4:51:F2:06:82:8E:45:EE:1C:7D:8E:C8:4B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/E60613C40750D451F206828E45EE1C7D8EC84BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E60613C40750D451F206828E45EE1C7D8EC84BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3137362e302f32332d3233203d3e203532393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:60:ed:23:c5:99:9e:0b:3d:b9:b2:2c:63:25:5e:83:d8:59:
         a9:c5:fe:1e:9f:b8:38:e1:e7:54:66:d3:4a:1d:8d:fd:bf:f7:
         73:b4:11:3a:b2:a2:86:4d:ca:34:67:f5:1f:84:b5:91:aa:96:
         2b:37:70:1b:af:e4:2e:c6:64:08:07:e4:6e:57:1b:99:b0:74:
         ca:ed:4b:c0:49:d0:e3:75:58:2a:26:f5:f5:42:6a:09:2d:f9:
         8a:3d:ba:35:ce:0d:30:e6:7f:02:0d:cd:26:bb:7e:7f:b8:0e:
         f0:7f:1a:ef:87:5a:c6:07:cc:29:e4:91:5d:9b:61:74:b4:c2:
         af:47:fd:2f:2b:f1:c7:f1:3e:88:af:e2:26:c5:87:13:b3:12:
         c6:38:8b:c4:d9:d4:cd:59:ef:bb:8c:8a:d0:a6:5a:af:a7:4c:
         d6:8d:f7:e0:39:9d:73:15:6c:38:65:96:70:de:21:12:ca:0a:
         eb:45:ff:8f:fe:25:f1:7c:89:b6:0f:02:2c:58:f3:78:6b:8f:
         d2:57:5f:29:81:1c:fe:bc:ce:72:02:f3:a5:a5:06:de:5a:3e:
         63:84:d1:0c:f6:c5:b4:8f:35:96:ef:3e:f1:cf:44:2f:d7:17:
         3c:18:71:d4:94:08:57:68:97:d7:ae:31:81:da:48:30:fb:1a:
         15:f5:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:51:32 2025 by rpki-client