Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3137362e302f32342d3234203d3e203532393233.roa
File:                     3137372e3138342e3137362e302f32342d3234203d3e203532393233.roa (raw, json)
Hash identifier:          5+YFqnvrLPSnNdruZzyl2Cezde0CJB9HFEN7GqONbNw=
Subject key identifier:   AF:93:63:4E:31:ED:67:B9:02:DC:15:5A:D8:DB:47:AE:32:65:06:88
Certificate issuer:       /CN=E60613C40750D451F206828E45EE1C7D8EC84BAE
Certificate serial:       3740242F83BAEF1095B6CF20B64341E714D2C589
Authority key identifier: E6:06:13:C4:07:50:D4:51:F2:06:82:8E:45:EE:1C:7D:8E:C8:4B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E60613C40750D451F206828E45EE1C7D8EC84BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3137362e302f32342d3234203d3e203532393233.roa
Signing time:             Fri 02 May 2025 21:25:34 +0000
ROA not before:           Fri 02 May 2025 21:20:34 +0000
ROA not after:            Fri 01 May 2026 21:25:34 +0000
asID:                     52923
IP address blocks:        177.184.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/E60613C40750D451F206828E45EE1C7D8EC84BAE.crl
                          rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/E60613C40750D451F206828E45EE1C7D8EC84BAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E60613C40750D451F206828E45EE1C7D8EC84BAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 16:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:40:24:2f:83:ba:ef:10:95:b6:cf:20:b6:43:41:e7:14:d2:c5:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E60613C40750D451F206828E45EE1C7D8EC84BAE
        Validity
            Not Before: May  2 21:20:34 2025 GMT
            Not After : May  1 21:25:34 2026 GMT
        Subject: CN=AF93634E31ED67B902DC155AD8DB47AE32650688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:ce:c9:1c:60:4a:a1:eb:8e:69:fd:97:5f:
                    d4:65:7f:d4:59:c3:af:2f:b5:0d:10:ff:10:ef:46:
                    1c:08:e6:a8:88:63:63:26:9f:36:79:10:6d:ed:76:
                    a0:50:ab:65:38:9d:8b:aa:69:ad:59:fe:0d:fe:bd:
                    41:18:8f:84:bc:b2:73:be:b9:51:e9:8e:eb:cc:26:
                    79:65:0d:05:e4:e4:c6:04:f9:36:51:c4:dd:fa:1d:
                    af:41:bf:f5:3f:e5:01:0c:9e:d9:01:e6:51:78:d3:
                    a9:9a:a8:e7:07:ec:93:12:ac:83:40:ce:d2:96:1d:
                    a3:a1:6c:68:7d:5f:b7:e7:27:0d:8f:26:e2:8a:0a:
                    d9:bb:2d:20:fe:f8:ee:07:c6:0b:73:9a:e5:fc:95:
                    ff:01:9e:6a:7e:79:2f:df:ae:e4:d3:52:4a:b1:f1:
                    cc:5d:4c:0f:eb:fa:95:32:16:02:a8:08:b6:01:9d:
                    89:58:aa:1d:eb:85:6f:99:94:5f:f9:a4:a3:75:b2:
                    c7:c9:db:bb:4f:57:c6:d2:8a:33:0d:b7:84:98:c5:
                    f0:f9:bf:d0:23:dd:18:1f:d9:fe:5e:bf:69:db:d5:
                    a3:51:27:0b:14:ec:ce:64:89:b0:ff:14:6d:6d:16:
                    70:94:87:73:e3:a8:fb:9f:ad:64:c6:02:db:c0:f8:
                    f6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:93:63:4E:31:ED:67:B9:02:DC:15:5A:D8:DB:47:AE:32:65:06:88
            X509v3 Authority Key Identifier:
                keyid:E6:06:13:C4:07:50:D4:51:F2:06:82:8E:45:EE:1C:7D:8E:C8:4B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/E60613C40750D451F206828E45EE1C7D8EC84BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E60613C40750D451F206828E45EE1C7D8EC84BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3137362e302f32342d3234203d3e203532393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:f5:23:e4:16:d4:9f:1b:16:d1:64:61:df:c7:83:e9:ef:c8:
         36:21:d9:2d:44:f6:61:65:f5:57:44:61:7d:3b:6b:83:5b:49:
         30:81:70:4d:18:f7:5a:34:39:da:58:d9:d1:86:ca:f0:02:d8:
         e4:fc:97:3c:db:30:b0:a3:7e:2c:f6:c3:b0:9b:e6:c4:59:04:
         44:a2:2a:d5:5b:e2:35:c4:06:9a:ea:26:a8:c7:67:63:68:b4:
         4b:6f:90:44:62:7d:c6:03:56:4a:3a:05:e3:2a:d2:61:42:e7:
         12:61:05:64:18:e4:82:b2:65:fc:0a:0f:7b:74:88:86:57:f2:
         b1:4a:04:a0:6c:af:62:9d:f9:78:31:19:6f:e9:e3:2f:eb:66:
         28:c5:7a:f1:0f:15:ef:c5:2d:49:06:0b:fb:22:72:25:f3:2d:
         c4:fd:3f:04:a6:cd:5d:f5:6b:07:b4:fb:e8:b3:d5:4c:0f:9e:
         a7:82:47:79:e7:90:6d:42:7b:f3:41:51:c8:29:f8:57:92:f7:
         40:7f:bd:33:3e:59:39:ca:ad:82:68:61:24:35:7a:61:9f:ec:
         c5:0f:fe:85:f7:41:fd:e1:ba:3f:dc:4d:10:4b:de:48:f8:a1:
         d8:7e:93:6b:0f:41:5c:da:7f:e4:24:b0:61:14:22:cd:9d:6f:
         8e:f4:b8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:05:47 2025 by rpki-client