Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3138382e302f32332d3233203d3e203532393233.roa
File:                     3137372e3138342e3138382e302f32332d3233203d3e203532393233.roa (raw, json)
Hash identifier:          5JSeUvu5WdjxexikvlEqF+AFh4b8ZSqsdZTGaLikd2E=
Subject key identifier:   97:FD:EC:2E:15:65:DB:B0:22:2F:CA:15:ED:B3:B2:97:75:72:98:47
Certificate issuer:       /CN=E60613C40750D451F206828E45EE1C7D8EC84BAE
Certificate serial:       0390615470BE56F5A72844D168F915E5743AD633
Authority key identifier: E6:06:13:C4:07:50:D4:51:F2:06:82:8E:45:EE:1C:7D:8E:C8:4B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E60613C40750D451F206828E45EE1C7D8EC84BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3138382e302f32332d3233203d3e203532393233.roa
Signing time:             Fri 02 May 2025 21:25:32 +0000
ROA not before:           Fri 02 May 2025 21:20:32 +0000
ROA not after:            Fri 01 May 2026 21:25:32 +0000
asID:                     52923
IP address blocks:        177.184.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/E60613C40750D451F206828E45EE1C7D8EC84BAE.crl
                          rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/E60613C40750D451F206828E45EE1C7D8EC84BAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E60613C40750D451F206828E45EE1C7D8EC84BAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 16:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:90:61:54:70:be:56:f5:a7:28:44:d1:68:f9:15:e5:74:3a:d6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E60613C40750D451F206828E45EE1C7D8EC84BAE
        Validity
            Not Before: May  2 21:20:32 2025 GMT
            Not After : May  1 21:25:32 2026 GMT
        Subject: CN=97FDEC2E1565DBB0222FCA15EDB3B29775729847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:04:f5:ab:7b:dc:c3:3b:87:8a:34:d6:77:
                    33:fa:71:6e:aa:a0:29:7b:7e:05:02:02:91:8b:e9:
                    b9:62:a7:32:97:d5:b7:c7:03:41:b5:ba:14:4d:75:
                    72:60:74:43:ad:fc:d7:5d:6e:b2:3b:b7:1e:6d:9f:
                    72:a8:22:b8:c0:fd:38:7f:b3:e8:f7:c3:f5:13:93:
                    a3:12:25:a0:3c:f1:f4:3d:57:a7:34:ff:eb:6d:20:
                    7e:d6:ef:68:14:88:51:fb:27:ac:80:1d:db:e4:7f:
                    a9:bc:65:1d:7d:dd:b1:04:c1:33:3f:85:60:be:97:
                    4b:2e:3c:45:1f:be:66:5a:ed:a7:ec:b8:6b:45:77:
                    ae:7e:e1:fc:39:f9:06:b6:b1:8f:d2:3b:1b:d8:47:
                    18:f9:66:37:8d:cb:84:fc:82:27:ab:07:b2:6f:40:
                    3a:a4:05:47:78:27:26:2f:b5:66:b3:50:7f:41:0c:
                    fb:1c:16:3b:0a:ed:52:2a:85:43:58:e5:1b:74:6f:
                    ec:d6:64:28:a4:24:08:03:04:32:4b:04:1a:ca:0a:
                    dd:57:9e:b6:05:f1:69:d8:34:e7:1f:bd:da:3d:7b:
                    6a:63:8f:66:fd:29:69:a7:28:21:e3:60:6b:d8:05:
                    a6:71:57:d5:e8:68:10:cd:a5:72:3b:ea:55:5a:00:
                    d4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FD:EC:2E:15:65:DB:B0:22:2F:CA:15:ED:B3:B2:97:75:72:98:47
            X509v3 Authority Key Identifier:
                keyid:E6:06:13:C4:07:50:D4:51:F2:06:82:8E:45:EE:1C:7D:8E:C8:4B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/E60613C40750D451F206828E45EE1C7D8EC84BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E60613C40750D451F206828E45EE1C7D8EC84BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3138382e302f32332d3233203d3e203532393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:98:97:80:0b:93:19:8a:62:38:03:0b:4b:85:9d:65:0e:18:
         b9:ee:43:2c:42:b5:52:57:a0:78:8f:bb:ee:b4:26:2a:2e:fc:
         f6:b1:6f:d7:53:ea:b2:42:dd:39:83:b7:1f:23:5c:1e:fd:ea:
         56:00:70:ea:75:2d:52:cf:7c:20:cc:ee:1f:4c:81:4a:c8:2e:
         90:8c:55:ac:32:a2:94:b2:c2:61:94:0a:e5:f1:4a:94:95:62:
         9b:51:f8:98:06:b5:5c:00:20:d2:4d:b7:87:69:81:b5:f5:06:
         c1:75:44:81:3c:0b:eb:d4:01:08:88:0b:90:95:9f:38:f4:94:
         ec:8d:7e:d3:ea:02:0f:3d:ee:d0:7d:f6:cb:09:99:d3:87:33:
         be:2c:ac:9f:29:67:79:68:80:39:e2:97:69:c6:0a:3c:08:d2:
         46:05:7b:7d:e8:c6:37:63:4c:d9:bd:4d:7d:90:0e:ab:ea:c2:
         d5:38:28:cb:f6:12:3c:60:f3:c0:1d:b7:46:be:a8:fb:23:a5:
         4c:0d:c6:87:4a:62:01:ba:2e:71:48:e3:c7:e2:8b:98:11:81:
         bd:20:61:5d:ab:58:cd:04:e6:6d:c9:4f:05:5c:27:48:19:e2:
         11:24:e5:88:fa:da:07:46:a4:d4:0d:48:2a:f1:da:08:2b:2f:
         75:54:eb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:40:10 2025 by rpki-client