Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3131312e302f32342d3234203d3e203532373231.roa
File:                     3137372e38342e3131312e302f32342d3234203d3e203532373231.roa (raw, json)
Hash identifier:          ZGRFlOqPjN8zeuGqgBpcbA52Xio2GE+OVUqkjwYjEGs=
Subject key identifier:   B7:F5:B7:03:A9:B2:7C:CE:54:D3:37:77:38:9D:38:77:EA:A1:E8:33
Certificate issuer:       /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial:       5EA3052D15F24F67EDFDEE1BD59469818BADFAF5
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3131312e302f32342d3234203d3e203532373231.roa
Signing time:             Fri 25 Apr 2025 14:50:40 +0000
ROA not before:           Fri 25 Apr 2025 14:45:40 +0000
ROA not after:            Fri 24 Apr 2026 14:50:40 +0000
asID:                     52721
IP address blocks:        177.84.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 08:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a3:05:2d:15:f2:4f:67:ed:fd:ee:1b:d5:94:69:81:8b:ad:fa:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
        Validity
            Not Before: Apr 25 14:45:40 2025 GMT
            Not After : Apr 24 14:50:40 2026 GMT
        Subject: CN=B7F5B703A9B27CCE54D33777389D3877EAA1E833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5b:a1:91:1f:b8:1d:38:62:c1:53:b1:f9:8f:
                    65:d0:0e:74:f1:82:38:ac:34:64:9d:7f:98:ab:ad:
                    42:8b:c5:24:f4:fe:04:55:bd:64:6a:e7:c5:76:35:
                    51:e3:ba:b1:5b:ff:84:b0:16:c6:85:b1:54:59:c1:
                    0a:83:41:c9:4a:b9:ea:cf:e1:b4:0d:10:83:a7:1b:
                    d7:16:6c:f4:79:01:bc:9f:51:d2:53:d3:05:8e:3e:
                    18:11:33:48:10:e0:98:ca:4a:dc:e7:5b:c7:c3:f8:
                    da:44:23:80:f1:10:32:8e:59:15:23:5e:6d:29:54:
                    41:75:fb:07:f1:e2:c2:63:a6:8b:f0:d3:88:32:3c:
                    f1:51:ba:41:d6:74:72:65:ad:53:2e:66:dc:1f:a2:
                    72:fb:18:21:bf:38:fd:07:d6:01:76:35:0f:8c:09:
                    f9:5c:2d:23:e5:a1:5b:32:39:aa:df:b8:87:80:b5:
                    08:51:42:ef:2f:e0:c5:e2:3a:14:8f:2b:ed:08:a1:
                    25:0f:6e:ba:d4:81:e5:80:97:66:46:ce:a0:88:cf:
                    2d:fe:80:00:4f:e9:b3:06:04:ce:bd:3a:e3:ab:5a:
                    a8:71:92:b5:4c:cd:57:e7:17:4f:9a:c6:5f:4a:54:
                    f2:0e:0a:c8:10:29:fc:d6:b5:86:d6:f7:27:7f:db:
                    53:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F5:B7:03:A9:B2:7C:CE:54:D3:37:77:38:9D:38:77:EA:A1:E8:33
            X509v3 Authority Key Identifier:
                keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3131312e302f32342d3234203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:bc:f2:43:8b:5e:ac:06:b1:b6:09:a3:d8:6d:76:6c:bf:81:
         ec:39:48:c9:41:ee:88:10:e5:99:ea:cd:d4:c4:a7:a7:a9:e2:
         01:87:65:c6:47:d6:56:84:7b:14:ee:4e:9a:fe:6e:18:84:ed:
         4e:72:d0:79:2f:e1:e2:ca:57:38:5b:6f:47:83:49:8f:f6:34:
         f1:2e:15:27:aa:2f:55:af:64:18:c8:89:52:c1:b7:87:ae:5a:
         29:b3:92:6b:90:a2:5e:15:97:34:64:59:41:6f:96:b1:f6:17:
         51:05:35:c7:08:c3:2f:1d:e7:f8:10:7d:e8:4f:aa:2a:03:c5:
         20:4a:f5:e9:cc:79:e6:94:10:11:f4:61:7a:59:cd:69:8c:24:
         6c:76:be:29:6d:e7:74:61:65:5f:93:2c:01:91:5a:2a:3a:4c:
         40:46:df:5b:0d:56:19:db:25:97:37:62:43:44:91:7d:38:be:
         ad:24:9b:a4:b4:63:8a:96:40:6f:40:67:d5:5e:e5:23:b5:44:
         5a:84:3b:d1:7c:12:5f:e0:73:59:f7:91:c6:6a:08:21:37:bb:
         0a:9b:f4:d9:e9:a3:03:33:83:2b:97:18:30:d4:a8:c8:ed:57:
         89:ac:4c:55:41:1f:96:24:65:0a:0f:fb:a6:6a:22:76:45:ad:
         c9:16:ae:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:59:34 2025 by rpki-client