Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32342e302f32342d3234203d3e203238333338.roa
File:                     3137372e38372e32342e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          FMuoV40hkECJzj8u8aL41cHJsBkIOWaRcak7RnzJR0Y=
Subject key identifier:   DB:5F:7F:1C:9A:D4:9D:71:F3:33:A8:81:31:48:53:56:06:71:8C:5A
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       78F773975F9428E15F5B1F959094C328FBD934AF
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32342e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 30 Apr 2025 19:00:08 +0000
ROA not before:           Wed 30 Apr 2025 18:55:08 +0000
ROA not after:            Wed 29 Apr 2026 19:00:08 +0000
asID:                     28338
IP address blocks:        177.87.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f7:73:97:5f:94:28:e1:5f:5b:1f:95:90:94:c3:28:fb:d9:34:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:08 2025 GMT
            Not After : Apr 29 19:00:08 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:63:f3:a5:cf:4d:80:03:e1:e3:f2:4f:7e:
                    0d:75:a6:a4:4c:3e:5b:1e:cb:12:87:ee:19:91:83:
                    01:84:8f:1d:9d:b4:bf:53:61:79:5f:fc:6e:ab:1e:
                    f4:ea:6d:35:99:d4:df:3b:fa:d0:c8:49:0f:64:9c:
                    48:9e:fc:f7:c4:13:61:e8:06:66:74:ba:74:f9:a7:
                    c9:f6:39:d7:29:5f:5d:3d:94:3a:6f:50:90:12:fd:
                    c2:7c:af:49:92:e2:01:29:ad:dc:a1:9a:3a:8d:55:
                    34:fa:4e:a2:53:a6:4e:4d:1c:11:1a:69:29:eb:73:
                    be:97:67:4a:8a:f4:d9:5b:dc:eb:ef:74:59:9a:c9:
                    bf:74:d4:c2:95:5d:2e:bc:63:69:26:e1:91:32:04:
                    d4:45:a9:03:52:b8:55:86:bd:32:ad:0b:01:1d:ad:
                    e0:9c:ac:a7:93:15:95:6c:a4:78:54:76:4c:d4:ac:
                    3c:51:0f:d6:84:87:f7:02:eb:12:b4:78:46:63:d1:
                    22:eb:8a:75:f9:17:52:d9:cb:57:c3:72:a8:68:23:
                    ad:af:79:9d:31:0e:98:c3:d9:1e:ee:4a:1d:36:0b:
                    47:f3:eb:46:a3:b3:1b:aa:7e:e4:07:22:9c:3e:dd:
                    65:63:e5:86:d9:cd:ca:75:f0:0c:b9:65:12:6d:d3:
                    5e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5F:7F:1C:9A:D4:9D:71:F3:33:A8:81:31:48:53:56:06:71:8C:5A
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32342e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:2f:c3:17:38:93:ea:b0:39:48:09:7a:cb:5a:21:ae:59:9d:
         3a:4a:a1:c0:30:07:93:61:2f:c1:42:3b:9c:e4:5c:d0:65:80:
         5f:e7:95:bc:d6:13:9a:eb:91:f9:b3:9f:cd:49:c8:b1:5d:50:
         ef:aa:c1:f0:93:37:3d:38:c1:f0:39:2f:87:6d:51:55:5b:ad:
         71:71:1f:04:c1:f0:72:9d:fd:0f:fe:ad:1a:20:8b:ce:05:29:
         52:24:ab:3f:af:98:60:54:73:fa:65:cd:79:5d:a0:49:6e:a8:
         df:a2:26:36:ee:52:e2:94:bc:fd:39:a8:a7:f9:da:80:96:41:
         a5:ae:eb:ab:b6:9f:a5:9e:5a:fb:77:89:74:58:d0:6c:2a:51:
         9e:67:fa:ce:30:0a:12:5b:92:7a:e2:23:4b:0e:5c:b6:f3:3b:
         e2:5e:94:ca:a9:36:f5:13:e6:7f:25:72:4f:f0:af:26:cb:4d:
         75:59:1a:a0:75:fd:1c:6b:f7:62:1c:c9:5e:68:23:21:54:2a:
         a6:cd:b6:7e:5c:13:70:b2:a0:40:ae:64:bf:d7:96:3f:ce:7e:
         b7:cc:58:b7:c7:a5:77:5e:b5:96:8f:fb:4f:14:4d:99:01:0f:
         8b:da:fb:1c:57:c9:41:e9:4a:ee:dd:39:0d:57:f9:5d:35:8b:
         1e:a2:b2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:05:59 2025 by rpki-client