Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136362e302f32332d3233203d3e20323632373938.roa
File:                     3137372e3132392e3136362e302f32332d3233203d3e20323632373938.roa (raw, json)
Hash identifier:          fOI/izwv8QEO/ItCudTB7UkhgJffTsARCn3X79EOdP4=
Subject key identifier:   0A:F7:53:99:07:AE:E2:FC:E2:3B:57:4E:06:77:B5:7E:EF:6A:1F:F8
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       4155519CA47CDFF59D8478225B074807DCC1D1F7
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136362e302f32332d3233203d3e20323632373938.roa
Signing time:             Wed 05 Mar 2025 23:59:54 +0000
ROA not before:           Wed 05 Mar 2025 23:54:54 +0000
ROA not after:            Wed 04 Mar 2026 23:59:54 +0000
asID:                     262798
IP address blocks:        177.129.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 11:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:55:51:9c:a4:7c:df:f5:9d:84:78:22:5b:07:48:07:dc:c1:d1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Mar  5 23:54:54 2025 GMT
            Not After : Mar  4 23:59:54 2026 GMT
        Subject: CN=0AF7539907AEE2FCE23B574E0677B57EEF6A1FF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:59:53:a6:35:e3:10:96:0a:0a:2d:64:19:13:
                    6c:39:61:b1:63:6a:39:85:33:f5:62:15:23:a9:50:
                    bd:88:7b:39:0a:83:7f:ef:50:8b:5d:13:86:45:b7:
                    87:af:1c:e6:70:5b:c0:a3:d4:ae:0c:9f:bf:1d:24:
                    45:58:c0:74:c4:f3:c1:64:39:81:d3:11:f0:03:d3:
                    77:04:fb:ea:55:dd:a9:83:17:fd:6f:2d:ee:68:12:
                    c3:d6:b7:2d:43:dd:7a:ca:8c:d9:f2:52:aa:66:8d:
                    e3:11:62:a6:ce:ae:c8:1f:98:74:ba:b0:50:15:8c:
                    46:87:c8:ad:5b:76:e5:5b:f6:fb:ba:22:f9:5b:11:
                    f4:44:b9:7b:9a:9e:d4:bd:d8:63:5a:91:2c:0e:fa:
                    97:19:03:41:bf:72:08:e5:bc:6f:c3:08:7d:0b:d9:
                    f2:85:14:ae:9f:c7:df:bd:b5:ca:9f:02:38:9c:18:
                    ec:b4:3e:ad:69:aa:c1:7b:0e:2e:c7:b3:53:e7:9e:
                    3c:2d:1a:2e:76:e7:6a:3f:92:83:09:7b:fb:1a:d3:
                    d0:ec:11:c0:11:ae:20:13:19:f9:01:86:df:e6:bd:
                    11:a5:0b:55:bb:b1:3b:b4:df:2e:90:ee:36:9d:a9:
                    09:36:25:a1:cf:be:98:7f:ab:0a:6e:08:7b:e7:a8:
                    56:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F7:53:99:07:AE:E2:FC:E2:3B:57:4E:06:77:B5:7E:EF:6A:1F:F8
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136362e302f32332d3233203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:85:33:9a:5e:b6:96:f3:a5:f4:d5:4e:8d:59:95:26:54:e2:
         03:c9:64:2e:81:75:69:be:0c:6b:46:6e:b7:46:1f:2d:d7:db:
         b7:db:3c:80:a8:54:54:93:fa:14:69:eb:08:f6:a8:65:62:9a:
         0a:ed:a7:40:2c:65:1b:e0:7c:13:ce:a6:0a:ad:b6:54:ea:f5:
         d4:e0:90:8e:bb:2c:31:27:a3:d7:77:0b:ed:0f:8f:91:a3:70:
         e0:d7:12:c9:fb:fc:29:41:a0:bd:81:2c:66:0d:76:ec:0a:cc:
         0b:fb:01:46:dc:07:d4:7b:63:62:15:bc:c8:3b:b3:c7:b3:23:
         ad:aa:06:d9:6d:76:67:3f:9d:c5:90:5a:0d:ca:50:7c:a9:37:
         3a:b9:1c:3d:d0:46:88:9b:ce:0d:01:f3:f0:aa:6c:03:cd:69:
         b4:31:22:f6:97:83:78:59:cf:a1:39:3b:69:53:14:6c:17:78:
         a7:31:f5:88:2d:e4:84:69:1a:cd:94:3d:5a:f0:1f:01:cb:b9:
         a6:ae:9f:32:0c:d5:a7:ad:15:c9:e2:78:76:c4:58:e4:19:bb:
         c4:cd:a3:b5:ee:5f:70:c3:fd:a1:ce:22:58:b7:f6:ca:48:76:
         1c:72:5c:8a:52:ce:c2:76:a6:47:7f:c5:ef:7d:56:f9:51:37:
         63:68:4a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:05:04 2025 by rpki-client