Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/3137372e3130312e33322e302f32302d3234203d3e20323632363036.roa
File:                     3137372e3130312e33322e302f32302d3234203d3e20323632363036.roa (raw, json)
Hash identifier:          VhV9aubRXMFpi9UdBY8dB3BqLqVXD0So+fpYhVdj9kk=
Subject key identifier:   E3:04:E5:67:3F:99:67:77:58:DF:5F:46:43:91:3C:D2:75:1B:E5:30
Certificate issuer:       /CN=A6578758F56AC37AA21D1EA43F62AE01ABEE5915
Certificate serial:       0D3B662CE4BA269EC5658D518392F7D7CBABC2B3
Authority key identifier: A6:57:87:58:F5:6A:C3:7A:A2:1D:1E:A4:3F:62:AE:01:AB:EE:59:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/3137372e3130312e33322e302f32302d3234203d3e20323632363036.roa
Signing time:             Wed 30 Apr 2025 20:38:01 +0000
ROA not before:           Wed 30 Apr 2025 20:33:01 +0000
ROA not after:            Wed 29 Apr 2026 20:38:01 +0000
asID:                     262606
IP address blocks:        177.101.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.crl
                          rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 14:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3b:66:2c:e4:ba:26:9e:c5:65:8d:51:83:92:f7:d7:cb:ab:c2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6578758F56AC37AA21D1EA43F62AE01ABEE5915
        Validity
            Not Before: Apr 30 20:33:01 2025 GMT
            Not After : Apr 29 20:38:01 2026 GMT
        Subject: CN=E304E5673F99677758DF5F4643913CD2751BE530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:49:d5:67:a1:66:92:ff:a6:d4:88:cb:ae:84:
                    f3:57:c4:44:f6:c0:ab:2e:18:25:c9:22:ea:80:2c:
                    45:5c:5f:7f:ba:d0:f4:5e:4f:54:39:49:28:d5:9a:
                    d7:db:65:6e:fc:20:97:57:47:15:a6:e8:0e:24:fe:
                    23:56:df:e1:f0:ee:e6:09:94:e2:e1:72:3c:78:98:
                    07:90:47:3d:2b:6e:8d:c9:7a:98:e3:97:79:3c:b0:
                    e8:07:aa:4f:69:cb:fc:5f:24:d8:d2:d9:72:ec:03:
                    f7:ec:a8:fa:fa:6c:98:12:06:72:84:1b:0e:32:e7:
                    90:56:79:ea:5c:b5:41:1a:b2:b4:66:18:c1:3f:4d:
                    ac:1b:27:43:47:06:b0:eb:a0:3d:fa:07:e1:54:fc:
                    63:81:9a:fc:92:4b:7e:c6:82:70:5f:97:c4:4b:46:
                    d9:1c:11:dd:66:cc:13:7d:c5:4c:24:f3:bb:1f:4f:
                    2c:78:8e:d1:55:ac:99:08:9b:a2:16:19:11:68:cf:
                    c2:23:29:97:b0:d7:23:d1:11:8f:74:df:ac:48:87:
                    df:2d:7f:ca:39:dd:0e:99:8c:e7:5c:3c:04:15:fa:
                    0f:ce:36:af:19:43:2c:1b:ca:cb:4d:45:b6:39:21:
                    c4:d2:b1:b7:ce:21:cd:37:e7:eb:99:1f:15:b5:88:
                    54:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:04:E5:67:3F:99:67:77:58:DF:5F:46:43:91:3C:D2:75:1B:E5:30
            X509v3 Authority Key Identifier:
                keyid:A6:57:87:58:F5:6A:C3:7A:A2:1D:1E:A4:3F:62:AE:01:AB:EE:59:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/3137372e3130312e33322e302f32302d3234203d3e20323632363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:68:27:2a:2c:17:d4:91:ca:44:07:5a:b2:f0:b3:f9:2e:f8:
         8d:d9:53:e4:34:a1:98:3a:ba:d9:a7:ab:12:6f:5c:15:b1:a9:
         69:4a:df:db:15:86:77:b3:49:4c:71:69:e0:00:17:5c:73:ea:
         88:34:4f:48:55:e1:76:a0:3d:fe:3c:d5:d7:57:f2:ba:66:87:
         07:de:6c:21:09:88:57:48:8a:df:87:a5:d6:90:f5:d9:b3:bd:
         20:48:3d:12:33:f6:10:db:7e:9f:ab:0f:cf:3a:8d:fb:84:03:
         c6:9d:1e:3f:bb:8c:a6:19:51:f4:1c:93:fb:0d:d2:b1:a0:d9:
         2f:51:29:4b:98:d0:22:3f:58:1f:dc:ad:77:f4:09:41:c9:81:
         9b:94:67:4d:d4:40:ed:30:87:d0:3e:a9:6f:3e:20:e9:af:46:
         46:9b:f4:89:b9:94:9e:dd:c1:34:81:97:a0:5b:e9:6b:ec:00:
         5a:ab:b3:2d:1e:00:93:58:14:8c:77:29:44:73:cd:9e:f5:8b:
         36:a0:c1:89:2f:50:6b:a1:42:4a:1d:03:ae:4e:c7:2f:ba:3e:
         6b:d5:22:a3:2c:64:21:34:fc:3a:77:9e:3b:c5:42:77:87:a9:
         17:fc:51:9b:33:62:cd:12:bc:76:47:5f:7c:1c:9d:b4:f1:c2:
         a1:d9:ae:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:40:36 2025 by rpki-client