Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/3137372e35352e39352e302f32342d3234203d3e20323734363838.roa
File:                     3137372e35352e39352e302f32342d3234203d3e20323734363838.roa (raw, json)
Hash identifier:          yXpihPcoNhAimCLOzgXAgU3KJtx5DtrfYX9ajVxnw7g=
Subject key identifier:   C8:05:4C:CB:44:14:C6:F8:51:02:2B:83:63:C8:AF:D6:C1:75:5A:32
Certificate issuer:       /CN=E538DA03868F80B528A08C78D7977AF2FFB83D3C
Certificate serial:       2E2A8A30DF6C20460E1B3D38DCA1F9641A5FE35D
Authority key identifier: E5:38:DA:03:86:8F:80:B5:28:A0:8C:78:D7:97:7A:F2:FF:B8:3D:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E538DA03868F80B528A08C78D7977AF2FFB83D3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/3137372e35352e39352e302f32342d3234203d3e20323734363838.roa
Signing time:             Fri 30 May 2025 11:36:35 +0000
ROA not before:           Fri 30 May 2025 11:31:35 +0000
ROA not after:            Fri 29 May 2026 11:36:35 +0000
asID:                     274688
IP address blocks:        177.55.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/E538DA03868F80B528A08C78D7977AF2FFB83D3C.crl
                          rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/E538DA03868F80B528A08C78D7977AF2FFB83D3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E538DA03868F80B528A08C78D7977AF2FFB83D3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 11:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2a:8a:30:df:6c:20:46:0e:1b:3d:38:dc:a1:f9:64:1a:5f:e3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E538DA03868F80B528A08C78D7977AF2FFB83D3C
        Validity
            Not Before: May 30 11:31:35 2025 GMT
            Not After : May 29 11:36:35 2026 GMT
        Subject: CN=C8054CCB4414C6F851022B8363C8AFD6C1755A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:e0:f5:11:ff:ae:77:c9:19:f7:37:f4:57:
                    83:0d:4e:ee:88:21:a9:bb:b2:a2:3d:46:03:4f:71:
                    95:6a:ef:25:62:9c:c7:66:9e:2a:13:e3:bf:89:c1:
                    5f:11:0e:7c:9c:21:c7:66:55:c9:eb:fa:59:b2:a1:
                    83:25:4a:f6:c5:82:eb:c8:c9:c5:ad:83:a9:1e:1a:
                    bc:30:f2:f7:4f:f9:25:7c:a1:b1:b0:d3:37:e2:98:
                    0d:dc:ee:8f:0b:0b:0b:8f:d6:3e:a2:0b:b7:d7:d7:
                    55:c6:13:ca:88:5b:53:22:bc:16:35:7c:76:91:7a:
                    4f:ca:ba:bd:19:b2:02:28:bb:b4:b0:51:95:91:16:
                    5f:88:83:60:e9:00:bf:b1:ad:7d:f0:86:17:da:16:
                    b8:0d:b0:cb:c2:c7:2f:9f:5f:2a:34:68:eb:a0:14:
                    e2:f1:30:76:39:c5:85:f6:9e:70:19:30:ea:14:5e:
                    59:e6:00:1c:2b:c3:f8:d0:37:23:93:3a:0c:58:50:
                    1c:89:14:8e:02:dc:1e:89:8b:5b:07:28:be:13:b1:
                    5e:6c:a2:74:74:13:38:6d:96:5c:3b:32:f5:27:61:
                    35:12:16:cb:c9:ad:95:6a:9c:d9:ff:7e:d2:f3:cc:
                    24:b1:48:ea:88:cd:a6:80:95:b5:5e:32:83:0e:70:
                    3e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:05:4C:CB:44:14:C6:F8:51:02:2B:83:63:C8:AF:D6:C1:75:5A:32
            X509v3 Authority Key Identifier:
                keyid:E5:38:DA:03:86:8F:80:B5:28:A0:8C:78:D7:97:7A:F2:FF:B8:3D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/E538DA03868F80B528A08C78D7977AF2FFB83D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E538DA03868F80B528A08C78D7977AF2FFB83D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/3137372e35352e39352e302f32342d3234203d3e20323734363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:46:e5:22:e1:11:af:0e:85:a9:87:40:6f:70:68:d5:dc:49:
         1e:41:2f:93:23:da:f2:0d:8d:fe:48:b0:7c:42:e8:4a:3d:df:
         43:71:32:9e:ee:82:02:43:4f:c1:46:12:8c:0f:3b:e1:4d:e2:
         18:c4:19:39:d8:5f:9e:cf:4c:85:8a:9c:91:a7:82:a3:f4:72:
         1b:5e:09:49:54:1a:50:fc:45:02:5e:80:3d:0d:32:56:84:58:
         94:7f:31:82:f6:97:06:20:9b:8b:e1:b5:75:0b:57:ed:93:92:
         ac:7f:df:b8:c3:98:1e:a7:78:33:08:26:c6:c2:7f:19:19:cf:
         8b:36:0f:fa:99:e9:61:04:c1:d4:83:9a:44:df:c0:33:29:9d:
         de:d7:42:37:e7:98:b9:dd:e7:6e:30:40:2a:a2:61:d4:e2:c9:
         71:0a:c9:d4:7f:3d:20:14:e3:36:40:cf:7a:42:4e:8f:77:79:
         74:bc:3f:8f:00:9c:52:8a:0a:9c:ef:cc:eb:d2:c6:54:67:18:
         32:58:56:a5:e3:6e:71:3b:94:5a:6c:ce:bb:79:01:55:74:b4:
         ae:37:f5:af:85:b3:7c:34:9b:a1:1b:f9:c0:ec:1e:8c:f1:16:
         3e:c6:43:a8:d0:fa:87:d3:9e:ef:c2:51:b4:6f:96:52:8e:7b:
         22:14:d9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:34:29 2025 by rpki-client