Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3137322e302f32322d3234203d3e20323632343539.roa
File:                     3137372e32322e3137322e302f32322d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          hvt4XjvImgRjZjDC3yRGcviwwIAy+RJrk2XV9LZOmjA=
Subject key identifier:   70:2A:7C:96:D9:C5:BC:BA:C4:9A:21:7E:07:4E:A3:9E:17:5A:EA:8C
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       6338567910AFC3D7BA77EF4286B2AFB372F75298
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3137322e302f32322d3234203d3e20323632343539.roa
Signing time:             Fri 16 May 2025 21:00:25 +0000
ROA not before:           Fri 16 May 2025 20:55:25 +0000
ROA not after:            Fri 15 May 2026 21:00:25 +0000
asID:                     262459
IP address blocks:        177.22.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 07:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:38:56:79:10:af:c3:d7:ba:77:ef:42:86:b2:af:b3:72:f7:52:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: May 16 20:55:25 2025 GMT
            Not After : May 15 21:00:25 2026 GMT
        Subject: CN=702A7C96D9C5BCBAC49A217E074EA39E175AEA8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c5:ce:7d:73:01:03:fe:a1:79:23:f9:72:f2:
                    c1:f4:73:b8:9f:b8:81:37:2c:c8:90:8a:b9:86:45:
                    3f:17:d4:0a:9f:b7:15:b7:76:12:9e:b7:f8:fc:15:
                    83:a2:a1:84:06:18:a4:7b:bd:36:52:58:43:e2:8c:
                    c3:88:1d:d1:21:e8:48:4a:91:54:72:37:20:be:3d:
                    95:3d:38:7c:e4:ca:b3:bb:58:fb:fb:1c:c1:79:a8:
                    65:6a:ea:d7:b9:37:8f:c7:3f:17:fa:68:b0:64:18:
                    1a:40:71:06:d7:52:b9:46:ca:36:cb:be:47:69:58:
                    cf:c7:d7:9c:8d:83:f9:bd:4b:5d:29:40:fa:22:53:
                    af:6f:ee:db:a5:8d:f0:7c:9f:57:9e:be:3d:dc:9d:
                    7f:1d:fd:8c:b7:3b:70:a7:05:4c:8f:e9:2e:e8:d8:
                    59:5e:0a:bb:10:9a:b8:9f:15:ff:75:ee:cc:9e:35:
                    b5:34:6f:7e:f5:11:25:d1:35:0a:ba:42:3c:a1:55:
                    a2:b9:df:c4:d0:dd:f9:a7:cd:46:74:58:40:7a:5a:
                    88:53:d7:25:02:cc:83:08:04:93:6d:19:f2:08:1b:
                    82:85:d3:77:10:a4:ad:84:fb:d4:8f:4d:46:a8:b4:
                    18:a3:c3:55:de:54:97:39:88:9f:59:80:d1:31:3a:
                    d6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2A:7C:96:D9:C5:BC:BA:C4:9A:21:7E:07:4E:A3:9E:17:5A:EA:8C
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3137322e302f32322d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:0f:bf:19:17:cc:4a:24:e9:97:59:4f:77:1a:c9:0d:d2:9a:
         a9:99:2e:ec:44:26:d7:8e:ce:12:5b:aa:d8:f2:89:07:55:be:
         a5:78:2b:e1:8f:ab:02:ef:5d:ab:92:2f:fc:88:7f:b8:84:f7:
         b9:53:c0:87:b8:5f:00:13:95:06:de:4c:2b:27:6c:c3:80:76:
         55:08:ae:63:d6:60:5a:e1:e4:92:e3:e1:55:31:b9:ec:a6:58:
         a6:31:fb:5f:da:fe:18:1d:11:83:4f:0d:e7:8d:61:2f:98:b3:
         9f:8b:52:58:30:5f:f3:d0:69:4b:50:58:27:b7:e8:c3:86:56:
         2b:de:e9:57:da:9e:2d:56:0e:9e:15:50:70:61:f8:4b:0c:0e:
         54:12:df:06:bf:ca:9b:7c:2a:dd:53:59:76:99:22:3b:7d:b8:
         cf:20:b1:b4:8e:4e:d3:db:c5:f6:8e:fa:71:43:8c:86:5d:d4:
         fa:bf:f8:dd:87:1f:6c:7a:a5:44:8b:f8:8a:42:62:54:72:04:
         60:bf:87:31:5a:30:db:d9:ec:b1:85:e1:3a:e6:83:89:b7:65:
         e1:9d:79:e3:1f:c0:2a:d2:c5:da:95:3a:59:9d:f7:57:af:13:
         8e:d4:c1:7e:2f:b3:4a:79:9f:27:05:16:28:b9:1c:3b:c2:2f:
         9a:b4:b7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:51:15 2025 by rpki-client