Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e39312e34302e302f32322d3234203d3e203532353733.roa
File:                     3137372e39312e34302e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          SEks1oTOHkzWT363eYx2gsupSYzQQHxod1lNUptgWyk=
Subject key identifier:   00:0D:FD:2E:32:22:62:97:90:AB:99:3C:43:50:38:CB:4E:F1:10:B9
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       3EDD8EE9EC493B1F2055C03E438592B3F4F177B7
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e39312e34302e302f32322d3234203d3e203532353733.roa
Signing time:             Tue 25 Mar 2025 20:29:28 +0000
ROA not before:           Tue 25 Mar 2025 20:24:28 +0000
ROA not after:            Tue 24 Mar 2026 20:29:28 +0000
asID:                     52573
IP address blocks:        177.91.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:dd:8e:e9:ec:49:3b:1f:20:55:c0:3e:43:85:92:b3:f4:f1:77:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: Mar 25 20:24:28 2025 GMT
            Not After : Mar 24 20:29:28 2026 GMT
        Subject: CN=000DFD2E3222629790AB993C435038CB4EF110B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:19:58:58:17:34:ce:95:f2:4e:6e:e4:7a:d2:
                    18:38:0e:30:24:46:ab:91:49:8a:aa:36:f6:cf:70:
                    37:ca:50:42:2f:83:6a:46:d1:4e:73:d3:a2:7f:49:
                    67:b0:73:81:fc:d2:23:7f:71:5e:65:49:ec:c6:a9:
                    ec:18:09:f2:d9:10:62:26:71:4f:c9:74:07:6b:57:
                    af:9b:5c:83:4b:d0:58:9e:1d:85:3a:00:a5:2e:3b:
                    6e:c9:dd:1a:d7:60:35:76:ed:d8:6a:87:73:9a:cd:
                    81:bd:d6:99:15:8d:f3:57:d8:29:32:81:f1:9b:3b:
                    42:b4:80:a1:41:60:d7:c5:91:da:14:5d:54:43:df:
                    b2:fa:11:11:d4:bd:9a:73:f2:6a:e3:3f:9c:47:49:
                    c3:4e:c9:d4:17:cc:b9:d4:01:e1:3e:c9:e9:75:02:
                    cc:d5:0d:bb:41:39:06:b9:e6:1e:b7:fe:55:ea:c4:
                    ba:0e:6e:0b:b3:dd:28:53:18:18:d2:ab:0c:b2:a8:
                    52:0c:c9:97:50:ab:4d:f2:fa:87:44:e3:da:8d:86:
                    eb:30:d1:01:7c:fd:54:15:fe:10:35:6d:f4:24:c1:
                    c7:d3:b5:b8:e6:03:98:4c:a6:6f:fa:89:be:f7:c8:
                    20:9e:78:86:ff:46:a7:4a:c9:d4:01:d8:c2:c2:2c:
                    c8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0D:FD:2E:32:22:62:97:90:AB:99:3C:43:50:38:CB:4E:F1:10:B9
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e39312e34302e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:40:1f:13:fb:64:e8:67:6b:15:7c:ef:1c:89:66:6b:9f:b1:
         f3:f6:dc:13:1c:fa:bc:48:21:56:36:7b:fa:df:90:ab:d8:17:
         c6:6c:dc:65:e1:ad:26:fa:2a:b0:fd:84:af:58:10:90:ec:d2:
         2f:cf:b2:17:1e:f1:9c:39:75:64:95:21:29:bd:60:e7:2b:18:
         29:c7:55:9d:02:b6:0f:ac:02:fc:11:e1:81:a5:19:ff:ce:35:
         af:65:b4:53:23:37:0c:0a:aa:7f:45:ee:a5:87:32:ab:43:69:
         56:2e:55:f2:cb:78:89:58:7f:3a:c3:76:8b:9c:c4:e6:f7:fa:
         af:e1:09:4d:3c:0c:37:5f:b4:6f:cd:58:39:ef:46:43:4c:a2:
         42:a3:fa:cd:e3:3a:cf:22:a6:99:b1:63:29:3c:a5:0c:9c:37:
         b9:ba:54:7e:50:9a:b6:05:98:94:aa:1a:68:22:fa:c3:a4:14:
         75:04:83:0f:4c:14:9f:23:b8:bd:a0:b3:37:24:5e:6c:a2:a5:
         f8:80:3e:4b:76:b9:b2:0a:bc:9c:00:a9:db:b4:51:0b:32:46:
         21:93:a6:14:88:c2:02:bc:8a:84:ba:25:87:17:23:c5:7b:41:
         a3:ab:b5:44:41:a4:5d:7d:0e:4e:9e:0a:09:2d:f5:a7:96:9d:
         f7:1a:e1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:34:01 2025 by rpki-client